GDPR Privacy Policy

General information
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Regulation on Data Protection) introduces a number of significant changes to the current legal framework and places higher requirements on data subject protection systems.
When offering goods to individuals located in the Union "BAZA BG LTD", it processes the data in accordance with the data protection principles laid down in the Regulation, namely lawfulness, good faith and transparency, thus ensuring effective protection and security.

Information about the Privacy Controller
1. Company: BAZA BG LTD
2. Legal form: EOOD
3. e-mail: info@baza.bg
Information on the competent supervisory authority
1. Name: Commission for Personal Data Protection
2. Seat and address of management: Sofia 1592, "Prof. 2 Tsvetan Lazarov
3. Correspondence data: Sofia 1592, "Prof. 2 Tsvetan Lazarov
4. Telephone: 02 915 3 518
5. Email: kzld @ government.bg, kzld@cpdp.bg
6. Web site: www.cpdp.bg
I. Your account
For more effective protection of your rights, BAZA BG LTD recommends you to keep confidential your username and password to limit the possibility of unwanted access to the site through your account from third parties.
 If you have any doubts about unauthorized use of your account, you should immediately inform the administrator.
When registering, the information provided must be accurate and complete, as in the case of deliberately provided untrue data you are liable for criminal liability.
In case of doubt about the abuse of rights when using an account, BAZA BG LTD may refuse access to the site or close an account or cancel orders.
Under the newly introduced requirements, you should be aware that the following categories of data - information about products and services, how to use, payment information, information contained in cookie files, e-mail address information (visited sites), and information about used devices, can be used for marketing purposes, research, interest and shopping preferences, including offering and presenting advertisements, products and services as well as internal analysis.
The data you provide when using the site will be retained by us for a certain period of time as it is necessary to perform activities arising from the services provided.
II. Your rights in the collection, processing and storage of your personal data
According to the Regulation, the data subject (the natural person to whom the data relate) is entitled to:
1.Information
By providing their personal data, the subjects are entitled to receive the following information: the data identifying the controller and the contact details, the contact details of the data protection officer, the purposes and legal basis of the processing, the legitimate interests pursued by the controller, the recipients or categories of recipients of the personal data, if any, the period for which the personal data will be stored and, if that is not possible, the criteria for determining that period, the existence of a right to request access to data, correction or deletion of personal data, or limitation of processing, right to object to processing, the right to data portability, the right of appeal to a supervisor.
2.Access to their own personal data;
You have the right to receive from the administrator a confirmation that your personal data are processed and accessed by requesting a copy of the processed personal data relating to you in electronic form.
In the case of due access, you also have the right to receive the following information: the purposes of the processing, the relevant categories of personal data, the envisaged term of storage, the existing rights to rectify, delete, limit, and the right to object to processing.

3.Create (if data is inaccurate);
The data subject shall have the right to request the controller to correct inaccurate personal data relating to him without undue delay. Given the purposes of the processing, the person has the right to fill in the incomplete personal data, including by adding a statement.

4. Delete personal information (the right to be forgotten);
You have the right to request the deletion of your personal information in the following hypotheses:
- personal data are no longer needed for the purposes for which they were collected;
- the data subject withdraws its consent on which processing is based
of the data and no other legal basis for the processing;
- the data object is opposed to processing and there are no legitimate grounds for the processing to behave an advantage;
- personal data has been tampered with;
- personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State applicable to the controller.
The Data Controller may refuse to delete the data you provide when performing a public-interest legal obligation, including in the field of public health, for scientific, historical or statistical purposes, or with official authority.
In order to exercise your right to "forget", you should send an email to info@baza.bg at your request by specifying your username, e-mail with your system validation, and a contact phone. Upon receipt of your waiver request, our administrator will verify the identity of your data and will notify you of the cancellation of your account and data in the system of BAZA BG LTD.
5. Restrict the processing of personal data
You have the right to restrict the processing of your or any part of your personal data that is required for the creation and maintenance of your service use registration, but in that case your account will become inactive.
The right of limitation arises in the following cases: the accuracy of the personal data is disputed by the data subject, the processing is unlawful, but the data subject does not want the personal data to be deleted, but instead requires that the data be confined, the controller no longer needs the personal data for the purposes of processing, but the data subject requests them for the establishment, exercise or protection of legal claims, the data subject has objected to the treatment pending verification that the legal grounds for the administration or have an advantage over the interests of the data subject.
BAZA BG LTD. may ask you to certify your identity and identity with the person to whom the data relate.
The administrator shall report any correction, deletion, or limitation of processing to any recipient to whom the personal data has been disclosed unless this is impracticable or requires disproportionate effort. The controller shall inform the data subject about those recipients if the data subject so requests.

7.Privacy of personal data between individual administrators;
You have the right to receive the personal data you have provided in a structured, widely used and machine-readable format, and you have the right to transfer this data to another administrator without hindrance by the administrator to whom the personal data are provided when the processing is based on consent .
When exercising your right to data portability, the entity is entitled to receive a direct transfer from one administrator to another where technically feasible.
7. A view of the processing of personal data;
The data subject is entitled, at any time, to object to the processing of personal data relating to him. The administrator shall discontinue the processing of personal data unless it can demonstrate that there are convincing legal grounds for the processing that take precedence over the interests, rights and freedoms of the data subject or for the establishment, exercise or protection of legal claims.
 When processing personal data for purposes of direct marketing, the data subject is entitled at any time to object to the processing of personal data relating to him for this type of marketing.
When the data subject opposes processing for direct marketing purposes, the processing of personal data for these purposes is terminated.

8. The data subject may also not be the subject of a decision based solely on automated processing involving profiling that produces legal consequences for the data subject or similarly affects it significantly;
9. Right to judicial or administrative redress if the rights of the data subject have been violated.
If BAZA BG LTD - baza.bg detects a breach of security of your personal data that may pose a high risk to your rights and freedoms, we notify you without undue delay of the violation as well as of the measures taken or to be taken taken. Notification is not necessary in the event that the controller has taken appropriate technical and organizational protection measures.

III.Confidentiality
When offering goods to individuals located in the Union BAZA BG LTD. - baza.bg processes the data in accordance with the data protection principles set out in the Regulation, namely, lawfulness, good faith and transparency, thus guaranteeing you an effective protection and security.
To avoid unwanted third-party attacks, you should keep in mind that you should also keep your personal information responsibly, recommending in this regard to keep your password, avoid using the same password for different accounts, every time you use it on our site, make sure you've logged out of your account, often change your password.
When receiving emails from BAZA BG LTD - baza.bg should thoroughly check their authenticity, bearing in mind that the only ones are listed above.
IV. Use and protection of personal data.
The personal information provided by users / clients is used by BAZA BG LTD - baza.bg for the purposes of trade, namely: to process orders, to send already purchased products for payment purposes, to communicate with consumers / customers about orders, products, services, including promotional offers, product and service recommendations.
The cases where personal data is required are when you register your account when you search for certain products on the site, when making orders and at all times when you send messages or fill out a form posted on the site.
The email address is personal data within the meaning of the law, which is administered and recorded for reporting the results of our business activity, including the client's assessment. You have the right to object, which you can send to the specified email address info@baza.bg
We apply appropriate technical and organizational measures in relation to the storage and protection of your personal data by ensuring constant confidentiality, integrity, availability and sustainability of the systems and services for processing them, ability to timely restoration of availability and access to personal data in case of physical or technical incident, regular testing process, assessment and evaluation of the effectiveness of technical and organizational measures in order to ensure the security of the processing .

V. LEGAL DEFINITIONS
"PERSONAL DATA" - any information relating to an identified natural person or natural person who
can be identified ("data subject"). An identifiable natural person,
is a person who can be identified, directly or indirectly, in particular by name, identification
number, location data, online identifier, or one or more of the attributes specific to
physical, physiological, genetic, mental, mental, economic, cultural or social
identity of that individual.
 "PROCESSING" means any operation or set of operations performed with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or changing, retrieving, consulting, using, disclosing through transmission, distribution or other means by which data becomes available, arranged or combined, restricted, deleted or destroyed.
"ADMINISTRATOR" - a natural or legal person, a public body, an agency or other body which alone
or together with others, determine the purposes and means of processing personal data.
 "SUPERVISORY AUTHORITY" - an independent public authority set up by a Member State.


A series of data is collected in an automated module from BAZA BG LTD. - baza.bg, such as the Internet Protocol (IP) address used to connect the computer to the Internet; login; e-mail address; password; information about your computer and connection methods, such as the type of browser and operating system version; Data that is sometimes combined with similar information collected by other clients in order to create features such as "Best Selling," Uniform Resource Locator (full time) (including date and time), cookie count; visualized or searched products.
Also, BAZA BG LTD. - baza.bg may use browser data such as cookies, Flash cookies or other similar data collected through certain parts of the SITE to prevent fraud and other purposes.
When you visit the site and use our products or visit a website where BAZA BG LTD - baza.bg publishes advertisements, content or analyzes, BAZA BG LTD - baza.bg may place a cookie in your web browser. A cookie module is a low amount of stored information on the computer in order to identify the browser while interacting with websites. Cookies can be used to store items such as identifiers or user preferences. A web site may put a cookie to be stored in the browser if the browser settings allow it. A browser can allow a particular website to access cookies and refuse access to other sites.
If you do not wish to receive advertising from BAZA BG LTD - baza.bg or you are not a subscriber to receive offers for selected products from BAZA BG LTD - baza.bg, please visit the subscription refusal page.
In order to properly provide the goods / services, your personal data can be provided to our trusted business partners (eg for transport and delivery, contribution payments, insurance, sales and opinion forming, marketing).
Orders will be anonymized, will not be deleted.
At the expiration of the statutory period (eg for tax and accounting purposes - 6 years (2,190 days)) for the storage of personal data, they are anonymized (replaced) irrevocably with the letter GDPR-DD-MM-YYYY. Only the country, district, city, and zip code fields for customers and orders are retained as they do not identify any specific person.
Example:
Order No. 08855 with recipient John Smith, email: john@smith.com to address: Sofia, 1, Primerna Str., PC: 1000; IP address: 123.456.789.111
will be anonymized to the type:
Order No. 08855 with recipient GDPR-01-06-2018, email: GDPR-18-05-2018 to address Sofia, GDPR-18-05-2018, PC: 1000; IP Address: - - - -
Personal information is deleted, but all remaining information in the orders is retained: date, amount, exactly which items have been ordered.
 In this way, our reports will continue to work properly and we will have a history of your orders. Unlike other systems where all data is deleted, we save as much of your data as possible, removing only personal data.

6. Cookies:
The site of BAZA BG LTD - baza.bg uses cookies that are important for its correct operation. By visiting our site, you accept the use of cookies.
Reason for collecting, processing and storing your personal data
Types of cookies we use:
- Required cookies
These cookies are required for the correct operation of the website. For example, with these cookies, we show you the information on our site in the correct language, and the prices - in terms of currency and VAT for that country. Such cookies are also the ones to include caching and more.
- Functional cookies
These cookies allow you to use the full functionality of our site, watch the video in it, write us chat, and remember the preferred language on which to load the information on our site.
You can make the cookie settings you get from our site in the browser you are using. Keep in mind that if you restrict certain types of cookies, our site may not work properly and you can not use its full functionality.
Data available to the SITE, such as: updated information about recent orders, personal identification information (including name, email address, password, communication preference, advertising preference, Adress Book), suggestions (including recent product history, site interaction before confirming an order, as well as preferences).
By registering on the website of BAZA BG LTD. - baza.bg, ordering and completing forms with personal data, the users / clients declare that they agree that all their personal data should be included in the database of BAZA BG LTD. - baza.bg site and expressly and unambiguously agree that their personal data may be stored and used on the website of BAZA BG LTD. - baza.bg and by partners under a contract for marketing activities, when participating in competitions, promotions, when sending non-commercial or administrative messages (Proc site administration, administration, etc.), necessary internal statistics to improve the service quality and image of the SITE, and to create new features, features, promotions, market research, and track sales data;
BAZA BG LTD - baza.bg may disclose this information to its Distributors and Agents, under terms of confidentiality agreements, but without restrictions on processing and executing orders, delivering orders, analyzing data and information, providing Marketing Assistance , e-mail or SMS reporting, sales studies and analyzes, credit card payments. These providers may have access to the personal data they need to fulfill their obligations.
BAZA BG LTD - baza.bg will disclose your account information and other personal data when explicitly instructed by law or to protect its rights, property, and security. This includes exchanging information with other companies and organizations to prevent fraud. Of course, this does not include the sale, sharing or otherwise disclosure of personal data for commercial purposes other than those specified.
I know I can withdraw my consent at any time.
I am aware that the withdrawal of my consent will not later affect the lawfulness of the processing based on the consent I have now given.
I am informed that I have the right to be informed of the data I collect, the right of access to them, to request my data to be corrected or deleted, to request that my data be restricted and to object to a particular way of processing the personal my data.