Information about the company:
Name: Three DogsLTD
VAT Number: BG207321135
Address: „Yoan Ekzarh“Str. 45, fl.3, ap.6
Phone number: +359882262926
E-mail: stela@3dogs.bg
Website: www.3dogs.bg
Information about the supervising authority regarding protection of personal data:
Name: Commission for Protection of Personal Data
Address: Sofia 1592, bul. „Prof. Tzvetan Lazarov” № 2
Phone number: +359 2 915 3 518
Website: www.cpdp.bg
Three Dogs LTD (hereinafter referred to as the "Administrator" or the "Company") worksaccording to the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and Council as of April 27th2016 in processing of personal data and regarding free exchange of such data. This information is intended to inform you about all aspects of the processing of your personal data by the Company and the rights you have in relation to this processing.
Reasons for collecting, processing and storage of your personal data
Art.1.The administrator collects and processes your personal data regarding the usage of the online shop www.3dogs.bg and entering into contractual relationship as per Art.6.1 of the Regulation (EU) 2016/679 (GDPR), and specifically in regards to:
Aim and principles in collecting, processing and storage of your personal data
Art. 2.(1) We collect and process the personal data you provide regarding the use of the online shop and the contractual relationship with the us for the following purposes:
(2) We observe the following principles when processing your personal data:
(3) When processing and storing personal data, the Administrator may process and store personal data in order to protect the following legal interests:
What kind of personal data is collected, processed and stored by us
Art. 3. (1) The company performs the following operations with the personal data provided by you for the following purposes:
(2)The administrator processes the following personal data and information categories for the following purposes:
Purpose for collection of data: Establishing a connection with the customers and sending information to them for the purpose of registering an account as well as sending a newsletter.
Reason for processing your personal data: With the acceptance of the general terms and conditions and registration in the online shop or placing an order without registration, or upon concluding a written contract, a contractual relationship is created between the Administrator and you, on the basis of which we process your personal data - art. . 6, para. 1, b. (b) GDPR. Your data for sending a newsletter is processed based on your express consent - Art. 6, para. 1, b. (a) GDPR
Purpose for collection of data: Execution of the administrator’s obligation for sale and delivery of the purchased goods.
Reason for processing your personal data: With the acceptance of the general terms and conditions and registration in the online shop or placing an order without registration, or upon concluding a written contract, a contractual relationship is created between the Administrator and you, on the basis of which we process your personal data - art. . 6, para. 1, b. (b) GDPR.
Purpose for collection of data: Filling in additional data by the customer in their account.
Reason for processing your personal data: You have given express consent to the processing of your personal data for one or more specific purposes - 6, para. 1, b. (a) of the GDPR at the time of registration in the online shop. The provision of these data is not mandatory for registration.
(3) The administrator does not collect or process personal data regarding the following:
(4) The personal data collected by the administrator are from the person to which they pertain.
(5) We do not execute automated decision making with personal data.
Art. 4. (1) We perform the following operations with the personal data provided by you, as legal representatives or proxies of legal entities-trading partners, for the following purposes:
(2) The personal data is collected by the Administrator from the persons to whom they relate and from the Commercial Register at the Registration Agency.
(3) We do not execute automated decision making with personal data.
Art. 5. The administrator can use the so-called "cookies" for the purposes of providing full functionality of the website, improving the user experience, statistical purposes, ease of access, etc., to which you agree by using our website. You can control and/or delete cookies at any time through the settings of your browser. "Cookies" do not constitute personal data and are not used to identify visitors and users of the e-shop.
Collection of personal data period
Art. 6. (1) The administrator stores your personal data for a period not longer than the existence of your profile in an online shop. After deleting your account, the Administrator shall take the necessary care to delete and destroy all your data without undue delay or to anonymize it (i.e. to make it in a form that does not reveal your identity).
(2) The administrator processes your personal data, which you have provided when placing an order without registration in the electronic store, until the order is completed, unless you have given your express consent when placing the order for your data to be processed for the purposes of improving the service, providing recommended content for you, individual terms, promotions, as well as for statistical purposes.
(3) The Administrator stores your personal data provided in connection with online orders for a period of 5 years for the purpose of protecting the Administrator's legal interests in legal or administrative disputes with users of the online store.
(4) The Administrator notifies you in the event that the data storage period needs to be extended in order to fulfill a legal obligation or in view of legitimate interests of the Administrator or otherwise.
(5) The administrator stores the personal data that it is necessary to keep by virtue of the applicable legislation for the relevant stipulated period, which may exceed the period of existence of your profile in the electronic store or until the completion of the order.
Art. 7. The Administrator stores the personal data of the legal representatives of its commercial partners for the period of performance of the contract, to comply with the legitimate interests and legal obligations of the Administrator, and this period may exceed the term of the concluded contract.
Transmission of your personal data for processing
Art. 8. (1) The administrator may, at its own discretion, transfer part or all of your personal data to processors of personal data for the fulfillment of the processing purposes to which you have agreed, subject to compliance with the requirements of Regulation (EU) 2016/679 (GDPR) .
(2) The administrator notifies you in case of intention to transfer part or all of your personal data to third parties or international organizations.
Your rights in relation to collection, processing and storage of personal data
Right of withdrawal from collection and processing of personal data
Art. 9. (1) If you do not want the personal data provided by you to be processed for marketing purposes and receiving a newsletter, you can withdraw your consent to processing at any time by filling in the consent withdrawal form in Appendix No. 1 or by requesting in free text, and email it to us.
(2) After we receive your request, we will send you a letter with detailed instructions for your verification as a recipient of newsletters and a subject of the personal data for which withdrawal of consent has been requested, to the email address you have indicated for receiving newsletters and advertising messages .
(3) The withdrawal of consent does not affect the legality of the processing of personal data, which the Administrator has carried out up to this point.
Access right
Art. 10. (1) You have the right to request and receive confirmation from the Administrator as to whether personal data related to you is being processed by sending a request in free text by email.
(2) You have the right to access the data related to you, as well as the information related to the collection, processing and storage of your personal data.
(3) After we receive your request, we will send you aemail with detailed instructions for your verification as a subject of the personal data to which access is requested, to the email address you used to register or place orders in the e-shop.
(4) After verification, according to paragraph 3, the Administrator shall provide you with a copy of the processed personal data related to you in electronic or other appropriate form.
(5) Providing access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of repetitive or excessive requests.
Right to change and add personal data
Art. 11. (1) You can change or complete inaccurate or incomplete personal data related to you at any time through the "Profile edit" option.
(2) You can change or complete inaccurate or incomplete personal data related to you directly through your profile on the website or by making a request to the Administrator by email, using the form in Appendix No. 4 or by a request in free text.
Right to erasure ("to be forgotten")
Art. 12. (1) You have the right to request from the Administrator the deletion of part or all of your personal data, and the Administrator has the obligation to delete them without unnecessary delay, when any of the following reasons is present:
(2) The Administrator is not obliged to delete the personal data if he/she stores and processes them to:
(3) In order to exercise your right to be forgotten, it is necessary to send by e-mail a request to delete your personal data that the Administrator processes, by filling in the form in Appendix No. 2 or by a request in free text, after which the Administrator will send to the email you used to register or place orders in the e-store, a letter with detailed instructions for your verification as a user of the store and the subject of the personal data for which deletion is requested.
(4) After we verify the identity of the person who filed the request with the person whose personal data is being collected in a way specified in the instructions sent to you, we will delete all your data that we process according to paragraph 3.
(5) If there is an order placed by you that is being processed, the earliest time you can ask for "to be forgotten" is after the successful completion of the current order.
Right to limitation
Art. 13. You have the right to request the Administrator to restrict the processing of data related to you sending us a request to do so in free text by email when:
(2) After we receive your request, we will send you an e-mail to the address you have used to register or place orders in the e-store, a letter with detailed instructions for your verification as a user of the e-store and as a subject of the personal data for which restriction of processing had been requested.
(3) After completion of verification process foreseen in paragraph 2, The Company will stop processing your data, but will not remove the posts you have made in the online store, if any.
Right of portability
Art. 14. (1) If you have consented to the processing of your personal data or the processing is needed for the execution of the contract with the Administrator, or if your data is processed automatically, you may:
(2) You can exercise the right of portability by e-mailing us the completed form according to Appendix No. 3 or a request in free text, after which the Administrator will send to the e-mail you used to register or place orders in the e-store, a letter with detailed instructions for your verification as a store user and as a subject of the personal data for which portability has been requested.
(3) After completion of the verification process foreseen in paragraph 2, The Company will send the data we processes for you in XML format to the e-mail you have specified.
Right to receive information
Art. 15. You may request the Administrator to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested were disclosed. The Administrator may refuse to provide this information if it would be impossible or would require a disproportionate effort.
Right to object
Art. 16. You may object at any time to the Administrator's processing of your personal data including if it is processed for the purposes of profiling or direct marketing.
Your rights in case of a breach of the security of your personal data
Art. 17. (1) If the Administrator detects a violation of the security of your personal data, which may create a high risk for your rights and freedoms, he/she shall notify you without undue delay of the violation, as well as of the measures that have been taken or are about to be taken.
(2) The Administrator is not obliged to notify you if he/she:
· has taken appropriate technical and organizational measures to protect the data affected by the security breach;· has subsequently taken measures to ensure that the breach will not result in a high risk to your rights;· notification would require a disproportionate effort. Persons to whom your personal data is provided
Art. 18. (1) For the purposes of processing your personal data and providing the service in its full functionality, the Administrator may provide the data to the following persons who are data processors:
Personal data processor : Purpose of personal data processing:
............................................... .....................................................................
............................................... .....................................................................
(2) Personal data processors comply with all legal and security requirements when processing and storing your personal data.
Art. 19. The Administrator does not transfer your data to third countries.
Art. 20. In case of a violation of your rights under the above or applicable personal data protection legislation, you have the right to file a complaint with the Personal Data Protection Commission as follows:
Name: Personal Data Protection Commission.
Headquarters and management address: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Address for correspondence: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg
Art. 21. You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, the forms are not mandatory and you may send your requests in any form that contains a statement to that effect and identifies you as the data subject.
Art. 22. If the consent refers to a transfer, the Administrator shall describe the possible risks for the transfer of the data to third countries in the absence of a decision for adequate protection and suitable means of protection.
APPENDIX No. 1 - REQUEST FOR WITHDRAWAL OF CONSENT FOR PROCESSING PURPOSES
Your Name*: .........................
Your e-mail address that you have used in the e-shop*: .........................
Feedback data (e-mail)*: .........................
TO:
Name: .........................
BULSTAT No./ VAT Number: .........................
Headquarters and management address: .........................
Address for correspondence: .........................
Phone no: .........................
E-mail: .........................
Website: .........................
I, do hereby withdraw my consent to processing of my personal data for the purposes of receiving newsletters, advertising messages or other marketing materials, being aware of the conditions for withdrawing consent in accordance with Electronic Store Mandatory Information regarding the rights of Personal Data Protection.
In case of a breach of your rights under the above or applicable data protection legislation, you have the right to file a complaint with the Commission for Personal Data Protection as follows:
Name: Personal Data Protection Commission.
Headquarters and management address: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Address for correspondence: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg
APPENDIX No. 2 - REQUEST "TO BE FORGOTTEN" - TO HAVE YOUR PERSONAL DATA DELETED
Your Name*: .........................
Your e-mail address you have used in the e-shop*: .........................
Feedback data (e-mail)*: .........................
TO:
Name: .........................
BULSTAT No./ VAT Number: .........................
Headquarters and management address: .........................
Address for correspondence: .........................
Phone no: .........................
E-mail: .........................
Website: .........................
Please, delete in your database all personal data related to me that you collect, process and store, no matter whether provided by me or by third parties according to the specified identification.
I do hereby declare that I am aware of the fact that some or all of my personal data may continue to be processed and stored by the Administrator for the purposes of fulfilling his/her legal obligations.
In case of a breach of your rights under the above or applicable data protection legislation, you have the right to file a complaint with the Commission for Personal Data Protection as follows:
Name: Personal Data Protection Commission.
Headquarters and management address: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Address for correspondence: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg
APPENDIX No. 3 - REQUEST FOR PORTABILITY OF PERSONAL DATA
Your Name*: .........................
Your e-mail address you have used in the e-shop*: .........................
Feedback data (e-mail)*: .........................
TO:
Name: .........................
BULSTAT No./ VAT Number: .........................
Headquarters and management address: .........................
Address for correspondence: .........................
Phone no: .........................
E-mail: .........................
Website: ......................
Please, transfer in XML format all personal data related to me that is being collected, processed and stored in all your database to:
e-mail: ........................
Receiving data Administrator : .........................
Name: ........................
Identification number (EIK, BULSTAT, reg. number in PDPC): .........................
E-mail: ........................
In case of a breach of your rights under the above or applicable data protection legislation, you have the right to file a complaint with the Commission for Personal Data Protection as follows:
Name: Personal Data Protection Commission.
Headquarters and management address: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Address for correspondence: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg
APPENDIX No. 4 - REQUEST TO HAVE YOUR PERSONAL DATA RECTIFIED
Your Name*: .........................
Your e-mail address you have used in the e-shop*: .........................
Feedback data (e-mail)*: .........................
TO:
Name: .........................
BULSTAT No./ VAT Number: .........................
Headquarters and management address: .........................
Address for correspondence: .........................
Phone no: .........................
E-mail: .........................
Website: ......................
Please, amend the following personal data related to me that you collect, process and store, no matter whether provided by me or by third parties as follows:
Data subject to rectification:
................................................
Please amend them as follows:
................................................
In case of a breach of your rights under the above or applicable data protection legislation, you have the right to file a complaint with the Commission for Personal Data Protection as follows:
Name: Personal Data Protection Commission.
Headquarters and management address: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Address for correspondence: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg