Information for organizations controlling the activity

The organizations regulating the activity of the Merchant are the Commission for Consumer Protection / CPC / and the Commission for Personal Data Protection (CPDP), with the following coordinates:

About the CPC:

Website: https://kzp.bg/kontakti

tel: 0700 111 22

email: info@kzp.bg

address: Sofia, Slaveykov Square, А4A, fl. 3, 4 and 6

About CPDP:

Website: https://www.cpdp.bg/

tel: 02 / 91-53-518

email: kzld@cpdp.bg

address: Sofia 1592, bul. „Prof. Tsvetan Lazarov ”№ 2

Consumers can use the European Online Dispute Resolution Platform (ODR), available at / http://ec.europa.eu/odr / - a single access portal that allows EU consumers and traders to settle disputes between them. .

Alternative dispute resolution (ADR) between consumers and traders is out-of-court conciliation on a voluntary basis.

The Joint Conciliation Commissions assist in reaching an agreement between consumers and traders in disputes over contracts for the sale of goods and the provision of services.

The General Conciliation Commissions are determined on a regional basis, and the General Conciliation Commission with its registered office in Sofia and the area of operation of the territory of Sofia District is competent to resolve disputes between a Merchant and a Consumer.

The consolidated list of recognized ADR entities of the Member States of the European Union can be found at:

https://webgate.ec.europa.eu/odr/main/index.cfm?event=main.adr.show


Cookie Policy

Use of cookies

Cookies are short text files or small packets of information that are stored through the Internet browser of your end device (computer, tablet, laptop or mobile phone) when you visit various sites and pages on the Internet. The main purpose of cookies is to make the user recognizable when he returns to the Website. Some cookies also have a more specific application, such as storing user behavior on the site and making it easier for the user to use the Website. More information on how cookies work can be found on the Internet.


How are cookies used on this Website?


We use cookies on this Website primarily to facilitate the usability of the site, improve its performance and store information about user behavior. No personal data is stored in this process, ie. We cannot identify you as a person through the cookies on the site, therefore the Personal Data Protection Act does not apply to the collection of this information. The information collected from cookies is usually used in summary form to analyze the user behavior of the Website, which allows us to improve the functionality of the site, user paths and content used.


What cookies are used on this Website?


Session cookies

This type of cookie makes it easier for you to use the site, as they store information temporarily, only during the session of the browser used. Usually the information that is stored through them is what goods or services you have added to the cart, which pages of the site you have visited and how you got to a particular information. These cookies do not collect information from your end device and are automatically deleted when you leave the Website or end your browser session.


Persistent cookies

They allow us to store specific information about browsing, such as analyzing site visits, how you reached the Website, what pages you viewed, what options you chose, and where you headed through that Website. Tracking this information allows us to make improvements to the Website, including correcting errors and expanding the content. The shelf life of this type of cookies varies according to their specific purpose.

Third party cookies

Our Website contains links to other sites or embedded content from other sites, such as Facebook, YouTube, Twitter, Google+, LinkedIn, partner websites. When you visit these sites or open their content, cookies from these websites may be stored on your end device. It is these cookies that are defined as "third party cookies" and we have no control over the generation and management of these cookies. We therefore advise you to seek information about them and how they are managed on the websites of the relevant third parties.


How can I manage the use of cookies from this Website?


All browsers allow the management of cookies from a specially created folder on your browser. You can block the receipt of cookies, delete all or part of them, or set your preferences regarding the use of cookies before initiating a visit to our site. Please note that deleting or blocking cookies may adversely affect the functions of our Website, and hence your user experience on it.


Disable or block cookies


The control, disabling or blocking of cookies is controlled by the settings of your browser. Please note that a total ban on the use of all cookies may affect the functional presentation of the site, its effectiveness and access to certain information.


Registration and identification

The Merchant identifies the Users of the Site by storing log files on the server of the Site.

 The Merchant has the right to collect and use information about the Users on the basis and for the purposes of the implementation of the contract concluded under general conditions with the User. The information by which the person can be identified may include personal data specified in the general conditions, as well as any other information that the person provides voluntarily upon registration. The information includes any other that the User enters, uses or provides when using services.

Only persons over 16 years of age can register on the site. Upon registration, the person marks a check box, which declares that he is 16 years old.

The Merchant takes due care and is responsible for protecting the information about the User, which became known to him on the occasion of registration, except in cases of force majeure, accidental event or malicious actions of third parties.

In the registration form filled in by the User upon registration, the Merchant indicates the mandatory or voluntary nature of the provision of data and the consequences of refusal to provide them.

The Merchant may disclose personal data to third parties only in the cases provided by law and in the circumstances provided by law or with the express consent of the Users.

The User may register by filling in the relevant electronic registration form, available in real time (on-line) on the Internet on the Merchant's website, to agree to the General Terms and Conditions.

By pressing the virtual button with the text "Registration" or other similar text, having the force of written confirmation of the General Terms, the User makes an electronic statement within the meaning of the Electronic Document and Electronic Signature Act, declaring that he is familiar with the General Terms, accepts them and undertakes to observe them. The Merchant may store in log files on its server the IP address of the User, as well as any other information necessary for its identification and reproduction of its electronic statement of acceptance of the General Terms and Conditions in case of a legal dispute. The text of the General Terms and Conditions is available on the Internet on the Merchant's website in a way that allows its storage and reproduction.

When filling in the application for registration, the User is obliged to provide complete and correct data on the identity (for individuals), legal status (for legal entities) and other data required by the electronic form of the Merchant, as well as to update them in 7 (seven) one day from their change. The user declares that he agrees to provide the required personal data, thus ensuring that the data provided during the registration process are correct, complete and accurate and in case of change of the latter will update them in a timely manner. In case of providing incorrect data, the Merchant has the right to terminate or suspend immediately and without notice the provision of services, as well as maintaining the registration of the User.

Upon registration, the User receives a unique username, which may be the email or data provided by the User from social networks or third-party identification services, and a password to access the services available through the website.

The user can manage his profile on the site. Through your account.

The username with which the User registers does not give him any rights other than those explicitly stated in these terms.

The registrar in his capacity as a representative of a legal entity is obliged to enter his full name and address, resp. the name of the legal entity it represents.

The User is obliged to take all care and take the necessary measures that are reasonably necessary in order to protect his password, as well as not to disclose his password to third parties and to immediately notify the Merchant in case of unauthorized access, and in case of probability and suspicion of such. He bears the responsibility and risk for the protection of his password, as well as for all actions performed by him or by a third party using his password.


Terms of delivery of goods

The delivery of the ordered goods is carried out by the following methods:

through a courier service from a third party

through the services of Bulgarian Posts

The delivery is made to the address of the consumer on the territory of the Republic of Bulgaria, unless otherwise stated on the site.

Delivery costs are covered by the User except in the case of delivery of goods worth over BGN 20, in which case the delivery costs are borne by the Merchant.

Before sending the ordered goods, the Merchant has the right to contact the User on the phone number specified by him, in order to specify details of the order and / or delivery.

The Merchant is not responsible for non-fulfillment of an order in cases where the User has provided incorrect, incomplete and / or inaccurate personal data, including when he has provided an incomplete, inaccurate or fictitious address or telephone number.

Delivery is made within the timeframes described under each delivery option in the order interface module. In exceptional circumstances, the Merchant reserves the right to extend the delivery period by promptly informing the User.

Delivery is made within the timeframes described under each delivery option in the order interface module. In exceptional circumstances, the Merchant reserves the right to extend the delivery period by promptly informing the User.

The trader processes the orders within 1 working day from the execution of the order. The delivery is usually made within the usual time in practice according to the chosen method of delivery.

The ordered goods are delivered against a signature, as the larger shipments when using a courier service are delivered to the entrance of the building.

The consumer is obliged to inspect the goods at the time of delivery and to notify immediately of any discrepancies, shortages and damages. If the User does not do so, it is assumed that the delivery is accepted without objection.

When making international deliveries, the rules for delivery and receipt of items of the respective national postal service, as well as of the respective national legislation of the country in which the consignee of the goods is located are applicable.

All import fees for importing the goods are at the expense of the User. The consumer cannot claim a refund if he has refused to pay import duties or receive the shipment.

The Merchant reserves the right to change the available methods of delivery and payment and / or the conditions under them at any time by publishing the available methods of delivery and payment on the website without further notice.


Privacy policy

Information about the personal data controller:

Knit and Crochet Corner Ltd, is a company registered in the Commercial Register of the Registry Agency with UIC 206329509, with registered office and address of management: Sofia, p.k. 1379, zh.k. SERDIKA, bl. 3, ent. B, fl. 3, apt. 34 Phone: +359897211902; e-mail: knit_crochet@abv.bg.

Reasons and purposes for which we use your personal data

We process your personal data on the following grounds:

The contract concluded between us and you in order to fulfill our obligations under it;

Explicit consent from you - the purpose is indicated for each specific case;

In case of an obligation under the law;

In the following paragraphs you will find detailed information about the processing of your personal data depending on the basis on which we process them.

FOR PERFORMANCE OF A CONTRACT OR IN THE CONTEXT OF PRE-CONTRACTUAL RELATIONS

We process your personal data in order to fulfill the contractual and pre-contractual obligations and to enjoy the rights under the contracts concluded with you.

Purposes of processing:

establishing your identity;

management and execution of your request and execution of a concluded contract;

preparation of a proposal for concluding a contract;

preparing and sending an invoice for the services you use with us;

to provide you with the necessary comprehensive service, as well as to collect the amounts due for the services used;

keeping correspondence in connection with orders made, processing orders, reporting problems, etc.

notification of everything related to the services you use with us;

customer history analysis;

identify and / or prevent illegal actions or actions contrary to our terms of service;

Data we process on this basis:

Based on the contract concluded between us and you, we process information about the type and content of the contractual relationship, as well as any other information related to the contractual relationship, including:

personal contact details - contact address, email, phone number;

identification data - the three names, unique civil number or personal number of a foreigner, permanent address;

data on the orders placed;

correspondence in connection with the overall service - e-mail, letters, information about your requests for troubleshooting, complaints, requests, complaints, feedback that we receive from you;

credit or debit card information, bank account number or other banking and payment information in connection with the payments made;

 other information such as:

IP address when visiting our website;

Demographics

Profile data on social networks

Information from your actions on the site

The processing of the specified personal data is obligatory for us so that we can conclude the contract with you and fulfill it. Without providing us with the above data, we would not be able to fulfill our obligations under the contract.

We provide personal data to third parties

We provide your personal data to third parties, and our main goal is to offer you quality, fast and comprehensive service. We do not provide your personal data to third parties until we are sure that all technical and organizational measures have been taken to protect this data and we strive to exercise strict control over the implementation of this purpose. In this case, we remain responsible for the confidentiality and security of your data.

We provide personal data to the following categories of recipients (personal data controllers):

postal operators and courier companies;

persons who on assignment maintain equipment, software and hardware used for personal data processing and necessary for the company's activity

persons providing consulting services in various fields.

When we delete data collected on this basis

We delete the data collected on this basis 5 years after the termination of the contractual relationship, regardless of whether due to the expiration of the contract, cancellation or other grounds.

FOR FULFILLMENT OF REGULATORY OBLIGATIONS

The law may provide for an obligation for us to process your personal data. In these cases, we are obliged to perform the processing, such as:

Obligations under the Anti-Money Laundering Measures Act;

Fulfillment of obligations in connection with distance selling, off-site sales, provided for in the Consumer Protection Act;

Providing information to the Consumer Protection Commission or third parties provided for in the Consumer Protection Act;

Providing information to the Commission for Personal Data Protection in connection with obligations provided for in the legislation for personal data protection;

Obligations provided for in the Accounting Act and the Tax and Social Security Procedure Code and other related normative acts, in connection with the keeping of lawful accounting;

Providing information to the court and third parties, in the framework of proceedings before a court, in accordance with the requirements of the regulations applicable to the proceedings;

Age verification when shopping online.

When we delete personal data collected on this basis

The data collected in accordance with an obligation provided by law are deleted after the obligation for collection and storage is fulfilled or ceases to exist. For example:

under the Accounting Act for storage and processing of accounting data (11 years),

obligations to provide information to the court, competent state authorities, etc. grounds provided for in the current legislation (5 years)

Providing data to third parties

When there is an obligation for us by law, it is possible to provide your personal data to the competent state authority, natural or legal person.

AFTER YOUR CONSENT

We process your personal data on this basis only after your explicit, unambiguous and voluntary consent. We will not foresee any adverse consequences for you if you refuse to process personal data.

Consent is a separate basis for the processing of your personal data and the purpose of the processing is stated in it, and is not covered by the purposes listed in this policy. If you give us the relevant consent and until its withdrawal or termination of any contractual relationship with you, we prepare suitable proposals for products / services, performing detailed analyzes of your basic personal data;


Data we process on this basis:

On this basis, we only process data for which you have given us your express consent. The specific data are determined for each individual case. Usually this information is email address, names and address.

Providing data to third parties

On this basis, we may provide your data to marketing agencies, Facebook, Google or the like.


Withdrawal of consent

Concessions granted may be withdrawn at any time. Withdrawal of consent does not affect the performance of contractual obligations. If you withdraw your consent to the processing of personal data in any or all of the ways described above, we will not use your personal data and information for the purposes set out above. Withdrawal of consent shall not affect the lawfulness of the processing based on a consent prior to its withdrawal.

To withdraw your consent you only need to use our site or just our contact information.


When we delete data collected on this basis

We delete the data collected on this basis at your request or 12 months after their initial collection.

PROCESSING OF ANONYMIZED DATA

We process your data for static purposes, ie for analyzes in which the results are only summary and therefore the data is anonymous. It is not possible to identify a specific person from this information.

Your data can also be anonymized. Anonymization is an alternative to deleting data. Upon anonymization, all personally identifiable items / items that allow your identification are permanently deleted. There is no legal obligation for anonymized data to be deleted, as they do not constitute personal data.

Why and how we use automated algorithms

For the processing of your personal data, we use partially automated algorithms and methods in order to constantly improve our products and services to adapt our products and services to your needs in the best possible way. This process is called profiling.

How we protect your personal data

To ensure adequate data protection of the company and its customers, we apply all necessary organizational and technical measures provided for in the Personal Data Protection Act.

The company has established rules to prevent abuse and security breaches, which supports the processes of protection and security of your data.

For maximum security in the processing, transmission and storage of your data, we may use additional security mechanisms such as encryption, pseudonymization and more.


Personal data we have received from third parties

We receive personal data from the following 3rd parties: Social networks.

Consumer Rights

Each User of the site enjoys all rights to personal data protection under Bulgarian law and European Union law.


The user can exercise their rights through the contact form or by sending a message to our email.

Each User has the right to:

Awareness (in connection with the processing of his personal data by the administrator);

Access to your own personal data;

Correction (if data is inaccurate);

Deletion of personal data (right to be "forgotten");

Restriction of processing by the controller or processor of personal data;

Portability of personal data between individual administrators;

Objection to the processing of his personal data;

The data subject shall also be entitled not to be the subject of a decision based solely on automated processing, including profiling, which has legal consequences for the data subject or similarly affects him significantly;

Right to protection by judicial or administrative order, in case the data subject's rights have been violated.


The user may request deletion if one of the following conditions is true:

Personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

The user withdraws his consent on which the data processing is based and there is no other legal basis for the processing;

The user objects to the processing and there are no legal grounds for the processing to take precedence;

Personal data has been processed illegally;

Personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State applicable to the controller;

Personal data has been collected in connection with the provision of information society services to children and the consent has been given by the parent responsible for the child.

The user has the right to restrict the processing of his personal data by the administrator when:

Challenge the accuracy of personal data. In this case, the restriction of processing is for a period that allows the controller to verify the accuracy of personal data;

The processing is illegal, but the User does not want the personal data to be deleted, but instead requires restricting their use;

The Administrator no longer needs the personal data for the purposes of processing, but the User requires them for the establishment, exercise or protection of legal claims;

Objects to the processing pending verification of whether the legal grounds of the administrator take precedence over the interests of the User.


Right of portability.

The data subject has the right to receive the personal data concerning him and which he has provided to the controller, in a structured, widely used and machine-readable format and has the right to transfer this data to another controller without hindrance from the controller. data are provided when the processing is based on consent or a contractual obligation and the processing is carried out in an automated manner. When exercising its right to data portability, the data subject shall also have the right to receive a direct transfer of personal data from one controller to another where this is technically feasible.


Right to object.

Users have the right to object to the controller against the processing of their personal data. The controller of personal data shall be obliged to terminate the processing, unless he proves that there are convincing legal grounds for the processing, which take precedence over the interests, rights and freedoms of the data subject, or for the establishment, exercise or protection of legal claims. In the event of an objection to the processing of personal data for the purposes of direct marketing, the processing should be stopped immediately.


Complaint to the supervisory authority

Each User has the right to file a complaint against illegal processing of his personal data to the Commission for Personal Data Protection or to the competent court.


Maintaining a register

We maintain a register of the processing activities for which we are responsible. This register shall contain all the following information:

The name and contact details of the administrator

Processing purposes;

Description of the categories of data subjects and of the categories of personal data;

The categories of recipients to whom the personal data are or will be disclosed,

Including recipients in third countries or international organizations;

Where possible, the deadlines for deleting the different categories of data;

Where possible, a general description of the technical and organizational security measures