POLICY FOR PROTECTION OF THE PERSONAL DATA PROVIDED BY NATURAL PERSONS - WEBSITE USERS AND CUSTOMERS OF COMET ELECTRONICS
Please read this document carefully. It contains our Policy for protection of the personal data provided by natural persons - website users (“The Policy”). If you disagree with the purposes and ways of storing and processing the data specified in the Policy, please do not use the Comet Electronics` website. Upon change in the Policy, the changes will be posted here.
Date of last update: 01 April 2020
POLICY FOR PROTECTION OF THE PERSONAL DATA PROVIDED BY NATURAL PERSONS - WEBSITE USERS AND CUSTOMERS OF COMET ELECTRONICS
In order to provide the services ("the Services") at www.comet.bg ("the Site"), Comet Electronics OOD ("Comet Electronics" / "We") with registered office: 47, Obikolna str., Sofia 1582, UIC: 205400139, processes data of individuals ("Data subjects" / "You") in accordance with this Policy.
In the processing of personal data, Comet Electronics complies with all applicable legal regulations on the protection of personal data, including but not limited to Regulation (EC) 2016/679 (the "Regulation").
According to the Regulation, personal data is any information that relates to you and through which you can be identified. Processing of personal data ("Processing") is any action or set of actions that can be performed on personal data by automatic or other means.
1. GROUPS OF PERSONS FOR WHICH DATA ARE PROCESSED
In relation to the services offered by Comet Electronics we process the following personal information about the data subjacts:
(а) natural persons, registered users of the Website;
(b) natural persons, non-registered users of the Website;
(c) natural persons who have made inquiries (including by calling), requests, signals, complaints or other correspondence to Comet Electronics;
(d) natural persons information for whom is present in inquiries (including by calling), requests, signals, complaints or other correspondence to Comet Electronics;
2. INFORMATION PROCESSED IN RALATION TO THE SERVICES PROVIDED
It is your own decision if and how you will use the Services provided through our Website. The forms through which personal data are entered clearly indicate the mandatory or voluntary nature of data provision. The data required to fill in are those without which we cannot provide the Service or any part of it.
2.1. Registration/Creating a user account. You are allowed to use part of our services only after registration. In order to create personal account the following data is required: a freely chosen identifier/user name, password, names for contact, e-mail. It is optional to enter telephone number for contact. Additional information (date, hour and IP address) about the registration and the Terms of Condition is also stored.
2.2. Data which is required for sales purposes and for issuing the required accounting documents.
During the process of providing services and sales transactions for which a document is issued (invoice, bill of goods, etc.)in particular, Comet Electronics is required to gather and process the minimum necessary information – client name, address, and in the cases when a natural person has a VAT registration – personal identification number (PIN).
2.3. Data provided for the purpose of receiving event invitations and advertisements
Comet Electronics can send invitations for future seminars and trainings, advertisements about new products and other information related to company activities to the e-mail provided by you.
2.4. Other types of data
It is possible for Comet Electronics to process other types of data related to you, in cases when you voluntarily give us such data through filling-up the respective forms on our Website, send us request etc.
2.5 Cookies
We use cookies for proper functioning of our Website. You can find the detailed information about the about the cookies used here.
3. PURPOSESS OF DATA PROCESSING
Comet Electronics collects, uses and processes the aforementioned information only for the purposes described in this Policy, which can include:
- Purposes related to execution of contracts between You and Comet Electronics;
- Purposes for which You have given your explicit consent;
- Purposes necessary for compliance with the legal obligations of Comet Electronics.
Contract conclusion and execution
These are the purposes required for the steps to sign and execute the contract between You and Comet Electronics, including the data processing required for the registration, account creation, and service provision of the Services available through the Site. In addition these purposes include the communication between Comet Electronics and You. Only a part of the data listed in the categories above or data of all the categories may be processed for the purposes of contract execution.
Legitimate interest
These are purposes related to the legitimate interests of Comet Electronics and / or third parties such as other users etc. These purposes include:
- To ensure the proper functioning and use of the Site by you and other users, support and administration of the Services, dispute resolution, identification and prevention of malicious actions.
- To find and resolve different technical or functionality issues, Service upgrade and development.
- Communicate with You, including by e-mail or other electronic channels, on important matters related to the Services.
- Acceptance and processing of received signals, requests and other correspondence;
- To protect the rights and legitimate interests of Comet Electronics including in court and to assist protection of the rights and legitimate interests of other users of the Site and / or third parties concerned.
Only a part of the data listed in the categories above or data of all the categories may be processed for the purposes required by the legitimate interest.
Legal obligations
The purposes related to compliance with the legal obligations of Comet Electronics include: fulfillment of the obligations stipulated by law for retaining or providing information upon receipt of the relevant order by competent state or judicial authorities, providing the opportunity for exercising the control powers of the competent state authorities, in fulfilling the legal obligations of Comet Electronics to inform you about various circumstances related to Your rights, the Services provided or the protection of Your data, etc. Only a part of the data listed in the categories above or data of all the categories may be required to be processed for these purposes.
Explicit consent
Your data may be processed on the basis of your explicit consent, the processing in this case being specific and to the extent and scope provided for in that consent. An example of such data processing is your consent and the explicit desire to register in seminars organized by Comet Electronics.
4. DATA RETENTION PERIOD
Here you can find information about how long the different types of data will be stored. When storing data, We apply the general principle of data storage in a minimum volume and for a period not longer than necessary for the provision of the Services, ensuring their security and reliability and the requirements of the law.
| Data type | Data retention period | Explanation |
| The registration information required to create a user profile in the Comet Electronics online store (name, correspondence address, telephone, e-mail) | 10 years – when a purchase is made through the online store | This information is required to provide our sales service and delivery of electronic components at the address specified by the customer. |
| Data provided during the sale necessary for its accounting registration | 10 years | According to legal requirements |
| Subscription data for receiving messages for promotional events and Ads (Name; Email; Phone) | Until the User sends opt out request | Comet Electronics may send emails for upcoming seminars, promotional events and advertisements to the email you specify, and you can opt out of receiving them at any time. |
| Cookies | In accordance with the terms specified in the “Policy for use of cookies” | For detailed description of the cookies used, see “Policy for use of cookies” |
In the event of a legal dispute or proceeding requiring the retention of data and / or a request from a competent public authority, a retention of data for longer than the specified periods may be required until the final conclusion of the dispute or proceeding at all responsible institutions. These deadlines may be modified if a different requirement to retain information is established in accordance with the legislation in force.
Backup. In order to ensure the reliability of the Services and to prevent data loss for technical reasons, the Site utilizes a data backup policy. The maximum update period (including data deletion) of all backups is 30 days.
5. PROVIDING INFORMATION
Comet Electronics does not disclose your personal information to third parties in any way other than as described in this Policy and as provided by law.
5.1. Suppliers and subcontractors
COMET ELECTRONICS uses subcontractors to maintain its IT infrastructure as well as external accounting services. When working with subcontractors and suppliers, COMET ELECTRONICS requires that they strictly adhere to our instructions in accordance with this Policy and our internal rules.
5.2. Third parties
Your personal data may only be disclosed to third parties in the following cases: when required by law; if duly requested by a competent state or judicial authority; when we have received your explicit consent to do so; where necessary to protect the rights and legitimate interests of COMET ELECTRONICS and / or other users of the Services.
5.3. Change of ownership
In the event of a merger, acquisition or sale of assets affecting the processing of personal data, You will be notified in advance.
6. PERSONAL DATA RIGHTS
The Regulation provides for the following rights:
6.1. Right of information
This Policy is intended to inform you in detail about the processing of your personal data in connection with the Services provided.
6.2. Right of access
You have the right to receive confirmation that your personal data is processed, accesse to it and information about its processing and your rights in this respect.
You can obtain such information by contacting us and sending request using the contact information listed at the end of this policy.
6.3. Right of correction.
You have the right to correct your personal data if it is incomplete or inaccurate.
You have the opportunity to correct your data at any time through your account (in case you have a registration in the Comet Electronics online store) or by submitting correct information at the coordinates indicated at the end of this Policy.
6.4. Right of data deletion
You have the right to request the deletion of data, except when there is a substantial reason and / or legal obligation to process it.
Deletion of user account
If you wish, you can delete your account at any time by sending an email to [email protected]
Deletion of data after the statutory period has expired
The data that we keep with respect to the legal requirements for the documents accompanying the sales contracts are stored for a period of 10 years according to the Accountancy Law and the Social Insurance Code. After this period, the personal data of the individual customers are deleted.
Important: Please be informed that when you delete your account, the history of all your purchases and documents will be permanently deleted.
6.5. Right to restrict data processing.
The Regulation provides for the possibility to restrict the processing of your personal data if there are grounds for doing so.
6.6. Right to notify third parties
If applicable, you have the right to ask the Data Administrator to notify third parties when he has provided your data regarding the correction, deletion or restriction of the processing of your personal data.
6.7. Right of Data portability
You have the right to obtain the personal data you have provided that is relevant to you in a structured, popular, machine-readable format and to use that information for another data administrator at your discretion.
6.8. The right not to be subject to a decision based solely on automated processing, including profiling, which has legal consequences for you or similarly significantly affects you, unless the grounds provided for in the applicable personal data protection law exist and appropriate safeguards are in place to protect your rights, freedoms and legitimate interests.
Important: Comet Electronics does not use any techniques for automated data processing of your personal data or automated profiling for marketing purposes.
6.9. Right to withdraw consent.
You have the right to withdraw, at any time your consent of processing personal data based on your consent. Such withdrawal shall not affect the lawfulness of the processing on the basis of the consent given until such withdrawal.
For services such as email ad subscriptions, subscription based on your wish (consent), there is a possibility to cancel the subscription at any time (withdrawal of consent) by opening some of the received messages and selecting the option to cancel subscription at the bottom of the message (opt-out).
6.10. Right to object.
You have the right to object on processing of personal data processed on the basis of legitimate interest.
In the event of such an objection, we will consider your request and if warranted, we will comply with it. If we believe that there are compelling legal grounds for processing, or that it is necessary to establish, pursue, or defend legal claims, we will inform you.
6.11. Right of appeal to a supervisory authority.
You have the right to file a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the applicable data protection legislation. The Supervisory Authority in the Republic of Bulgaria is the Commission for Personal Data Protection, with address: bul. “Prof. Tsvetan Lazarov ” № 2, 1592 Sofia.
7. ACCURACY OF THE INFORMATION
COMET ELECTRONICS is not responsible for the accuracy of the information you provide, does not carry out checks in this sense and does not guarantee the true identity of the individuals who provided the data. In all cases of suspected fraud and / or misuse, please notify us immediately. You agree that when providing any information on the Site, you do not violate the rights of others in connection with the protection of their personal data or their other rights.
8. CONTACT INFORMATION FOR ANY QUESTIONS AND REQUESTS REGARDING PEROSNAL DATA PROTECTION
Questions and requests regarding the exercise of the rights of protection of your personal data can be sent to the following coordinates:
Address: 47 Obikolna str., Druzhba dist., 1582 Sofia
Email: [email protected]