Website Privacy Policy

Hydroland (hereinafter referred to as the "Administrator" or the "Company") hereby confirms that the information and personal data provided by you in connection with your visit to our site, order, contact and other services provided by us are collected, processed and stored in accordance with the requirements of the legislation on the protection of personal data of the European Union.

Basis for collecting, processing and storing your personal data

I. The administrator collects and processes your personal data

In connection with the use of the website www.hydroland.bg and the conclusion of contracts with the company on the basis of Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), and more specifically on the following grounds:

express consent received from you as a customer;
fulfillment of the Administrator's obligations under a contract with you;
compliance with a legal obligation that applies to the Administrator;
for the purposes of the legitimate interests of the Administrator or a third party.

Purposes and principles in the collection, processing and storage of your personal data

We collect and process the personal data that you provide to us in connection with the use of the website and the conclusion of a contract with the company, including for the following purposes:

creating a profile and providing full functionality when using the website;
conclusion and performance of a contract at a distance;
individualization of a party to the contract;
accounting purposes;
statistical purposes;
protection of information security;
ensuring the performance of the contract for the provision of the relevant service;
sending a newsletter related to new blog posts on the website;
marketing goals for individual offers.

We observe the following principles when processing your personal data:

legality, good faith and transparency;
limitation of processing purposes;
relevance to the purposes of the processing and minimization of the collected data;
accuracy and timeliness of the data;
limitation of storage in order to achieve the goals;
integrity and confidentiality of processing and ensuring an appropriate level of personal data security.

When processing and storing personal data, the Administrator may process and store personal data in order to protect the following legitimate interests: fulfillment of obligations to the National Revenue Agency, the Ministry of the Interior and other state and municipal bodies.

II. The administrator processes the following categories of personal data

Information for the following purposes and on the following grounds: Your personalizing data (email, name, etc.) Purpose for which the data is collected:

ensuring contact with the user and sending information to him;
to send a newsletter.

Basis for processing your personal data - By accepting the general conditions and registering on the website or by entering into a written contract, a contractual relationship is created between the Administrator and you, on the basis of which we process your personal data. Your data for sending a newsletter is processed with your express consent. The administrator does not collect or process personal data relating to the following:

reveal racial or ethnic origin;
reveal political, religious or philosophical beliefs, or membership in trade unions;
genetic and biometric data, health data or data about sex life or sexual orientation.

The personal data are collected by the Administrator from the persons to whom they refer. The Company does not perform automated data decision making. The personal data are collected by the Administrator from the person to whom they relate and from the Commercial Register at the Registration Agency. The Company does not perform automated decision-making with data. The administrator can use the so-called "cookies" for the purposes of providing full functionality of the website, improving the user experience, statistical purposes, ease of access, etc., to which you agree through the site of our website. You can control and/or delete cookies at any time through the user settings of your browser. "Cookies" do not constitute personal data and are not used to identify visitors and users of the website.

III. Duration of storage of your personal data

The Administrator stores your personal data provided with the use of the website for a period of 5 years for the purpose of protecting the legal interests of the Administrator in legal or administrative disputes with users of the website. The Administrator notifies you in the event that the data storage period needs to be extended in order to fulfill a legal obligation or in view of the legitimate interests of the Administrator or otherwise. The administrator stores the personal data that it is necessary to keep by virtue of the applicable legislation for the relevant stipulated period. The Administrator stores the personal data of the legal representatives of its commercial partners for the period of performance of the contract, to comply with the legitimate interests and legal obligations of the Administrator, and this period may exceed the term of the concluded contract.

IV. Transmission of your personal data for processing

The administrator may, at its own discretion, transfer part or all of your personal data to processors of personal data for the fulfillment of the processing purposes to which you have agreed, subject to the requirements of Regulation (EU) 2016/679 (GDPR). The administrator notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations. Your rights in the collection, processing and storage of your personal data. Withdrawal of consent to the processing of your personal data. If you do not want the personal data provided by you to be processed for marketing purposes and to receive a newsletter, you can withdraw your consent to processing at any time by filling in the consent withdrawal form in Appendix No. 1 or by requesting it in free text, and email it to us. Once we receive your request, we will send you to the email address you have indicated for receiving newsletters and advertising communications, a letter with detailed instructions for the verification of you as a recipient of newsletters and a subject of the personal data for which withdrawal of consent is requested. The withdrawal of consent does not affect the lawfulness of the processing of personal data that the Administrator has carried out up to that point.

V. Right of Access

You have the right to request and receive confirmation from the administrator if personal data relating to you is being processed by sending a free text search by email. You have the right to access the data relating to you, as well as the information relating to the collection, processing and storage of your personal data. Providing access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of repeated or excessive requests.

VI. Right to rectification or completion

You may at any time correct or complete inaccurate or incomplete personal data relating to you through the "Profile Edit" option. You can correct or complete inaccurate or incomplete personal data related to you directly through your profile on the website or by making a request to the Administrator by email using the form in Appendix No. 4 or by a free text request.

VII. Right to erasure ("to be forgotten")

You have the right to ask the Administrator to delete part or all of your personal data, and the Administrator has the obligation to delete them without undue delay, when any of the following grounds are present:

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
You object to the processing of your personal data, including for direct marketing purposes, and there are no overriding legal grounds for the processing;
the personal data were processed unlawfully;
the personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to the Administrator;
personal data were collected in connection with the provision of information society services.

The administrator is not obliged to delete the personal data if it stores and processes them:

to exercise the right to freedom of expression and the right to information;
to comply with a legal obligation that requires processing provided for in EU or Member State law applicable to the Administrator or for the performance of a task in the public interest or in the exercise of official powers conferred on him;
for reasons of public interest in the field of public health;
for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
for the establishment, exercise or defense of legal claims.

Once we have verified the identity of the person who made the request and the person to whom the data relates in accordance with the instructions sent to you, we will delete all data that we process about you in accordance with para. 3. If there is an order placed by you that is being processed, the earliest you can request to be "forgotten" is upon successful completion of the order.

VIII. Right to limitation

You have the right to request the Administrator to restrict the processing of data related to you by sending us a free text request by email when:

dispute the accuracy of the personal data, for a period that allows the Administrator to verify the accuracy of the personal data;
the processing is illegal, but you do not want the personal data to be deleted, but only to have its use restricted;
the administrator no longer needs the personal data for the purposes of processing, but you require them to establish, exercise or defend your legal claims;
You have objected to the processing pending verification of whether the legal grounds of the Administrator take precedence over your interests.

IX. Right of portability

If you have consented to the processing of your personal data or the processing is necessary for the performance of the contract with the Administrator, or if your data is processed in an automated manner, you can:

to ask the Administrator to provide you with your personal data in a readable format and to transfer them to another Administrator;
to ask the Administrator to directly transfer your personal data to an administrator specified by you, when this is technically feasible.

X. Right to Object

You can object at any time to the Administrator's processing of personal data concerning you, including if it is processed for the purposes of profiling or direct marketing. In the event of a breach of the security of your personal data, contact the Commission for the Protection of Personal Data. For more detailed information, you can visit the website of the independent state body - the Commission for the Protection of Personal Data, which ensures the protection of natural persons in the processing of their personal data: www.cpdp.bg/en