Privacy Policy

1. General Provisions

The protection of personal data and the security of our customers' and visitors' information are of particular importance to us.

This Privacy Policy aims to inform you in a clear and accessible manner about what personal data we collect, why we process it, on what legal basis, for what period we store it, to whom it may be disclosed, and what rights you have in relation to its processing.

Personal data is processed in accordance with applicable legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Personal Data Protection Act, and applicable Bulgarian and European legislation.

2. Data Controller

The controller of the personal data processed through the online store https://pro9.bg/ is:

"AUTOMIX 2016" EOOD

UIC: 208492484

VAT No.: BG208492484

Registered office and management address:
Bulgaria, Gotse Delchev, 1 Pirin St.

E-mail:
Pro9bg@gmail.com

Phone:
0899909033

Website:
https://pro9.bg/

For all questions related to the processing of your personal data and the exercise of your rights, you can contact us using the contact details provided above.

3. What Personal Data We Process

Depending on how you use our online store, we may process the following categories of personal data:

first and last name;
delivery and/or billing address;
phone number;
email address;
IP address;
information related to placed orders and purchased products;
information about the chosen delivery method;
information about the chosen payment method;
data necessary for issuing an invoice when requested;
information provided via the contact form or email;
information related to the customer profile;
technical information regarding the device, browser, and use of the site;
information collected through cookies and similar technologies, where applicable and permitted by law.

We do not store the full details of bank cards used for payment through the online store.

4. For What Purposes and on What Basis We Process Your Personal Data

4.1. Order Processing and Fulfillment

We process the necessary personal data for the purpose of:

accepting and processing the order;
concluding and performing a purchase contract;
processing the payment;
delivering the purchased products;
communication regarding the order;
processing returns, complaints, and refunds.

The legal basis for this processing is taking steps at your request prior to entering into a contract and the performance of a contract pursuant to Art. 6, § 1, letter (b) of the GDPR.

4.2. Fulfillment of Legal Obligations

Certain personal data and documents may be processed and stored when necessary for the fulfillment of our legal obligations, including obligations under accounting, tax, and consumer legislation.

The legal basis is Art. 6, § 1, letter (c) of the GDPR – fulfillment of a legal obligation.

4.3. Inquiries and Customer Service

When you contact us via email, phone, contact form, or another provided channel, we process the information you have provided to us to respond to your inquiry and provide you with the necessary assistance.

Depending on the nature of the inquiry, the legal basis may be:

taking steps prior to concluding or in relation to the performance of a contract – Art. 6, § 1, letter (b) of the GDPR; or
our legitimate interest in providing customer service and responding to inquiries received – Art. 6, § 1, letter (f) of the GDPR.

4.4. Marketing Communications and Newsletter

When you have provided the necessary consent, we may use your email address to send you information about products, promotions, offers, and other marketing communications.

When applicable legislation requires consent, the legal basis for this processing is Art. 6, § 1, letter (a) of the GDPR.

You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

5. Incomplete Orders

When you begin the checkout process but do not complete it, certain information may be temporarily stored for the purpose of the online store's functioning, providing the option to continue the order, technical support, fraud prevention, and other permissible purposes.

When we use provided data to send reminders regarding an incomplete order, this is done only when there is an applicable legal basis and in compliance with the requirements of current legislation.

Data for incomplete orders is not stored longer than necessary for the respective purpose, unless applicable law requires otherwise.

6. Recipients of Personal Data

We do not sell your personal data.

When necessary for the operation of the online store, the execution of the order, the processing of payments, the fulfillment of legal obligations, or another lawful purpose, your personal data may be provided to appropriate recipients, including:

courier and transport companies;
banks and payment service providers;
accountants and accounting service providers;
providers of IT, hosting, technical support, and other technological services;
state, administrative, judicial, and other competent authorities when disclosure is required by law;
other service providers who process data on our behalf or provide services necessary for the functioning of the online store.

When third parties process personal data on our behalf as personal data processors, relations with them are governed in accordance with the requirements of applicable personal data protection legislation.

7. Shopify

The online store https://pro9.bg/ uses the Shopify platform.

For customers from the European Economic Area, personal data processed through the Shopify platform on behalf of the merchant is initially processed by Shopify International Limited, Ireland.

In providing core services, Shopify may act as a data processor on our behalf in accordance with the applicable contractual terms and Shopify's Data Processing Addendum.

Shopify may use affiliates and sub-processors to provide its services.

In connection with the provision of services, personal data may also be processed outside the European Economic Area.

When an international transfer of personal data occurs, data protection mechanisms provided by law are applied, including, where applicable, binding corporate rules, standard contractual clauses, or other lawful mechanisms.

8. Payment

The online store may offer the following payment methods:

payment by debit or credit card;
cash on delivery;
bank transfer;
other payment methods explicitly mentioned at checkout.

When paying by bank card, the payment is processed through the respective payment service provider.

When card payment is made through a virtual POS terminal of DSK Bank or via Pay by Link, the processing of payment data is carried out through the respective payment infrastructure.

Visa and Mastercard cards may be accepted depending on the terms of the respective payment service provider.

To protect card payments, applicable authentication and security mechanisms may be used, including Visa Secure and Mastercard Identity Check.

"AUTOMIX 2016" EOOD does not store the full details of bank cards used for payment through the online store.

When refunding an amount paid by bank card, the refund is as a rule made through the same payment method, when technically and legally applicable.

9. Storage Periods

We store personal data only for the period necessary to achieve the purposes for which it was collected, unless applicable legislation requires or permits a longer period.

Data necessary for the performance of our contractual relations may be stored until the final execution of the contract and for the necessary subsequent period in connection with complaints, defense of legal claims, and applicable limitation periods.

Accounting, tax, and other documents for which the law provides a mandatory storage period are kept for the respective statutory period.

Data processed based on consent for marketing purposes is processed until the consent is withdrawn or the purpose ceases to exist, unless there is another legal basis for its storage.

After the expiration of the applicable periods, personal data is securely deleted, anonymized, or destroyed, unless there is a legal basis for its further storage.

10. Cookies and Similar Technologies

The online store uses cookies and other similar technologies necessary for the proper functioning of the site, as well as, where applicable, for analysis, personalization, and marketing.

Necessary cookies may be used without prior consent when permitted by applicable legislation.

Consent is required for the use of non-essential cookies and other tracking technologies when such is necessary under applicable legislation.

When the site provides a tool for managing privacy and cookie preferences, you can use it to make or change your choices regarding the use of non-essential technologies.

Additional information regarding the cookies used, their purposes, and how to manage preferences may be provided in the Cookie Policy and/or through the privacy management tool available on the site.

11. Newsletter and Marketing Communications

When the online store offers the option to subscribe to a newsletter, you can voluntarily provide your email address and, when necessary, your consent to receive marketing communications.

You can unsubscribe at any time using the "Unsubscribe" button or link in the respective marketing message or by contacting us at:

Pro9bg@gmail.com

The withdrawal of consent does not affect the lawfulness of processing performed before its withdrawal.

After unsubscribing, we will not use your email address for the relevant marketing communications, unless there is another applicable legal basis for its processing.

12. Personal Data Security

We apply appropriate technical and organizational measures to protect personal data against:

unauthorized or unlawful access;
accidental loss;
destruction;

damage;

alteration;
unlawful disclosure.

We use providers and technological solutions that implement security measures tailored to the nature of the services provided and applicable requirements for personal data protection.

Regardless of the measures taken, no system for the transmission or storage of information can guarantee absolute security.

13. Your Rights

In accordance with the GDPR and applicable legislation, provided that the relevant legal prerequisites are met, you have the right:

to obtain information on whether we process your personal data;
of access to your personal data;
to request rectification of inaccurate or incomplete data;
to request erasure of your personal data ("right to be forgotten");
to request restriction of processing;
to object to certain types of processing;
to data portability when the legal conditions are met;
to withdraw consent given at any time when the processing is based on consent;
to lodge a complaint with a competent supervisory authority.

The exercise of certain rights may be restricted in cases provided for by applicable law.

To exercise your rights, you can contact us at:

Pro9bg@gmail.com

Before fulfilling a request, we may need to verify the identity of the requester to protect personal data from unauthorized access.

14. Right to Complain

If you believe that the processing of your personal data violates applicable law or that your rights in relation to personal data protection have been infringed, you have the right to lodge a complaint with the competent supervisory authority.

For the Republic of Bulgaria, the competent supervisory authority is:

Commission for Personal Data Protection (CPDP)

You can also first contact us at Pro9bg@gmail.com so that we may attempt to resolve the issue.

15. Disclosure of Data to Competent Authorities

We may disclose personal data to state, judicial, administrative, regulatory, and other competent authorities when required by applicable law or necessary for the establishment, exercise, or defense of legal claims.

16. Changes to the Privacy Policy

We may periodically update this Privacy Policy when necessary due to changes in legislation, the technologies used, the online store's services, or the way we process personal data.

The current version of the Privacy Policy is published at:

https://pro9.bg/

We recommend that you periodically review this Privacy Policy to be informed of any changes.

17. Contacts

For questions regarding this Privacy Policy, the processing of personal data, or the exercise of your rights, you can contact us: