Privacy Policy of Makro Special EOOD

Protecting personal data and safeguarding our customers’ personal and financial information is especially important to us. That is why we process your information solely on the basis of applicable law, specifically Regulation 2016/670 (better known as the GDPR), the Personal Data Protection Act (PDPA) and the Electronic Commerce Act (ECA). Please review this statement, in which we inform you of the most important aspects of the processing of your data by Makro Special EOOD (hereinafter We or the Company). In this statement we inform you of the most important aspects of the processing of your data on our website. With it we also inform you of the time limits and legal grounds on which we collect, process, store, use, destroy and protect your personal information, insofar as you have not given us your explicit consent to do so.

On what basis is your personal data processed?

We process Personal Information only when we have a legal basis for the processing, as follows:

• To perform our obligations under your employment contract with us (Article 6(1)(b) GDPR);
• For closely related purposes, such as payment processing and financial account management, contract management, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and compliance with the law;

We may also process your personal information for the purposes of our own legitimate interests or the legitimate interests of others, provided that the processing does not and will not infringe your rights and freedoms. In particular, we will process your personal information in order to:

• Protect you, us or others from threats (such as security threats or fraud);
• Carry out and control our business processes, for example for quality control, consolidated reporting and customer service;
• Recover information in the event of a disaster;
• Manage corporate transactions, such as mergers or acquisitions.

What happens to your data after you contact us?

When you write to us via the form on our website or send us an email, we store your data for the period necessary to process your request and to respond to any follow-up questions from you. We will not share this information with third parties without your explicit consent!

Storage of your data

Please note that, in order to facilitate the ordering and purchase process as well as the subsequent performance of the contract with you, we store your IP address, as well as your name, address, email address and details of the payment method you use, for example your credit card number. If you use a purchase on credit, the data from your identity card is obtained directly from the bank providing the credit. It is not processed or stored by Makro Special EOO.

The data you provide is needed for us to fulfil our pre-contractual or contractual obligations towards you. We do not disclose this data to third parties, except for the payment service provider processing the payment (UniCredit Bulbank), the courier company with which we deliver your purchase, our accountant, and Sky Prime EOOD, which is our data processor under the GDPR, and with which we have the relevant agreement.

For an incomplete order, we keep the data entered for it for 30 days and reserve the right to inform you periodically of its status and of your options as a result. For a completed order and a contract performed by us, on the basis of Article 6(1)(a) and (b) GDPR, we store all data relating to the legal relationship until the expiry of the 10-year period provided for in Article 12 of the Accountancy Act (AA).

Using the opt-out option („Opt-out“)

If for any reason you wish to opt out of the services we provide through the „cookies“ listed above, you must visit the „Exercise your rights!“ section of our website and follow the steps indicated there.

Newsletter (Newsletter)

You can subscribe to our newsletter by completing the form on our website. For this purpose we need your email address and your consent for us to send you the relevant messages.

After you register for our newsletter/mailing, we will send you a confirmation message with a link that you can use to confirm your registration.

You may unsubscribe from our newsletter at any time. Please send your cancellation to the following email address: office@friendsoptics.com or use the „unsubscribe me“ button. Immediately afterwards we will erase your data in connection with the sending of our newsletter.

What are your rights as a data subject? 

Under the Regulation you have the right to:

1. Access to your personal data – you may request to receive your personal data that is being processed in an easily understandable form, together with appropriate and understandable information about its processing;
2. Rectification – if your data is inaccurate, you may request that it be corrected;
3. Erasure of personal data (the right „to be forgotten“) – you may submit a request for your personal data to be erased. Please note that this right is not absolute and may be limited in view of the performance of obligations provided for by law or a legitimate interest. In any event, if we process your data on the basis of your consent, we are obliged to erase or return the data upon withdrawal of your consent;
4. Restriction of processing – if you have contested the accuracy of your personal data or the lawfulness of its processing, or you need it to establish, exercise or defend legal claims, you may request that the processing of your data be restricted;
5. Portability of personal data between controllers – where processing is based on a contractual obligation or agreement and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format, as well as the right for your personal data to be provided to another personal data controller where this is technically feasible;
6. Objections to the processing of your personal data – you may object to the processing of your personal data if it is processed on the basis of our legitimate interest;
7. You have the right to prevent a decision being taken about you by us based on automated processing or profiling – we cannot and would not take decisions about your work based on automated processing of information or profiling;
8. Right to protection through judicial or administrative proceedings – if you consider your rights under the GDPR to have been infringed, you have the right to lodge a complaint with the competent administrative authority in the country where our legal entity is located, as indicated in point 9 below.

How can I protect my rights if I believe they have been infringed?

You have the right, granted by the GDPR, to lodge a complaint with the competent supervisory authority and before the competent courts of the Member States of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.

Commission for Personal Data Protection:

Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
GPS coordinates: N 42.668839 E 23.377495
Email: kzld@cpdp.bg 
Website: www.cpdp.bg

Contact us in one of the following ways:

Makro Special EOOD, contact details: 
Sliven (8800), Druzhba residential complex, bl. 22, ent. B, fl. 1, apt. 1, 0889 249 014, STOYAN MINCHEV STOYANOV
We may update this Privacy Policy periodically. You may check the Policy regularly to ensure that you are aware of the most current version. Any changes made will take effect on the „Date of amendment“ stated in the amended Privacy Policy.

PLEASE READ THIS PRIVACY STATEMENT CAREFULLY AND CHECK IT REGULARLY IN CASE OF CHANGES.