• Your shopping cart is empty!

Privacy Policy

Privacy Policy for Personal Data Processing

Information about the Personal Data Administrator:

"Marta-2005" Ltd. is a company registered in the Commercial Register of the Registry Agency with UIC 131456857, with registered office and management address: Sofia, 2A Boris Hristov St., Tel: 0898572374; e-mail: sales@palmers.bg.

Grounds and Purposes for Which We Use Your Personal Data

We process your personal data on the following grounds:

  • The contract concluded between us and you, in order to fulfill our obligations under it;
  • Your explicit consent – the purpose is specified for each particular case;
  • A statutory obligation provided for by law.

In the following paragraphs you will find detailed information regarding the processing of your personal data depending on the ground on which we process it.

FOR THE PERFORMANCE OF A CONTRACT OR IN THE CONTEXT OF PRE-CONTRACTUAL RELATIONS

We process your personal data in order to fulfill our contractual and pre-contractual obligations and to exercise our rights under contracts concluded with you.

Purposes of processing:

  • Identifying the person who placed an order on the website;
  • Managing and fulfilling your request and performing a concluded contract;
  • Preparing a proposal for concluding a contract;
  • Preparing and sending an invoice/document for the services you use with us;
  • Ensuring the complete service necessary for processing your order, fulfilling the order and receiving payment from the customer;
  • Retaining correspondence related to orders placed, processing of requests, reporting of issues, etc.;
  • Notification of everything related to the services you use with us;
  • Establishing and/or preventing unlawful actions or actions contrary to our terms and conditions for the respective services.

Data we process on this ground:

On the basis of the contract concluded between us and you, we process information about the type and content of the contractual relationship, as well as any other information related to the contractual relationship, including:

  • Personal contact details – contact address, email, current phone number;
  • Identification data – full name, personal identification number or foreigner's personal number, address (if the customer wishes to have an invoice issued);
  • Data about orders placed;
  • Correspondence related to overall service – email, letters, information about your requests for issue resolution, complaints, petitions, grievances, questions, and feedback received from you;
  • Bank account number or other banking and payment information in connection with payments made and refunds in the event of product return/complaint filed;
  • Other information such as:
    • IP address when visiting our website.

Processing of the above personal data is mandatory for us in order to conclude the contract with you and to perform it. Without providing us with the above data, we would not be able to fulfill our obligations under the contract.

We Provide Personal Data to Third Parties

We provide your personal data to third parties, with our primary goal being to offer you high-quality, fast and comprehensive service. We do not provide your personal data to third parties before ensuring that all technical and organizational measures for the protection of such data have been taken, and we strive to exercise strict control over the fulfillment of this goal. In this case, we remain responsible for the confidentiality and security of your data.

We provide personal data to the following categories of recipients (personal data administrators):

  • Courier company "Speedy";
  • Persons who, upon assignment, maintain equipment, software and hardware used for the processing of personal data and necessary for the company's operations;
  • Persons providing consulting services/accounting services.

When we delete data collected on this ground:

Data collected on this ground is deleted 1 year after the termination of the contractual relationship, regardless of whether due to expiry of the contract term, rescission or any other ground.

FOR COMPLIANCE WITH STATUTORY OBLIGATIONS

The law may provide for an obligation for us to process your personal data. In such cases we are required to carry out the processing, for example:

  • Obligations under the Measures Against Money Laundering Act;
  • Fulfillment of obligations related to distance selling and off-premises selling, as provided for in the Consumer Protection Act;
  • Providing information to the Consumer Protection Commission or third parties as provided for in the Consumer Protection Act;
  • Providing information to the Personal Data Protection Commission in connection with obligations provided for in the regulatory framework for personal data protection;
  • Obligations provided for in the Accounting Act and the Tax and Social Insurance Procedure Code and other related regulatory acts, in connection with maintaining lawful accounting records;
  • Providing information to the court and third parties within the framework of court proceedings, in accordance with the requirements of the applicable procedural legislation;
  • Verifying age when shopping online.

When we delete personal data collected on this ground:

Data collected pursuant to a statutory obligation is deleted after the obligation to collect and store it has been fulfilled or ceases to apply. For example:

  • Under the Accounting Act for the storage and processing of accounting data (11 years);
  • Obligations to provide information to courts, competent state authorities and other grounds provided for in applicable legislation (5 years).

Providing data to third parties:

Where we have a statutory obligation to do so, we may provide your personal data to the competent state authority, natural or legal person.

WITH YOUR CONSENT

We process your personal data on this ground only upon your explicit, unambiguous and voluntary consent. We will not impose any adverse consequences on you if you refuse the processing of your personal data.

Data we process on this ground:

On this ground we process only the data for which you have given us your explicit consent. The specific data is determined on a case-by-case basis. Typically, such data consists of an email address and name.

Providing data to third parties:

We do not provide personal data to third parties.

Withdrawal of consent:

Consents provided may be withdrawn at any time. Withdrawal of consent does not affect the performance of contractual obligations. If you withdraw your consent to the processing of personal data for some or all of the purposes described above, we will not use your personal data and information for the purposes specified above. Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to its withdrawal.

To withdraw your consent, you simply need to use our website or our contact details.

When we delete data collected on this ground:

Data collected on this ground is deleted upon your request or 12 months after its initial collection.

PROCESSING OF ANONYMIZED DATA

We process your data for statistical purposes, meaning for analyses in which the results are aggregated only and the data is therefore anonymous. Identification of a specific individual from this information is not possible.

Your data may also be anonymized. Anonymization is an alternative to the deletion of data. Upon anonymization, all personally identifiable elements/elements enabling your identification are irreversibly erased. There is no statutory obligation to delete anonymized data, as it does not constitute personal data.

How We Protect Your Personal Data

To ensure adequate protection of the company's and its customers' data, we apply all necessary organizational and technical measures as provided for in the Personal Data Protection Act.

In order to ensure maximum security in the processing, transfer and storage of your data, we may use additional protection mechanisms such as encryption, pseudonymization, etc.

Personal Data Received from Third Parties

We do not receive data from third parties.

User Rights

Every User of the website enjoys all rights for the protection of personal data in accordance with Bulgarian legislation and European Union law.

Users may exercise their rights through the contact form or by sending a message to our email address.

Every User has the right to:

  • Information (in connection with the processing of their personal data by the administrator);
  • Access to their own personal data;
  • Rectification (if the data is inaccurate);
  • Erasure of personal data (the "right to be forgotten");
  • Restriction of processing by the administrator or the processor of personal data;
  • Portability of personal data between individual administrators;
  • Objection to the processing of their personal data;
  • The data subject also has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
  • Every user may write reviews.