Privacy Policy

This Privacy Policy aims to inform you about the rules we follow when collecting and processing your personal data when you visit our website and purchase and/or use the products we offer.
Here you can find information about the personal data we collect, how and for what purposes we use it, to whom we disclose it, your rights as a data subject, and how to contact us or the supervisory authority for data protection.
Please note that this document applies only to the processing of the personal data listed below, which we collect when you visit the website iztok-zapad.eu and purchase the products we offer on this website. If you visit other websites of ours and/or use other services for which we collect and process your personal data, we may use the same and/or other categories of your personal data for other purposes and in a different manner. In such cases, another privacy policy will be available to you, providing relevant information on the processing of your personal data in relation to other websites and/or services.

What data do we collect and for what purposes do we use it?
We collect various categories of data depending on the purpose for which we process it, for example: to fulfill our obligations under the contract for the product you purchased from us, to offer you better customer service, to send you relevant information about other similar products we offer, and when you have voluntarily requested or agreed to the collection and processing of certain data.
Data we process when entering and fulfilling a service contract:
When you purchase a product through our website, you enter into a contract with us for the provision of this product, and we collect the following categories of personal data from you, which are necessary for fulfilling our obligations to you:
- Your name (to identify you as a customer);
- Your email address (to confirm circumstances related to your order, e.g., completion or changes to it);
- Your phone/mobile number (to contact you in case of need regarding your order, e.g., to notify you of changes or other circumstances related to the product you selected, or in case of issues with payment or delivery).
Data we process for security purposes, protection against legal claims, and to offer better services to our clients:
If you have purchased and/or used a product from us, we will continue to store information about you even after we have provided the respective product – your name, email address, (phone number), and purchase history. We do this for two reasons.
On one hand, this information is necessary to prove circumstances related to ordering and providing the product in case of any claims you may have regarding the product. The information may also be necessary if we are subject to inspection by a competent state authority where we must prove the provision of the product and other related circumstances (e.g., before the Consumer Protection Commission, the National Revenue Agency, etc.). Our legitimate interest in this case is the protection against your claims, state authorities, and other third parties.
On the other hand, we may use the information about you to maintain your customer profile, which helps us track your interest in our products and your satisfaction with them. In this case, we process your data based on our legitimate interest to monitor the development of potential clients' interest in our products and improve our offers based on the feedback we receive.
In both of the above cases, we will store your information until the expiration of the statute of limitations for public obligations according to the Tax-Insurance Procedural Code.
Data we process for our newsletter purposes:
Our website offers the option to send you current product offers through our newsletter. To do so, you need to provide only your email address (even if we already have it and process it for another purpose described above). We process this category of personal data based on our legitimate interest to keep our clients and potential clients informed about the current products, offers, and promotions we offer. We also process this data based on your voluntary consent to receive newsletters, which you express by entering your email address and clicking the subscribe button.
You can easily unsubscribe at any time by clicking the "Unsubscribe" button in any newsletter we send you.

How do we use your data?
We use your personal data solely for the purposes stated above. Although certain characteristics of the data you provide us may indicate additional personal information (e.g., your name may be an indication of religious affiliation, your email address may indicate affiliation with a certain organization, etc.), we do not monitor such characteristics and do not carry out any additional analysis or processing of email addresses and other personal data we have about you for the purpose of profiling, extracting additional information, categorizing you in any way, or making automated decisions that could have legal effects or otherwise affect you.

To whom do we provide your data?
We treat your personal data with the utmost seriousness. Within our organization, access to your personal data is granted only to employees whose immediate duties are related to the activities for which the relevant personal data is processed.
Outside our organization, we may provide your personal data to the following categories of recipients:
- Subcontractors we use to provide the products you purchased (couriers for delivery, etc.)
- Organizations to which we have outsourced specific data processing activities (companies managing client information, for storing and sending emails with our newsletters). These are companies that always act solely on our instructions and neither use your data for their own purposes nor disclose it to third parties.

Do we transfer your data outside the European Union?
According to this Privacy Policy, only a small portion of your personal data is processed outside the European Union and the EEA. The personal data we collect and process for the purpose of sending our newsletters is stored and processed on servers of an email campaign management platform located in the United States. Any transfer of your personal data outside the EEA will be carried out in accordance with appropriate international mechanisms and standards for data transfer.

How do we protect your personal data?
We make significant efforts to protect our clients, as well as subscribers to our newsletters, from unauthorized access or unauthorized alteration, disclosure, or destruction of their personal data. We only use legitimate and licensed companies for data processing that adhere to the highest standards of information security and personal data security.

Your rights regarding the processing of your personal data:
As a data subject, you have a number of rights regarding the processing of your personal data by "Iztok-Zapad" as the data controller.
You can exercise all the rights listed below by submitting a written request to "Iztok-Zapad" in free text, either personally or through an explicitly authorized representative.
You can send the corresponding request to the postal address or email address provided below. When the request is submitted electronically, it must be signed with a qualified electronic signature. We will respond to your request as quickly as possible, but no later than one month.
Please note that we will not fulfill a request made on your behalf if we cannot verify that the request is genuinely addressed by you (for example, we may not be able to verify from a request submitted by mail that you are the actual sender of the message). Therefore, in certain cases, we may ask you to submit the request in our office (to verify your identity).

Right of access to your personal data:
You have the right to receive from us information about whether we are processing personal data related to you, and if so, to access the data itself, as well as information about:
- the purposes of processing;
- to whom we provide your personal data;
You have the right to request:
- the correction of your personal data if you believe they are inaccurate or incomplete;
- the right to withdraw consent at any time. After the withdrawal of your consent, we will cease processing your personal data based on your consent, but the withdrawal will not affect the lawfulness of the processing based on consent before it was withdrawn. Nevertheless, we may continue to process the same personal data if there is another legal basis (other than consent) for processing the data and/or one of the exceptions in point 9.5 applies (e.g., the data is necessary for providing a service you purchased from us).
- the right to object to processing – you may object to the processing of your personal data where we process it based on public interest or our legitimate interests, where you believe that in your specific case, this processing is incompatible with the protection of your interests, rights, and freedoms. In such cases, if we cannot prove that there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, or that the processing is necessary for the establishment, exercise, or defense of legal claims, we will stop processing your personal data.
When we process your personal data for the purpose of direct marketing (as is the case with data processing for sending newsletters), you can object to this processing of data, and we will immediately cease processing for this purpose. In addition to submitting a request in this regard, you may show your intention to stop processing for sending newsletters by unsubscribing from the subscription for all newsletters via the unsubscribe link in each email we send.

Right to erasure and data portability:
You have the right to request the deletion of personal data related to you.
You have the right to receive the personal data concerning you and that you have provided to us in a structured, commonly used, and machine-readable format and the right to transfer this data to another administrator without hindrance from our side, when we process the data based on your voluntary consent or when the processing of the data concerns the performance of a contract between us and you.
For the purpose of exercising your right to data portability, you have the right to receive direct transfer of your personal data from Iztok-Zapad to another administrator, as long as this is technically feasible.

Right to lodge a complaint with a supervisory authority:
If you believe that we are processing your personal data in violation of applicable legislation, including but not limited to the General Data Protection Regulation and the Personal Data Protection Act, you have the right to file a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.
In the Republic of Bulgaria, the competent supervisory authority is the Commission for Personal Data Protection.
"Iztok-Zapad TM" Ltd. is registered as a "Personal Data Controller" in the "Register of Personal Data Controllers and their Records" with the Commission for Personal Data Protection, with ID 117184 from March 23, 2011.