PRIVACY POLICY
As of May 25, 2018, a General Data Protection Regulation
(GDPR) is being implemented in Bulgaria. It is endorsed by the European Union
and aims to harmonize EU member states' policies regarding the collection and
use of personal data. Its purpose is to guarantee our right to privacy, to
protect our personal data, to give more security against misuse to each of us.
This Privacy Policy is intended to inform you and explain
what personal information we collect and why, how and for what we use it, the
conditions under which we share it with third parties and for what purpose, the
conditions for their storage and the security measures applied.
BUYRUN GROUP Ltd's security policy may be modified and
updated to reflect any changes to the way we process your personal data or
changes to your legal requirements.
Who are we?
The administrator of your personal information is BUYRUN
GROUP Ltd with registered office and headquarters in Sofia 1505, district of
Poduyane, j.k. Suhata Reka, block 4, entr. B, floor 6, apt. 16, with UIC
205630453.
Contact
the administrator at: info@buy.run
or +90
224 532 0203
What data do we collect?
When you sign up to use our Services, we may collect the
following information about you: your names, address, e-mail, your mobile
phone. You can also add additional information such as details about your
credit or debit card. We also collect information about the IP address of your
device, time zone, and operating system.
In cases where we need to issue certain documents, such
as an invoice, you may be asked to provide additional information as required
by the regulations.
For what purposes do we handle your personal data?
Your personal data is used for the following purposes:
Provision of services from buy.run in your favor
-
create and manage a platform account
-
processing orders to Sellers
-
solving problems with orders and purchased goods
-
return of products in accordance with legal provisions
- reimbursement
of product’s values according to legal provisions
-
assistance, including answering your questions regarding your orders or
products of Sellers on the online platform
Marketing goals
We would like you to always be informed about the best
product offers you are interested in. In this regard, we may send you any type
of message, via email channels, which contain general and thematic information,
information on similar products or products that supplement the products
purchased or viewed by you. In order to provide you with information that is of
interest to you, we may use certain information about your behavior as a buyer
(for example, products viewed and/or purchased) to create your profile. We
always guarantee that this processing is carried out in compliance with your
rights.
We require your prior consent to send you marketing
messages. You can change your mind and withdraw your consent at any time.
Terms of storage of your data
We store your personal information while you have a buy.run account, you can always
ask us to delete certain information or close your account and we will fulfill
this request by retaining certain information, even after closing the account,
but only where applicable law requires it or legitimate interests require it
and applicable law allows it.
To
whom do we send your personal data?
As appropriate, we
may send/provide or give access to some of your personal information to the
following categories of recipients:
- partners in the buy.run marketing platform
- courier service providers;
- payment / banking service providers;
- marketing service providers;
- market research service providers;
- IT service providers;
In cases where buy.run
has an obligation to disclose personal information under the law, or if it is
necessary to protect its legitimate interests, we may disclose certain personal
information to state or municipal authorities.
Access to your personal data by private parties - third parties is allowed only in strict compliance with the legal provisions in the field of data protection and confidentiality of information, as well as on the basis of contracts concluded with them.
Protection
of your personal data
buy.run,
as a personal data administrator, takes safety measures including
administrative, technical and physical measures to protect your personal
information from loss, theft and misuse, as well as from unauthorized access,
disclosure, alteration or destruction.
What
are your rights as personal data subjects?
Right
of access to your personal data: You have the right to receive confirmation
from us whether your personal data are processed and, if so, access to personal
data and information.
Right to correct personal data
If
you find that the personal information about you we process is inaccurate, you
have the right to ask us to correct that personal data.
Right
to delete personal data (right to be forgotten)
In certain
circumstances, for example, if your personal data have been processed illegally
or you have withdrawn your consent (if the processing of personal data is based
on consent), you have the right to ask and have your personal data deleted by
us.
Right
to restrict processing
In certain
circumstances, such as if you doubt the accuracy of your personal data or have
objected to our legitimate purpose for processing your personal data, you have
the right to request that we restrict the processing of your personal data
until it is found a solution.
Right
to object to processing
In certain
circumstances, such as if you have doubts about our legitimate interest in
processing your personal data, you have the right to object to such processing
for reasons related to your particular situation.
Data
transfer right
If your personal data
is processed by automatic means at your consent or for the purpose of
fulfilling our contractual relationship, you have the right to request that we
provide your personal data in a machine-readable format for transfer to another
data controller.
Submitted requests
for personal data will be answered within one month but in case we need to
extend the deadline you will be informed of the extension as well as about the
reasons for the delay. We may refuse to process requests that are unreasonably
repeated or endanger the privacy of other users.
You also have the
right to file a complaint regarding the processing of your personal data by us
with the appropriate control body.
The controlling
authority is the Commission for Personal Data Protection:
2 Prof. Tsvetan
Lazarov Blvd., Sofia 1592
E-mail: : kzld@cpdp.bg
Website: www.cpdp.bg