Privacy Policy of primewear.bg

Additional information for users in the European Union

Legal basis for processing

The Owner may process Personal Data relating to Users if one of the following applies:

• The users have given their consent for one or more specific purposes.
• the provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereunder;
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Owner;
• processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladly help to clarify the specific legal basis applicable to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Additional information regarding the retention period

Unless otherwise specified in this document, Personal Data is processed and stored for as long as required for the purpose for which it was collected, and may be retained for a longer period due to an applicable legal obligation or based on the Users' consent.

Therefore:

• Personal data collected for purposes related to the performance of a contract between the Owner and the User are retained until the contract has been fully performed.
• Personal data collected for the purposes of the Owner’s legitimate interests shall be retained for as long as is necessary to fulfill those purposes. Users may find specific information regarding the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.

The Owner may be permitted to retain Personal Data for a longer period whenever the User has given consent to such processing, until such consent is withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to fulfill a legal obligation or upon the order of an authority.

Upon the expiration of the retention period, the personal data are deleted. Consequently, the right of access, the right to erasure, the right to rectification, and the right to data portability cannot be exercised after the retention period has expired.

Consumer rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their Data processed by the Owner.

In particular, Users have the right to do the following, to the extent permitted by law:

• To withdraw their consent at any time. Users have the right to withdraw their consent where they have previously given their consent to the processing of their Personal Data.
• To object to the processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.
• Access their Data. Users have the right to learn whether Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing.
• Right to verify and request correction. Users have the right to verify the accuracy of their Data and to request that it be updated or corrected.
• To restrict the processing of their Data. Users have the right to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
• Their Personal Data to be deleted or otherwise removed. Users have the right to have their Data erased by the Owner.
• To receive their data and transfer it to another controller. Users have the right to receive their data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted without hindrance to another controller.
• Filing a complaint. Consumers have the right to lodge a complaint with their competent data protection authority.

Users also have the right to be informed about the legal basis for the transfer of Data abroad—including to an international organization governed by public international law or established by two or more countries, such as the UN—and about the security measures implemented by the Owner to protect their Data.

Details regarding the right to object to processing

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Owner, or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing grounds related to their particular situation to justify the objection.

Users should be aware that if their Personal Data is processed for direct marketing purposes, they may object to such processing at any time, free of charge and without providing any justification. When a User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To find out whether the Owner processes Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise these rights

Any requests to exercise the User's rights may be directed to the Owner using the contact details provided in this document. Such requests are free of charge, and the Owner will respond as early as possible—and always within one month—providing the Users with the information required by law. The Owner will communicate any rectification or erasure of Personal Data or restriction of processing to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. Upon the Users' request, the Owner will inform them about these recipients.