PRIVACY POLICY
This Privacy Policy governs the processing of your personal data by Mitron Ltd. UIC: 829105690, as part of your visit to our website www.mitron–bg.com (hereinafter the "Website"), the purchase of goods through an online store www.mitron–bg.com, your communication with us via email, telephone and social media channels (such as Facebook and Google+).
If you want information about how we handle personal information through cookies and social media extensions, check out our Terms of Use
1. GENERAL PROVISIONS
- Your personal data are processed by Mitron Ltd. UIC: 829105690 (hereinafter "Supplier/Vendor", "we", "us", "our"). You can contact us by email shop@mitron–bg.com.
- Any reference in this Privacy Policy to certain laws or regulations also includes any amendment, replacement or repeal thereof.
We reserve the right to amend this Privacy Policy from time to time in our sole discretion. This amendment will be announced on the Website. If you do not accept the amendments, you should inform us by sending us an email at shop@mitron–bg.com. If we do not receive such an email from you within three (3) business days of announcing the amendments to the Website's Privacy Policy, you will be deemed to accept all changes.
2. PERSONAL DATA TYPES WE PROCESS
2.1. Whenever you visit or use our Website and social media channels, we collect:
– Technical information related to the device you use, such as your Internet Protocol (IP) address, browser type, geographical location, and operating system;
– Information about your browser behaviour, such as the length of your visit, which links you click, which pages you visit, and how many times you visit a page on the Website.
2.2. When you fill out a contact form, complete a purchase request, or create a user account on our Website, or contact us by email, phone or social media channels, we collect:
– The basic personal information you provide us (name, email address, postal address, telephone number);
– The content of your communication or inquiry and the technical details of the communication itself (whom you correspond with, date, time, etc.);
– Your preferences regarding the communication medium used;
– Publicly available information about your profile on social media channels;
– Any other personal information you choose to provide to us.
2.3. We receive all such personal information directly from you. It may be that we receive additional information about your preferences and how you browse from partners like Google. If you need more information about personal data, these individuals process the information about you and share it with others, and we ask that you politely consult their personal data protection policies.
3. PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA
3.1. We process your personal information in order to deliver to you in a personalized and effective manner the information, products and services you request through the Website, by email, telephone or social media channels.
3.2. We process your personal data in order to comply with legal obligations or to fulfil any legitimate request from the competent judicial authorities or representatives, judicial authorities, government agencies or authorities, including the competent personal data protection authorities.
Your personal data may be disclosed at our initiative to the police or the judicial authorities as evidence, or if there are reasonable suspicions of an illegal act or crime committed by you through your use of or your registration on the Website, our social media channels, or other communication with us.
3.3. We process your personal data to perform statistical analyses so that we can improve our Website, advertising, products and services, or to develop new products and services.
3.4. We also process your personal data for the protection of our legitimate interests or those of our partners or third parties, if your use of your registration on the Website, social media channels or other communication channels may be considered (a) a breach the applicable terms of use of the Website or intellectual property rights or any other right of a third party, (b) the danger or threat to the security or inviolability of our Website, social media channels or other community channels hiccup, or our main IT systems for viruses, Trojans, spyware, malware, or any other form of hacking, or (c) in any way malicious, obscene, discriminatory, racist, defamatory, malicious, damaging, or otherwise way unlawful or illegal.
4. LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
4.1. If your personal data are processed for the stated purpose in Article 3.1 or to take measures before entering into a contract with us, we base the processing of your personal data on the need to perform this contract or in the process of concluding this contract.
4.2. For the purpose set out in Article 3.2, the processing of your personal data is necessary for the legal obligation that we must fulfil.
4.3. For the purposes set out above in Articles 3.1, 3.3 and 3.4, the processing of your personal data is necessary for the purposes of our legitimate interests, such as:
– Continuous improvements to our Website, social media channels, products and services to provide you with the best possible experience;
– Protecting our Website, social media channels, products and services from abuse and misconduct;
– Marketing and promotion of our products, services and brand, and overall successful sales promotion of our products and services.
5. TO WHOM WE SEND YOUR PERSONAL DATA
5.1. We trust third parties who process the data you provide on our Website and process your personal data on our behalf in connection with the courier delivery of our goods and in connection with the maintenance and improvement of our Website. These third party data processors are only allowed to process your data on our behalf and on our express written request.
We guarantee that all third parties processing the data are carefully selected and are required to respect the security and privacy of your personal data.
5.2. We do not transmit your personal data without your explicit consent to another third party in a way that allows them to be identified, except as provided in Article 5.1.
6. LOCATION AND TRANSFER
6.1. We process your personal data within the European Economic Area (EEA). However, in order to process your personal data for the purposes mentioned in Article 3 above, we may also transfer your personal data to third parties who process data on our behalf outside the territory of the EEA. Any organization outside the EEA that processes your personal data will be required to comply with appropriate security measures regarding the processing of your personal data. These security measures will be the result of:
– the host country where legislation is in place that can be considered equivalent to the proposed data protection within the EEA; or
– A contractual agreement between us and this organization.
6.2. We may share anonymous and/or aggregated data with organizations outside the EEA. In the case of such transmission, we will ensure that on–site security measures are in place to ensure the security and privacy of your data and of all rights with respect to your personal data that you have under current binding legislation.
7. QUALITY ASSURANCES
7.1. We make every effort to process only such personal data as are necessary to achieve the objectives set out in Article 3 above.
7.2. Your personal data will only be processed to the extent necessary to achieve the goals set out in Article 3 above or until you withdraw your consent to process them. Withdrawal of your consent may mean that you may no longer use all or part of our Website. We will delete your personal data when it is no longer necessary for the purposes stated above in Article 3, unless:
– There is an overriding interest in keeping personal data accessible for identification;
– A legal or statutory obligation, or a judicial or administrative order that prevents us from deleting them.
7.3. You acknowledge that essentially our marketing efforts are focused on making our marketing materials more relevant to you. This means that we may build your profile based on the relevant features described in Article 2 of this Privacy Policy and then use that profile to provide you with messages, promotions, offers, newsletters and other advertisements for products and services you may be interested in.
7.4. We will take appropriate technical and organizational measures to protect your personal information from unauthorized access or theft, as well as from accidental loss, tampering or destruction. Access by our staff or by our third party data processors will only be done on a 'need to know' basis and will be subject to confidentiality obligations. However, you are aware that safety and security are maximum efforts, they can never be guaranteed.
7.5. If you are registered to receive emails, promotions, offers, newsletter and other advertisements by email or other channels for personal electronic communication, you may change your preferences for receiving such messages, promotions, offers, newsletters and other advertisements by following the link for the refusal provided in these communications.
8. YOUR RIGHTS
8.1. You have the right to request access to all personal data relating to you that we process. We reserve the right to charge an administrative fee for multiple subsequent access requests that are made for the sole purpose of causing us inconvenience or harm. Each request must indicate for which processing activity you wish to exercise your right of access and for which categories of data you wish to access.
8.2. You have the right to ask whether all personal data relating to you that is inaccurate is corrected for free. If you apply for a correction, your request must be accompanied by proof of the incorrect nature of the data for which you want the correction.
8.3. You have the right to withdraw the consent you previously gave to the processing of your personal data.
8.4. You have the right to request the personal data relating to you to be erased if that data is no longer required in the context of the purposes set out in Article 3 above, or if you withdraw your consent to the processing of the data. However, we will evaluate the erasure request against:
– Our overriding interests;
– Legal or statutory obligations, or administrative or judicial orders that may conflict with such deletion.
Instead of erasure, you may also request that we restrict the processing of your personal data if you (a) dispute the accuracy of the data, (b) the processing is illegal, or (c) the data is no longer needed for the purposes stated above in Article 3.
8.5. You have the right to object to the processing of personal data, unless we provide compelling legal grounds for processing that take precedence over your interests, rights and freedoms, or to establish, pursue or defend legal actions. If the intended processing qualifies as direct marketing, you have the right to object to such processing for free and without justification.
8.6. You have the right to obtain from us, in a structured, commonly used and legible format, any personal information you provide to us.
8.7. If you would like to apply for one or more of the rights listed above, you can send an email to shop@mitron–bg.com. An email requesting a claim will not be construed as consenting to the processing of your personal data beyond what is required to process your request. This request must clearly state which right you wish to exercise and the reasons for it, if required. You must also have a date, signature, and handwritten name on your three names, and we may ask you for proof of identity. You may also use the Contact Form of the Website, and we may ask you for a signed confirmation and proof of identity.
We will notify you immediately of receipt of this request. If the application proves to be valid, we will pay it attention as soon as possible and no later than thirty (30) days after receipt of the application.
If you have a complaint regarding the processing by us of your personal data, do not hesitate to contact us by email at shop@mitron-bg.com. If you do not remain satisfied with our response, you have the right to file a complaint with the competent data protection authority.