Accepted on 25.05.2018, amended on 07.02.2022
INOUT TRADE EOOD, with UIC 202023672, with mailing address: Ruse Town, PC 7013, 106 Lipnik Blvd., hereinafter referred to as “the Company”, is an administrator of personal data regarding the data of its employees, clients and visitors of the Company’s Website and a processor of personal data regarding the data of its clients-individuals, and it is also responsible for compliance with the provisions of the General Regulation for Personal Data Protection 2016/679.
For Clients, including Individuals:
For Clients – Individuals of the Clients of the Company:
Personal data of the visitors of the Company’s Website:
The Company, as a Personal Data Administrator, performs the following operations and processes only the necessary personal data for the following purposes:
The Company as a Personal Data Processor performs the following operations and processes only the necessary personal data for the following purposes:
In order to make your visits to the Company’s website as functional as possible, we use so-called cookies. Cookies are small text files that are stored on your hard disk.
Our website uses the following cookies to improve your user experience:
Service cookie needed for advanced features. Expiration period: 2 years
Registers a unique identification number that is used to generate statistic data about the way the visitor uses the website. Expiration period: 2 years
Used to specify the language in which the Website will be displayed. Expiration period: 1 year
Used to customize your appearance for the admin interface, as well as for the main interface of the Website. Expiration period: 1 year
Used by Facebook to deliver a series of advertising products for real-time bidding by advertisers. Expiration period: 3 months
You can always set your browser to turn off cookies, in which case the functionality of the site may be impaired.
In addition to the above, when using the Website, information is collected that may help to identify the individual, as follows:
– date and time of access to the Website;
– IP address from which the connection was made;
– server and system logs (for identifying technical problems and / or identifying malicious actions);
Such described information may be disclosed by the Company to third parties only in cases where this is necessary for the purposes of fulfilling a legal obligation of the Company.
This website uses Google Analytics – a web analytics service offered by Google, as well as Facebook PixelAds offered by Facebook. These services use “cookies” to help us analyze how you, as our users, utilize our site, as well as to offer you the most relevant advertisements for your interests.
Related to the implementation of the objectives set out above, the Company provides personal data of individuals to the following recipients:
If you have any questions or concerns about the processing of your personal data or you wish to exercise any of your rights, you can get in touch on:
Compliance with the provisions of the Regulation
The policy of the Company is to ensure compliance with the provisions of the Regulation.
Personal data is collected and processed lawfully and conscientiously
The Company collects and processes personal data lawfully, conscientiously and in accordance with the principles and rights of individuals, related to the processing of their personal data.
Personal data is processed transparently
The company provides transparency in communication regarding the collected and processed personal data and the information about it is in a short, transparent, understandable and easily accessible form, and clear and unambiguous wording is used.
Personal data is collected and processed only for certain purposes
The Company processes personal data of individuals only in the following cases:
Personal data unnecessary for the activity is not collected and processed
The Company does not collect or process personal data of individuals that exceed its legal liabilities or its business needs.
Collected personal data is processed for other purposes only with the consent of the individuals
In all cases where it is necessary to collect and process personal data of individuals for purposes other than the original ones, the Company notifies the relevant individuals, seeks their consent and proceeds to process their personal data for other purposes only after their explicit consent.
The minimum necessary personal data is collected for processing
The Company collects and processes only the minimum necessary personal data of individuals, that:
The processed personal data is accurate and up-to-date
The Company ensures that the processing of personal data of individuals is done with maximum accuracy and, if possible, always up-to-date.
The personal data is processed by the minimum required number of people
The Company ensures that the access and processing of personal data of individuals is performed by the minimum necessary number of people (operators) who have the necessary competence for its processing and the necessary commitment to its protection.
Personal data is stored for the minimum necessary time
The Company stores personal data for the minimum necessary time:
after which it is destroyed without undue delay.
In all cases, the Company ensures that at least once a year a review of the collected and processed personal data is made and that fallen into any of the above hypotheses, is deleted without undue delay.
The personal data is processed with the necessary levels and measures of protection
The Company provides the necessary levels of physical, organizational and technological protection with regard to:
The Company also provides all necessary measures for timely recovery of collected and processed personal data in case of loss as a result of accidental, malicious or force majeure events.
The personal data is processed with controlled and traceable access
The Company provides the necessary and appropriate technical, organizational and technological measures for controlled and traceable access to the personal data of individuals.
The personal data is processed with the necessary reporting for compliance with the Regulation
The Company provides the necessary reporting and registers, in order to prove that the provisions of the Regulation have been complied with.
Observing the rights of individuals whose personal data is processed
The Company ensures compliance with the rights of individuals whose personal data is collected and processed, which includes:
The Commission for Personal Data Protection (CPDP) is the independent state body that protects individuals in their personal data processing and in accessing such data, as well as control over compliance with the Personal Data Protection Act in the Republic of Bulgaria.
In case of suspicion that your rights related to your personal data protection, have been violated, you can report to the CPDP on the following: