Privacy policy

As of 01.06.2021 Regulation 2016/679 of the European Parliament and of the Council of 27.04.2016 shall apply. on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR). "Brotherhood of the Slavs 3" Ltd. as the owner and manager of the website (e-shop) www.worldofhats.org accepts and applies an updated policy of your personal data that you have provided or are about to provide us.

Please give us your consent for the personal data provided by you to be collected, processed and stored for the purposes and in accordance with the conditions described in detail below.

We ask for your consent regarding the personal data provided by you to be processed by www.worldofhats.org for the purposes and in accordance with the conditions - "Consent" button go to the Declaration of Consent.

In case of your existing registration as a user in www.worldofhats.org until the entry into force of Regulation 2016/679 of the European Parliament and of the Council of 27.04.2016. , we ask for your consent for processing of the personal data provided by us to be given by 01.06.2021. After this date, in case we do not have your explicit consent in the above sense, "Brotherhood of Slavs 3" Ltd. will deactivate your account and will not process your personal data in the future.

 

Administrator details:

Name

Bratstvo na slavyanite 3” EOOD

UIC / BULSTAT

200546574

Headquarters and address of management

Republic of Bulgaria, postal code: 9700, Shumen, 9-13 Dobri Voynikov Str

Mailing address

Republic of Bulgaria, Varna, postal code 9000, 8 Odessos Str

Phone

0885061986

E-mail

info@worldofhats.org

Website

worldofhats.org 

Headquarters and address of management of the online platform

Republic of Bulgaria, Varna, postal code 9000, 8 Odessos Str

Contact details of the Data Protection Officer:

Наименование

Tatyana Revenko

ЕГН:

7708081054

Mailing address

Republic of Bulgaria, Varna, postal code 9000, 8 Odessos Str

Телефон

 

0885061986   

 

E-mail

 tcrevenko@gmail.com

We are not obliged to appoint a Data Protection Officer, but we have a Consultancy Agreement regarding the implementation of current policies for the protection of personal data of individuals with a Personal Data Protection Officer. We ask that all inquiries regarding the use of your personal data be addressed to the Administrator.

 

III. Information on the competent Data Protection Supervisor:

Name

Commission for Personal Data Protection

Headquarters and address of management

Republic of Bulgaria, Sofia, postal code 1592, 2 Prof. Tsvetan Lazarov Blvd.

Mailing address

Republic of Bulgaria, Sofia, postal code 1592, 2 Prof. Tsvetan Lazarov Blvd.

Phone

02 915 3 518

Website

www.cpdp.bg

 

 

"Bratstvo na slavyanite 3" EOOD, hereinafter referred to as "Administrator / s", operates in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016. for the protection of individuals with regard to the processing of personal data and the free movement of data of individuals. The activity of "Brotherhood of the Slavs 3" Ltd. is in compliance with the Personal Data Protection Act. The information provided is intended to inform you about the issues regarding the collection, processing and storage of your personal data by the Administrator, as well as the rights you have in relation to these issues.

 

І. Reasons for collecting, processing and storing your personal data:


Art. 1. Collection and use of personal data

(1) Personal data are any information that can be used to identify a person. These are names, email address, phone number and more. You may be asked for personal information each time you contact us to provide our products. Only in compliance with our Personal Data Protection Policy and all applicable legal provisions, the Administrator or his partners in the provided cases, can share this information with each other and use it. Your personal data are processed only on the territory of the Republic of Bulgaria, only for the term and for the purposes for which they are provided.

(2) The administrator collects and processes your personal data in connection with the use of the e-shop www.worldofhats.org on the grounds of art. 6, para 1, Regulation (EU) 2016/679 (GDPR) and in particular on the following grounds:

  • Explicit consent received from you as a user of the forum;
  • Compliance with a legal obligation that applies to the Administrator;
  • For the purposes of the legitimate interests of the Administrator or a third party;

 

ІІ. Goals and principles of the Administrator during and on the occasion of the collection, processing and storage of your personal data: 

Art.2. (1). We collect and process your personal data that you provide to us for the purposes of the operation of the online store www.worldofhats.org, including for the following purposes:

  • We process your personal data in order to fulfill our obligations as a party to a contract for the sale of goods or services, to manage your orders, including their invoicing and accounting, or to advise you on the characteristics of our product or service. We may periodically use your personal information to send important messages such as notifications about orders placed, changes in the General Terms and Conditions or other rules;
    Your personal data is also used to control your access (identifications) to www.worldofhats.org.
  • In case you have stated your explicit consent, we process your data to inform you about current promotions and advertising activities. The consent given by you under this paragraph may be withdrawn at any time;
  • Your data may be used for statistical purposes, which are related to improving the quality of services on www.worldofhats.org, as well as marketing activities of the Administrator;
  • protection of information security.

(2) We observe the following principles in the collection, processing and storage of your personal data:

  • legality, good faith and transparency;
  • restriction of processing purposes;
  • relevance to the purposes of processing and minimizing the data collected;
  • accuracy and timeliness of data;
  • limitation of storage in order to achieve the objectives;
  • integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.

(3) Protection of the following legitimate interests of the Administrator may be grounds for processing and storage of your personal data: Fulfillment of obligations of the Administrator to the Ministry of Interior, the judiciary, the National Revenue Agency, other state and municipal authorities, when this is provided for in a relevant normative act.

 

III. Types of personal data collected, processed and stored by the Administrator

Art.3. (1) When you register an account, purchase a product or assign services or perform other actions related to the use of www.worldofhats.org, we may collect various types of information, including (but not limited to): name, postal address, telephone number, e -mail, requested method of communication, bank card information, payment details or others.

(2) If it is necessary to issue a certain document, such as an invoice, it is possible to request additional data in accordance with the requirements of the current legislation.

(3) We store a history of orders placed by each account registered on the site.

(4) In order to ensure safety from defective products and related to goods, complaints and appeals, the Administrator collects, processes and stores data about your names, your e-mail address, the products that have been purchased; postal address, information on the complaint and the product (s) concerned.

(5) The administrator does NOT collect and does not process personal data, which refer to:

  • Your racial or ethnic origin;
  • Your political, religious, philosophical or other beliefs, membership in trade unions or other structures or NGOs.
  • Genetic and biometric data, data on health status, data on sexual life or sexual orientation.

(6) We do not collect personal information about minors under 18 years of age. If we learn that we have collected personal information from a child (a person under the age of 18 - a minor or a minor), we will take steps to delete the information as soon as possible. If parents and / or legal guardians of minors find that children under their guardianship or custody have provided their information at www.worldofhats.org, please contact us at the contact addresses provided in this policy. We will delete the information as soon as possible.

(7) We do not collect personal information about persons placed under full or limited interdiction. If we learn that we have collected personal information about such a category of person, we will take steps to delete the information as soon as possible. If a guardian or trustee finds that guardians or trustees have provided their information at www.worldofhats.org, please contact us at the contact addresses provided in this policy. We will delete the information as soon as possible.

(8) The personal data shall be collected by the Administrator from the persons to whom they refer.

(9) The administrator shall not perform automated decision-making with data with cases specified in this statement.

 

IV. Term for storage of your personal data

Art. 4. (1) The administrator stores your personal data for a period not longer than the existence of your account (registration as a user) at www.worldofhats.org, except in cases where there is a legal obligation to store your personal data for -long term or for the purposes of his legitimate interest. After deleting your account, the Administrator performs the necessary actions to delete and destroy all your data without undue delay or to anonymize them (bringing them in a form that does not reveal your identity).

(2) If the term for storage of your data should be extended to the ones indicated in para. 1 grounds or other grounds, the Administrator notifies you of this extension.

 

V. Disclosure to third parties

Art.5. (1) In certain cases, in order to fulfill our obligations under contracts concluded with you or on legal grounds, it is necessary or we will be obliged to disclose personal data provided by you to our partners (eg transport, courier, service, financial institutions, insurers, etc.) or before competent authorities.

(2) Your credit / debit card data is processed by a third party - the Paysera payment system, which provides effective guarantees for your information.

(3) At the autonomous and own discretion of the Administrator, he may transfer your personal data or any part of them to personal data processors for the fulfillment of the processing purposes with which you have agreed, in compliance with the requirements of Regulation ( EU) 2016/679 (GDPR).

(4) It may be necessary - by law, in court, in litigation and / or at the request of public and governmental authorities in or outside your country of residence, for the Administrator to disclose your personal information. We may also disclose information about you if we find that, for purposes of national security, law enforcement, or other matters of public importance, such disclosure is necessary or appropriate. We may also disclose information about you if we find that such disclosure is reasonably necessary to enforce our terms and conditions, or to protect our activities or users.

(5) The administrator does not transfer your data to third countries or international organizations.

 

VI. COOKIES AND OTHER TECHNOLOGIES

Art.6. (1) Cookies are small files of information that are stored in your Internet browser (data on language used, connection time, visited websites) or hard drive when visiting the site. We can advise them on your recent visits to improve and facilitate your search. The information set out in the next paragraph is intended to provide you, under conditions of transparency, with the necessary and comprehensive information about the cookies that the Administrator uses on his website. We draw your attention to the fact that if you share the use of your device with others, it is possible to change the personalized nature of the action of cookies.

(2) www.worldofhats.org uses cookies to facilitate your navigation. The following cookies are used:

Cookies necessary for the operation of your search, which enable you to use the main functionalities such as managing a "shopping cart" and maintain possible identification throughout the search;
Personalized cookies that allow you to visit websites in a personalized way, according to your previous visits, purchases, etc. They allow you to find the offers that suit you best faster;
Advertising cookies that allow you to receive offers from www.worldofhats.org on the websites of external partners.
You can set your internet browser so that it does not save cookies or delete already saved cookies. If you want to take advantage of these features, please contact the manufacturer of your internet browser.

The administrator is not responsible if the internet browser you are using does not support the functions of controlling the use, refusal to save or deleting saved cookies. If you disable the storage of cookies or delete already saved cookies depending on their type, it is possible that the site will malfunction.

(3) Your access to social networks such as Facebook, Google +, YouTube, Twitter and others, provides for separate registration and acceptance of the general conditions of these sites. The administrator is not responsible for the protection of your personal data when accepting these general conditions. Please read the general terms and conditions of these sites in detail.

(4) www.worldofhats.org is linked to other web resources such as Google Analytics, Google AdWords and others. The privacy policy only applies to our website. Please pay attention to the personal data protection information provided to third-party web resources. The administrator is not responsible for their content. The provider of the relevant web resource that you have used is responsible for illegal, incomplete or missing instructions, as well as for damages caused by the presence or absence of such information.

 

VII. Measures for protection of your personal data taken by the Administrator

Art.7. (1) "Brotherhood of the Slavs 3" Ltd. takes precautionary measures - including administrative, technical and physical measures to protect your personal information from loss, theft and misuse, as well as from unauthorized access, disclosure, alteration or destruction.

(2) The online store www.worldofhats.org uses encryption through secure means on all web pages on which personal information is collected.

(3) All employees of “Brotherhood of Slavs 3” EOOD are obliged to protect the confidentiality of your information, as well as to observe the applicable organizational and technical measures for its protection. Access to your data is limited to the principle of necessity to perform the duties of responsible subjects.

 

VIII. Your rights in connection with the collection, processing and storage of your personal data by the Administrator:

Art. 8. If you have provided your personal data to the Administrator, you have the following rights at any time:

  • Right to withdraw consent to the processing of your personal data - In case you do not want all or part of your personal data to continue to be processed by the Administrator for a specific or all purposes of processing, you have the right to withdraw at any time consent (applicable Form: Annex № 1 or free text);
  • Right to delete ("right to be forgotten") your personal data - You have the right to ask the Administrator to delete all or part of the collected, processed and stored your personal data. The administrator is obliged to delete your data without undue delay. (Applicable Form: Annex № 2 or free text).
  • Right of access to your personal data - Upon request, we will provide you with additional information relating to the collection, processing and storage of your personal data and, if you wish, a copy of the processed personal data relating to you, in electronic or other appropriate shape.
  • The provision is free of charge (applicable Form: Annex № 3 or free text).
  • Right to correct or fill in your personal data - you have the right at any time, directly through appropriate corrections in the data of your profile to correct incomplete or inaccurate information concerning your personal data;
  • Restriction right - you have the right to ask the Administrator to restrict the processing of data related to you.
  • Right of Portability - You have the right at any time to download the data stored and processed for you in connection with the use of www.worldofhats.org, directly through your account.
  • Right to receive information - You have the right at any time to request the Administrator to inform you about all recipients to whom your personal data for which correction, deletion or restriction of processing has been requested has been disclosed. The administrator may refuse to provide this information if this would be impossible or would require a disproportionate effort.
  • Right to object - in case you believe that your data protection rights have been violated, you have the right to complain to the Commission for Personal Data Protection, if you believe that your data protection rights have been violated to the one indicated in the title page. part of this Declaration address of the Supervisory Authority.

 

Art.9. In particular, the right to erase (the "right to be forgotten") is subject to the following regulations:

(1) The right may be exercised if any of the following grounds is present:

  • Your personal data is no longer needed for the purposes for which it was collected or otherwise processed by the Administrator;
  • You withdraw your consent on which the data processing is based and there is no other legal basis for their processing;
  • You object to the processing of personal data relating to you, including for the purposes of direct marketing, and there are no legal grounds for processing to take precedence;
  • Personal data has been processed illegally;
  • personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to the Controller;
  • Personal data has been collected in connection with the provision of information society services.

(2) The administrator is not obliged to delete your personal data if it stores and processes them for:

  • Exercise of the right to freedom of expression and the right to information;
  • Compliance with a legal obligation requiring processing,
  • It is provided for in EU law or the law of the Member State applicable to the Administrator, either for the performance of a task in the public interest or in the exercise of official powers conferred on him;
  • For reasons of public interest in the field of public health;
  • for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
  • For the establishment, exercise or defense of legal claims.

(3) In case you exercise your right to be forgotten, the Administrator will delete all your data, except for the following information, which is necessary to certify that your right to be forgotten is fulfilled - email, names and other necessary data.

Art.10. (1) In particular, the right of restriction may be exercised in the following cases:

  • You challenge the accuracy of the personal data for a period that allows the Administrator to verify the accuracy of the personal data;
  • The processing is illegal, but you do not want the personal data to be deleted, only the use to be restricted;
  • The controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or protection of your legal claims;
  • You have objected to the processing pending verification that the legal grounds of the Administrator take precedence over your interests.

(2) In case of exercising your right of restriction, the Administrator will suspend the processing of your data and your account will be "frozen". You can revoke the restriction at any time by reactivating your account at www.worldofhats.org by sending a free text email to the Administrator in the sense of revoking the restriction.

Art.11. (1) You may exercise your rights to protect your personal data by printing, filling in and sending the Forms (Forms - Appendices) listed below or in a written statement free text to the contacts of the Administrator indicated in the title part of this Declaration. Forms (Forms - Applications) are optional, they are created for your convenience, and you can submit your requests for protection of your personal data in any form that contains your statement about it and can identify you as the owner of the data.

(2) In order to avoid abuses, in respect of requests exercising your rights to personal data protection, the Administrator reserves the right to request additional data in order to establish the identity of the applicant and the data subject for whom refers.

(3) The administrator may refuse to process requests for exercising the rights for protection of personal data, which are repeated unreasonably or endanger the confidentiality of other users.

Art.12. You have the following rights in the event of a breach of the security of your personal data:

(1) If the Administrator finds a breach of the security of your personal data, and this breach may pose a high risk to your rights and freedoms, the Administrator shall notify you without undue delay of the breach, as well as of the measures taken or to be taken. undertaken.

(2) The administrator is not obliged to notify you in the following cases:

  • Has taken appropriate technical and organizational protection measures with regard to data affected by the security breach;
  • Has subsequently taken steps to ensure that the breach does not pose a high risk to your rights;
  • Notifying you would require a disproportionate effort.

 

Art.13. In case you consider that any of your rights to personal data protection has been violated and / or the legislation regulating personal data protection has been violated, you have the right to file a Complaint to the Commission for Personal Data Protection, address: Sofia 1592, bul. „Prof. Tsvetan Lazarov ”№ 2, 02/91 3518, e-mail: kzld@cpdp.bg.

IX. Others

Art. 14. We may periodically update our Privacy Policy. In the event of a change in this policy, the updated Privacy Policy will be published on our website.

Art.15. If you wish to contact us on issues related to the protection of your personal data from "Brotherhood of Slavs 3" Ltd., please contact us in the following ways:

On the phone number: 0885061986

Email: info@worldofhats.org

By mail: Republic of Bulgaria, Varna, postal code 9000, 8 G Odessos Str