Privacy Policy

Data Protection Policy
1. This privacy policy applies to the website and online store of KREMONA GROUP Ltd.
The policy covers the processing of personal data in accordance with the requirements of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the Regulation).

2. For the purposes of the Data Protection Regulation, we are: Information regarding the Data Controller:
           1. Company name: KREMONA GROUP Ltd.
           2. Company ID/BULSTAT: 207549466
           3. Registered office and management address: Sofia, Vitosha District, Tsar Boris III Blvd., No. 517
           4. Correspondence data:
           5. E-mail: office@trokotbg.com
           6. Phone: +359 889 086 441

Information regarding the Data Protection Officer:
          1. Name: Krasimir Ivanov
          2. Correspondence data:
          3. Phone: +359 889 086 441
          4. Email: Office@trokotbg.com

Information regarding the competent supervisory authority:
          1. Name: Commission for Personal Data Protection
          2. Headquarters and management address: Prof. Tsvetan Lazarov Blvd 2, 1784 Sofia
          4. Phone: 02 915 3 518
          5. Email: kzld@government.bg, kzld@cpdp.bg
          6. Website: www.cpdp.bg

Information We Collect

3. By using this website, you agree to this Policy.

4.   We collect personal data only when provided directly by you—your email address, name, home or business address, and telephone number—submitted with your explicit consent so that you can use the services of the website, receive information about new services and promotions, and our newsletter, or wish to make a purchase.
5.   We use analytical and statistical tools to monitor details of your visits to our website and the resources you access, including, but not limited to, traffic data, location data, web logs, and other communication data (which do not personally identify you).
6. Payment information (debit and credit card details), submitted when you make purchases from our website/online store, is not received by us and not stored by us. This information is processed according to strict payment security protocols—PCI-DSS for Visa and Mastercard. We do not have access to this information. We share your personal data with payment processors, but only for the purpose of completing the transaction. The processors are not allowed to use your personal data for any purposes other than to carry out the payment, and they are explicitly required to maintain the confidentiality of your personal data and payment information. Using Your Information
7.   We process and store your personal data, which you have provided to us, in accordance with the requirements of the Regulation.
8. The information we collect and store is used solely to provide services to you and to fulfill our contractual obligations with you. Additionally, we may use the information for the following purposes: a. To notify you of changes to the website, such as improvements, changes in services and products; b. If you are an existing customer, we may contact you with information about products and services similar to those we have previously offered you; c. When we have your consent, to provide information to selected third parties to contact you and offer products and services that we believe may be of interest to you; d. To periodically send you our e-newsletters.

Providing Your Information

9.   We may provide your information to regulatory authorities in compliance with the law and to contribute to fraud protection and reduce credit risk.
10.   When you have given your consent, we may provide your data to selected third parties to contact you and offer products and services that we believe may be of interest to you.
11.   If you do not want your data to be used by us or by third parties, you will have the opportunity to withdraw your consent via the informed consent form or by contacting us directly at the provided address, phone number, or email.
12.   We inform you that we do not provide identifiable personal data to advertisers, but it is possible that we periodically provide such data in the form of aggregated and anonymized statistical data regarding visits to the website.

Control over the Use of Your Data

13. If you have given consent for the use of your personal data for specific purposes, you may withdraw or amend your consent at any time. If you do not wish us to use your data or if you want to amend the consent you have provided, you can contact us using the provided contact details.
14.   As part of the services we provide to you, the information you provide may be transferred and/or stored in countries outside the European Economic Area (EEA), as we use remote web servers to host the website and some aspects of our services, which may be based outside the EEA, or we use servers located outside the EEA - primarily data stored in the "cloud". The data may also be processed by staff operating outside the EEA.
15.   The transfer of your personal data may occur if some of our servers are located in countries outside the EEA or if some of our contractors are based outside the EEA. If we transfer or store your personal data outside the EEA, we will take appropriate measures to ensure their effective protection, as described in the Privacy Policy and in accordance with the Regulation. If you use our services while you are outside the EEA, your personal data may be transferred outside the EEA in order to provide the service.
16.   We do not collect, process, or disclose sensitive personal data, such as race, religion, or political affiliation, without your explicit consent.
17. We may disclose your personal data outside our group: a. In the event that we sell or buy a business or assets, where we may need to disclose your personal data to the seller/buyer; b. If our business is acquired by a third party, whereby the personal data of all our customers will be part of the assets transferred to the buyer. These transfers will be in accordance with the terms of confidentiality and protection of your personal data, and the confidentiality conditions will be preserved and valid.
18.   In all other cases, we will process, disclose, or share your personal data only if required by law or when necessary to comply with legal and statutory requirements.
19.   You have the right to opt out of the processing of your personal data for marketing purposes at any time by contacting us at the provided contact details.

Security

20.   The transmission of information via the internet or email is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any such transmission is at your own risk. Once we receive your information, we will use strict procedures and security features to protect it.
21.   When we have given you (or you have chosen) a password for accessing certain parts of our site, you are responsible for keeping this password confidential. You must choose a password complexity level.

Links to Third Parties

22.   You may find links to third-party websites on our site. These websites have their own privacy policies, which you should familiarize yourself with. We are not responsible for their policies, as we have no control over them.

Use of "Cookies"

23.   Our website uses "cookies." We utilize cookies to gather information when you use our services and to provide statistical information about visits to our site. This information does not personally identify you – it is statistical data about visitors and their use of the site. We may also collect information about your internet usage through a cookie file. Where used, these cookies are automatically downloaded to your computer. They are stored on your computer's hard drive. They help us to improve our website and the services we provide to you. All computers have the ability to decline cookies. This can be done by activating the settings which allow you to refuse the setting of cookies. Please note, however, that if you choose to decline cookies, you may not be able to access certain parts of our website. Where we work with advertisers, they may also use cookies, over which we have no control. Such cookies are automatically downloaded when you click on advertisements on our site.

Your rights

24.   The Data Protection Regulation gives you the right to access your personal data that we hold. Please contact us for instructions on how to fill out a Data Access Request. This service is free of charge and we will fulfill it within a 30-day period.
25.   You have the right to correct consents, limit the scope of consents, cease processing, and erase personal data (within legal limits). To exercise your rights, please contact us.

Changes in the Policy

26.   We may periodically update this policy, so we encourage you to periodically review it to be informed of how we are protecting your personal data.

For any questions, comments, or requests regarding the Privacy Policy, you may contact us at: Sofia, Vitosha District, Tsar Boris III Blvd, No. 517, Tel: +359 889 086 441; email: office@trokotbg.com