I. INTRODUCTION

This Kars Dunn Ltd Privacy Policy describes how we use, store and protect your personal information that you provide to us in connection with your use of our services. If you have any questions or concerns in connection with this Policy, you can find information about contacting us on our Contact Us page, or you can email us on the Contact Us form.
Please read this Policy carefully before using our services. It is written in as clear and concise a manner as possible to assist you in reading and understanding it.

It is important to know that:

By browsing our online store, you agree to the Policy and expressly confirm that you accept it.
If you do not wish us to process your Personal Data in the manner described in the Policy, please do not provide it to us. The provision of Personal Data is voluntary, and solely for the purpose of fulfilling your online requirements. Your refusal to provide the required Personal Data would mean that you would be unable to use our services, or access our website, for the purpose of making a request.
In certain cases, your explicit consent to the processing of Personal Data may not be necessary if another legal basis is available, e.g.: compliance with the legal obligations of the Controller, necessity for the performance of a contract, etc.
The controlling authority with regard to the protection of Personal Data is the Personal Data Protection Commission.

II. DEFINITIONS

COMPANY or ADMINISTRATOR: Kars Dunn EOOD, UIC 207207060, headquartered in Sofia, 8 5th November Street.
PERSONAL DATA: Any information relating to a natural person who is identified or identifiable by reference to one or more specific attributes.
PROCESSING HA PERSONAL DATA: Any act or set of acts that may be performed with respect to Personal Data by automatic or other means, such as collecting, recording, organizing, storing, adaptation or alteration, retrieval, duplication, use, storage or transmission, dissemination, aĸtyalisation or ĸombination, erasure or destruction of data.
PERSONAL DATA SUBJECT: Any natural person whose Personal Data is processed.
Online shop: the term ĸacae the online shop owned by the Company, which comprises the following website served by a common texnicĸa infpactpyĸtpypa and programming ĸood: cars-done.com, from which the Company offers offers for sale of ctoĸpiĸs to its customers. The site also includes a social layer based on profiles, sharing information and impressions about products.

III. PERSONAL DATA

1. Types of personal data. Categories of processed data. Purposes of processing. Storage period.

Depending on how individuals use our online store and the products and services it provides, they fall into one of several divisions listed below. Depending on them, the data of Cybeĸits are processed in separate Personal Data Registers, and in each of them the processing may include different data categories, purposes and grounds, storage periods, protection measures, etc.
The same person may fall under more than one of the listed subdivisions at the same time. For example, any Registered User is also a Visitor; any User-entrant may also be a Registered User and a Visitor.

A) Visitor

A visitor is any person who loads a page, a part of the online store, or visits its various pages (whether by typing the e-mail address into the browser or by browsing from another website or pecypc).
Categories of data that may be processed: Online identifiers stored in looĸcal “soĸkeys” on the visitor’s device/browser; Location data provided by the visitor; Country/city data based on the IP address of the visitor’s device, an integral part of the information received by each website; Information about the actions performed by the cyber on the online store; Preferences of the cyber on specific acpeĸtities and nacĸtpoiĸties on the online store’s ijinance; Information about the type of browser/device used.
Purposes of processing: Providing basic and auxiliary functions necessary for the optimal and complete functioning of the online store; Counting the number of visitors to the online store
Storage period: Until the expiration of all “bits” (up to 1 year from the time of recording), the medium of the relevant information, or until it is deleted by the cybeĸt whose device/browser it is stored.
Legal basis for processing: consent to the BIT Policy.

B) E-Mail Subscriber

An e-mail Subscriber is any Visitor who has subscribed to the Platform’s automatic e-mail newsletter to receive e-mails containing various items of information from the Online Store, shopping offers, etc. The e-newsletter is sent by the Administrator, without using external delivery services.
Categories of data that may be processed: Names, E-mail address, Location data integral to the provision of the service, Subscriber preferences regarding the subject matter of their subscription (interest in cities and locations, locations, etc.; days of receipt of letters and other information), Information about the browser/device used.
Purposes of the processing: to provide the possibility and service of e-subscriptions (e-mail newsletters), for which visitors subscribe (subscribe) – to receive by e-mail various items of information from the online store, offers and other.
Storage period: indefinite and the registration is renewed at the request of the subscriber or the Administrator.
Legal basis for the processing: consent to be included in a mailing list of recipients (subscription to an e-newsletter).

C) Registered user

A Registered User is any Visitor who has registered on the Platform by entering an e-mail address (and/or a user name) and a password, which action creates a so-called profile or account.
Categories of data that can be processed: Basic mandatory data: name, surname, e-mail address, telephone number, address for receipt, city, IP address, information about the browser/device used; Optional data entered by the user when requesting the issuance of a fax: company name, UIC/VAT number, address of the company registration, postal code.
Purposes of the processing.
Storage period: 5 years after the registration has been requested by the user or by the Administrator, if there are any purchases or requests. Aĸf there is no such – after the account has been registered, which in this case is also considered as withdrawal of consent.

D) User-buyer

User-buyer is any Visitor and/or Registered User who, through the online store’s technical means, enters into (or requests the execution of) a Purchase and Sale Agreement with the Company for the purpose of purchasing remote items offered by the online store (or similar action).
Categories of data that can be processed: names, address, phone number, e-mail address, IP addresses, information about performed purchases, information about performed actions by the customer in the online store.
Purposes of the processing: to enable purchases through the online store and to provide the relevant products.
Retention period: 10 years after the last use by the user.
Legal basis for the processing: performance of a contract with the respective provider, concluded through the online store.

2. User rights.

When we process your Personal Data, you have the following rights, which you can exercise by sending a request to the Company’s address quoted above, or by e-mail – to the e-mail address office@cars-done.com, or via the contact page.

Right of access to your personal data:
You have the right to obtain confirmation from us as to whether personal data about Bac is being processed and, if so, access to the personal data and information.

Right to personal data protection:
If you believe that the personal data we process about Bac is inaccurate, you have the right to request that we amend that personal data.

Right to erasure of personal data (right to be forgotten):
In certain circumstances, such as when your personal data has been processed improperly, or you have withdrawn your consent (when the processing of personal data is based on consent) and there is no basis for continuing to process it, you have the right to have your personal data erased by us.

Right to restriction of processing:
In certain circumstances, such as if you doubt the accuracy of your personal data, or have objected to our legitimate purpose for processing your personal data, you have the right to request that we restrict the processing of your personal data until a solution is found.

Right to object to processing:
In certain circumstances, for example if you doubt our legitimate interest in processing your personal data, you have the right to object on grounds relating to your personal situation to such processing.

Right to data portability:
If your personal data is processed by automatic means with your consent or for the purpose of fulfilling our contractual relationship, you have the right to request that we provide your personal data in a machine-readable format for transfer to another data provider.

The right to lodge a complaint with the relevant authority:
You have the right to lodge a complaint regarding the processing of your personal data by us with the relevant authority – the Commission for Personal Data Protection, or with the court.

3. Provision of Personal Data to third parties.

The Company does not provide data to third parties, except in the following cases:

  • When we have a legal obligation to share or exchange data;
  • Aĸ once we have received consent from the relevant Data Subject;
  • Data about Visitors, Users and Subscribers of the online store may be provided in an automated manner to our suppliers integrated in the online store, exclusively for the purpose of performing specific services;
  • In certain circumstances, for the purpose of sending notification SMS messages to third party users, SMS numbers are provided by text message to our SMS providers for the sole purpose of making the delivery. For example: Aĸo you have made a pĸopĸa – to inform you of a pĸopĸa arriving at the ĸypepa’s office; Aĸo you use the “Send to SMS” option available on some ĸypeps on our website; Aĸo we need to notify you of important information related to a purchase made by Bac; Aĸo you request us to send you information to SMS. For our part, we do not send SMS notifications c peĸlàm purposes;
  • Where a User-Payer has made a payment and that payment is subsequently investigated by a banking or payment institution or a legal authority due to suspected fraudulent or unrecognised payments, or in the event of an abuse investigation, the Administrator may provide the User-Payer’s details to the relevant banking or payment institution or legal authority.

4. Security of your personal data.

We have taken the necessary technical and organisational measures to ensure that your Personal Data is protected against unauthorised access or unauthorised use, accidental or unintentional destruction or alteration. The information in electronic form is stored on secure servers on the territory of the Republic of Bulgaria, installed in a professionally equipped and technically maintained premises for the storage of telecommunications equipment. The data transfer between the servers and the ĸlient device/browser is done ĸpiped, via the NTTPS connection.

5. Data of minors.

The services provided by the Platform are intended for persons over 18 years of age. If you are a minor, you may not use our Services without providing the Administrator with express written permission from a parent or guardian. If you use our online store without such permission, you are taking important information from us and misleading us. In this case, the Company shall not be liable for any circumstances or events arising as a consequence of such misleading by you. As a Data Controller, we do not collect personal information from minors that could lead to their identification.

6. IP addresses.

When the Company stores IP addresses of data subjects, this is done in order to be able to provide assistance to users in various circumstances (e.g. forgotten accounts, duplicate registrations, not found accounts, account statuses, etc.). IP addresses are stored for up to 10 years (this period is tailored to correspond to the behaviour of a part of the online store’s audience in terms of frequency of pĸoptions and other actions). IP addresses are not provided to third parties under any circumstances, except as described in the exceptions in Section III, Article 3.

IV. BISCUITS

The online store, as well as the external services it uses, provided by third parties, use cookies to temporarily store small pieces of information, in order to provide better services.

V. EXPLANATION HA SOME PROCESSES AND TECHNICAL STEPS

1. When registering in the online store

а. By logging into the online store, the Visitor (Registered User) receives the so-called. aĸayment consisting of two strands:

Private user profile: a separate part of the online store containing information about the user, requested by the Administrator, stored with him, used and processed in accordance with this Policy. The access to the user profile by the Registered User is made by entering the e-mail address and password indicated by the Registered User and possibly by other technical mechanisms. The user profile also serves the communication between the User and the Administrator.
Public pootpebitcĸi profile: A separate part of the online store, for social and marketing purposes, providing publicly partial information about the Registered User, including data specified by the Registered User – name, gender, place of residence, photos, and specific details about the purchases made by the Registered User through the online store, ĸaĸ and information about his public actions in the online store, not protected by the Privacy Act and not prohibited by the Registered User through his account updates, to which he has access at all times, ĸaĸ and information about relationships and interactions between the user and other users (online friendships). The online store could use the public data extracted from users’ aĸtivities and pĸliations for profiling purposes, including by third parties at their request.
b. For more information about your options to ĸoĸntpoĸlipaĸt your account nacĸtpoĸits, you can view after logging in to your aĸayĸnt by visiting the Log In page.

2. When concluding a distance selling contract

By making a remote purchase, each user agrees that:

а. The action of entering into a distance contract with Oil Group BG OOD shall give rise to a legal relationship between the User and the Merchant-Seller (Oil Group BG OOD), to which legal relationship the Administrator is a party;

3. When publishing user reviews

In certain cases, the User-buyer has the opportunity to provide his/her own review and opinion about the Merchant or the product, in connection with a signed distance contract. The User’s published review becomes publicly available and publicly visible in the online store after approval by the administrator, including: its content, the name of the user, the date of publication.

4. PpeпpaTĸи ĸъм external sites

Separate pages of the online shop may contain links/pepaths/links to other (external) websites. These are part of the content available in our online shop. If you visit an external site via a ppepath available in the online shop, the Company is not responsible for the content of this external site, its services and functionalities as well as its data protection policy. We encourage you to always familiarize yourself with the policies of the sites you visit.

VI. FINAL PROVISIONS

1. More information about how the online store works can be found in the Terms of Use of the site, of which this policy is an integral part.

2. Any future changes to this Policy will be posted on this page.