ПРАВИЛА ЗА ПОВЕРИТЕЛНОСТ

 

Номер на версията

3

Дата, от която встъпва в сила

25 май 2018 г.

Дата на последна актуализация

14/07/2021

Политиката за поверителност се разделя на четири части:

  • част A – уводна информация;
  • част Б – информация за това, как се обработват личните Ви данни;
  • част В – информация за правата Ви във връзка с обработването на личните Ви данни;
  • част Г – информация за използването на т. нар. файлове бисквитки.

А.1. Какво представлява политиката за поверителност? ?

Below in the privacy policy we describe the way “VE BULGARIA” Ltd. processes your personal data when you use our services offered through our website (” Website “) and the services provided on site in each store in the country.

“VE BULGARIA” Ltd. respects all data provided both actively and passively by persons who visit the website, ie. the users of the website (“ Users ”) and the customers in the stores of “VE BULGARIA” EOOD, and takes care of ensuring the respective protection of the collected data.

A.2. contact with us

You can contact “VE BULGARIA” Ltd. using the Контакти field   or using the following contact details :

Email

info@visionexpress-bg.com

Mailing address :

VE BULGARIA EOOD

Sofia, 1303, 30 Alexander Stamboliyski Blvd.

phone

02/869 00 71

Identification of the administrator of personal data

VE BULGARIA EOOD , UIC 175436176

Sofia, 1303, 30 Alexander Stamboliyski Blvd. 

Legal contact for privacy matters:

Esen Fikri, Sofia, 1000, „Tri Ushi “ Srt, №6А, bl.5, fl.2, office 10, tel. 02/ 4233717, email dpo@visionexpress-bg.com .

A.3. Changes to the privacy policy

WE BULGARIA EOOD may make changes to this privacy policy at any time by informing consumers and customers. This is done by publishing the updated version of the privacy policy on the website and/or providing a copy of the Privacy Policy Terms in the VE stores and office. 

A.4. Definitions

The terms used in this privacy policy should be understood as follows:

The concept

Description

Personal data

· Any information relating to an identified natural person or an identifiable natural person (“data subject”);

· An identifiable natural person is an identifiable person, directly or indirectly, in particular by an identifier such as a name, identification number, location data, online identifier or one or more features specific to the natural person. , the physiological, genetic, mental, intellectual, economic, cultural or social identity of that natural person, as well as any other information determined by applicable law as personal data;

Special (sensitive) categories of personal data

· Personal data revealing racial or ethnic origin, political views, religious or philosophical beliefs, or trade union membership and the processing of genetic data, biometric data for the unique identification of an individual, health data or data on the sexual life of an individual person or sexual orientation, as well as any other personal data that are determined by applicable law as special.

Processing of personal data

· Processing of personal data means any operation or set of operations carried out with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing through transmitting, disseminating or otherwise making the data available, arranging or combining, restricting, deleting or destroying it;

Personal data administrator

·Personal data controller is any natural or legal person, public body, agency or other structure that alone or jointly with others determines the purposes and means for the processing of personal data; where the purposes and means of such processing are determined by EU law or the law of a Member State, the controller or the specific criteria for determining it may be laid down in Union law or in the law of a Member State;

Data subject

·Any living natural person who is subject to personal data stored by the Administrator

Consent of the data subject

·Any freely expressed, specific, informed and unambiguous indication of the data subject’s will, by means of a statement or clearly confirming action expressing his or her consent to the processing of personal data relating to him or her;

Kid

·The General Data Protection Regulation (Regulation 2016/679) defines anyone under the age of 16 as a child, although this can be reduced to 13 by the law of the Member State. The processing of a child’s personal data is lawful only if a parent or guardian has given consent. The administrator shall make reasonable efforts to verify in such cases that the holder of parental responsibility for the child has given or is authorized to give his or her consent.

Profiling

·Any form of automated processing of personal data, in the form of the use of personal data to assess certain personal aspects relating to a natural person, and in particular to analyze or forecast aspects relating to the performance of the professional duties of that natural person a person, his economic status, health, personal preferences, interests, reliability, behavior, location or movement;

Violation of personal data security

· A breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data that is transmitted, stored or otherwise processed

Recipient

· A natural or legal person, public authority, agency or other entity to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the context of a specific investigation in accordance with Union law or the law of a Member State shall not be considered as “recipients”; the processing of such data by those public authorities shall comply with the applicable rules for the protection of data according to the purposes of processing

A.5. Consent – additional information:

  1. By “consent”, “VE BULGARIA” Ltd. will mean: any freely expressed, specific, informed and unambiguous indication of the will of the data subject, by means of a statement or clearly confirming action, which expresses his consent to the personal data related to him to be processed.

The data subject may withdraw his consent at any time.

The consent of the data subject is required whenever there is no alternative legal basis for the processing.

  1. VE BULGARIA Ltd. accepts that “consent” has been given only in the cases in which the data subject has been fully informed about the planned processing and has expressed his consent without being pressured.

Consent obtained under duress or on the basis of misleading information will not be a valid basis for the processing of personal data.

  1. Consent cannot be inferred from the absence of a response to a communication from the data subject. There must be active communication between the administrator and the subject in order for there to be consent. The administrator must be able to demonstrate that consent has been obtained for the processing activities.
  2. For special categories of data, explicit written consent must be obtained, unless there is an alternative legal basis for processing.
  3. The consent of the data subject to the processing of personal or special categories of data shall be given – on the basis of the relevant consent document provided by the data subject to the controller for each specific purpose of processing. When the subject signs a contract, consent is not required because his data is collected on another legal basis.

When VE BULGARIA Ltd. processes personal data of children, permission must be obtained from the exercise of parental rights (parents, guardians, etc.). This requirement applies to persons under 16 years of age.

A. 6 Legal provisions on confidentiality:

The way in which your personal data is processed – in addition to the rules and policies adopted by VE BULGARIA Ltd. – is also determined by legal provisions, such as Regulation (EU) № 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation – ORD), the so-called GDPR (General Data Protection Regulation) as well as the National Data Protection Act.

These rules regulate, among other basic provisions, your rights related to personal data and the legal obligations of VE BULGARIA Ltd. related to the processing of your personal data.

.1 Who is the administrator of your personal data

 “VE BULGARIA” Ltd., entered in the Commercial Register at the Registry Agency – Sofia with UIC 175436176, with registered office and address of management in Sofia, 1303, Vazrazhdane district, 30 Alexander Stamboliyski Blvd., is administrator of your personal data collected through the website or in connection with the services provided by the company.

.2. What data is processed?

 VE BULGARIA Ltd. collects and processes the personal data of :

  • customers
  • visitors of stores
  • job seeking applicants
  • employees and individuals on civil contracts with VE BULGARIA

The personal data collected and processed by VE BULGARIA Ltd. include:

  • contact and identification data -names, unique civil number, address, e-mail address, mobile phone number, number and issue date of national ID;
  • address data -address of residence ;
  • verification data -age ( eg when booking a visit );
  • bank data – when paying for goods and services though bank services
  • data on education, professional qualification and experience; economic and financial information (income, financial condition, tax situation, etc.); marital status, children and social status; data on health, convictions and violations – for our employees and persons with whom we have concluded civil contracts;
  • data on education, professional qualification and experience – for job candidates;
  • data collected through video surveillance and video recording of persons visiting and located in our commercial sites.

IMPORTANT!

“VE BULGARIA” Ltd. collects and processes special (sensitive) personal data related to the health (medical) condition of the subjects, only on the basis of their explicit written consent and only for the purposes specified in B.4.
They are collected and processed in order to ensure the highest possible quality and efficiency of the services offered by VE BULGARIA EOOD, tailored to the specific ophthalmological condition of the data subject, which are absolutely necessary for the execution of customer orders for purchase / manufacture. of vision correction products.”VE BULGARIA” Ltd. collects and processes personal data of children (individuals under 14 years of age) only on the basis of explicit written consent given by their parents / guardians / trustees. For persons aged 14 years. up to 18 years of age, the consent must be given personally and by a parent / guardian.Video surveillance: In order to ensure the safety of employees and visitors, protection of property, control over labor discipline in all commercial sites managed by us, video surveillance is carried out. The video surveillance system uses webcams, the recordings are stored for 30 days, after which they are destroyed by deletion, outsiders do not have access to the recordings. Records may be kept outside the above period in cases where it is necessary for the purpose of investigating crimes or infringements.

.3. Is it mandatory to provide personal data ?

The provision of data is voluntary

In cases where no data has been provided or consent for their collection and processing has been withdrawn, when the relevant data are necessary for creating an individual profile on the Internet platform, providing the service or providing answers to inquiries and complaints, “VE BULGARIA” Ltd. will not be able to provide you with services or inform about new products and promotional campaigns.

.4. What is the purpose of my data processing ?

Data obtained for specific purposes should be collected and processed only for those purposes that correspond to the processing activities.

The personal data you receive will be used, including but not limited to:

  1. To provide an opportunity to provide you with services and products of the highest quality and degree of compliance with your individual needs, specified by you or following your condition;
  2. To provide an opportunity to respond to your inquiries, opinions and recommendations;
  3. To provide an opportunity, we send you information related to direct marketing – special campaigns, promotions, our new products and services and other similar advertising purposes;
  4. For the conclusion and execution of contracts;
  5. For fulfillment of legal obligations
  6.  To protect our legitimate interests;
  7. To ensure the safety of employees and visitors, protection of property, resp. to detect encroachments.

.5. How long is my data stored?

Your data will be stored for the following periods:

Legal basis for processing

Period of personal data processing

Execution of contracts

The personal data of customers and users will be stored as long as it is necessary to use for the functioning of the individual account, to provide the agreed services and to prepare a response to a request or complaint, but not longer than:

(i) the time the account was deleted, or

(ii) the examination of the complaint, or

(iii) the submission of complaints.

Legal obligations of VE BULGARIA Ltd.

In some cases, legal provisions impose an obligation to keep personal data for a longer period (eg provisions of tax legislation).

In these cases, your personal data will be stored for the period specified in the relevant law.

Consent given

The data for the collection and processing of which you have given your consent will be processed by SE BULGARIA Ltd. until you withdraw your voluntary consent for their processing.

Legally regulated interest of the  administrator

Your data will be processed until you clearly object to its processing.

.6. Where is my data processed?

The personal data of customers and consumers are processed and stored in the European Economic Area.

In cases where data transfer to non-EU countries is required, this is done only to countries that provide an appropriate level of protection of the rights and freedoms of individuals and meet the conditions for an adequacy decision.

Art. 45 par. 8 of the DPA – the Commission publishes in the Official Journal of the European Union and on its website a list of third countries, territories and specific sectors in a third country and international organizations that it has decided to provide or no longer provide an adequate level of protection. More about the adequacy policy in the transfer of personal data:

https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en

.7. To whom is my data provided?

Recipients of your personal data are the following subjects: government agencies; private entities – partners of the administrator.

 In order to fulfill the obligations of “VE BULGARIA” EOOD, the personal data of the clients may be transferred to third parties assisting in the execution of the orders, for example courier companies, as well as to entities cooperating with “VE BULGARIA” EOOD, for example providing medical services. examinations, prescriptions and other services ordered by the client.

.8. Are decisions that directly affect me automatically made based on my personal data?

Customer personal data is not used to make decisions that are based solely on automated processing, including profiling, have legal consequences for customers or directly affect them .

According to the DPA, the data subject has the following rights with regard to the processing of his personal data:

  • To receive information about the personal data related to him, which are processed by the controller, and for the purpose for which they are processed, including access to the data, as well as information about the recipients of this data and the third parties to whom the data are transmitted;
  • Request a copy of your personal data from the administrator;
  • To ask the administrator to correct personal data when they are inaccurate and when they are no longer up to date;
  • Require the administrator to delete personal data (right to be “forgotten”);
  • To ask the administrator to limit the processing of personal data, in which case the data will only be stored, but not processed .;
  • To object to the processing of his personal data;
  • To object to the processing of personal data concerning him for the purposes of direct marketing.
  • Complain to a supervisory authority if it considers that any of the provisions of the ORD have been violated;
  • To request and be provided with personal data in a structured, widely used and machine-readable format;
  • To withdraw his consent to the processing of personal data at any time with a separate request addressed to the administrator;
  • Not be subject to automated decisions that affect it significantly, without the possibility of human intervention;
  • To oppose automated profiling, which happens without his consent;

C.1. How can I exercise my rights?

You can send a file to us by mail, email or submitted to a VE employee at one of our stores.
Once your application has been accepted and after any verification of your identity, we will take appropriate action.
You will receive a response from us as soon as possible, but (as a general rule) no later than one month. In a situation where your application is extremely complex or you want us to complete many tasks at once, this deadline can be extended by a maximum of two months. In this case, you will be informed of this extension of the response period.

The answers to your questions and communication with you and our activities related to your applications are (in principle) free.

C .2. Right of access

You have the right to access your personal data. You can contact “VE BULGARIA” Ltd. with questions about:

  • confirmation whether we process your personal data;
  • the purposes of the processing of your personal data;
  • the category of your personal data;
  • information about the recipients of your personal data;
  • information about the planned period of storage of your personal data (or the criteria for its determination);
  • information about your rights related to your personal data;
  • information about the sources of your personal data in situations where they are not taken personally by you;
  • information about the automated decision-making based on the processing of your personal data, including their profiling.

You can also ask us for a copy of the personal data processed. The issuance of subsequent copies concerning the status of personal data may be paid.

 C.3. Other rights related to data processing

 

In connection with the processing of your personal data, you have the following rights:

Your rights

Description of your rights

Right to correct the data

· You have the right to request correction of your personal data if it is incorrect or incomplete.

· In case of incomplete data, you have the right to request their completion and you can submit to “VE BULGARIA” Ltd. the relevant application.

Right to limit processing

· You have the right to request that your personal data be “blocked” in some cases, including if:

§ question the accuracy of the data – for the period in which we check their accuracy;

§ objections (more information on the objection in point C.5.).

· The “blocking” of your data consists in the fact that “VE BULGARIA” Ltd. will continue to store your personal data, but we will not be able to process them in any other way, except in special situations (for example, when there is an important public need ).

Right to transfer data

· You have the right to request your personal data in a structured, commonly used format that can be read by machines.

· You have the right to send this data to another data controller.

· You also have the right to request from VE BULGARIA EOOD to transfer this data to another data controller, if this is technically possible.

· The right to transfer personal data applies only to situations in which they are processed on the basis of your consent or on the basis of a contract (for example, when the data are processed as part of the order of the products of “VE BULGARIA” EOOD); 

Right to delete data

(so-called right to be forgotten)

· You have the right to request the deletion of your personal data in some cases, including when:

§ Your data is processed illegally;

§ are no longer necessary to achieve the purposes for which they were collected or processed;

§ there is no legal basis for their processing (eg when withdrawing your consent or when you have objected).

·Your right to request the deletion of your personal data may be restricted in some cases, including when their processing is necessary to fulfill the legal obligations of the controller (eg in accordance with the obligations related to accounting).

C.4. Right of withdrawal of consent

 

You have the right to withdraw your voluntary consent at any time by submitting a written Request for Withdrawal of Consent.

Attention! Withdrawal of the consent may lead to the fact that “VE BULGARIA” Ltd. will not be able to provide you with follow-up services or information about new products and promotional campaigns.
Withdrawal of consent does not affect the lawfulness of the processing of personal data which took place before its withdrawal.

 

C.5. Right to object

 

You have the right to object to the processing of your personal data if such processing is based on the legitimate interest of VE BULGARIA Ltd.

You can raise objections for reasons related to the specific situation. In the event of an objection to:

  • the processing of personal data for the purposes of direct marketing – “VE BULGARIA” Ltd. will not be able to process your personal data;
  • processing of personal data for other purposes – “VE BULGARIA” Ltd. will not be able to process your personal data, unless there are legitimate and legitimate grounds for processing, dominating your interests, rights and freedoms or reasons for formulating, investigating or protecting your claims.

The right to object applies only to the processing of personal data based on the legitimate interest of Vision Express and does not affect the processing of your personal data based on the performance of the contract, your consent or other legal basis (more information on legal grounds for processing in point B.4.).

.6. Right to appeal

 

You have the right to lodge a complaint with the supervisory authority using the contact information below:

Commission for Personal Data Protection

Address: Sofia 1592, bul. ” Prof. Tsvetan Lazarov ”  № 2  


E-mail:  
kzld@cpdp.bg

Website:  www.cpdp.bg.

D.1 What are cookies?

Cookies (also known as cookies) are electronic (IT) data, in particular text files, which are stored in the end device of the user of the website and the customer and are intended to facilitate the use of the relevant elements of the website. Cookies usually contain the name of the website they come from, the storage time in the end device and a unique number.

The website uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored in the user’s end device until you log out of the system, leaving the website or turning off the software (browser). Persistent cookies are stored on the end device of the user and the client for the time specified in the parameters of the cookie file, or until they are deleted by the user and the client.

D.2. For what purpose does the website use cookies?

“VE BULGARIA” Ltd. uses cookies for the following purposes:

  • adapting the content of the website pages to the preferences of the user and the client and optimizing the use of websites; in particular, these files allow the device of the service user and the client to be recognized and the website to be correctly displayed according to his individual needs;
  • creating statistics that help to understand how website users and customers use websites, which allows to improve their structure and content;
  • maintaining the client’s session (after logging in), thanks to which the client does not have to re-enter his login and password on each subsequent page of the website;
  • maintaining information about the products added by the customer to the “basket”.

D.3 What cookies does the website use ?

VE BULGARIA EOOD uses the following cookies :

Name of the cookie

Description of the cookie

Cookie storage period

uid

Analytical cookies

120 days

fr

Cookies affecting the functionality of the website and to preserve user preferences

365 days

_gat_UA-92443388-36

Analytical cookies

2 years

_dc_gtm_UA-22269153-1

Analytical cookies

2 years

uid

Cookies affecting the functionality of the website and to preserve user preferences

30 days

onet_retarg

Cookies affecting the functionality of the website and to preserve user preferences

365 days

alt_ve_promo_key

Cookies affecting the functionality of the website and to preserve user preferences

24 hours

alt_ve_promo_val

Cookies affecting the functionality of the website and to preserve user preferences

24 hours

ve_promo_key

Cookies affecting the functionality of the website and to preserve user preferences

24 hours

ve_promo_val

Cookies affecting the functionality of the website and to preserve user preferences

24 hours

_gat_Ua-92443388-36

Analytical cookies

2 years

cookiePolicyy

Cookies affecting the functionality of the website and to preserve user preferences

10 years

cid

Analytical cookies

28 days

ve-common

Cookies affecting the functionality of the website and to preserve user preferences

24 hours

_dc_gtm_UA-22269153-1

Analytical cookies

2 years

D.4. How can I manage my consent to the use of cookies?

The software used to browse web pages (the browser) by default allows the storage of cookies on the end device of the user and the client. Website users and customers can change their cookie settings at any time. These settings can be changed in such a way as to block the automatic handling of cookies in the browser settings or to inform about each entry in the device of the website and the client. Detailed information about the possibilities and ways of working with cookies can be found in the software settings (browser).

Attention! Withdrawing your consent to the use of cookies may mean restricting some of the features of the website.

 

 

Start typing and press Enter to search

Количка

Нямате артикули в количката.