PRIVACY POLICY AND PERSONAL DATA PROTECTION
of
The Drift Kart Company Ltd
I. General information regarding the collection of personal data.
This policy aims to inform you about the collection and processing of personal data when using our website http://www.thedriftkarts.com, the software applications and products developed by us, managed by us or by third parties.
Personal data is all data that relates to you personally, such as name, address, telephone number, email address, user behavior.
II. Personal data administrator.
Administrator, pursuant to Article 4, paragraph 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Regulation) is:
The Drift Kart Company” OOD, UIC 208248526, with its registered office and management address in Shumen, Khan Presiyan str. 9
Data Protection Officer: Mihail Plamenov Dobrev, with contacts: Shumen, Khan Presiyan str. 9, email address office@thedriftkarts.com, phone number +359898563077
III. What personal data do we collect?
For individuals, clients of the Company, personal data is collected that is necessary to carry out the sale of the goods and services provided by us, as follows:
a) Name, delivery address, telephone, email;
b) data collected when making a payment to us - credit or debit card number, bank account and other information collected and processed in connection with making a payment by bank transfer, via a virtual POS on the site or via bank transfer;
c) technical data, during the use of the site http://www.thedriftkarts.com, e.g.: IP address /when requesting through the site/, activity data /when requesting through the site/ - time and date of submitting the request, acceptance of the Security Policy, etc.
d) Cookies – to identify your browser or device.
In some cases, the personal data we process may not be sufficient to determine which person it refers to – for example, email data, data about visits to our website. We apply the same standards of protection to this data as we do to all others, but in order to exercise your rights under Section V of this policy in relation to such data, you will need to assist us in identifying you.
Contact information with legal entities – business name, contact address, office telephone numbers and email addresses, etc. – is not personal data, as the rules under Section VI of this policy do not apply to this data.
We need your personal data to be able to sell our goods and services. Within the framework of our work, no automated decisions are made regarding you as our customers and when processing your personal data, based solely on automated processing, including profiling and/or such decisions that produce legal effects or significantly affect the data subject.
IV. For what purposes and for what period do we process personal data?
We process your personal data for the following purposes:
1. In connection with the services we provide.
We need your personal data to identify you as a customer so that we can conclude a contract with you for the sale of our goods and services.
Only in cases where we have your explicit consent will we be able to use this data for the purposes of processing – Art. 6, par. 1, b "a" of the General Data Protection Regulation. For example, for marketing purposes.
Consent to the processing of your personal data is provided by checking a button on the website "http://www.thedriftkarts.com", which indicates that you are familiar with these rules, including for receiving marketing messages and notifications.
For this purpose, we will process your personal data for the period of your purchase of our goods and/or services, and we will store them for a period of 5 years in order to guarantee the quality of the goods and services provided by us. If we provide you with additional goods and/or services within this period, the 5-year period for deleting your personal data will run from the last sale of goods and/or services by us.
2. To fulfill legal obligations.
In the performance of their official duties - by order of the law - to be provided to state institutions / NRA, judicial authorities, police, etc. /.
Fulfillment of obligations stipulated by law to retain or provide information in view of the company's tax obligations to the state (for example, pursuant to the Tourism Act, the Accountancy Act and other tax laws - VAT Act, Personal Income Tax Act, CPC Act, DOPK, etc.).
3. For the purposes of organizing work and order in the Company and for the protection of the Company.
The personal data collected may also be used in connection with the organization of our work, the protection of our personnel and our rights and legitimate interests. In this regard, the data will only be used when necessary.
4. For the purposes of presenting our services and for marketing purposes.
We may use your personal data and specifically the recorded telephone and e-mail address to provide you with information about our goods and services, organized events, to present you with our newsletter or promotional brochure. We are required to have your explicit consent for such use. You may withdraw your consent at any time and we will immediately stop using your personal data for the stated purposes.
V. Categories of third parties who access and process your personal data.
In connection with the implementation of our activities and the fulfillment of our contractual commitments with our clients, we provide your data to the following groups of "recipients", namely:
- to the data subject - whenever they exercise this right;
- the users/clients to whom the data relates;
- to shipping companies - to deliver goods and/or services ordered by you. In these cases, the data that is in the process of being processed or is intended to be processed after its transmission is transmitted to the forwarder solely on a contractual basis and for the purposes of fulfilling the delivery.
- payment service providers for online payments via credit cards;
- IT companies supporting information systems, websites, software, etc.;
- public authorities (NRA, Consumer Protection Commission, Personal Data Protection Commission and other control bodies);
- Other personal data administrators to whom the Administrator provides your personal data on a legal and/or contractual basis.
It may be required – by law, in the event of a lawsuit and/or at the request of public and governmental authorities in or outside your country of residence, as well as for purposes of national security, law enforcement, or other issues of public importance, we may disclose your personal data when such disclosure is necessary or appropriate.
We may also disclose information about you if we determine that such disclosure is justified and necessary for the enforcement of our company terms and conditions, or to protect our activities, legitimate interests, and the rights and legitimate interests of other users. Additionally, in the event of a reorganization, merger or sale, we may transfer any and all collected data to the applicable third-party successor.
VI. What are your rights, as individuals, in relation to your personal data processed by us?
The General Data Protection Regulation provides the following rights of individuals in relation to the processing of their personal data:
- right of access to personal data related to the person, which are processed by the administrator;
- right to correct inaccurate or incomplete personal data;
- right to erasure /"right to be forgotten"/ of personal data that is processed unlawfully or on an invalid legal basis /expired storage period, withdrawn consent, fulfilled initial purpose for which they were collected, etc./;
- right to restrict processing in the event of a legal dispute between the controller and an individual until its resolution and/or for the establishment, exercise or defense of legal claims;
- the right to data portability, where personal data are processed by automated means on the basis of consent or a contract. For this purpose, the data shall be transmitted in a structured, commonly used and machine-readable format;
- the right to object at any time and on grounds relating to the person's particular situation, provided that there are no compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or legal proceedings;
- the right of the data subject not to be subject to a fully automated decision, including profiling, which produces legal effects concerning him or her or significantly affects him or her.
To exercise any of the above rights, please send us a request in free text to the following e-mail (electronic address): office@thedriftkarts.com.
Please note that we may ask you for specific information to help us verify your identity and honor your right to access information or any of your other rights. The purpose of this additional security measure is to ensure that your personal data will not be disclosed to persons who are not entitled to receive it. The exercise of the above rights does not require the payment of a fee by you. However, we may charge a reasonable administrative fee if your request for access is manifestly unfounded or if the requests are repetitive or excessive.
Your request will be considered within 1 /one/ month. If we have difficulties in fulfilling your request, this period may be extended by up to 2 /two/ months, and we undertake to notify you of this extension within 1 /one/ month of receiving your request.
Your request may be rejected in the following cases:
- If we cannot identify you;
- If we do not process your personal data;
- If there is a legal obstacle to its execution;
- If we have a legitimate interest that is significant enough to reject your request.
Notwithstanding the above, you can at any time request information about how we store your personal data.
VII. Who is the authority to which you can file a complaint?
If you believe that we are violating your rights, you can file a complaint with the Personal Data Protection Commission, which supervises our processing of personal data.
Personal Data Protection Commission
Address: Sofia, p.k. 1592, 2 Prof. Tsvetan Lazarov Blvd.
Information and Contact Center - tel. 02/915 35 18
Reception - working hours 9:00 - 17:30
E-mail: kzld@cpdp.bg ; Website: www.cpdp.bg
You may appeal actions and acts of the personal data controller in court before the relevant Administrative Court or the Supreme Administrative Court under the general rules of jurisdiction.
VIII. Cookies.
What are cookies, how and what types of cookies are used on the website http://www.thedriftkarts.com of “The Drift Kart Company” Ltd., UIC: 208248526, as well as how you can manage the use of these cookies, how to disable/block them, can be found at the link Cookie Policy, where you will find our Cookie Policy.
Personal information that is accumulated through cookies can only be used to perform certain operations for the user. Such information is encrypted in a way that makes access to it by unauthorized persons impossible.
IX. Updating the privacy policy.
This Privacy Policy may be updated in the future. The new policy will be posted on this website and will indicate the date on which we updated it. It will be effective from the date of publication on the website. Therefore, we recommend that you periodically check our website to be aware of our current Privacy Policy, as well as any changes that may have been made to it. Your use of this website after the posting of the updated Privacy Policy will be deemed to indicate your agreement to the changes made.
This document constitutes a privacy notice within the meaning of Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).