Privacy Policy

PROTECTION OF PERSONAL DATA

OBJECTIVES

"Crazy Kids" collects and uses the information for the purposes of:

• direct marketing;
• Performance of its contractual obligations to Users

"Crazy Kids" processes the consumer's personal data on the basis of the agreement concluded between the User and "Crazy Kids".

The user agrees to process his or her personal data for the purpose of direct marketing by tagging a check box.

The user can give up at any time the given consent by ticking a checkbox that is located ______

The Consumer's personal data is stored for a period of 5 years.

RIGHTS OF CONSUMERS

Each User of the site enjoys all rights to protection of personal data in accordance with Bulgarian and European Union law. Each User is entitled to:

• Awareness (in connection with the processing of his or her personal data by the administrator);

• Access to their own personal data;

• Correction (if data is inaccurate);

• Delete personal data (right to be forgotten);

• Limitation of processing by the administrator or the personal data processor;

• Portability of personal data between individual administrators;

• Objection to the processing of his or her personal data;

• The data subject is also entitled not to be the subject of a decision based solely on automated processing involving profiling that produces legal consequences for the data subject or similarly affects him or her significantly;

• Right to judicial or administrative redress if the rights of the data subject have been violated.

The user may request deletion if one of the following conditions is true:

• Personal data is no longer needed for the purposes for which it was collected or otherwise processed;
• The consumer withdraws his / her consent on which the processing of the data is based and no other legal basis for the processing;
• The data user opposes the processing and there are no legitimate grounds for the processing that have an advantage;
• Personal data has been tampered with;
• Personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State applicable to the controller;
• Personal data have been gathered in connection with the provision of information society services to children, and consent is given by parental responsibility for the child.

The user is entitled to restrict the processing of his personal data by the controller when:

• Restrictions on the accuracy of personal data. In this case, the limitation of the processing is for a period that allows the controller to verify the accuracy of the personal data;
• Processing is illegal, but the User does not want to delete the personal data, but instead requires a limitation of their use;
• The administrator no longer needs personal data for the purpose of processing, but the user requires them to identify, exercise or protect legal claims;
• Opposes the processing pending verification that the legal grounds of the controller have an advantage over the User's interests.

Right of portability.

The data subject has the right to receive the personal data that concerns him and which he has provided to an administrator in a structured, widely used and machine readable format and has the right to transfer this data to another administrator without hindrance by the administrator to whom the personal data is provided when the processing is based on consent or a contractual obligation and the processing is done in an automated manner. When exercising its right to data portability, the data subject is also entitled to receive a direct transfer of personal data from one administrator to another when technically feasible.

Right of objection.

Users have the right to object to the controller against the processing of their personal data. The Personal Data Administrator is required to discontinue the processing unless he can prove that there are convincing legal grounds for the processing that take precedence over the interests, rights and freedoms of the data subject or for the establishment, exercise or protection of legal claims. In case of objection to the processing of personal data for the purposes of direct marketing, the processing should be terminated immediately.

Appeal to the supervisory authority

Each User has the right to file a complaint against the unlawful processing of his personal data with the Personal Data Protection Commission or the competent court.

Duties of the Data Controller:

The Personal Data Administrator has the following obligations:

• Processing the data in accordance with the data protection principles laid down in the Regulation, being able to prove this (accountability);

• Provides data protection at the design stage and by default;

• Notifies the supervisor and data subject in case of personal data breach, as well as documentation of any breaches of personal data security, the facts relating to the infringement, the consequences thereof, the actions taken to deal with the infringement;

• Perform an impact assessment on data protection;

• Apply appropriate technical and organizational measures to ensure data security such as:

• Pseudonymization;

• Encryption;
• Ensure continued confidentiality, integrity, availability and sustainability of processing systems and services;
• Timely restoration of availability and access to personal data in the event of a physical or technical incident;
• Regular testing, assessment and evaluation of the effectiveness of technical and organizational measures;
• Working with the Data Protection Supervisor in meeting the obligations arising from the Regulation.

Prepares and applies internal procedures for receiving, reviewing and responding within one month to requests from Users for the exercise of their rights as data subjects.

MAINTENANCE OF A REGISTER

Crazy Kids maintains a log of the processing activities for which it responds. This registry contains all of the following information:

• the name and contact details of the administrator

• the purpose of the processing;

• a description of the categories of data subjects and categories of personal data;

• the categories of recipients to whom personal data are or will be disclosed, including recipients in third countries or international organizations;

• where possible, the deadlines for deleting the different categories of data;

• where possible, a general description of the technical and organizational security measures,

Processing personal data

The Personal Data Administrator uses the services of a personal data processor - SuperHosting.BG Ltd., Sofia, Iztok, Blvd.GDM Dimitrov Blvd.3, UIC 131449987.

The processor does not include any other processing data without the prior specific or general written permission of the administrator.

Child protection

In the case of the direct provision of information society services to children, the child who agrees must be at least 16 years old. If the child is under 16, this treatment is lawful only if and to the extent that such consent is given or permitted by the parent the child.

Special categories of personal data

BODIES REGULATORY ACTIVITIES

The bodies governing the activities of Crazy Kids are the Consumer Protection Commission (CPC) and the Commission for Personal Data Protection (CPDP) with the following coordinates:

About CPC:

• Website: https://kzp.bg/kontakti
• wire: 0700 111 22
• email: info@kzp.bg
• Address: Sofia, Slaveykov Square, 4A, 3rd, 4th and 6th floor

About CPDP:

• Website: https://www.cpdp.bg/
• wire: 02 / 91-53-518
• email: kzld@cpdp.bg
• address: Sofia 1592, "Prof. 2 Tsvetan Lazarov

DISPUTES

Users can use the European Dispute Resolution Online Platform (ODR) available at / http://ec.europa.eu/odr/ - a single access portal allowing EU users and traders to settle disputes between themselves .

Alternative dispute resolution (ADR) between consumers and traders is an out-of-court conciliation procedure on a voluntary basis.

The general conciliation commissions help to reach an agreement between consumers and traders in disputes concerning contracts for the sale of goods and the provision of services,

The general conciliation commissions are defined on a regional basis and the competent Covenant Committee is to settle disputes between Crazy Kids and the General Conciliation Commission with Pleven headquarters and the territory of the Pleven district;

The Consolidated List of Recognized ADR Authorities of the Member States of the European Unioncan be found at https://webgate.ec.europa.eu/odr/main/index.cfm?event=main.adr.show