For what purposes and on what grounds do we process your personal data? How long do we store your personal data?
Data processed for the purposes of creating and managing an account on the website of the Publishing House of BAS "Prof. Marin Drinov"
Creating an account on our site is possible after filling out a registration form that contains required fields. The personal data you fill in for the purpose of creating an account on our site includes:
We collect this personal information so that we can identify you and so that you can make book orders and purchases more easily and quickly.
We may also process certain personal data details for the purpose of managing the account you have created - for example, to send you a successful account registration message, forgotten password recovery information and other similar information messages.
Creating an account by filling out the registration form is entirely voluntary. If you do not wish to provide us with the personal data necessary for your registration, you can make orders and purchases of books and other products as a guest - that is, without registering an account.
We process your personal data provided to us when registering an account on our site, based on your consent given when you first log in to your account. Your personal data provided when registering an account on our site will be stored by us for the entire period of maintaining your registration.
Data processed when ordering and purchasing products through the website of the Publishing House of BAS "Prof. Marin Drinov"
As a registered user of our site, you have the opportunity to purchase the books and other products we offer. When placing orders and purchasing books from our site, in some cases we process additional information, including:
The personal data provided by you is processed for the following purposes:
The basis on which we process this data is precisely the conclusion and execution of the contract of sale of the book or other product of your choice.
Your personal data about the purchases you have made through our website, including your identification data, which are necessary to fulfill our legal obligations under tax and accounting legislation, as well as for protection in the event of legal disputes, may be stored for a maximum period of 10 years as required by the tax and accounting legislation.
Personal data processed in order to comply with our legal obligations
When you buy a book or other product from us, some legal obligations arise for us. In order to comply with them, we must process your personal data, including your identification data, contact details and other information provided to us by you.
For example, we may process your personal data for the purposes of issuing an invoice and complying with our obligations as a supplier as required by the Value Added Tax Act. In addition, according to the applicable accounting and tax legislation, we are obliged to post the issued invoice and to enter it in our accounting and tax registers.
Your data may also be processed to fulfill our obligations under the applicable consumer law - for example, when filing complaints, refusing to purchase, returning purchased products and refunding, resolving consumer disputes and the like.
The reason why we process this personal data is precisely the fulfillment of obligations provided by law.
Your personal data processed for the purposes of issuing invoices and fulfilling our other legal obligations under tax, accounting, consumer and other laws may be stored for a maximum statutory period of 10 years, starting from January 1 of the year following the year, during which the taxes due for the sales made by us had to be paid.
Data collected through cookies
We may analyze the use of our site by cookies, through which we collect information about the device or devices that you use or have used to access our site (e.g. the make and model of your device, operating system, browser or IP address ) and how you use the e-bookstore. We do not collect your emails, names or other personal information, we do not collect or access information about sites you visit other than our site, or any other information not described in this Policy.
Data processed for the purposes of our legitimate interests
We may process your identification data, data on orders and purchases made by you through our e-shop, data on payments made by you, data on questions sent by you, complaints and the like, so that we can protect ourselves in case of legal claims against us.
We may also process your identification data in order to include you in our electronic customer database in order to achieve a non-complicated and speedy issuance of invoices for purchases made by you not only from our e-bookstore, but also from each of our physical bookstores throughout country.
We will process this personal data only if your interests, fundamental rights and freedoms that require the protection of personal data do not take precedence over our legitimate interest.
The basis for processing your data is the protection of our legitimate interest to protect ourselves in the event of legal claims in connection with purchases made at our e-bookstore, as well as to maintain a database of our customers in order to easily and quickly issue invoices at any of our physical bookshops or our electronic bookstore.
The data processed for the purpose of protection against legal claims will be stored by us until the expiration of the 5-year limitation period for filing legal claims in accordance with the Law on Obligations and Contracts.
To whom can we disclose your personal data?
We work with partners and providers who may process your personal data as independent data controllers or act on our behalf as processors of personal data. We disclose to these recipients only those personal data details that are essential for the execution of the respective service. In addition, when we disclose your data to processors on our behalf, we take all necessary measures to ensure that your data will be processed in compliance with all legal requirements and that the processor has taken the necessary technical and organizational measures to protect the data.
The persons to whom we may disclose your personal information include payment service providers who will process your payment for products purchased from us, and courier service providers who will deliver your purchased products.
We may also disclose some of your data to our accounting service providers for the purpose of recording issued invoices and other accounting documents in our accounting records.
Upon request from state authorities in accordance with the applicable legislation (eg NRA, Consumer Protection Commission, courts, etc.) we may have a legal obligation to disclose your personal data to these public authorities.
What are your rights regarding the protection of your personal data?
Right of access
You have the right to ask us to confirm whether we process your personal data and, if so, to access this data and information about the purposes of processing, deadlines and recipients of personal data. We will provide you with free access to your data, and upon request we will provide you with a copy of the data.
Right of adjustment
You have the right to request correction of inaccuracies in your personal data or addition of personal data.
The right to be forgotten
You have the right to request that we delete personal data relating to you that is no longer necessary for the purposes for which it was collected, or for which you have withdrawn your consent to processing or have exercised your right to object to the processing. In certain legal cases, we may refuse to delete your personal data.
Right to limit processing
In certain cases, you may ask us to restrict the processing of your personal data, in which case it will only be stored, but not otherwise processed.
Right to data portability
You have the right to receive the data we process for you in a structured, widely used and machine-readable format, as well as to transfer it to another administrator.
Right to object to the processing
You have the right to object to the processing of your personal data for the purposes of direct marketing and profiling related to direct marketing. If you make such an objection, we will discontinue its use for direct marketing purposes.
Right of withdrawal of consent
You have the right to withdraw your consent to the processing of your personal data at any time, without its affecting the legal right to process data based on consent before it is withdrawn.
Right of appeal
You have the right to lodge a complaint with the Data Protection Commission if you believe that there has been a breach of the applicable data protection legislation.
You may contact us with any questions regarding the processing of your personal data, including in connection with the exercise of your rights described in this Policy, in one of the following ways:
By mail: Sofia, postal code 1113, "Acad. Georgi Bonchev”, block 6
By e-mail: firstname.lastname@example.org
By phone: +359 2 979 3410
Contact person: Rositsa Todorova, Data Protection Officer.
In order to exercise your rights related to the protection of personal data, it is enough to send us a statement, which should contain at least: