- Introduction
NOT A CLICHÉ respects the privacy of its customers and guarantees the maximum protection of their personal data. This Policy for confidentiality and protection of personal data (hereinafter referred to as "Privacy Policy") has been prepared and is based on the current Bulgarian and European legislation in the field of personal data protection.
This Privacy Policy regulates the processing of personal data of individuals or representatives of legal entities of our customers or potential customers, as well as users of our website: www.notacliche.bg ("Site"), in connection with the services provided by NOT A CLICHÉ, including those provided through and available on the Site.
This Privacy Policy, together with the General Terms of Use of the Website, the Cookie Policy and any other documents that are mentioned on the Site, set out the rules that NOT A CLICHÉ will follow when processing personal data that we collect by you or for you or that you provide to us. This Privacy Policy does not affect, limit or waive your rights under the Personal Data Protection Act (“PPA”) or other relevant legislation.
If you have any questions or comments about this Privacy Policy, please contact us at: notacliche.ltd@gmail.com
Please read this Policy carefully before using the Site or providing your Personal Data, whether electronically on the Site or on paper, as by providing your Personal Data you agree to its terms. If you do not wish us to process your personal data in the manner described in this Privacy Policy, please do not provide it to us. The provision of personal data by you is voluntary, with a view to the use of certain services provided by us and the use of the Site and/or access to it, as well as with a view to online shopping on the Site. Please note that in some cases we will not be able to provide you with the service and/or sell the goods you have requested if you do not provide us with the necessary information. Please also note that in certain cases your consent to the processing of personal data may not be necessary if NOT A CLICHÉ has another legal basis, e.g. fulfillment of legally established obligations.
- Who processes and is responsible for your personal data?
NOT A CLICHÉ ("NOT A CLICHÉ", "we") is the commercial company registered in the Commercial Register at the Registration Agency with EIK 204480004, which collects, processes and stores your personal data under the terms of this Privacy Policy. NOT A CLICHÉ is a personal data controller within the meaning of the Personal Data Protection Act (PPA). You can contact us at any of the following coordinates:
Management address: Republic of Bulgaria, Gr. Blagoevgrad, str. Aleko Konstantinov 4; e-mail: notacliche.ltd@gmail.com
III. Categories of personal data processed by NOT A CLICHÉ.
- NOT A CLICHÉ may process publicly available personal data and/or personal data provided by you. The main types of personal data processed are:
(i) Personally Identifiable Information (including name, email address, language of communication and others);
(ii) Contact details (including postal and email addresses, telephone and fax numbers of you or your designated contact person and others);
(iii) Financial information (bank account and others);
(iv) Information about a representative (legal representative or proxy of such) of our client legal entity;
(v) Site profile data (including name, postal and email addresses, telephone number, date of birth, etc.);
(vi) Data for entering into contracts for sale, dealership, wholesale, deferred payment, etc. with natural or legal persons (such as names, social security number, etc.).
- NOT A CLICHÉ may process data prepared and generated by NOT A CLICHÉ in the process of providing the services:
(i) data on the end electronic communication device used, device type, operating system used, IP address, location;
(ii) data about your preferred goods and services
(iii) Data from the communication between us and you, your habits, preferences, satisfaction with our services (activity when using the services, complaints, requests, etc.);
(iv) Information regarding visits to the Site and use of the Site, including operations and history of use of the Site;
(v) The data obtained in the performance of the obligations arising from the normative acts (ie data arising from inquiries, regulations, investigative bodies, notary public, tax authorities, court, bailiff);
(vi) Video recording when visiting the stores or head office; voice recording - calls made to the NOT A CLICHÉ contact center;
(vii) Video recording or photography made in accordance with the previously announced terms of participation in games and/or other promotional campaigns organized by NOT A CLICHÉ.
- In order to ensure the good performance of the services and the obligations arising from customer contracts, NOT A CLICHÉ has the right to process any information that is available in public registers (including public databases and data published on the Internet) as well as information received from third parties on the occasion of the fulfillment of legal provisions, regarding customers.
4 NOT A CLICHÉ has the right and obligation to verify the accuracy of the personal data recorded in the database, and for this purpose requires you to verify the data and, if necessary, correct it or confirm the accuracy of your data.
- Different types of personal data can be processed independently or in combination with each other.
- Purposes and legal grounds for processing personal data
- Processing of personal data that is necessary for the conclusion or performance of contracts with us or in connection with the preparation for the conclusion of contracts with us.
NOT A CLICHÉ processes your data for the following purposes:
(i) Customer identification when: entering into a new or amending an existing contract with us; explanations about the services used; performance of a concluded contract.
(ii) Preparation of proposals for conclusion of contracts, sending of pre-contractual information and draft contract; management of pre-sales activities;
(iii) Data received by you in the performance of obligations arising from contracts concluded with you or a company represented by you, exercise of rights and ensuring the performance of contracts by our clients;
(iv) Administering and responding to customer complaints/inquiries/complaints/complaints; return of amounts and goods; product replacement;
(v) Technical assistance to create an account/s and recover a forgotten password to access our Site, for electronic service of electronic invoices.
(vi) Identification and validation of legal age when shopping online;
(vii) Payment of obligations, rescheduling of amounts due; debt collection management;
(viii) Warranty and service;
(ix) Update offers to dealers; sharing important information regarding changes to our policy and other administrative information;
(x) Manage and administer online shopping activities; payment management.
- In fulfillment of its legal obligations, NOT A CLICHÉ processes your data for the following purposes:
(i) Issuance of invoices;
(ii) To carry out tax-insurance control by the relevant competent authorities;
(iii) Fulfillment of obligations in relation to distance selling, off-premises sales, provided for in the Consumer Protection Act;
(iv) Provision of information to the Commission for the Protection of Personal Data in connection with obligations provided for in the legal framework for the protection of personal data - Personal Data Protection Act, Regulation (EU) 2016/679 of April 27, 2016, etc. ;
(v) Obligations provided for in the Accounting Act and the Tax-Insurance Procedure Code and other related legal acts, in connection with keeping proper and lawful accounting.
- NOT A CLICHÉ processes the relevant data provided with the express written consent of the client for their processing for the following purposes:
(i) Creation and management of a personal profile on the Site; technical assistance for creating a profile/s and recovering a forgotten password to access our Site;
(ii) Direct marketing of products and services;
(iii) Participate in and administer surveys, giveaways, promotional campaigns;
(iv) Participation and management of NOT A CLICHÉ.
- Processing is necessary for the purposes of NOT A CLICHÉ's legitimate interests.
(i) In order to safeguard and ensure the protection of the property, interests and security of NOT A CLICHÉ, its visitors and employees, NOT A CLICHÉ uses video surveillance equipment.
(ii) Assess and determine user satisfaction and the effectiveness of the advertising we offer to you and others, and to meet your expectations by presenting adequate advertising;
(iii) Analysis of customer purchase history data, preferences and behavior;
(iv) Guarantee quality of customer service (video recording, audio recording)
- Categories of third parties who access and process your personal data
(i) Transport/courier companies, postal operators with a view to fulfilling our contractual obligations, sending correspondence and communications, in connection with the contract between us, sending purchased goods;
(ii) Persons who, on behalf of NOT A CLICHÉ, maintain equipment and software used to process your personal data;
(iii) Debt collection service providers, a notary, solicitor, bailiff or other third party if the customer has breached an obligation arising from a contract with us;
(iv) Banks servicing payments made by and to You;
(v) Persons to whom NOT A CLICHÉ has outsourced the performance of part of the activities or duties related to a specific service that we owe to you; persons processing personal data who, based on a contract with NOT A CLICHÉ, process your personal data on behalf of NOT A CLICHÉ;
(vi) Persons performing consulting services in various fields - lawyers, accountants, marketing agencies, etc.;
(vii) Authorities, institutions and persons to whom we are obliged to provide personal data under current legislation;
(viii) Security companies holding a license to carry out private security activity, processing the video recordings from NOT A CLICHÉ sites/offices and/or maintaining other registers in the process of ensuring the access regime in the same sites;
- How long are your personal data kept?
The duration of storage of your personal data depends on the processing purposes for which they were collected:
- The personal data processed for the purpose of concluding/amending and executing contracts between NOT A CLICHÉ and you or a company represented by you - for the duration of the contract and until the final settlement of all financial relations between the parties. NOT A CLICHÉ may also store some of your personal data for a longer period until the expiration of the relevant statute of limitations in order to protect against possible customer claims in connection with the performance/termination of contracts with us, as well as for a longer period in case of a legal dispute that has already arisen until its final resolution with an effective court/arbitration decision;
- Personal data processed for the purpose of issuing accounting/financial documents for the implementation of tax-insurance control, such as but not limited to invoices, debit, credit notices, handover protocols, contracts for the provision of services/goods are stored for at least 11 years after expiration of the limitation period for repayment of the public claim, unless the applicable legislation provides for a longer period.
- The personal data processed for the purpose of participation in the NOT A CLICHÉ club and account management on the Site - until the express withdrawal of the given consent or receipt of an objection to the processing of personal data for account management or participation in the NOT A CLICHÉ club.
- Personal data processed for the purpose of direct marketing - until the express withdrawal of the given consent for direct marketing or receiving an objection to the processing of personal data for direct marketing.
- Video data from security cameras - up to 60 days from the time the recording was created. Telephone conversations are stored for up to 360 days from the date of the conversation.
VII. Your Rights in relation to the processing of your Personal Data
1. General rights
In relation to the processing of personal data, you have the following rights, which you may exercise at any time while we store or process your personal data, by sending a request to the NOT A CLICHÉ address indicated above or electronically to email: notacliche.ltd@gmail.com
You have the right to request from NOT A CLICHÉ:
a copy of your personal data and access to them at any time;
to correct, without undue delay, your inaccurate personal data, as well as data that is no longer up-to-date;
your personal data in a form convenient for transfer to another personal data controller, or request that we do so without being hindered by us (right to portability);
to have your personal data deleted without undue delay where there is any legal basis for doing so;
to limit the processing of your personal data, in which case your data will only be stored, but not processed. Our refusal to limit will be expressly only in writing, and we are obliged to motivate it with the lawful reason;
You also have the right to:
to withdraw your consent to the processing of your personal data at any time with a separate request addressed to NOT A CLICHÉ, in the case of processing based on consent;
object to the processing of your personal data;
to object to automated processing, including profiling;
not be subject to a decision based solely on automated processing involving profiling;
- You have the right to appeal to the supervisory authority
You have the right to submit a complaint directly to the supervisory authority, the competent authority being the Commission for the Protection of Personal Data, address: Sofia 1592, blvd. "Prof. Tsvetan Lazarov" No. 2 (www.cpdp.bg).
In the event that you wish to lodge a complaint regarding the processing of your personal data by NOT A CLICHÉ, you may do so at the indicated contact details of the Administrator or directly to the Data Protection Officer (at the contact details indicated above).
- Automated processing and profiling
When you visit our Site, we use automated processing to adapt products and services to your needs in the best possible way.
- Objection to use for direct marketing
You have the right to object to the future processing of your personal data for the purposes of direct marketing and advertising, as well as to their disclosure to third parties and their use on their behalf for the purposes of direct marketing and advertising, by withdrawing your consent under any time. For this purpose, you can send an electronic message with the corresponding request to stop using your data for direct marketing purposes to the address: notacliche.ltd@gmail.com
- Can you refuse to provide personal data to NOT A CLICHÉ and what are the consequences?
In order to enter into a contract with you and/or to provide you with the requested products and/or services and/or to deliver the ordered goods in accordance with our legal and subsequently contractual obligations, NOT A CLICHÉ needs certain data to identify the party under the contract, her proxy, contact details, payment details.
Failure to provide such data prevents us from entering into a contract with you.
In order to make a purchase from our Site and to deliver the goods or services you have ordered, you must have an account on the Site. During the profile creation process, NOT A CLICHÉ needs certain data to identify you, contact data, payment data. Failure to provide such data prevents the possibility of purchase and delivery of goods or services by you.
VIII. How we protect your data
NOT A CLICHÉ implements organizational, physical, information technology and other necessary measures to ensure the security and protection of your personal data and the monitoring of the processing of personal data.
Among other things, such security measures include the following activities:
– NOT A CLICHÉ has established the requirements for the processing, registration and storage of personal data with the internal procedures, compliance with which is constantly monitored;
– the access of NOT A CLICHÉ employees to personal data and the permission to process personal data in the NOT A CLICHÉ database is limited, depending on their duties;
– NOT A CLICHÉ has established confidentiality obligations for its employees;
– access to NOT A CLICHÉ's office equipment and each employee's computers is restricted.
– we implement all the necessary organizational and technical measures provided for in the Personal Data Protection Act, as well as the best practices of international standards
– For the purpose of maximum security in the processing, transfer and storage of your data, we may use additional protection mechanisms such as encryption, pseudonymization, etc.
The security measures we apply are subject to constant improvement and adaptation to the latest technologies.
- Link to other sites
Sometimes the Site may contain links/references (hyperlinks) to other sites. We do not operate the linked sites and do not endorse the content, services or products of those sites. We advise you to use the linked sites carefully and with due regard to their content and terms of use. NOT A CLICHÉ is not responsible for the privacy policy or content of such sites and we advise you to review their privacy policies. However, as soon as NOT A CLICHÉ receives information about illegal activities or illegal information on such Internet pages, NOT A CLICHÉ will take immediate measures to remove electronic references (links) to them.
- Cookie Policy
To familiarize yourself with the Cookie Policy, please visit the Cookie Policy page
Personal data for children
We do not knowingly collect personal information from children under the age of 16. If we learn that we have collected personal information from a child under the age of 16, we will take steps to delete the information as soon as possible or obtain the consent of the person with parental responsibility for the child.
Changes to the Privacy Policy
We may periodically update our Privacy Policy. In the event of a change to this policy, a notice will be published on our website, as well as the updated Privacy Policy. All amendments and additions to the Privacy Policy will be applied only after publication of its current content available through our Site.