This Privacy and Data Protection Policy, hereinafter referred to in the General Terms and Conditions as "Privacy Policy", defines the ways in which BULTEX 99 LTD., in its capacity as Personal Data Administrator, referred to as below for brevity "Administrator" or "MERCHANT", collects, stores and processes any information and personal data provided by CUSTOMERS when using the services and purchasing the goods offered on the online store stenso.net, establishes for what purposes what grounds, for how long they are stored and what appropriate physical and technical measures are taken to protect the information provided from unauthorized access, use, disclosure and dissemination.
This Privacy Policy is designed and fully complies with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the "Regulation", "GDPR" or "General Regulation on Data Protection", which applies from 25 May 2018, the Personal Data Protection Act and other European and Bulgarian regulations in the field of personal data protection. data.
This Privacy Policy aims to inform CUSTOMERS about all aspects of the processing of their personal data by the Merchant and the rights they have in connection with this processing.
This Privacy Policy is an integral part of the General Terms of Use of the website www.stenso.net, administered by the MERCHANT.
This Privacy Policy is published and available on the Internet at any time at: www.stenso.net in a way that allows its storage and reproduction.
І. DATA FOR THE MERCHANT, PERSONAL DATA ADMINISTRATOR
Art. 1. (1) The website www.stenso.net is owned by BULTEX 99 LTD., a trade company entered in the Commercial Register and the Register of Non-Profit Legal Entities at the Administrative Court with UIC 115784032, with registered office and address of management: 31 Vasil Aprilov Blvd, 4000 Plovdiv, Bulgaria., represented by Stefan Slavchev Bashev.
(2) BULTEX 99 LTD., in its capacity of Personal Data Administrator, collects, stores and processes information and personal data of the CUSTOMERS and users of the website www.stenso.net.
(3) Information about the Administrator who processes your data:
1. Name of the MERCHANT: BULTEX 99 LTD.
2. Headquarters and address of management: 31 Vasil Aprilov Blvd, 4000 Plovdiv, Bulgaria.
3. Address for exercising economic activity: 8 Karlovsko Shosse str., 4000 Plovdiv, Bulgaria.
4. Data for correspondence and address for sending complaints from consumers: 8 Karlovsko Shosse str., 4000 Plovdiv, Bulgaria, tel: +35932909799, +359889860889, e-mail: sales@stenso.net
5. Entry in public registers: BULTEX 99 LTD. is entered in the Commercial Register and the Register of Non-Profit Legal Entities at the Registry Agency at the Ministry of Justice of the Republic of Bulgaria with UIC 115784032
6. Registration under the Value Added Tax Act: VAT ВG115784032
7. Information about the person responsible for data protection: Vessela Dimitrova, e-mail address: sales@stenso.net.
(4) Information regarding the competent supervisory body for personal data protection:
Commission for Personal Data Protection: address: 2 Prof. Tsvetan Lazarov Str., 1000 Sofia, Bulgaria, tel .: +359 2 9402046, fax: +359 29403640, E-mail: kzld@cpdp.bg, Website: www.cpdp.bg
(5) BULTEX 99 LTD. operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data. data and on the free movement of such data.
II. DEFINITIONS
Art. 3. In applying this Privacy Policy, the following terms and expressions have the following meanings:
"Administrator" means a natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data.
"Processor of personal data" means a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the Controller.
"Personal data" means any information that directly identifies or is able to identify an individual - three names, date of birth, e-mail, address, etc.
"Processing" means any operation or set of operations carried out with personal data or a set of personal data by automatic or other means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure, disseminating or otherwise making the data accessible, arranging or combining, restricting, deleting or destroying it.
"Data subject" means a natural person who is or can be identified, directly or indirectly, by an identifier/name, identification number, location data, online identifier, or by one or more characteristics specific to the physical, physiological, genetic, mental, intellectual, economic, cultural or social identity.
"Data subject's consent" means any freely expressed, specific, informed and unambiguous indication of the data subject's will, by means of a statement or clear confirmatory action expressing his or her consent to the processing of personal data relating to him or her.
"Third party" means a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor and the persons who, under the direct supervision of the controller or the processor, have the right to process personal data.
III. GROUNDS FOR COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA
Art. 4. The administrator collects and processes personal data of the CUSTOMERS in connection with the use of the website www.stenso.net, conclusion and execution of contracts with them and in particular on the basis of the following grounds under Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR):
● Explicit consent received from the CUSTOMER;
● Fulfillment of the obligations of the Administrator under a contract concluded with the CUSTOMER;
● Compliance with a legal obligation that applies to the Administrator;
● For the purposes of the legitimate interests of the Administrator or a third party.
IV. OBJECTIVES AND PRINCIPLES FOR THE COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA
Art. 4. (1) In its capacity of Personal Data Administrator, BULTEX 99 LTD. collects and processes the personal data that the CUSTOMERS provide in connection with the use of the website www.stenso.net and concluding a contract for online sale, including the following goals:
1. Conclusion and execution of contracts for purchase and sale of goods with the CUSTOMERS of the online store stenso.net, execution of orders and purchase of goods, delivery of the ordered goods to the CUSTOMERS, receipt of payments, as well as any other purposes related to execution of the concluded contracts for purchase and sale of goods with the CUSTOMERS of the online store stenso.net;
2. Creating and maintaining a profile of the CUSTOMER when registering in the online store stenso.net and providing full functionality when using the online store;
3. Sending an information bulletin/newsletter and marketing proposals, special promotions and campaigns, promo codes, vouchers, with the explicit consent of the CUSTOMER;
4. Exercising the right to refuse purchased goods, return of goods for exchange, satisfaction of a claim for goods;
5. Individualization of the CUSTOMER as a party to the contract;
6. Financial and accounting purposes - implementation of the provisions of the Insurance Act, the VAT Act, the CITA and other acts;
7. Statistical objectives - improving the services offered by the website www.stenso.net, including the creation of new functionalities, for making informed business decisions through the use of summary analysis and business research;
8. Protection of information security;
9. Ensuring the implementation of the contract for provision of the respective service;
10. Participation in events and conducting games, raffles, promotions, advertising campaigns, organized by the Merchant with the express consent given by the CUSTOMER/user;
11. Participation in programs for loyal customers organized by the MERCHANT, with your explicit consent;
12. Getting acquainted with promotional conditions and sending any other type of commercial messages and SMS for information purposes, with the consent given by the CUSTOMER.
(2) We observe the following principles in the processing of the personal data of the CUSTOMERS:
● legality, good faith and transparency;
● limitation of processing purposes;
● relevance to the purposes of processing and minimizing the data collected;
● accuracy and timeliness of the data;
● limitation of storage in order to achieve the objectives;
● integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data;
● accountability.
(3) When processing and storing personal data, the Administrator may process and store personal data in order to protect its legitimate interests and to fulfill its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.
V. WHAT KINDS OF PERSONAL DATA IS COLLECTED, STORED AND PROCESSED BY THE ADMINISTRATOR
Art. 5. The controller performs the following operations with the personal data provided by the CUSTOMERS for the following purposes:
1. Conclusion and execution of a contract for purchase and sale of goods with a trade partner or CUSTOMER of the online store stenso.net - the purpose of this operation is the conclusion and / or execution of a contract with a trade partner or CUSTOMER and its administration. In some cases, the purpose of the operation may be to protect the legitimate interests of the MERCHANT or a third party in connection with the performance of the contract.
2. CUSTOMER registration in the online store - the purpose of this operation is to create an Account for using the online store to purchase goods and provide contact information for delivery of purchased goods, receiving newsletters and/or acquaintance with special commercial offers, promotions and campaigns, if desired. The registration of a CUSTOMER's Profile in the online store is not a mandatory step for purchasing the goods and using the services provided by the website www.stenso.net, which are available to a significant extent and without creating an Account.
3. Sending an information bulletin (newsletter) and marketing proposals, special promotions and campaigns, electronically, by means of electronic communication, incl. by email, through social networks Facebook, Instagram or via SMS and Viber messages for information purposes - the purpose of this operation is to administer the process of sending newsletters and / or marketing proposals, special promotions and campaigns to customers who have given their explicit consent to receive such. CUSTOMERS have the right to refuse at any time to receive newsletters and emails with marketing proposals for promotions and campaigns of the MERCHANT, without giving reasons.
4. Exercising the right of refusal, replacement or claim of goods - the purpose of this operation is to fulfill the legal obligations of the Administrator, in connection with the responsibility for detecting defects in the goods and in the process of exercising the right of refusal, return, exchange or claim of goods from the CUSTOMER. The personal data processed in connection with the processing of individual requests from CUSTOMERS for the exercise of their claims are used only for the purposes of exercising these rights.
5. For the purposes of the financial and accounting activity of the company - the purpose of this operation is fulfillment of the legal requirements to the Administrator for maintaining accounting of the commercial activity and the document turnover related to the delivery of purchased goods.
6. For the purposes of statistics, summarized business analyzes and business surveys - the purpose of this operation is the legitimate interest of the Administrator to improve the services offered by the website www.stenso.net, by collecting information and summarizing analysis of information that allows the development of its commercial activity according to the needs and behavior of the CUSTOMERS/users of the site.
7. Registration of a participant in events and sending information or prizes - the purpose of this operation is to administer the process of registration of participants in events and games with their explicit consent, and sending prizes from games.
Art. 6. (1) The administrator shall process the following categories of personal data and information for the following purposes and on the following grounds:
1. Data for concluding and executing a sales contract with a commercial partner or CUSTOMER of the online store stenso.net (as CUSTOMER - name, surname, email, phone, gender, delivery address, etc.; as Guest - name, surname, email, phone, delivery address)
- Purpose for which the data are collected:
● Making contact with the CUSTOMER or the user and sending information to him, with the express consent or at his request;
● Potential possibility for concluding a contract for sale and delivery of goods;
● Registration of a CUSTOMER / user with his Profile in the online store for concluding a contract for sale and delivery of goods;
● Conclusion and execution of a contract for delivery of goods with the CUSTOMER.
● Fulfillment of obligations of the Administrator for concluding and fulfilling a contract for distance selling and delivery of goods, including in exercising the right of return for refusal, exchange and claim of purchased goods - Art. 6, para. 1, p. (b) GDPR.
- Grounds for processing your personal data - By performing or taking steps to place an order for concluding a contract for the purchase of goods through the online store stenso.net by the CUSTOMER by registering or by accepting the general conditions and placing an order by the CUSTOMER without registration ("Guest"), a contractual relationship is created between the Administrator and the CUSTOMER, on which basis we process your personal data - Art. 6, para. 1, p. (b) GDPR. Your data for sending an information bulletin and marketing proposals are processed on the basis of the explicit consent of the CUSTOMER - Art. 6, para. 1, p. (a) GDPR, which may be
2. Account registration data (as CUSTOMER - name, surname, gender, email, phone, address, optional data such as date of birth, etc.)
- Purpose for which the data are collected:
● Making contact with the CUSTOMER or the user and sending information to him, with the express consent or at his request;
● Registration of a CUSTOMER / user with his Profile in the online store to provide the full functionality of the website, receive promo codes or participate in loyalty programs of the MERCHANT;
● Potential possibility for concluding a contract for delivery of goods offered by the MERCHANT in the online store;
● Sending newsletters and / or emails with marketing offers, special promotions and campaigns, promo codes, news, with explicit consent.
- Grounds for processing your personal data - By accepting the general conditions and registration in the online store or placing an order without registration (as a "Guest"), or by concluding a contract, a contractual relationship is created between the Administrator and the CUSTOMER, on which basis we process your personal data - art. 6, para. 1, p. (b) GDPR. Your data for sending an information bulletin and marketing proposals are processed on the basis of your explicit consent - Art. 6, para. 1, p. (a) the GDPR, which may be withdrawn at any time
3. Data for sending newsletters and marketing offers, special promotions, campaigns for goods / services and other commercial messages (names, phone, e-mail)
- Purpose for which the data is collected - For direct marketing: sending newsletters and marketing messages for promotions, campaigns, and new products.
- Grounds for processing your personal data - your data for sending newsletters and commercial messages, marketing proposals, promotions and campaigns for goods and services are processed on the basis of your explicit consent - Art. 6, para. 1, p. (a) the GDPR, which may be withdrawn at any time.
4. Data for exercising the right to refuse, exchange or make a claim for goods (name, surname, e-mail, telephone, delivery/return address, bank account, etc.)
- Purpose for which the data is collected - Fulfillment of obligations of the administrator under a contract for distance purchase and delivery of goods - Art. 6, para. 1, p. (c) GDPR, in connection with the responsibility in detecting defects in the goods and in the process of exercising the right to refuse, return, exchange or claim goods from the CUSTOMER.
- Grounds for processing your personal data - your data in case of complaints, refusal, return or exchange of goods are processed on the basis of the legal obligation of the Administrator in connection with the liability for complaints of goods and exercising the right of refusal and exchange of goods, on what basis we process your personal data - art. 6, para. 1, p. (c) GDPR, as well as on the grounds of protection of the legitimate interest of the Administrator from claims and legal disputes - Article 6, paragraph 1, b. (f) GDPR.
5. Data for delivery and payment (names of the recipient of the goods, telephone, e-mail, address; data on the means of payment used)
- Purpose for which the data is collected: Fulfillment of obligations of the administrator under a contract for distance purchase and delivery of goods - Art. 6, para. 1, p. (b) GDPR.
- Grounds for processing your personal data - By accepting the general conditions and registration in the e-shop or placing an order without registration, or by concluding a written contract, a contractual relationship is created between the Administrator and you, on which basis we process your personal data - Art. 6, para. 1, p. (b) GDPR.
6. Data on the CUSTOMER's visits and behavior when using the online store - (IP address, cookies, operating system, browser type, language settings, keywords for search queries and content viewed, etc.)
- Purpose for which the data is collected - ensuring the functioning, improving the content and quality of goods and services offered on the website, summarized business analysis of traffic and behavior of CUSTOMERS and visitors to the website, tracking sales and goods and services, etc. statistical purposes.
- Grounds for processing your personal data - to protect the legitimate interests of the Administrator to improve the services provided by the website and statistics, on which basis we process your personal data - Art. 6, para. 1, p. (f) GDPR. By loading the stenso.net website, viewing in any way its content, goods and services, your data is processed on the basis of your explicit consent - Art. 6, para. 1, p. (a) the GDPR, which may be withdrawn at any time.
7. Data from the CUSTOMER's profile in social networks (publicly available information from your Facebook and Instagram accounts)
- Purpose for which the data are collected:
● Making contact with the user and sending information to him;
● For the purposes of registration on the website, for participation in a game, raffle, campaign, etc.
● To identify the CUSTOMER / user, to conclude and fulfill a contract for the sale and delivery of goods from the online store.
- Grounds for processing your personal data - By placing an order through the CUSTOMER's Profile on social networks or when concluding a written contract, a contractual relationship is created between the Administrator and you, on which basis we process your personal data - Art. 6, para. 1, p. (b) GDPR. Your data for registration in our events, games, campaigns, etc. are processed on the basis of your explicit consent - Art. 6, para. 1, p. (a) GDPR.
(2) The administrator does not collect and does not process the so-called special categories of personal data which:
● reveal racial or ethnic origin;
● disclose political, religious or philosophical beliefs, or trade union membership;
● are related to genetic and biometric data, health data or data on sexual life or sexual orientation.
(3) The personal data are collected by the Administrator from the persons to whom they refer.
(4) The company does not perform automated decision making with data.
(5) The company does not collect and process data for persons under 18 years of age, except with the consent of a parent or guardian, according to the current legislation.
VI. PERIOD FOR STORAGE OF PERSONAL DATA
Art. 7. (1) The administrator stores your personal data for a period not longer than 10 years from your last activity (placing an order) or until the withdrawal of your consent, respectively submission by you of a request to limit the processing of your data. After deleting your account or successfully completing the order, the Administrator takes the necessary care to delete and destroy all data without undue delay.
(2) The Administrator stores your personal data provided in connection with online orders for a period of 10 years in order to protect the legal interests of the Administrator in court or administrative claims and disputes with CUSTOMERS and users of the online store, the accounting documents are stored also for the statutory 10-year term.
(3) The administrator stores the personal data provided during the registration of an Account in the online store stenso.net for a period not longer than the existence of the CUSTOMER's profile on the website. After the expiration of this period, as well as upon withdrawal of your consent to maintain an Account, the Administrator is obliged to delete and destroy this data without the necessary delay.
(4) The personal data provided to the Administrator by CUSTOMERS for receiving an information bulletin and marketing proposals shall be stored until the withdrawal of the consent for their processing.
(5) The personal data provided for financial and accounting activity shall be stored within the statutory 10-year term.
(6) Personal data processed for the improvement of services, including the creation of new functionalities of the online store, for making informed business decisions using summary analysis and business research, shall be stored until the fulfillment of the purposes for which they were collected.
(7) In case of elimination of the need for their storage, the Administrator shall be obliged to delete or destroy in a safe way and without undue delay your personal data.
Art. 8. The Administrator keeps the personal data of the legal representatives of its business partners for a period of 10 years from the implementation or termination of the contract, to comply with the legitimate interests and legal obligations of the Administrator, this period may exceed the term of the contract.
VII. TRANSMISSION OF PERSONAL DATA FOR PROCESSING
Art. 9. (1) The administrator may at its own discretion transfer part or all of your personal data to persons processing personal data on behalf of the Administrator for the implementation of the processing purposes with which you have agreed, in compliance with the requirements of Regulation (EU) 2016/679 (GDPR).
(2) The administrator shall not transfer personal data to third countries or international organizations.
(3) The administrator may disclose personal data to the following categories of recipients:
a) to the natural persons to whom they relate;
b) to the persons, if provided by law;
c) to the persons processing personal data;
d) to the owner of Bultex 99 LTD.
(4) The CUSTOMERs agree with the processing of their personal data for receiving an electronic bulletin and / or marketing messages for promotions and campaigns by marking a check box. They may at any time opt out of receiving the newsletter by notifying their decision electronically to the Contact Email Administrator, without giving any reasons.
VIII. RIGHTS OF DATA SUBJECTS IN THE COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA
Withdrawal of consent for the processing of your personal data
Art. 10. (1) If you do not wish all or part of your personal data to continue to be processed by the Administrator for specific or all purposes of processing, including for receiving newsletters and marketing purposes, you may at any time withdraw your consent to processing by completing the Withdrawal Consent Form, Appendix №1 to this Policy, or by request in free text and send it to us by email.
(2) After receiving the request for withdrawal of the consent for data processing, the Administrator shall send to the e-mail, which the CUSTOMER has indicated for receiving newsletters and marketing messages, a letter with detailed instructions for confirmation of your unsubscription from the list of CUSTOMERS, newsletter recipients. and messages.
(3) By withdrawing the consent for processing personal data, which are mandatory for creating and maintaining an account in the online store, your account will become inactive. Of course, you will be able to browse the online store and the products offered and place orders as a guest or make a new registration.
(4) The withdrawal of the consent shall not affect the legality of the processing of personal data, which the Administrator has performed so far.
(5) If there is an order made by you, which is in the process of processing, the earliest moment in which you can withdraw your consent for processing is at the successful completion of the order.
Right of access
Art. 11. (1) You have the right to request and receive from the Administrator confirmation whether personal data related to you are processed, and if you are a registered user, you can at any time see in your profile the personal data you have provided and are processed for You.
(2) You have the right to access the data related to you, as well as the information related to the collection, processing and storage of your personal data.
(3) The administrator shall provide you, upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.
(4) The provision of access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of recurrence or excessiveness of the requests.
Right of correction or completion
Art. 12. (1) You can correct or fill in the inaccurate or incomplete personal data related to you directly by editing your profile on the website, or send such a request to the Administrator, using the Form for correction / filling in data, Appendix №4 or make a request in free text.
Right to delete ("to be forgotten")
Art. 13. (1) You have the right to request from the Administrator deletion of part or all personal data related to you, and the Administrator has the obligation to delete them without undue delay, when there is any of the following reasons:
● personal data are no longer needed for the purposes for which they were collected or otherwise processed;
● You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
● You object to the processing of personal data related to you, including for direct marketing purposes, and there are no legal grounds for processing to take precedence;
● personal data have been processed illegally;
● personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to the Controller;
● personal data have been collected in connection with the provision of information society services.
(2) The administrator shall not be obliged to delete the personal data if he stores and processes them:
● to exercise the right to freedom of expression and the right to information;
● to comply with a legal obligation requiring processing provided for in EU law or the law of the Member State applicable to the Administrator or for the performance of a task in the public interest or in the exercise of official powers conferred on him;
● for reasons of public interest in the field of public health;
● for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
● to establish, exercise or defend legal claims.
(3) In case of exercising your right to be "forgotten", the Company will delete all your data, except for the following information:
● information needed to certify that your right to be forgotten has been exercised;
● technical information about the functioning of the online store, which information cannot be connected in any way with your personality;
● e-mail with which you registered in the online store.
(4) In order to exercise your right to be "forgotten", it is necessary to submit a request to the Administrator through your account in the online store, using the Form - Request for deletion of data, Appendix №2 or send a request in free text by email to Administrator
(5) If there is an order made by you, which is in the process of processing, the earliest moment in which you can request to be "forgotten" is when the order is successfully completed.
(6) By deleting your personal data, your account will become inactive. Of course, you will be able to browse the online store and the products offered and place orders as a guest or make a new registration.
(7) The administrator shall not delete the data, which he has a legal obligation to store, including for protection on the occasion of court claims against him or for proving of his rights and legal interests.
Right of restriction
Art. 14. You have the right to ask the Administrator to limit the processing of data related to you by sending a request in free text by e-mail when:
● dispute the accuracy of personal data for a period that allows the Administrator to verify the accuracy of personal data;
● the processing is illegal, but you do not want the personal data to be deleted, but only their use to be restricted;
● The controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or protection of your legal claims;
● You have objected to the processing pending verification that the legal grounds of the Administrator take precedence over your interests.
Right of portability
Art. 15. (1) You can at any time download or receive your data in a structured, widely used and machine-readable format, which is stored and processed in connection with the use of the services of the Administrator, directly through your account through the option to export data or by e-mail to the Administrator, using the Form - Portability Request, Appendix №3 or make a request in free text, when the processing is based on consent or contractual obligation and is performed in an automated manner.
(2) You can ask the Administrator to directly transfer your personal data to an administrator specified by you, when this is technically feasible.
Right to receive information
Art. 16. You can ask the Administrator to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested have been disclosed. The administrator may refuse to provide this information if this would be impossible or would require a disproportionate effort.
Right to object
Art. 17. You may object at any time to the processing of personal data by the Administrator relating to him, including if they are processed for the purposes of profiling or direct marketing.
Your rights in the event of a breach of the security of your personal data
Art. 18. (1) If the Administrator finds a violation of the security of your personal data, which may pose a high risk to your rights and freedoms, he shall notify you without undue delay of the violation, as well as of the measures that have been taken or are to be taken.
(2) The administrator is not obliged to notify you if:
● has taken appropriate technical and organizational protection measures with regard to data affected by the security breach;
● has subsequently taken measures to ensure that the breach does not pose a high risk to your rights;
● notification would require a disproportionate effort.
Right to appeal to a supervisory authority
Art. 19. In case of violation of your rights under the above or applicable legislation on personal data protection, you have the right to file a complaint to the Commission for Personal Data Protection or to appeal in court.
Art. 20. You can exercise all rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are optional and you can
submit your requests in any form that contains a statement to that effect and identifies you as the data owner.
IX. PERSONS TO WHOM YOUR PERSONAL DATA IS PROVIDED
Art. 21. (1) For the purposes of processing your personal data when providing the services for using the online store stenso.net in their full functionality and in view of your interests, the Administrator may at its discretion provide your data to the following persons who are data processors and with whom personal data protection contracts have been concluded:
Processor of personal data Purpose of the processing of personal data
Speedy AD Deliveries in the country
ECONT Express LTD. Deliveries in the country
"Superhosting" Hosting for the e-shop
The specified persons (postal operators, auditors, lawyers, website maintenance companies, etc.) act as processors of personal data on behalf of the Administrator and on the basis of the contract concluded with him, have undertaken to comply with all requirements for legality, confidentiality and security in the processing and storage of your personal data only for the intended purposes.
(2) The administrator may disclose and provide your personal data to public authorities when this is required by law (eg NRA, CPDP, Ministry of Interior and other state and municipal authorities).
X. LINKS TO OTHER WEBSITES
Art. 22. This Privacy Policy does not cover links on the www.stenso.net website to other websites. We encourage you to read the privacy statements of other websites you visit.
XI. SECURITY MEASURES
Art. 23. The controller takes technical and organizational measures to protect your personal data against unauthorized access or disclosure, accidental loss, illegal destruction or alteration, as well as against other forms of illegal processing. The information in electronic form is stored on secure servers on the territory of the European Union, installed in a well-equipped, fire-resistant and technically maintained room for colocation of the telecommunication equipment. The data transfer between the servers and the CUSTOMER device / browser is encrypted via HTTPS.
The controller uses technical means to protect personal data from acquisition or modification by unauthorized persons, including:
● SSL security certificate, which encrypts the connection between the site and the end device.
● Protection of the database from unauthorized access, data archiving.
● Antivirus and unauthorized access protection programs.
● Protect customer accounts with email and password.
Your personal data (those of them that are necessary) are available only to employees or subcontractors of Bultex 99 LTD., who have access to them to fulfill their obligations arising from the contractual relationship between the Administrator and the CUSTOMERS of the online store stenso.net. The administrator ensures that employees and subcontractors who have access to your personal data have the appropriate professional qualifications, knowledge and skills to perform their duties, introducing differentiated access rights, depending on their position and responsibilities.
XII. USE OF COOKIES
Art. 24. (1) The administrator uses "cookies" to ensure the proper functioning of the online store www.stenso.net, as well as to collect statistical information and data in order to perform analysis to improve access to and use of the services of the website. The cookies used are used to differentiate users and sessions, to submit requests, to store the source of traffic and the way in which the site is reached.
You can find a list of cookies we use here.
By setting your browser accordingly, you can always disable, block or set your preferences for both our cookies and third-party cookies. In this case, you may lose some of the functionality of some of the services on our site.
For more information on how cookies work, see https://www.allaboutcookies.org/.
(3) In case you use a link that links you to another site, it will have its own cookies and security policy, over which we have no control.
XII. LOG FILES
Art. 25 Like most sites, the website www.stenso.net collects data in log files. This information contains your IP, which browser you use (eg Mozilla, IE, Chrome, etc.), the operating system (Linux, Windows, iOS, Android), when you visited our website, the pages visited. We reserve the right to use the IP addresses of users to reveal their identity in cases where this is necessary in compliance with the law.
XIII. LINKS TO OTHER WEBSITES
Art. 26 This Privacy Policy does not cover links on the www.stenso.net website to other websites. We encourage you to read the privacy statements of other websites you visit and whose services you use.
XIV. CHANGES TO THE PRIVACY POLICY
Art. 27 BULTEX 99 LTD. reserves the right to change this Privacy Policy at any time, and the changes take effect from their publication on the website www.stenso.net.
If you have questions about the processing of your personal data by the Administrator of the website www.stenso.net, please contact us at: sales@stenso.net or by phone: +359 32 909799.