“Integra-A” EOOD respects the privacy of its customers and guarantees the maximum degree of security and protection of personal data, in accordance with the requirements of the Personal Data Protection Act and the regulations, directives and regulations applicable to it, processed during online shopping at our website: integra-a.bg
Please read this document carefully. It contains a Policy for the protection of personal data of natural persons – end users. If you do not agree with the terms, you may not use the site. If the Policy changes, the changes will be posted here.
This Personal Data Privacy Policy is prepared on the basis of the legislation in force in the Republic of Bulgaria for the protection of personal data. When processing personal data, “Integra-A” EOOD complies with all applicable regulations on the protection of personal data, including Regulation 2016/679 EU.
According to the provisions of Regulation 2016/679 EU, personal data is any information that relates to you and by which you can be identified. Processing of personal data, according to the Personal Data Protection Act, is considered: “Processing of personal data” is any action or set of actions that can be carried out in relation to personal data by automatic or other means, such as collection, recording , organizing, storing, adapting or modifying, restoring, consulting, using, disclosing by transmission, distribution, making available, updating or combining, blocking, deleting or destroying.
I. Groups of persons for whom data is collected: In connection with the possibility of online ordering on our website integra-a.bg, “Integra-A” EOOD processes information about the following data subjects: 1. persons who are users of the site with registration, as users. 2. persons who use the site without registration. 3. persons who have sent inquiries (including by calling) and correspondence addressed to “Integra-A” EOOD. 4. persons whose information is contained in inquiries and correspondence addressed to “Integra-A” EOOD.
You decide whether and how to use the Online Shopping Service provided through our website. In the forms through which personal data is entered, we clearly indicate the mandatory or voluntary nature of providing the data. The data, the filling of which is mandatory, are those without which it is impossible to provide the relevant Service or part of it.
II. Who processes your personal data “Integra-A” EOOD is a limited liability company, registered in the Commercial Register at the Registration Agency with EIK 831601754, which collects and processes your personal data under the terms of this Privacy Policy.
Integra-A EOOD is a personal data controller within the meaning of the Personal Data Protection Act (PPA). You can contact us at our management address:
III. What data, for what purposes and on what legal basis do we process Depending on the specific goals and grounds, “Integra-A” EOOD processes the following data independently: Data voluntarily provided by you, necessary for us to identify and fulfill the delivery of your order for a specific item from our online shopping platform.
Such data are: – Name and surname, delivery address, contact telephone number, e-mail address. – Data from a profile created on our website – username, request/order history. – Data collected when payment is made to “Integra-A” EOOD, in the manner specified in the rules for online shopping at integra-a.bg
IV. Purposes and legal grounds for processing personal data: Data processing that is necessary to achieve the purposes of online commerce: – Customer identification when: registering as a new user on our website, fulfilling orders to purchase an item through the online platform. – Updating your personal data or information about your purchases. – Technical assistance to create an account/s and recover a forgotten password to access our website.
In fulfillment of its legal obligations, “Integra-A” EOOD processes your data for the following purposes: “Integra-A” EOOD processes the relevant personal data provided with the express consent of the subject of personal data for their processing for the following purposes: – Carrying out online trade through our website.
“Integra-A” EOOD does not provide your personal data to third parties. The personal data you provide is only and solely for the purpose of carrying out an order made by you from our online store and delivering it to you as a guarantor. After achieving the final result/receiving the goods you ordered/, “Integra-A” EOOD does not save your data, unless you register as our “customer” and voluntarily give your consent to save your data.
In case of storage of personal data, they are stored by an accounting firm authorized for this, which is responsible for them. The company “Integra-A” EOOD does NOT oblige anyone to provide personal data when ordering online. Giving them is completely voluntary.
According to the provisions of Art. 28a and Art. 34b of the Personal Data Protection Act You, as a subject of personal data, have the following rights: Art. 28a. (New – SG No. 103 of 2005) The natural person has the right at any time to request the administrator to: 1. delete, correct or block his personal data, the processing of which does not meet the requirements of this law; 2. notify the third parties to whom his personal data were disclosed of any deletion, correction or blocking carried out in accordance with item 1, except for cases where this is impossible or involves excessive efforts.
Art. 29. (1) (Amended – SG No. 103 of 2005) The right of access under Art. 26 and the rights under Art. 28a are carried out with a written application to the personal data administrator. (2) (Amended – SG No. 103 of 2005, amended – SG No. 85 of 2017) An application may be submitted and electronically signed with an advanced electronic signature, an advanced electronic signature based of a qualified certificate for electronic signatures, or a qualified electronic signature, according to the requirements of Regulation (EU) No. 910/2014 of the European Parliament and of the Council of July 23, 2014 on electronic identification and authentication services in electronic transactions on the internal market and for cancellation of Directive 1999/93/EC (OB, L 257/73 of August 28, 2014) and of the Electronic Document and Electronic Authentication Services Act. (3) (Amended – SG No. 103 of 2005) The application under para. 1 is addressed personally by the individual or by a person expressly authorized by him through a notarized power of attorney. (4) (Repealed – SG No. 103 of 2005)
Art. 30. (Amended – SG No. 103 of 2005) (1) The application under Art. 29 contains: 1. name, address and other identification data of the relevant natural person; 2. description of the request; 3. preferred form for providing the information under Art. 28, para. 1; 4. signature, date of submission of the application and address for correspondence. (2) When an application is submitted by an authorized person, the notarized power of attorney shall be attached to the application. (3) Applications under Art. 29 are entered in a register by the administrator.
Art. 31. (1) (Amended – SG No. 103 of 2005) The information under Art. 28, para. 1 may be provided in the form of an oral or written reference or a review of the data by the relevant individual or by another person expressly authorized by him. (2) The natural person may request a copy of the processed personal data on a preferred medium or provision by electronic means, except in cases where this is prohibited by law. (3) (Amended – SG No. 103 of 2005) The administrator of personal data is obliged to comply with the form of providing the information preferred by the applicant under Art. 28, para. 1.
Art. 32. (Amended – SG No. 103 of 2005) (1) In the cases under Art. 28, para. 1 the administrator of personal data or a person expressly authorized by him examines the application under Art. 29 and is pronounced within 14 days of its submission. (2) (Supplement – SG No. 81 of 2016, in force from 14.10.2016) The term under para. 1 may be extended by the administrator or by an official expressly authorized by him up to 30 days in the cases under Art. 28, para. 1, items 1 and 2, when a longer term is objectively required for the collection of all requested data and this seriously complicates the activity of the administrator. (3) (Supplement – SG No. 81 of 2016, in force from 14.10.2016) Within 14 days, the administrator or an official expressly authorized by him shall make a decision on the provision of full or partial information under Art. . 28, para. 1 of the applicant or motivatedly refuses the provision?. (4) (Supplement – SG No. 81 of 2016, in force from 14.10.2016) In the cases under Art. 28a, item 1, the administrator or an official expressly authorized by him shall make a decision and perform the relevant action within 14 days of submitting the application under Art. 29 or motivatedly refuses to perform it. (5) (Supplement – SG No. 81 of 2016, in force from 14.10.2016) In the cases under Art. 28a, item 2, the administrator of personal data or an official expressly authorized by him makes a decision within 14 days and immediately notifies the third parties or refuses to notify with reason.
Art. 33. (1) (Amended – SG No. 103 of 2005, supplemented – SG No. 81 of 2016, in force from 14.10.2016) The administrator of personal data or expressly authorized by him official notifies the applicant in writing of the decision or refusal under Art. 32, para. 3 – 5 in the relevant term. (2) The notification under para. 1 is in person against signature or by mail with return receipt. (3) (New – SG No. 103 of 2005) The lack of notification under para. 1 is considered a waiver.
Art. 34. (1) (Amended – SG No. 103 of 2005) The administrator refuses access to personal data when they do not exist or their provision is prohibited by law. (2) (Repealed – SG No. 103 of 2005) (3) (New – SG No. 93 of 2004, amended – SG No. 103 of 2005, amended and supplemented – SG No. 91 of 2006) The administrator refuses in whole or in part provision of data to the person to whom they refer, when this would endanger the defense or national security or the protection of classified information and this is provided for in a special law. (4) (New – SG No. 81 of 2011) The administrator refuses full or partial provision of data obtained under Art. 1, para. 6, to the person to whom they refer, in cases where: 1. this would hinder the prevention or detection of crimes, the conduct of criminal proceedings or the execution of punishments; 2. this is necessary to protect: a) national security; b) public order; c) the person to whom the data refer. (5) (New – SG No. 81 of 2011) The administrator who has received data under Art. 1, para. 6, does not inform the person to whom the data refer, if this is expressly indicated by the data provider.
Art. 34a. (New – SG No. 103 of 2005) (1) The natural person to whom the data relates has the right to: 1. objected to the administrator against the processing of his personal data if there is a legal basis for this; when the objection is justified, the personal data of the individual concerned can no longer be processed; 2. object to the processing of his personal data for the purposes of direct marketing; 3. be notified before his personal data are disclosed for the first time to third parties or used on their behalf for the purposes of item 2, and he is given the opportunity to object to such disclosure or use. (2) The administrator shall notify the natural person of his rights under para. 1, items 2 and 3.
Art. 34b. (New – SG No. 103 of 2005) (1) The administrator’s decision is inadmissible when: 1. has legal or other significant consequences for the natural person, and 2. is based solely on automated processing of personal data intended to assess personal characteristics of the natural person.
(2) Paragraph 1 does not apply when the decision is: 1. taken during the conclusion or performance of a contract, provided that the request submitted by the relevant natural person for the conclusion or performance of the contract has been satisfied or that there are appropriate measures guaranteeing his legal interests; 2. regulated in a law, providing for measures to protect the legal interests of the person. (3) The natural person has the right to ask the administrator to review the decision taken in violation of para. 1.
By reading the privacy policy of personal data and your voluntary consent to the processing of personal data, through a declaration specially prepared for this, you declare your consent to provide the above data in order to fulfill the purposes of online trading.
Declaration I declare: I agree to Integra-A EOOD EOOD storing and processing my personal data, in accordance with the requirements of the Personal Data Protection Act in connection with the implementation of an online order made by me from the Integra-A electronic store platform Ltd.
I am familiar with: – The purpose and means of processing my personal data. – The voluntary nature of the provision of the data. – My right to access and correct the collected data. With this declaration, I declare my consent to the storage and processing of my personal data in compliance with the provisions of the Personal Data Protection Act.