Privacy policy

Trademark Grande Banditta and online store www.grandebanditta.com owned by „Nacheva Innovation“ LTD – a public company registered in the Commercial Register at Registry Agency with UIC: 202970155, with headquarters and registered address: city of Sofia, 156 Alexander Stamboliyski Blvd, ground floor, tel.: +359897888752, email: [email protected], webpage: www.grandebanditta.com. By this Privacy and Personal Data Protection Policy, we ensure your integrity of the person and put effort into protection against unlawful processing of individual persons’ personal data.

This document contains information concerning method of treating personal data, type of personal data which are collected, purpose of using personal data collected, access of third persons to these data, security measures taken concerning personal data collected, as well as the options you have in connection with using personal data provided by you. All personal data are collected and processed in compliance with valid Bulgarian legislation in the field of personal data protection.

Terminology Used:
“Personal Data” means any information through which individual person is identified or can be identified;

“Administrator” means individual or legal person, public authority, agency or another structure which alone or together with others determines the purposes and means of personal data processing. In this case, personal data administrator is „Nacheva Innovation“ LTD (Grande Banditta);

“Data Subject” is individual person who is identified or who can be identified on the basis of particular information;

“Processing” means any operation or set of operations performed with personal data or set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or changing, extracting, consulting, using, disclosing by transferring, spreading or other method by which data become available, arranging or combining, restricting, deleting or destroying;

“Data Processor” means individual or legal person, public authority, agency or other structure processing personal data on behalf of administrator. “Data Processor” in this policy refers to an employee of „Nacheva Innovation“ LTD;

Personal data processed by „Nacheva Innovation“ LTD are provided directly by you or they are automatically collected.

Legal basis on which Grande Banditta („Nacheva Innovation“ LTD) processes personal data is the voluntary consent granted by you. In connection with the purposes specified below, you should grant you explicit consent for each purpose via ticking the checkbox which appears as a square box with accompanying text. When selection is made, a tick in the box appears, with view of which you have already granted your consent for your personal data to be processed by Grande Banditta („Nacheva Innovation“ LTD).

Personal Data Provided by You:
Personal data directly provided by you are processed and used for the purposes specified in this Privacy and Personal Data Protection Policy. Providing your personal data when using the website: www.grandebanditta.com is not obligatory unless you wish to register voluntarily and/or place an order.

Personal data which we collect upon voluntary registration performed by you are: first and last name, email address, telephone number, etc. This is information which you have to specify in order to make registration and/or order, through which you can be personally identified. Purposes for collecting specified personal data are listed below in this Privacy and Personal Data Protection Policy.

How Do We Use Social Media?
We use social media to promote our business, products and services, as well as to advertise.

Social media plugins integration. We have integrated social media plugins on our websites. This means that when you click on one of these buttons (such as „Like" button of Facebook), we share part of your information with respective social media provider. If, at that moment, you have logged into your profile in respective social media, media provider can connect this information with your profile in social media and possibly show your actions in your profile, making them visible to other users which you are connected with.

Other services and functions connected with social media. We can integrate more services connected with social media (such as social media messages) through which you can communicate with us or with people you know in connection with our services. Every time when you connect with us vial social media, respective social media provider may allow you to share information with us. If you decide to share, you will be notified in general by provider about which information will be shared.

Personal Data Collected Automatically:
When you visit any of our webpages, our web server automatically recognizes and collects your IP address which is determined by your internet service provider and it does not identify you personally.

Summarized information – Log Files – similar to many other websites, we receive information from log files (set of user’s system information): IP address; ISP (Internet Service Provider); browser which you use when you visit a website of the group (such as Google Chrome, Internet Explorer and Mozilla Firefox); time period spent in particular website and which webpages on the website you have visited. Information contained in these files includes:

Cookies: this is a small amount of information which web server sends to web browser enabling the server to collect back information from browser. You can choose to delete our or third-party cookies through the options of each browser. This can influence interaction with our or another website.

You can find more information about “Cookie” at: http://www.allaboutcookies.org/faqs/cookies.html.

Purposes of Your Personal Data Processing:
Grande Banditta („Nacheva Innovation“ LTD) processes your personal data only for the purposes specified below:

• For registration and/or order, and your profile management including for using website services;
• To send you regular newsletters which you have explicitly subscribed to;
• For marketing purposes in connection with website activities
• To send you marketing messages and information to third parties in cases when we have explicitly received your consent about that.

Recognizing and collecting IP address enables:
- Disclosing users’ identities when this is necessary in compliance with the law, legal procedures or to observe current conditions;
- Website traffic analysis and malicious attacks protection;

What we do in order to protect your personal data:
We put serious effort to guarantee security of our websites. Data which you provide are protected via SSL technology (Secure Sockets Layer). SSL is a standard method in the field of personal data coding so they can be securely transferred on the internet

Preserving your personal information privacy and security has the highest priority and we restrict the access to it, providing access only to those employees at Grande Banditta („Nacheva Innovation“ LTD) who must have contact with it in order to fulfil their role and enable our services to be provided to you. We will keep you information confidential except for the cases when it must be disclosed under the law or due to technical purposes.

We store your personal information as long as it is needed in order to guarantee effective functioning of our website. Generally, we store your personal data until your profile exists on a particular website or until you explicitly require your data to be deleted. Information provided and collected by you will not be sold or provided for usage for reward to anyone without your personal consent about that.

Providing information can occur in case of requesting from respective state authorities and institutions according to procedures and in cases determined in valid Bulgarian legislation.

We put maximum effort to protect your personal information but however when sharing information on the internet you should take into account that information transferring on the internet can never be completely secure, as well as security cannot be completely guaranteed.

Your rights and opportunities in connection with your personal data processing:
You have certain rights in compliance with applicable legislation with respect to personal data which we store about you and namely:

1. You are authorized to require access and receive information with respect to personal data which are stored about you, as well as information concerning purposes of processing, personal data categories, recipients before whom it is possible your personal data to be disclosed, etc.;
2. You are entitled any time to request rectification of inaccurate data connected with you, as well as completing incomplete data if this is appropriate and/or needed with view of the purpose for which data are processed;
3. You can any time withdraw your consent for using your personal data which you have granted previously. In this case, withdrawal of your consent for your personal data to be used can lead to impossibility to use certain products or services provided by the website stated above;
4. If you decide that you do not want Grande Banditta („Nacheva Innovation“ LTD) to process your personal data, you are have the right to be “Forgotten”, i.e. you can any time request your personal data to be deleted if any of the following bases is present:
4.1. Your personal data are no longer needed for the purposes for which they have been collected or processed in other way;
4.2. In case that you have withdrawn your consent for processing your personal data;
4.3. If your personal data are processed illegally;
4.4. In case that you have objected against processing your personal data;
4.5. Other cases provided in the legislation governing personal data protection;
5. In a series of cases you have the right to request restriction of your personal data processing instead of deletion;
6. Right to objection to Grande Banditta („Nacheva Innovation“ LTD) processing your personal data in case of legal basis for this;

You can exercise all the rights listed by submitting a request in writing, without using a template, to the following web address: [email protected], sent by your registration email containing at least the following:

1. User’s name, email and other data for identification of respective individual person;
2. Description of request;
3. Specifying website domain which this request refers to;
4. Preferred form for providing information;

If a subject requests to be “Forgotten” and his/her personal data are deleted, this process is irreversible and they cannot be recovered later!
In cases of exercising the rights under Art. 17 of GDPR, Nacheva innovation LTD deletes only the personal data of subject, but not publicly accessible publications which data subject has made in forums, comments to publications and articles on websites of the media, posts and blogs. Submitting a request is completely free of charge. Request must be review within a period of one month as of the date of receiving the request.
Besides the rights stated above, Grande Banditta („Nacheva Innovation“ LTD) gives you the right to perform by yourself some of the following changes in connection with your personal data processing and namely:

• In your user’s profile, you can, by yourself, edit and delete personal data which are not obligatory for using the website and you do not want to be publicly available;
• You can manage your preferences for subscriptions from settings of your user’s profile, as well as to cancel receiving particular e-mail newsletter by selecting the option for unsubscribing at the bottom of each e-mail received.

Useful information:
There is series of useful instruments and resources which you can use in order to control your privacy online for instance via online selection or network advertising initiative http://www.youronlinechoices.com/bg/.
We especially recommend you to get familiarized with the functions and settings for privacy of the browser you use.

At the following address you can find a lot of useful information for onlinebehavioral targeting and personal data protection on the Internet http://www.youronlinechoices.com/bg/.

You can get more information for personal data protection on the website of Commission for Personal Data Protection: https://www.cpdp.bg/?p=element&aid=1115

Contact Us:
In case that you have questions, comments or complaints in connection with current Privacy and Personal Data Protection Policy or in case that you wish to exercise your rights or to update personal data provided, please contact us via the following email: [email protected].

You can contact Grande Banditta („Nacheva Innovation“ LTD) also by letter to the following address: Bulgaria, city of Sofia,

Trademark Grande Banditta and online store www.grandebanditta.com owned by „Nacheva Innovation“ LTD – a public company registered in the Commercial Register at Registry Agency with UIC: 202970155, with headquarters and registered address: city of Sofia, 9 Bogatista Str., ground floor, tel.: +359888778815, email: [email protected], webpage: www.grandebanditta.com. By this Privacy and Personal Data Protection Policy, we ensure your integrity of the person and put effort into protection against unlawful processing of individual persons’ personal data.