Privacy Policy
The security of your personal data is important to us. We process your personal data in accordance with the applicable European data protection law. We would like to use this Privacy Policy to inform you about the type, scope and purposes of collecting and processing personal data when you visit our website, use our online shop, contact us or subscribe to our newsletter, as well as about your rights and the information storage period.
WHO WE ARE
Unicoms Switzerland GmbH, Sofia Branch, company having its registered address at 118 Bulgaria Bul., 5th Floor, Sofia, Bulgaria, entered into the Commercial Register under Company Registration ID No. 204642513, is a Data Controller under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation or GDPR).
As a Data Controller, we are committed to processing and protecting your personal data as an individual in accordance with the requirements of the GDPR and this Privacy Policy. Please read it carefully and become familiar with your rights.
WHEN AND WHAT PERSONAL DATA WE PROCESS
- When you place an order through our online shop
When you place an order through our online shop, we process the following personal data about you: names, e-mail address, telephone number, delivery address, credit card details.
In case you would like to receive an invoice, you are required by law to provide us with your personal identification number and/or date of birth.
- When you contact us
When you contact us via email or the contact form on our website, we use the email address you provide, as well as any other information you have voluntarily chosen to provide in your enquiry.
When contacting us by phone, the conversation is recorded. Thus, we process your phone number, voice data and other information you provide during the call.
- When you subscribe to our newsletter
When you subscribe to our newsletter, you voluntarily give your consent to us to use your email for the purpose of sending you our newsletter with the latest news and offers.
PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA
When you shop through our online store, you enter into a contractual relationship with us and provide us with your personal data, so that we are able to send and deliver the products you have purchased, and also to communicate with you about the progress of your order, tracking deliveries and payments, exercising your consumer rights.
We also process your personal data in case you decide to contact us in any of the possible ways in order to respond to your inquiry and to improve our services. When you contact us by phone, conversations are recorded for the purposes of defending our rights and legitimate interests, including improving the service and efficient handling of enquiries, orders and resolving disputes.
Your email may be used for direct marketing purposes and to get your opinion about a product you have purchased. You can unsubscribe to stop us processing your email for the purposes in the previous sentence by clicking on the unsubscribe link available in every email you receive.
We may also use your personal data in the case of official legal proceedings such as civil proceedings, administrative inspections, user claims and disputes, etc.
We may also process your personal data for other purposes where certain applicable law requires us to do so.
WHAT LEGAL GROUND WE USE TO PROCESS YOUR PERSONAL DATA
We process your personal data on the following legal grounds:
- On the basis of your consent (Article 6(1)(a) GDPR). We process your personal data on this ground when you agree to receive our newsletter, contact us, and consent to the use of cookies, which are optional and not necessary. You can withdraw your consent at any time.
- For the performance of a contract or taking any steps at the request of the Data Subject prior to the conclusion of a contract (Article 6(1)(b) GDPR). We process your personal data on this basis when you purchase products through our online shop.
- To comply with our legal obligations (Article 6(1)(c) GDPR). We process your personal data on this basis where this is expressly required by law.
- Where the processing is required for the purposes of our legitimate interests (Article 6(1)(f) GDPR). On these grounds, we may send you messages about offers, special offers and new products, or ask for your opinion on a purchase. We also record our phone conversations with you on the same basis. We also need to process your data in order to prevent and investigate abuse of online orders and related deliveries, and in the event of any official legal proceedings.
DO WE USE COOKIES
In order to improve the quality of the services we offer, we use cookies, through which we can collect personal data. For more information on the use and management of cookies, please see our Cookies Policy.
AUTOMATED DECISION MAKING
We do not carry out automated decision-making with your personal data.
WHAT DATA WE DO NOT PROCESS
We only process personal data of individuals who have turned 18 years old.
We do not process personal data revealing racial or ethnic origin, political, religious or philosophical beliefs, membership of political parties or organizations, associations with religious, philosophical, political or trade union aims, data concerning health, sex life, or the human genome.
WHO WE PROVIDE YOUR PERSONAL DATA TO
Your personal data may be provided to third parties in order to achieve the purposes for which we process it. If you do not want your personal data to be provided to third parties, you will not be able to benefit from the services provided by the Controller.
In this regard, we provide your personal data to hosting providers and other IT support companies. Your data is provided to couriers and suppliers in order to deliver the goods you have requested and, where applicable, to other partners and service providers, including for the purpose of making online payments for purchases of products from our website. We may also provide your data to companies that provide legal and accounting services to us.
Your personal data may also be provided to public authorities in connection with official legal proceedings.
We have put in place appropriate technical and organizational measures to ensure your rights and freedoms. We may share your personal data with the above categories of recipients, but only if they have taken the necessary guarantees and measures to ensure an appropriate level of security.
HOW LONG WE PROCESS YOUR PERSONAL DATA
Your personal data will be stored for the shortest period of time necessary to fulfil the intended purposes, or for the statutory periods, if any.
Data processed on a contractual basis shall be stored for up to 5 (five) years from the date of the specific sale, unless longer processing is required.
Data processed in connection with accounting records shall be kept for a period of up to 10 (ten) years as of January 1st of the accounting period following the one to which they relate.
Data processed on the basis of your explicit consent shall be processed until the consent is withdrawn.
Data processed for the purposes of our legitimate interests are processed until you object to such processing or until such legitimate interests no longer exist.
LINKS TO THIRD-PARTY WEBSITES
Our website, our newsletters and the information and messages we email to you may sometimes contain links to third-party websites. The personal data you provide through your visit to these websites is not subject to this Privacy Policy and the processing of your personal data by these websites is not our responsibility.
If you follow the link to other websites, please note that those websites have their own privacy policies that govern how your information is collected and processed when you visit them.
HOW WE ENSURE YOUR DATA SECURITY
We are aware of how important it is that your personal data is processed correctly and protected, and therefore we have implemented adequate technical and organizational measures to protect your personal data, which, inter alia, ensure compliance with the principles underlying the processing of your personal data.
WHAT ARE YOUR RIGHTS
You have the following rights:
- Right to information – you have the right to be informed at the time of collection of your personal data about the data we collect, who will process it, the purposes for which it will be processed and on what grounds.
- Right to access – you have the right to request information about your personal data, including a copy of the information we store, at any time.
- Right to rectification – you have the right to request rectification and supplement of your personal data after contacting us and after verification of your identity.
- Right to erasure (right to be forgotten) – you have the right to request the erasure of your data when the need for data processing no longer exists, when consent is withdrawn, in cases where the processing is based on consent provided, in the event of unlawful data processing or when a legal obligation to erase arises. This right may not be respected in the cases provided for by law or in the absence of verification of your identity.
- Right to restriction of processing – you have the right to ask us to restrict processing where you contest the data accuracy, for the period in which its accuracy needs to be verified, or where the data processing is done without a legal ground, but instead of erasing it, you request its restricted processing, or where we no longer need your personal data but you require it for the establishment, exercising or defence of legal claims.
- Right to portability of machine-readable data – you have the right to request that we provide your data directly to you or to another controller chosen by you upon your written request and subject to the technical feasibility.
- Right to object – you may object to our processing of your personal data where we use it on the basis of our legitimate interest. Thus, we may be obliged not to use them in the future.
- Right to withdraw your consent – you can always withdraw your consent to us processing your personal data by contacting us at [email protected] or by unsubscribing by clicking on the unsubscribe link available in every email you receive. Withdrawal of your consent does not affect the lawfulness of the processing based on the consent given before its withdrawal!
Right of complaint to a supervisory authority.
For Bulgaria, the supervisory authority is the Commission for Personal Data Protection, more information about it can be found here. If you would like to obtain information and contacts for a supervisory authority in another EU Member State, you can send a request to the email below.
HOW TO EXERCISE YOUR RIGHTS
To exercise your rights, you can contact us by email at [email protected] or by sending us a written notice to the following address: Sofia, 118 Bulgaria Blvd., 5th floor. Upon verification of your identity, we will endeavour to provide you with information based on your requests within 30 days of receipt of your written request, and we will endeavour to respond in relation to the above rights free of charge, but if your requests are obviously unreasonable or excessive, particularly due to their repetitive nature, then we may charge a reasonable fee to cover the administrative costs of processing them and providing you with the information.
CHANGES TO OUR PRIVACY POLICY
Any changes we make to our privacy policy will be posted on our website and will thus become available and binding on you.