Privacy Policy of МАЛЛЕО ООД

Protecting personal data and safeguarding our customers’ personal and financial information is especially important to us. That is why we process your information solely on the basis of applicable law, specifically Regulation (EU) 2016/679 (better known as the GDPR), the Personal Data Protection Act (PDPA), and the Electronic Commerce Act (ECA). Please review this statement, in which we inform you of the most important aspects of the processing of your data by МАЛЛЕО ООД (hereinafter We or the Company). In this statement we inform you of the most important aspects of the processing of your data on our website. With it we also inform you of the periods and legal bases on which we collect, process, store, use, destroy, and protect your personal information, insofar as you have not given us your explicit consent to do so.

On what basis is your personal data processed?

We process Personal Information only when we have a legal basis for the processing, as follows:

• To perform our obligations under your employment contract with us (Article 6(1)(b) of the GDPR);
• For closely related purposes, such as payment processing and financial account management, contract management, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting, and compliance with the law;

We may also process your personal information for the purposes of our own legitimate interests or the legitimate interests of others, provided that the processing does not and will not infringe your rights and freedoms. In particular, we will process your personal information in order to:

• Protect you, us, or others from threats (such as security threats or fraud);
• Carry out and control our business processes, for example for quality control, consolidated reporting, and customer service;
• Restore information in the event of a disaster;
• Manage corporate transactions, such as mergers or acquisitions.

What happens to your data after you contact us?

When you write to us via the form on our website or send us an email, we store your data for the period necessary to process your request and to respond to any follow-up questions you may have. We will not share this information with third parties without your explicit consent!

Storage of your data

Please note that, in order to facilitate the ordering and purchase process as well as the subsequent performance of the contract with you, we store your IP address, as well as your name, address, email address, and details of the payment method you use, for example your credit card number. If you use a purchase on credit, the details of your identity card are obtained directly from the bank providing the credit. They are neither processed nor stored by МАЛЛЕО ООД.

The data you provide is needed for us to fulfill our pre-contractual or contractual obligations towards you. We do not provide this data to third parties, except for the payment service provider processing the payment (UniCredit Bulbank), the courier company with which we deliver your purchase, our accountant, and Sky Prime EOOD, who are our data processor under the GDPR, and with whom we have the relevant agreement.

For an incomplete order, we retain the data entered for it for 30 days and reserve the right to inform you periodically of its status and of your options as a result. For a completed order and a contract performed by us on the basis of Article 6(1)(a) and (b) of the GDPR, we store all data relating to the legal relationship until the expiry of the 10-year period provided for in Article 12 of the Accountancy Act (AA).

Using the opt-out option („Opt-out“)

If for any reason you wish to opt out of the services we provide through the aforementioned „cookies“, you must visit the „Exercise your rights!“ section of our website and follow the steps indicated there.

Newsletter (Newsletter)

You can subscribe to our newsletter by filling in the form on our website. For this purpose we need your email address and your consent for us to send you the relevant messages.

After you register for our newsletter/mailing, we will send you a confirmation message with a link you can use to confirm your registration.

You may unsubscribe from our newsletter at any time. Please send your cancellation to the following email address: office@friendsoptics.com or use the „unsubscribe“ button. Immediately thereafter we will erase your data in connection with the sending of our newsletter.

What are your rights as a data subject? 

Under the Regulation you have the right to:

1. Access to your personal data – you may request to receive your personal data that is being processed in an easily understandable form, together with appropriate and comprehensible information about its processing;
2. Rectification – if your data is inaccurate, you may request that it be corrected;
3. Erasure of personal data (the right „to be forgotten“) – you may submit a request for your personal data to be erased. Please note that this right is not absolute and may be limited with a view to fulfilling obligations provided for by law or a legitimate interest. In any event, if we process your data on the basis of your consent, we are obliged to erase or return the data upon withdrawal of your consent;
4. Restriction of processing – if you have objected to the accuracy of your personal data or the lawfulness of its processing, or you need it to establish, exercise, or defend legal claims, you may request that the processing of your data be restricted;
5. Portability of personal data between controllers – where processing is based on a contractual obligation or agreement and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, as well as the right for your personal data to be provided to another personal data controller where this is technically feasible;
6. Objection to the processing of your personal data – you may object to the processing of your personal data if it is processed on the basis of our legitimate interest;
7. You have the right to prevent a decision being taken about you by us based on automated processing or profiling – we cannot and would not take decisions about your work based on automated processing of information or profiling;
8. Right to protection through judicial or administrative proceedings – if you consider your rights under the GDPR to have been infringed, you have the right to lodge a complaint with the competent administrative authority in the country where our legal entity is located, as set out in point 9 below.

How can I protect my rights if I consider them to have been violated?

You have the right, granted by the GDPR, to lodge a complaint with the competent supervisory authority and before the competent courts of the Member States of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you is in breach of the provisions of the GDPR.

Commission for Personal Data Protection:

Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
GPS coordinates: N 42.668839 E 23.377495
Email: kzld@cpdp.bg 
Website: www.cpdp.bg

Contact us in one of the following ways:

МАЛЛЕО ООД, contact details: 
гр. София, р-н Витоша, бул."Братя Бъкстон" № 40, info@malleo.bg, 0883440739, Светослав Николов Николов.
We may periodically update this Privacy Policy. You may check the Policy regularly to ensure you are aware of the most up-to-date version. Any changes made will take effect on the „Date of amendment“ stated in the amended Privacy Policy.

PLEASE READ THIS PRIVACY STATEMENT CAREFULLY AND CHECK IT REGULARLY IN CASE OF CHANGES.