Privacy Policy
PRIVACY POLICY
As of May 25, 2018, a General Data Protection Regulation (GDPR) is being implemented in Bulgaria.
It is endorsed by the European Union and aims to harmonize EU member states' policies regarding the collection and use of personal data.
Its purpose
is to guarantee our right to privacy, to protect our personal data, to give
more security against misuse to each of us.
This
Privacy Policy is intended to inform you and explain what personal information
we collect and why, how and for what we use it, the conditions under which we share it with third parties and for what purpose, the conditions for their
storage and the security measures applied.
BUYRUN
GROUP Ltd's security policy may be modified and updated to reflect any changes
to the way, we process your personal data or changes to your legal requirements.
Who are we?
The administrator of your personal information is BUYRUN GROUP Ltd with registered
office and headquarters in Sofia 1505, district of Poduyane, j.k. Suhata Reka,
block 4, entr. B, floor 6, apt. 16, with UIC 205630453.
Contact
the administrator at buyrun.bg@gmail.com
or +90
224 532 0203 / +90 545 475 1717.
What data do we collect?
When you sign up to use our Services, we may collect the following information about you: your names, address, e-mail, your mobile phone.
You can also add additional information such as details about your credit or debit card.
We also
collect information about the IP address of your device, time zone, and
operating system.
In cases
where we need to issue certain documents, such as an invoice, you may be asked to
provide additional information as required by the regulations.
For what purposes do we handle your personal
data?
Your
personal data is used for the following purposes:
Provision of services from buy.run in your favor
- Create
and manage a platform account
- Processing orders to Sellers
- Solving
problems with orders and purchased goods
- Return
of products in accordance with legal provisions
- Reimbursement
of product’s values according to legal provisions
- Assistance, including answering your questions regarding your orders or
products of Sellers on the online platform
Marketing goals
We would like you to always be informed about the best product offers you are interested in. In this regard, we may send you any type of message, via email channels, which contain general and thematic information, information on similar products or products that supplement the products purchased or viewed by you. In order to provide you with information that is of interest to you, we may use certain information about your behavior as a buyer (for example, products viewed and/or purchased) to create your profile.
We always guarantee that this processing is
carried out in compliance with your rights.
We require your prior consent to send you marketing messages.
You can change your
mind and withdraw your consent at any time.
Terms of storage of your data
We store your
personal information while you have a buy.run account, you can always ask us to
delete certain information or close your account and we will fulfill this
request by retaining certain information, even after closing the account, but
only where applicable law requires it or legitimate interests require it and
applicable law allows it.
To
whom do we send your personal data?
As appropriate, we may send/provide or
give access to some of your personal information to the following categories of
recipients:
- Partners in the buy.run marketing platform
- Courier service providers;
- Payment/banking service providers;
- Marketing service providers;
- Market research service providers;
- IT service providers;
In cases where buy.run has an obligation to
disclose personal information under the law, or if it is necessary to protect
its legitimate interests, we may disclose certain personal information to state
or municipal authorities.
Access
to your personal data by private parties - third parties are allowed only in
strict compliance with the legal provisions in the field of data protection and
confidentiality of information, as well as on the basis of contracts concluded
with them.
Protection
of your personal data
buy.run, as a
personal data administrator takes safety measures including administrative,
technical and physical measures to protect your personal information from loss,
theft and misuse, as well as from unauthorized access, disclosure, alteration
or destruction.
What
are your rights as personal data subjects?
Right
of access to your personal data: You have the right to receive confirmation
from us whether your personal data are processed and, if so, access to personal
data and information.
Right to correct personal data
If you
find that the personal information about you we process is inaccurate, you have
the right to ask us to correct that personal data.
Right
to delete personal data (right to be forgotten)
In certain circumstances, for example, if
your personal data have been processed illegally or you have withdrawn your
consent (if the processing of personal data is based on consent), you have the
right to ask and have your personal data deleted by us.
Right
to restrict processing
In certain circumstances, such as if you
doubt the accuracy of your personal data or have objected to our legitimate the purpose for processing your personal data, you have the right to request that
we restrict the processing of your personal data until it is found a solution.
Right
to object to processing
In certain circumstances, such as if you
have doubts about our legitimate interest in processing your personal data, you
have the right to object to such processing for reasons related to your
particular situation.
Data
transfer right
If your personal data is processed by
automatic means at your consent or for the purpose of fulfilling our
contractual relationship, you have the right to request that we provide your
personal data in a machine-readable format for transfer to another data
controller.
Submitted requests for personal data will be answered within one month but in case we need to extend the deadline you will be informed of the extension as well as about the reasons for the delay.
We may
refuse to process requests that are unreasonably repetitive or endanger the privacy of other users.
You also have the right to file a
complaint regarding the processing of your personal data by us with the appropriate
control body.
The controlling authority is the Commission
for Personal Data Protection:
2 Prof. Tsvetan
Lazarov Blvd., Sofia 1592
E-mail: : kzld@cpdp.bg
Website: www.cpdp.bg