PRIVACY POLICY

As of May 25, 2018, a General Data Protection Regulation (GDPR) is being implemented in Bulgaria. It is endorsed by the European Union and aims to harmonize EU member states' policies regarding the collection and use of personal data. Its purpose is to guarantee our right to privacy, to protect our personal data, to give more security against misuse to each of us.

This Privacy Policy is intended to inform you and explain what personal information we collect and why, how and for what we use it, the conditions under which we share it with third parties and for what purpose, the conditions for their storage and the security measures applied.

BUYRUN GROUP Ltd's security policy may be modified and updated to reflect any changes to the way we process your personal data or changes to your legal requirements.

Who are we?

The administrator of your personal information is BUYRUN GROUP Ltd with registered office and headquarters in Sofia 1505, district of Poduyane, j.k. Suhata Reka, block 4, entr. B, floor 6, apt. 16, with UIC 205630453.

Contact the administrator at: info@buy.run

or +90 224 532 0203

What data do we collect?

When you sign up to use our Services, we may collect the following information about you: your names, address, e-mail, your mobile phone. You can also add additional information such as details about your credit or debit card. We also collect information about the IP address of your device, time zone, and operating system.

In cases where we need to issue certain documents, such as an invoice, you may be asked to provide additional information as required by the regulations.

For what purposes do we handle your personal data?

Your personal data is used for the following purposes:

Provision of services from buy.run in your favor

- create and manage a platform account

- processing orders to Sellers

- solving problems with orders and purchased goods

- return of products in accordance with legal provisions

- reimbursement of product’s values according to legal provisions

- assistance, including answering your questions regarding your orders or products of Sellers on the online platform

Marketing goals

We would like you to always be informed about the best product offers you are interested in. In this regard, we may send you any type of message, via email channels, which contain general and thematic information, information on similar products or products that supplement the products purchased or viewed by you. In order to provide you with information that is of interest to you, we may use certain information about your behavior as a buyer (for example, products viewed and/or purchased) to create your profile. We always guarantee that this processing is carried out in compliance with your rights.

We require your prior consent to send you marketing messages. You can change your mind and withdraw your consent at any time.

Terms of storage of your data

We store your personal information while you have a buy.run account, you can always ask us to delete certain information or close your account and we will fulfill this request by retaining certain information, even after closing the account, but only where applicable law requires it or legitimate interests require it and applicable law allows it.

To whom do we send your personal data?

As appropriate, we may send/provide or give access to some of your personal information to the following categories of recipients:

- partners in the buy.run marketing platform

- courier service providers;

- payment / banking service providers;

- marketing service providers;

- market research service providers;

- IT service providers;

In cases where buy.run has an obligation to disclose personal information under the law, or if it is necessary to protect its legitimate interests, we may disclose certain personal information to state or municipal authorities.

            Access to your personal data by private parties - third parties is allowed only in strict compliance with the legal provisions in the field of data protection and confidentiality of information, as well as on the basis of contracts concluded with them.

Protection of your personal data

buy.run, as a personal data administrator, takes safety measures including administrative, technical and physical measures to protect your personal information from loss, theft and misuse, as well as from unauthorized access, disclosure, alteration or destruction.

What are your rights as personal data subjects?

Right of access to your personal data: You have the right to receive confirmation from us whether your personal data are processed and, if so, access to personal data and information.

Right to correct personal data

If you find that the personal information about you we process is inaccurate, you have the right to ask us to correct that personal data.

Right to delete personal data (right to be forgotten)

In certain circumstances, for example, if your personal data have been processed illegally or you have withdrawn your consent (if the processing of personal data is based on consent), you have the right to ask and have your personal data deleted by us.

Right to restrict processing

In certain circumstances, such as if you doubt the accuracy of your personal data or have objected to our legitimate purpose for processing your personal data, you have the right to request that we restrict the processing of your personal data until it is found a solution.

Right to object to processing

In certain circumstances, such as if you have doubts about our legitimate interest in processing your personal data, you have the right to object to such processing for reasons related to your particular situation.

Data transfer right

If your personal data is processed by automatic means at your consent or for the purpose of fulfilling our contractual relationship, you have the right to request that we provide your personal data in a machine-readable format for transfer to another data controller.

Submitted requests for personal data will be answered within one month but in case we need to extend the deadline you will be informed of the extension as well as about the reasons for the delay. We may refuse to process requests that are unreasonably repeated or endanger the privacy of other users.

You also have the right to file a complaint regarding the processing of your personal data by us with the appropriate control body.

The controlling authority is the Commission for Personal Data Protection:

2 Prof. Tsvetan Lazarov Blvd., Sofia 1592

E-mail: : kzld@cpdp.bg

Website: www.cpdp.bg