Privacy Policy

Last updated: 21 May 2018

This policy aims to protect your personal data. If you have any questions or concerns about how your personal data is used, please get in touch with us and we will help.

By using this site and/or our services, you consent to the processing of your personal data as described in this Privacy Policy.

Definitions

Personal data any information relating to the identification of a natural person.

Processing any operation or set of operations performed on personal data or sets of personal data.

Data subject a natural person whose personal data is being processed.

Child a natural person under 16 years of age.

We / us Compass BG Solutions Ltd.

Personal data protection principles

We promise to follow these personal data protection principles:

Principle of lawfulness, fairness, and transparency. Our data processing activities are lawful. We always take your rights into account before processing your personal data. If you ask, we will provide you with information about the processing of your data.
Principle of purpose limitation. Our personal data processing activities match the purpose for which we collected the data.
Principle of data minimisation. We collect and process only the minimum personal data necessary for the relevant purpose.
Principle of storage limitation. We will not store your personal data for longer than necessary.
Principle of data integrity. We will do everything within our ability to ensure data accuracy.
Principle of data confidentiality. We will do everything within our ability to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

Data subject rights

The data subject has the following rights:

Right to information – you have the right to know whether your personal data is being processed, what data is being collected, where it comes from and why, and who is processing it.
Right of access – you have the right to obtain the data we have collected from and about you, including a copy of your personal data held with us.
Right to rectification – you have the right to request the correction or deletion of your personal data that is inaccurate or incomplete.
Right to erasure – under certain circumstances, you may request that your personal data be erased from our records.
Right to restriction of processing – under certain conditions, you have the right to restrict the processing of your personal data.
Right to object – in certain cases, you have the right to object to the processing of your personal data, for example in the case of direct marketing.
Right not to be subject to solely automated decision-making – you have the right to object to automated processing, including profiling, so that you are not subject to decisions based solely on automated processing where this produces legal effects for you or significantly affects you.
Right to data portability – you have the right to receive your personal data in a machine-readable format or, where possible, to have it transmitted directly from one processor to another.
Right to lodge complaints – if we refuse your request under your right of access, we will explain the reasons for the refusal. If you are not satisfied with how we have handled your request, please get in touch with us.
Right to assistance from supervisory authorities – you have the right to receive assistance from supervisory authorities and the right to other legal remedies, such as claims for damages.
Right to withdraw consent – you have the right to withdraw any consent you have given for the processing of your personal data.

What personal data we collect about you

Information you have provided us

This may include your email address, name, postal or home address, and so on. Essentially, this is the information we need in order to provide you with the relevant product/service or to improve your time with us.

We retain the information you provide so that you can perform various activities on our site, including commenting. This information includes, for example, your name and email address.

Information collected about you automatically

This includes information automatically stored by cookies or other tools for your internet session. For example, information about your shopping cart, your IP address, your purchase history (if any), and so on.

This information is used to improve your customer experience with us. When you use our services or browse the content of our website, your actions may be recorded in a log.

Information from our partners

We collect information from our trusted partners with confirmation that they have a legal basis to share that information with us. This is information you have provided to them directly, or that they have collected about you on another legal basis.

See the list of our partners here.

Publicly available information

We may collect information about you that is publicly available.

How we use your personal data

We use your personal data to:

provide you with our services (e.g., account registration; providing products/services you have requested; communicating with you; notifying you of changes to services);
improve your customer experience;
comply with a legal or contractual obligation.

We use your personal data on a lawful basis and/or with your consent.

In connection with entering into or performing a contract

to identify you;
to provide you with a service, or to send/offer you a product;
to contact you for the purpose of making a sale or invoicing;

On the basis of legitimate interest

to send you personalised offers (from us and/or from our carefully selected partners);
to administer and analyse our customer database (shopping behaviour and history) in order to improve the quality, variety, and availability of the products/services we offer/provide;
to create customer satisfaction surveys;

Unless you tell us otherwise, we consider it part of our legitimate interest to offer you products/services that are similar or identical to your purchase/visit history.

With your consent

to send you newsletters and campaign offers (from us or from our carefully selected partners);
for other purposes for which we have requested your consent;

We process your personal data to fulfil obligations arising by law, and/or we use your personal data for opportunities provided by law.

We reserve the right to anonymise the personal data we have collected and use it in that form. We will use data outside the scope of this Policy only when it has been anonymised.

We retain payment/billing information and other information collected from you for as long as necessary for accounting purposes or other legal obligations, but no longer than required by law.

We may process your personal data for additional purposes that are not mentioned here, but that are compatible with the original purpose for which the data was collected. To do so, we have taken care to:

ensure that the relationship between the purposes, the context, and the nature of the personal data is appropriate for further processing;
ensure that further processing does not harm your interests, and to provide appropriate safeguards for the processing.

We will inform you of any additional processing and its purposes.

Who else has access to your personal data

We do not share your personal data with strangers. In some cases, your personal data is provided to our trusted partners in order to deliver the service to you or to improve your experience as our customer.

We only work with data processing partners who can ensure an adequate level of protection for your personal data. We disclose your personal data to third parties or government authorities when we are legally required to do so. We may disclose your personal data to third parties if you have consented to it, or if there are other legal grounds for doing so.

How we protect your personal data

We make every effort to protect your personal data. We use security protocols for communication and data transfer (such as HTTPS). We use anonymisation and pseudonymisation where appropriate. We monitor our systems for possible weaknesses and attacks.

Important: Despite our best efforts, we cannot guarantee the security of information. We do, however, promise to notify the relevant authorities of any data breach. We will also notify you if there is a threat to your rights or interests. We will do everything reasonably within our power to prevent a security breach and to assist the authorities if one does occur.

If you have an account with us, please take care to keep your username and password confidential.

Children

We do not intend to collect, or knowingly collect, information from children. Our services are not directed at children, and they are not our target customers.

Cookies and other technologies we use

We use cookies and/or other similar technologies to analyse user behaviour, administer the website, track user movements, and collect information about users. This is done to personalise and improve your experience with us.

A cookie is a small text file stored on your computer. Cookies store information that is used to support the site's functioning. Only we can access cookies created by our website. You can control cookies through your browser. If you choose to disable cookies, this may interfere with some features you wish to use on our site.

We use cookies for the following purposes:

Essential cookies – needed for important functionality (e.g., logging in with a username and password). These cookies do not collect any personal information.
Functional cookies – provide convenience and personalised features (e.g., remembering your name/email when commenting).
Analytics cookies – track the use and performance of the website and services.
Advertising cookies – deliver ads relevant to your interests and limit how often they are shown. They are usually placed by advertising networks with the website operator's permission, and may share information with other organisations, such as advertisers.

You can remove cookies stored on your computer through your browser settings. You can also control some third-party cookies using platforms designed to enhance security, such as optout.aboutads.info or youronlinechoices.com. If you'd like more information about cookies, visit allaboutcookies.org.

We use Google Analytics to measure traffic to our website. Google has its own personal data policy, which you can review on their site or here. If you'd like to opt out of Google Analytics, visit the Google Analytics opt-out page.

Supervisory authority

Commission for Personal Data Protection (Bulgaria)

Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy.