Cookie policy

The protection of personal data is of great importance to " Asto Gold " Ltd, as the controller of the personal data that you provide as users of our website and e-shop. Our goal is to make the process of processing your personal data completely open and transparent to you.

DATA CONTROLLER, CONTACT DETAILS
" The registered office and registered address of the company is located at 4000 Hristo Botev Boulevard, Plovdiv, with UIC 160070762 and is represented by the manager Plamen Todorov Kuzmov. The Company operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR. The purpose of this information is to inform customers about all aspects of the processing of their personal data by " Asto Gold " Ltd and about the rights they have in relation to this processing.
If you have any questions about our data protection policy, you can contact us by calling +359 888 787 907 and by sending a message to sales@astogold.bg or to our mailing address " Asto Gold " Ltd. Plovdiv 4000, Hristo Botev Boulevard 99.

II . CATEGORIES OF PERSONAL DATA COLLECTED AND USED

(1) As a personal data controller, " Asto Gold " Ltd. collects and processes the data provided by the users of the website and the e-shop as follows:
-individual contact data necessary for identification, order processing, conclusion and execution of a distance purchase contract such as names, email, delivery address and telephone number;

-order and payment information and history and related banking information;

-credit information;

-third party information - user name when purchasing a voucher.

-personal data provided in connection with a registered customer account - account number and purchase history;

-user device information and online identifiers such as IP address, device used, location, device software, cookie data (see our Cookie Policy).

(2) " Asto Gold " Ltd. does not collect or process personal data that:

-reveal racial or ethnic origin;

-disclose political, religious or philosophical beliefs, or trade union membership;

-genetic and biometric data, data on sex life or sexual orientation.

III. GROUNDS FOR THE COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA

"Asto Gold" Ltd. collects and processes personal data in connection with the use of the website and the e-shop at astogold.bg, based on one or more of the following grounds:
- explicit consent obtained from the user to whom the data relates;

- pre-contractual relations - actions preceding the conclusion of a distance contract, undertaken at the request of the user;

- performance of obligations of Asto Gold Ltd. under a distance contract concluded with a customer to whom the data relate - by accepting the terms and conditions and by registering in the e-shop or by placing an order without registration and concluding a contract, a contractual relationship is established between Asto Gold Ltd. and the user/customer, on which basis Asto Gold Ltd. processes the personal data of that customer.

- compliance with a legal obligation of " Asto Gold " Ltd.

PURPOSES AND PRINCIPLES FOR THE COLLECTION, PROCESSING AND STORAGE OF PERSONAL DATA
(1) " Asto Gold " Ltd. collects and processes the personal data provided by the customer in connection with the use of the website and e-shop for the following purposes:
-creating a customer profile and providing full functionality when using the website and e-shop;

- the processing of orders, the conclusion of distance sales contracts, the execution of deliveries.

- identification and exercise of rights as a party to a distance sales contract, including registration and handling of claims, right of withdrawal and return of jewellery;

-accounting purposes - issuing invoices for delivery.

-statistical and market research;

- sending messages and/or materials for direct marketing purposes by e-mail, short messages by telephone to advertise our jewellery, inviting to participate in campaigns and taking advantage of special offers and promotions, always and at any time granting the customer the right to object to receiving such messages.

(2) " Asto Gold " Ltd. complies with the following principles when processing personal data:

- lawfulness, fairness and transparency;

-limitation of the purposes of processing;

-relevance to the purposes of the processing and minimisation of the data collected;

(3) " Asto Gold " Ltd. may process and store personal data for the purpose of protecting its legitimate interests:

- performance of its obligations to the National Revenue Agency, the Ministry of the Interior and other state and municipal authorities.

STORAGE PERIOD OF PERSONAL DATA
(1) " Asto Gold " Ltd. stores personal data for a period no longer than the existence of the customer profile in the e-shop, respectively within a reasonable period after the order has been placed as a "guest", necessary for the servicing of the order and for securing the rights of the customer with regard to the potential return of goods.
(2) After the deletion of the customer profile, respectively after the expiry of the statutory period for the return of goods, " Asto Gold " Ltd. shall take the necessary care to delete and destroy all customer data without undue delay or to put them in a form that does not reveal their identity.

(3) " Asto Gold " Ltd shall keep personal data provided in connection with orders placed via the ELECTRONIC SHOP for the duration of the customer's account, and the accounting documents relating to an order shall be kept for the relevant statutory period.

(4) " Asto Gold " Ltd. undertakes to notify the user if it is necessary to extend the storage period of his personal data in order to comply with a statutory obligation or in view of the legitimate interests of " Asto Gold " Ltd.

(5) " Asto Gold " Ltd. shall store the personal data in respect of which there is a statutory storage requirement under the applicable legislation for the relevant prescribed period, which may exceed the period of existence of the user profile in the online shop or the time of completion of the order.

TRANSMISSION OF PERSONAL DATA FOR PROCESSING
(1) " Asto Gold " Ltd. does not provide personal data to third parties, except in the cases expressly listed.
(2) In order to organize the work, " Asto Gold " Ltd. may transmit part or all of the user's personal data to another person/persons - processors of personal data, who process them in order to fulfill the purposes and grounds to which the user has agreed in accordance with this Policy, subject to the requirements of the GDPR, as well as to their suppliers (such as courier, accounting firm), who process them in order to carry out the delivery and the execution of the distance contract concluded with the customer. These processors shall comply with all legality and security requirements for the processing and storage of personal data.

VII. ACCESS TO PERSONAL DATA AND DATA PORTABILITY

(1) Each registered customer has the possibility through his/her user profile to check and edit the data processed by " Asto Gold " Ltd. about him/her.
(2) Each user has the right to request at sales@astogold.bg and obtain from " Asto Gold " Ltd. information on the personal data stored by the company, the category of these data and the purposes for which they are used and processed and the recipients or categories of recipients to whom the data are disclosed.

(3) " Asto Gold " Ltd. shall provide the personal data processed to the user free of charge in electronic form to the email address associated with the customer profile or to another email address indicated by the user.

VIII. CORRECTION OR COMPLETION OF PERSONAL DATA

Each customer may correct or complete his personal data directly through his user profile or by sending a request to the e-mail sales@astogold.bg.
WITHDRAWAL OF CONSENT TO THE PROCESSING OF PERSONAL DATA. DELETION OF A REGISTERED CUSTOMER PROFILE
(1) A customer who does not wish all or part of his or her personal data to continue to be processed by " Asto Gold " Ltd. for any or all of the processing purposes may withdraw his or her consent to processing at any time by sending a message to that effect to e-mail sales@astogold.bg.
(2) By withdrawing consent to the processing of personal data that is mandatory for the creation and maintenance of an e-shop profile, the user profile will be deactivated. In this case, the user may continue to browse the e-shop and the products offered, place orders as a guest or make a new registration.

(3) If an order has been received and is in the process of being processed, the earliest point at which the customer for this order may withdraw his consent to processing is upon successful completion of the order.

(4) The customer may at any time withdraw consent to the processing of personal data for direct marketing purposes by sending a message to that effect to sales@astogold.bg.

(5) The user has the right at any time to request " Asto Gold " Ltd. to notify the third parties to whom his personal data have been disclosed of any erasure, rectification or blocking carried out by the data controller, except where this is impossible or involves excessive effort.

(6) "Asto Gold" Ltd. shall not delete the data which it has a legal obligation to store, including for the purpose of defending legal claims made against the company or proving its rights.

DIRECT MARKETING
(1) " Asto Gold " Ltd. carries out direct marketing by sending notifications of special offers and promotions, campaigns organized by the company, any other advertising messages and materials by e-mail to users and customers of the e-shop.
(2) The customer may at any time opt out of receiving the above communications by objecting to the processing of his personal data for direct marketing purposes.

(3) " Asto Gold " Ltd. undertakes to notify users and customers of the e-shop before their personal data is disclosed for the first time to third parties or used on their behalf for direct marketing purposes and has the right to object to such disclosure or use at sales@astogold.bg.

USER RIGHTS IN THE EVENT OF A PERSONAL DATA BREACH
If " Asto Gold " Ltd. becomes aware of a breach of the security of a user's personal data which is of a nature to pose a risk to his/her rights and freedoms, the company undertakes to notify him/her without undue delay by email of the breach, as well as of the measures taken or to be taken.
XII COMPETENT SUPERVISORY AUTHORITY

In the event that he/she considers that his/her personal data is stored, processed and/or used in contravention of this Policy or in contravention of applicable data protection legislation, any user shall have the right to lodge a complaint with the Data Protection Commission as follows:
Personal Data Protection Commission
Headquarters and registered office. The headquarters and registered office of the Personal Data Protection Authority are located at 1592 Sofia Blvd. "1592, Prof. No.: 2
Address for correspondence. Address: 1. "Prof. No. 2 Tsvetan Lazarov
Website: www.cpdp.bg