This section contains information related to the management of the website www.gallerymaestro.com This document discloses the Privacy Policy and the protection of personal data collected by users of the website at (URL) www.gallerymaestro.com. This Privacy Policy is intended to inform you about how www.gallerymaestro.com treats your personal information as an administrator, as well as how you can control your preferences and settings in relation to this treatment. Please read this privacy and data protection policy carefully before accessing the website and its services. If you do not agree to any of the terms, you should not visit the website and do not use our services and products in any way.
WHAT ARE THESE PRIVACY RULES REGULATED AND ON WHAT LEGAL BASIS ARE THEY APPLIED?
From of May 25, 2018, the General Regulation on Personal Data Protection (GDPR) is applied in Bulgaria. It has been adopted by the European Union and aims to harmonize the policies of the EU Member States regarding the collection and use of personal data. The new regulation comes with a number of requirements that www.gallerymaestro.com applies. Among them are:
- To inform you what data we use.
- Let you know why we use them.
- Ask for your consent to use them when we provide additional services based on them, such as targeted advertising, for example.
- Give you the opportunity to change your consent for various purposes through this site to have more freedom.
- The ability to delete them, as well as to be "forgotten".
- Indicate all third parties / other companies with whom we share your data. Keep in mind that the Internet is a global network, we often use standardized services to register logins and track behavior in an anonymous version, such as Google Analytics.
Personal data is any specific information concerning you through which your identity can be established. For example, such information is your real name, address, telephone number, your passwords for accessing our website, IP address. Data that cannot be directly or in combination with other data related to your true identity is not considered personal data.
This Privacy Policy applies to your personal information when you visit www.gallerymaestro.com or use our services, but does not apply when you use other sites or services that we do not own or control.
PERSONAL DATA ADMINISTRATOR
The collection, processing and storage of personal data by the users of the website is performed by Gallery Maestro Ltd., UIC: 130996722, with commercial registration address: Sofia 1000, 37 Tsar Samuil Str., with manager Raina Todorova Kostova, as a personal administrator data.
The controller collects and processes all personal data in accordance with the data protection laws applicable in the European Union.
SUPERVISOR
Commission for Personal Data Protection
Address: Sofia, Prof. Tsvetan Lazarov ”2
Contact details: 02/915 35 18; 02/915 35 19; kzld@cpdp.bg
PRINCIPLES FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA
Gallery Maestro Ltd. observes the following principles in the processing of your personal data:
- legality, good faith and transparency;
- restriction of processing purposes;
- relevance to the purposes of processing and minimizing the data collected;
- accuracy and timeliness of the data;
- personal data is not used for profiling;
- personal data is not used for direct marketing;
- limitation of storage in order to achieve the objectives;
- integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.
WHAT DATA DO WE COLLECT FROM OUR USERS
This Privacy Policy is an integral part of our General Terms and Conditions for Use of the Website available here: https://www.gallerymaestro.com/en/terms-and-conditions.
All definitions given in the General Terms and Conditions are applicable in this Privacy Policy.
Before accessing the Services on the Website, you must express your explicit consent to the processing of your personal data in accordance with this Priacy Policy. You can give your consent to the above actions when registering on the website, when sending an order without registration or when sending an inquiry through the contact form available through the website.
- Gallery Maestro Ltd. does not collect or store "sensitive" categories of personal data such as political beliefs, ethnic origin, sexual orientation, data on the health status of the subject, religious or philosophical beliefs, etc. If the Administrator receives "sensitive data", he undertakes to delete it immediately. Please do not send such data to the Administrator.
- Personal data collected by the Administrator when person contact the Administrator directly by telephone.The telephone number for contacting the Administrator is indicated in the "Contacts" section. When person contacts the Administrator by telephone, the Administrator collects and stores only the name and contact number of the person, and in certain cases may also collect and store e-mail of the person. This data is stored for the purposes of communication with the individual and providing more complete information about the services offered by Gallery Maestro Ltd.
- Personal data collected by the Administrator when the persons contact the Administrator through a contact form on the site.When the person sends a message to the Administrator using the contact form, the Administrator collects and stores the name, telephone and e-mail address of the person, as well as the information provided in the message. The administrator collects and stores the specified information for the purposes of communication with the individual.
- Personal data collected during registration on the website.
Successful registration requires the completion of certain fields marked as mandatory.
In the process of creating a user registration on the website, the creation of a unique password is required, as well as the provision of the following data:
- name and surname;
- email address;
- country and settlement.
- Personal data collected automatically.
In our website we collect data for all visitors - registered users and visitors without registration, namely the following categories of data:
- IP address;
- Browser ID;
- History of the pages visited, in order to establish your preferences for certain types of content;
- History of your searches in our pages;
- Personal data collected by users when placing an order:
- name and surname;
- email;
- address;
- telephone;
- IBAN of the user - used only to return the relevant amounts in case of complaints and / or withdrawal from the contract.
COOKIES
You can get more information about the way the Administrator uses cookies by reading the Cookie Policy at www.gallerymaestro.com at the following address: https://www.gallerymaestro.com/en/cookie-policy.
PURPOSES FOR PROCESSING PERSONAL DATA
The Administrator collects and processes the personal data of individuals, which are provided directly by them or are collected automatically only for the following purposes:
- For the normal functioning of all services on the website;
- To create a registration on the website, to send orders through the website;
- To make contact with the person by e-mail or phone;
- To provide services offered on the website www.gallerymaestro.com;
- For the conclusion and implementation of a contract;
- To improve the efficiency and functionality of the website.
In the event of a change in goals, we will inform you and ask for your explicit consent to the processing of your personal data in accordance with the new goals.
HOW LONG DO WE STORE THE INFORMATION
We will not store your data for longer than is necessary to achieve the purposes for which we process it. If the reason on which we store your personal data ceases to exist (for example, if we cease to have a legitimate interest in storing your personal data, if the statutory period for storing your personal data has expired or if you have withdrawn your consent to store your personal data) we will delete or destroy them safely.
The storage of data continues as long as we have a reason for their storage.
We apply the following terms for storing the different types of personal data according to their purpose, namely:
- Regarding the personal data of the persons who made the inquiry, through the contact form on the website:
- For persons who have not become clients of the Administrator within 1 month from sending the request. - Regarding personal data of persons who have made an inquiry by telephone:
- For persons who have not become clients of the Administrator within 1 month from the inquiry by phone. - Personal data collected by users when placing an order: The data regarding name, email, address, telephone, IBAN of the user are processed on the basis of Art. 6, para. 1 (b) of the GDPR and for the purpose and performance of the distance contract concluded between GALLERY MAESTRO Ltd. and a consumer within the meaning of DIRECTIVE 2011/83 / EU OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 25 October 2011 on consumer rights, as well as and for the purposes of concluding the same. The data are also processed for the purpose of fulfilling the obligations of the Company, arising from the Bulgarian Accounting Act and are stored for a period of 10 years.
- The Electronic Communications Act shall apply to traffic data and the data shall be stored within 6 months. These data shall be transmitted to the specialized bodies and institutions only in compliance with legal provisions and with due grounds.
WHERE WE STORE YOUR PERSONAL DATA
Your personal data that we collect is stored on servers located in the territory of the Republic of Bulgaria.
We store your personal data for the period in which you are a registered active user of the website and for a period not longer than necessary to achieve the above-described goals, or until the termination of the services and / or the website.
In the event that you wish to delete your Account on the Website, the personal data stored about you will be deleted without undue delay.
SECURITY MEASURES
The Administrator has taken a wide range of technical and organizational measures to protect your personal data against loss or other forms of illegal processing. In case you want to receive detailed information about the technical and organizational measures, please do not hesitate to contact us.
PERSONAL DATA OF THIRD PARTIES
We process and use only data that you have provided to us voluntarily, and we rely on the fact that this data is owned and provided by you lawfully.
This means that each user is responsible for not providing Gallery Maestro Ltd. data to third parties in violation of their rights to personal data protection.
Therefore, each person bears unlimited personal liability if he provides us with data to a third party without his knowledge or without his consent in accordance with the requirements of applicable data protection law, regardless of the type of data or the reasons for which provide: names, phone, email address, and any other.
MINORS AND MINORS
If we receive information that we have collected personal data from / to a person under the age of 18, we will delete it immediately, unless we are legally obliged to store this data.
Please contact us if you believe we have incorrectly or unknowingly collected information from / under the age of 18.
TO WHOM WE SHARE AND DISCLOSE YOUR PERSONAL DATA
Sometimes we record some of the information on our servers or send it to third parties. This is necessary so that we can provide you with the best experience when using our services, and sometimes - in general, so that we can ensure the availability and accessibility of the service you use.
Your personal data will not be transferred to third parties unless:
- provide us with your explicit, informed and freely given consent;
- the third parties in question provide us with contractual support in order to provide our products or services;
- this is required by law or by virtue of an act of authority of a public body;
- there is a justified need to protect the rights, property or security of users of the website or other defensible public interest;
- this is required in connection with the sale of a business, our company or its assets, which are subject to confidentiality.
Our employees and partners are duly informed of the importance of their obligation of confidentiality and are responsible for fulfilling this obligation.
For any other purposes not explicitly mentioned in this policy, we will ask for your explicit consent, identifying our partners as well as the purposes for data transfer and sharing.
By virtue of a court decision or an act of authority of a public body, we may be obliged to disclose the identity of a User, especially in the case of investigation of violations of third party rights or illegal acquisition of personal data. In the event that a user's personal data is disclosed to a public authority in connection with an investigation or proceeding against him, we are not obliged to notify the user in question.
RIGHTS OF PERSON UNDER GDPR
- Right of access to your personal data: you have the right to receive confirmation from us whether personal data is processed for you and, if so, you have the right to access personal data and information.
- Right to correct personal data: if you find that the personal data we process about you is inaccurate, you have the right to have us correct this personal data.
- Right to delete personal data (right to be forgotten): in certain circumstances, such as if your personal data has been processed illegally or you have withdrawn your consent (if the processing of personal data is based on consent), you have the right to request and receive deletion of your personal data from us.
- Right to restrict processing: in certain circumstances, such as if you have doubts about the accuracy of your personal data or have objected to our legitimate purpose of processing your personal data, you have the right to request that we restrict the processing of your personal data until a solution is found.
- Right to object to the processing: in certain circumstances, such as if you doubt our legitimate interest in processing your personal data, you have the right to object to such processing for reasons related to your specific situation.
- Right to data portability: if your personal data is processed by automatic means with your consent or for the purpose of fulfilling our contractual relationship, you have the right to request that we provide your personal data in a machine-readable format for transfer to another data controller.
- Right to file a complaint to a control body: you have the right to file a complaint regarding the processing of your personal data by us in the respective control body.
Please note that inquiries for the exercise of data subjects' rights within the meaning of Regulation (EU) 2016/679 sent by post or courier require additional verification of identity by presenting an identity document on the spot by the data subject or by growing of the request by e-mail and signed with an electronic signature of a natural person.
LINKS, TOOLS AND CONTENT FROM OTHER COMPANIES
The website contains buttons, tools or content that link to other companies, such as Facebook, Instagram, Viber, Google Analytics. The administrator assumes no responsibility for damages and losses incurred as a result of the use of these sites. Individuals are solely responsible for their use of these sites and should read their Privacy Policy.
This Policy is in force on 01.09.2020 and is in line with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation).