This Privacy Policy arranges the use and protection of any information you provide to Incraft EOOD, guaranteeing that your personal data is protected. If you are asked to provide certain information which can identify you when using this site, you can be sure that it will be used only in accordance with this privacy policy. In conjunction with the enactment on 25.05.2018 of Regulation (EC) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, for Incraft EOOD, as administrator of personal data, incur certain obligations, incl. to inform its current and prospective customers about the categories of personal data it processes, the purposes and the basis of processing, the storage period, likelihood of providing data to other recipients, obligations regarding the rights of data subjects, etc.

As customers’ satisfaction is our priority, we find it necessary that our clients understand how and why we process their personal data.


DETAILS ABOUT THE CONTROLLER

„Incraft EOOD“ is a company registered in the Commercial Register at the Registry Agency with UIC 203699963 with headquarters and business address: Sofia, kv. Geo Milev, 15 Galilei Str., shop 1, email:  [email protected].
Incraft EOOD is a personal data controller and, in that capacity, processes your personal data, observing the principles of legitimacy, good faith and transparency.
    

DEFINITIONS
    
„Personal data“ means any information relating to an identified individual or identifiable natural person (Data subject);
An identifiable individual is a person who can be identified, directly or indirectly, as a name, an identification number, location data, an online identifier or one or more factors specific to the identity of that natural person.
„Controller“: „Incraft“ EOOD is a controller of personal data under the Regulation. The Company processes personal data in order to fulfill pre-contractual and contractual obligations and fulfillment of the obligations legally imposed by the Accountancy Act, the Tax-Insurance Procedure Code and other laws and by-laws, in the case of:
1 /   signing and executing contracts for the delivery of goods and services;
2 / recruitment and management of the employment relationships with employees and individuals, hired on contracts for management and control;
3 / other legal relationships.
In addition the aforementioned, Incraft EOOD can also process personal data when the explicit consent of the Data subject is available.

„"Personal data processor“ means a natural or legal person, public authority, agency or another body which processes personal data on behalf of the controller.
„Recipient“  means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.

PERSONAL DATA PROCESSED

„Incraft“ EOOD processes personal data independently or in partnership with service providers, which request data processing. Depending on the specific goals, we process the following personal data:
1.    Data provided by you for the identification and carrying out of contractual obligations to the client: names, address, phone number, e-mail, data of your deputy, if the delivery is received by a deputy.
2.     Data collected during payment: identification number, bank account number.
3.     Details of browsers, applications, type of access device, IP address, being used by you.

If you refuse to provide the required personal data, „Incraft EOOD“ will not be able to complete your order through its Web site.

PRINCIPLES, REASONS AND PURPOSES OF PROCESSING

„Incraft“ EOOD  processes personal data of natural persons, clients, contractors, their representatives, received from them and from third parties, in compliance with the principles of legality, good faith, transparency, confidentiality, limitation of purposes, minimization of data, storage limitation.
Personal data are processed on the grounds provided by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, namely:
 

CONSENT

When your consent for processing your personal data is required, we will process it only after receiving your consent. Considering our need to fulfill obligations, your refusal to consent could lead to our inability to provide the product; for example, we will be unable to deliver the goods you ordered if you have not entered your names, phone and address, incl. e-mail address. When processing your personal data for a particular purpose is based on consent, you may any time withdraw from it and the legitimacy of the processing prior to the withdrawal will not be affected. Withdrawal of consent is valid henceforth and cannot have a retroactive effect.

CONTRACT

„Incraft“ EOOD processes your personal data when the processing is necessary for the execution of a contract to which the data subject is party or for taking steps at the request of the person to conclude a contract. To conclude a contract with us, you need to provide information that is personal data, which enables us to deliver the goods and services you would like to receive.
Considering the need to fulfill our obligations and to exercise our rights in accordance with a relationship with you, your refusal to provide personal data could lead to inability to move forward our relations.
 

LEGAL OBLIGATION

We process your personal data when processing is necessary to comply with legal obligations such as issuing invoices with the personal data required by the Accountancy Act, providing customer information on request by a competent authority, maintaining accounting records and keeping accounting and trade information, as well as all other information and documents relevant to taxation and compulsory social security contributions;
As far as we are obliged to comply with certain statutory requirements enshrined in laws or other regulations, respectively, considering the need to fulfill our obligations and to exercise our rights in relations with clients, the refusal of a particular individual to provide personal data could make our relationship impossible to occur.
 

LEGITIMATE INTEREST

In order  to deliver the goods or services you have requested, we also process your personal data by providing data to third parties such as courier services, insurers required for performing our contractual obligations, and other valid legal grounds, e.g. researching the demand for our products to achieve high consumer satisfaction.  

INCRAFT EOOD processes your personal data for the purpose of:
- concluding or executing of a contract you have concluded with us, namely: identification of the customer upon signing of a contract for delivery, amendment and termination of the contract;
- fulfillment of legal requirements: issuing invoices with the personal data required by the Accountancy Act, provision of information about the client upon request by a competent authority;
- compliance with the legal obligations imposed on the controller under the Tax and Social Insurance Procedure Code and the Accountancy Act: to archive accounting and commercial information, bookkeeping and accounting, as well as all other information and documents relevant to taxation and compulsory social security contributions;
- processing for the purposes of the controller’s legitimate interests: preparation and storage of statistical information and aggregated references for the development and improvement of the goods and services;
If your personal data is to be processed subsequently for a purpose different from the purpose it was collected / provided for, we will provide you prior to such processing with information about this different purpose and other relevant information required by the law.

RECEIVERS OF PERSONAL DATA

According to the requirements of Regulation (EC) 2016/679, there is a possibility that Incraft EOOD may provide processed personal data, received from you, to the following categories of recipients:
- the natural persons to whom the data relate;
- to fulfill a statutory obligation to third party recipients such as the Ministry of Interior, prosecutors, courts, bailiffs, accounting firms, National Revenue Agency, insurers, other public / supervisory authorities, agencies or individuals.
- for fulfillment of contractual obligations of the following third recipients: courier services, transport companies, insurers, payment service providers and banks;
- to individuals who are assigned by Incraft EOOD to maintain software used for processing of your personal data;
- to individuals who carry out accounting and auditing.

TRANSMISSION OF PERSONAL DATA

Your personal data will not be transferred to a third country outside the EU. If a particular service you use requires the transfer of your personal data to a third country outside the EU, appropriate safeguards are provided – standard contractual clauses or consent from the data subject. Transmission of your personal data to a third country is admissible in accordance with the provisions of the Tax-Insurance Procedure Code (the relevant data are transmitted to the Executive Director of the National Revenue Agency, who, in turn, transmits them to the relevant participating jurisdictions).

STORAGE OF PERSONAL DATA

„Incraft EOOD“ processes and stores your personal data for a time limit, according to the current legislation. Once the statutory term has expired, we will destroy your personal data. Personal data for which there is no explicit storage period will be destroyed after achieving the purposes for which they were collected and processed. In particular, we will store your personal data as follows:
•    In case of a delivery contract concluded between us, we will process and store your personal data for a period of time that is necessary and sufficient to prove the proper performance of our obligations to you for a period no shorter than the period, set out in the relevant regulatory base, but not less than 5 (five) years after the termination of the respective legal relationship, that has arisen on the basis of a contract concluded between our two sides.
Accounting and trade information as well as all other information and documents required for taxation and compulsory insurance contributions are kept for: 1. accounting registers and financial reports - 10 years; 2. documents for tax and insurance control - 5 years after expiry of the limitation time period for repayment of the public debt they are connected with; 3. all other storages - 5 years;
If within 6 (six) months from the date of receipt of personal data, a contract between Incraft EOOD and you or delivery order (when a contract is concluded) has not occurred, the personal data that you have provided to Incraft EOOD will be destroyed / deleted within 9 (nine) months from the date of receipt.

Deadlines may be extended further, for example in the case of litigation, prolongation of the limitation period due to interruption, and also during the implementation of legal provisions and requirements of supervisors.

RIGHTS OF THE DATA SUBJECT

As a subject of the personal data, processed by Incraft EOOD, you have the right to:
➢     require access to your personal data stored with us, or require from us revision of your personal information;
➢     require from us that we limit processing of your personal data and the deletion of your personal data after the expiration of relevant deadlines specified in this notice;
➢    object to processing of your personal data by Inkraft EOOD;
➢    portability of data when technically feasible and if provided that you and your new administrator have chosen to do so;
➢     withdraw at any time your consent to the processing of your personal data by Incraft EOOD, when the same is done on the grounds of Art. 6 (1) (a) or Art. 9 (2) (a) of Regulation (EC) 2016/679.
➢     a complaint to the Commission for Personal Data Protection, address: Sofia, 1592, 2 "Prof. Tsvetan Lazarov" str., ph. 02 / 91 53 518, e-mail: [email protected]

Any data subject may exercise his/her rights by submitting a written request to Incraft EOOD in free format at [email protected], to which he/she will receive a written response in due time.