Privacy policy

Mandatory information on the rights of data protection persons (Privacy notice)

What is personal data?

According to the General Data Protection Regulation, personal data are defined as:

“Any information relating to an identified or identifiable natural person (” data subject “); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or one or more features specific to the natural, the physiological, genetic, mental, intellectual, economic, cultural or social identity of that natural person; “.

Data for the Personal Data Administrator:

Name	METAL FACTORY LTD
UIC	BG204780432
Headquarters and address of management	Sofia, residential complex Hadji Dimitar bl. 177, ent. D, fl. 1, apt. 21
Mailing address	Sofia, residential complex Hadji Dimitar bl. 177, ent. D, fl. 1, apt. 21
Data Protection Officer	Valeria Stoichkova
Phone	+359887274203
E-mail	office@metalfactory-bg.com
Website	https://metalfactory-bg.com/

METAL FACTORY LTD , called below for brevity “Administrator” or “Company”, operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data .

GROUNDS FOR THE COLLECTION, PROCESSING AND STORAGE OF YOUR PERSONAL DATA

The personal data that we collect, process and store from you in connection with the use of the website https://metalfactory-bg.com and the conclusion of contracts with the company, pursuant to Art. 6, para. 1, Regulation (EU) 2016/679 (ORZD), and in particular on the following grounds:

Explicit consent received from you as a client;
Fulfillment of the obligations of the Company under a contract with you;
Compliance with a legal obligation that applies to the Company;
For the purposes of the legitimate interests of the Company or a third party;

You have the right to access the website without providing your personal data and registration. Access to the website’s services requires the provision of personal data, for example when registering, when sending an order without registration, when paying for an order by one of the methods listed on the website, when sending a complaint form, when sending an inquiry via the contact form, available at https://metalfactory-bg.com.

Personal data provided by you:

When you register to use the website, or submit an order without registration or submit a complaint form or send an inquiry through the contact form, you will be asked for information that is necessary only for the use of services and resources of the website. The collection of this data is carried out in accordance with the applicable legal security requirements.

Using the services of the website requires that you have reached the age of 16. By creating a user profile or submitting an order, you confirm that you have reached the age of 16 and that you are familiar with and accept the relevant Privacy Statement (privacy notice).

Successful registration or sending an order or sending a complaint or inquiry form or registration for a newsletter requires the completion of certain fields marked as mandatory (*). These are most often:

Name and surname;
Email;
Telephone;
Address;
Populated place;
Country;
Access password

The filling in of the optional fields during registration or in the process of using the services of the website is entirely at the discretion and responsibility of the Users. All optional data that you provide to us when using the website or through other communication with us, which we have not explicitly requested from you, but you have provided us, will be treated as personal data obtained with the express consent to processing.

We will process such data lawfully by applying the principles of minimization and limitation.
The user is responsible for the provided contact information and other data that are incorrect, false or relate to third parties (in all cases where third parties have not given consent), as well as for any illegal or malicious use of personal data and information.

GOALS AND PRINCIPLES IN THE COLLECTION, PROCESSING AND STORAGE OF YOUR PERSONAL DATA

We collect and process personal data that you provide to us in connection with the use of the website https://metalfactory-bg.com and the conclusion of a contract with the company, including for the following purposes:

creating a profile and providing full functionality when using the website / online store;
placing orders and purchasing products / services;
individualization of a party to the contract;
when applying for a job;
accounting purposes;
statistical purposes;
ensuring the implementation of the contract for the provision of the respective service;
sending an information bulletin if you wish;

We follow the following principles when processing your personal data:

legality, good faith and transparency;
restriction of processing purposes;
relevance to the purposes of processing and minimizing the data collected;
accuracy and timeliness of data;
limitation of storage in order to achieve the objectives;
integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.

In the processing and storage of personal data, the Company may process and store personal data in order to protect the following legitimate interests:

fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal bodies.

WHAT KINDS OF PERSONAL DATA IS COLLECTED, PROCESSED AND STORED BY OUR COMPANY

The company performs the following operations with the personal data provided by you for the following purposes:

Registration of a new user in the website / e-shop and execution of a distance sales contract – The purpose of this operation is to create a profile for new customers to use the website / e-shop, to purchase products and to provide contact details for the delivery of purchased products. Registering and creating an account to use the website / online store is not a mandatory step in providing the service and it is available to a large extent without creating an account. Given the limited scope of personal data collected and the fact that some of it is collected from publicly available sources, an impact assessment is not necessary for this operation.
Concluding and executing a trade transaction (order) with a client or partner – the purpose of this operation is to conclude and execute a contract with a trade partner or client and its administration. Given the limited scope of personal data collected and the fact that some of it is collected from publicly available sources, an impact assessment is not necessary for this operation.
Conclusion and implementation of an employment or civil contract – the purpose of this operation is to conduct a selection for the appointment of employees or persons under a civil contract, the conclusion of the contract and its administration and implementation by the company. Given the small number of staff employed and the limited amount of personal data being processed, it is not necessary to carry out an impact assessment for the current personal data processing operation.
Sending newsletters and advertising messages – the purpose of this operation is to administer the process of sending newsletters to customers who have stated that they wish to receive. Given the limited scope of personal data collected and the fact that some of it is collected from publicly available sources, an impact assessment is not necessary for this operation.
Exercising the right of refusal or making a claim – the purpose of this operation is to administer the process of exercising the right of refusal or complaint by the client. Given the limited scope of personal data collected and the fact that some of it is collected from publicly available sources, an impact assessment is not necessary for this operation.
Sending an inquiry through the contact form – the purpose of this operation is to administer the process of sending answers to inquiries from customers. Given the limited scope of personal data collected and the fact that some of it is collected from publicly available sources, an impact assessment is not necessary for this operation.

The company processes the following categories of personal data and information for the following purposes and on the following grounds :

Details for registration and receiving a newsletter and sending an inquiry in the contact form (names, e-mail, username)
1. Purpose for which the data is collected : 1) Making contact with the user and sending information to him, 2) for the purposes of user registration in the website / online store, and 3) for sending an information bulletin.

1.2. Grounds for processing your personal data – By accepting the general conditions and registration in the website / e-shop or placing an order without registration, or by concluding a written contract, a contractual relationship is created between the Company and you, on which basis we process your personal data – Art. 6, para. 1, p. (b) ORZD. Your data for sending a newsletter are processed on the basis of your explicit consent – Art. 6, para. 1, p. (a) ORZD.

Additional information provided by you – If you want to complete your account, you can fill in your last name, address, phone number and location.
- Purpose for which the data is collected : Supplementing information about the user in his user account.
Data for delivery in connection with an order (names, phone, e-mail, address, city, region, country)
- Purpose for which the data is collected : Fulfillment of obligations of the Company under a contract for distance selling and delivery of purchased goods, including the exercise of the right of return and exchange or refusal of purchased goods.
Data for concluding an employment or civil contract (names, personal identification number and ID card data, address, telephone, e-mail, education, work experience)
- Purpose for which the data are collected : 1) Individualization of the candidate, 2) contacting you and conducting communication, as well as 3) selecting and 4) appointing candidates.

The company does not collect and process data on persons under 16 years of age, except with the express consent of their parents or legal representatives.

TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES OR A NON-EU COUNTRY OR AN INTERNATIONAL ORGANIZATION

The company does not provide your data to third parties.

METAL FACTORY Ltd. may transfer your personal data to our service subcontractors who have entered into a contract with us (for example: courier companies, accounting services and marketing agencies, etc.).

All third parties who may receive your data are obliged to keep your data secure and use it only to fulfill our obligations to us. When they no longer need your data to fulfill these obligations, they will have detailed instructions for their destruction in accordance with the procedures established by METAL FACTORY Ltd.

Recipients of your data can also be public authorities, to which we provide them with specific and clear legal obligations.

PERIOD OF STORAGE OF YOUR PERSONAL DATA

The company will store your personal data for a period not longer than the existence of your account on the website / online store or place an order without registration. After deleting your account from you, the Company takes the necessary care to delete and destroy all your data without undue delay or to anonymize them (ie to bring them in a form that does not reveal your identity).

The Company stores your personal data provided in connection with online orders until the withdrawal of your request or 5 years after their initial collection to protect the legal interests of the Company in litigation or administrative disputes with users of the online store. stored for the respective statutory period.

The Company stores the personal data of persons who have made an inquiry through the contact form on the website of the Company https://metalfactory-bg.com , until the explicit withdrawal of the consent of the individual.

The Company stores the personal data of the legal representatives of its business partners indefinitely, in order to comply with the legitimate interests and legal obligations of the Company.

RIGHTS OF PERSONAL DATA SUBJECTS

Your rights as a data subject are as follows:

At any time while storing or processing your personal data, you have the following rights:

you have the right to request a copy of your personal data from METAL FACTORY LTD and the right to access your personal data at any time.
you have the right to request from METAL FACTORY Ltd. your personal data in a form convenient for transfer to another controller of personal data, or to ask us to do so without being hindered by us;
you have the right to ask METAL FACTORY Ltd. to correct without undue delay your inaccurate personal data, as well as data that are no longer current;
you have the right to request from METAL FACTORY Ltd. your personal data to be deleted (the right to be forgotten) without undue delay in the presence of any of the following grounds:
personal data are no longer needed for the purposes for which they were collected;
when you have withdrawn your consent;
when you objected to the processing,
when the processing is illegal;
where personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to us as data controllers;
when personal data have been collected in connection with the provision of information society services.

We may refuse to delete your personal information for the following reasons:

in exercising the right to freedom of expression and the right to information;
for compliance with a legal obligation on our part or for the performance of a task of public interest,
for reasons of public interest in the field of public health;
for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, in so far as deletion is likely to make it impossible or seriously impede the achievement of the purposes of such processing; or for the establishment, exercise or defense of legal claims.
you have the right to ask METAL FACTORY Ltd. to limit the processing of your personal data, in which case the data will only be stored, but not processed. Our refusal to limit will be explicit only in writing, and we are obliged to motivate it with a legitimate reason;
you have the right to withdraw your consent to the processing of your personal data at any time with a separate request addressed to the administrator;
you have the right to object to certain types of processing, such as direct marketing (unsolicited advertising);
you have the right to object to automated processing, including profiling;
you have the right not to be the subject of a decision based solely on automated processing, including profiling;
if we need to use your personal data for a new purpose not covered by this data protection statement, we will provide you with a new data protection notice and when, and where necessary, we will ask for your prior consent for the new processing.

You can exercise all your rights regarding the protection of your personal data by downloading the forms:

Of course, these forms are not mandatory and you can send your requests in any form to the Administrator, which contains a statement to this effect and identifies you as the owner of the data and send them to email: office@metalfactory-bg.com.

Requests for personal data will be answered within one month, and in case of need to extend the specified period, you will be informed about the extension, as well as the reasons for the delay.

You have the right to appeal to the supervisory authority

You have the right to file a complaint directly to the supervisory body, the competent body being the Commission for Personal Data Protection, address: Sofia 1592, Blvd. “Prof. Tsvetan Lazarov ”№ 2 (www.cpdp.bg).

TECHNOLOGICAL AND ORGANIZATIONAL MEASURES FOR PROCESS SECURITY. RISKS.

The purpose of the Company is to guarantee the quality and integrity of the data provided to us by users of the website. To this end, adequate technological and organizational measures have been taken, which contribute to the protection, accuracy, timeliness and completeness of the data.

All information you provide to us is stored on SSL-encrypted servers. We apply the appropriate technological and organizational measures necessary to protect your personal data and the appropriate level of protection that ensures the confidentiality and integrity of the data and prevents the destruction, loss, unauthorized alteration or unauthorized disclosure of personal data.

In the event that we provide you with a password to access the website, you accept and agree that you are responsible for the protection and confidentiality of this password. Under no circumstances will we ask you to provide this password to others.

Regardless of the measures taken to protect your data, you should be informed that the transmission of data over the Internet or other open network is never completely secure and there is a risk that third parties will gain unauthorized access to and use of your data.

USE OF COOKIES

Features and expediency of the use of cookies on the website https://metalfactory-bg.com .

A cookie is a file containing a limited set of textual information that a website transfers from a web browser to your device’s hard drive temporarily while you are visiting, or for a longer period, depending on the type of cookie. The function of cookies is to distinguish you from other users of the same website or to store certain information related to your preferences and is used by most sites to facilitate your browsing. Each cookie is unique to your browser and contains anonymous information. The content usually includes the name of the domain from which it comes.

METAL FACTORY Ltd. emphasizes that some features or services of the site may not function properly without cookies. Cookies retain user preferences and other information, but cannot read data from the hard drive or from cookies created by other sites.

The site https://metalfactory-bg.com does not use cookies containing personal data, but only anonymous ones. They are as follows according to their purpose:

Cookies related to the effectiveness of the site

They collect statistical information about site traffic, including the number of visits, the length of stay, the popularity of individual pages, the sequence of browsing, repeat visits and the time of exit from the site. This allows us to track the success of our site, as well as the effectiveness of our site. Analyzing the data, we come up with solutions to improve the user experience of the site.

Preferred settings

These are cookies to save information on language version selection, location and display settings according to the type of device from which you access the website. The goal is not to have to re-select settings that you have already confirmed or rejected in a previous visit to the site or in the current session, thus ensuring maximum convenience of visiting the site.

Consumer behavior

This category of cookies stores information about your decisions as a user. These include maintaining values when completing surveys and a history of your preferences and requests for the products and services we offer. This avoids the need to re-enter data and selections for your convenience.

Almost every browser allows cookies to be stopped. This can happen at the following links:

More information on how businesses use cookies is available here .

If you have any questions regarding this Cookie Policy, please contact METAL FACTORY LTD by email: office@metalfactory-bg.com

Effective from 25.05.2018. This document was last updated on 06.03.2022.

Login