Personal data protection

I. Introduction
"Lizakain" Ltd. respects the privacy of its clients and guarantees the maximum protection of their personal data. This Privacy and Personal Data Protection Policy (hereinafter referred to as the "Privacy Policy") has been prepared and is based on the current Bulgarian and European legislation in the field of personal data protection.
This Privacy Policy regulates the processing of personal data of individuals or representatives of legal entities of our clients or potential clients, as well as users of our website: https://lizakain.com/ (the "Site"), in connection with the services provided by us, including those provided through and accessible on the Site.
This Privacy Policy, together with the General Terms and Conditions of Use of the Website, the Cookie Policy and any other documents referred to on the Website, sets out the rules that we will follow when processing personal data that we collect from you or about you, or that you provide to us. This Privacy Policy does not affect, limit or revoke your rights arising from the Personal Data Protection Act (“PDPA”) or other relevant legislation.
If you have any questions or comments about this Privacy Policy, please contact us at: info@lizakain.com.
Please read this Policy carefully before using the Site or providing your personal data, whether electronically on the Site or on paper, as by providing your personal data you agree to its terms. If you do not want us to process your personal data in the manner described in this Privacy Policy, please do not provide it to us. The provision of personal data by you is voluntary in order to use certain services provided by us and to use and/or access the Site, as well as to shop online on the Site. Please note that in some cases we will not be able to provide you with the service and/or sell you the goods you have requested if you do not provide us with the necessary information. Please also note that in certain cases your consent to the processing of personal data may not be necessary if we have another legal basis, e.g. compliance with statutory obligations.

II. Who processes and is responsible for your personal data?
“Lizakain” Ltd. (“LIZA KAIN”, “we”) is the commercial company registered in the Commercial Register at the Registry Agency with UIC 206868112, which collects, processes and stores your personal data under the terms of this Privacy Policy. LIZA KAIN is a personal data administrator within the meaning of the Personal Data Protection Act (PDPA). You can contact us at any of the following coordinates: address of management: Sofia, 27 Gen. Yosif V. Gurko Str., telephone: 0876424032; e-mail: info@lizakain.com

III. Categories of personal data processed by LIZA KAIN.
1. LIZA KAIN may process publicly available personal data and/or personal data provided by you. The main types of personal data processed are:
(i) Personally identifiable information (including name, email address, language of communication, etc.);
(ii) Contact details (including postal and email addresses, telephone and fax numbers of you or a contact person designated by you, etc.);
(iii) Financial information (bank account and others);
(iv) Information about a representative (legal representative or proxy of such) of our client, a legal entity;
(v) Profile data on the Site (including name, postal and email addresses, telephone number, date of birth, etc.);
(vi) Data for concluding contracts for sale, dealership, wholesale, deferred payment, etc. with natural or legal persons (such as names, personal identification numbers, etc.).
2. LIZA KAIN may process data prepared and generated by LIZA KAIN in the process of providing the services:
(i) data on the electronic communications terminal device used, the type of device, the operating system used, IP address, location;
(ii) data about your preferred goods and services
(iii) Data from communication between us and you, habits, preferences, your satisfaction with our services (activity in using the services, complaints, requests, etc.);
(iv) Information regarding visits to the Site and use of the Site, including Site operations and usage history;
(v) Data obtained in the performance of obligations arising from regulatory acts (i.e. data arising from inquiries, regulations, investigative bodies, notary, tax authorities, court, enforcement judge);
(vi) Video recording of visits to stores or the head office; voice recording – calls made to the LIZA KAIN contact center;
(vii) Video recording or photography made in accordance with the previously announced terms and conditions for participation in games and/or other promotional campaigns organized by LIZA KAIN.
3. In order to ensure the proper performance of services and obligations arising from client contracts, LIZA KAIN has the right to process any information available in public registers (including public databases and data disclosed on the Internet), as well as information received from third parties in connection with the implementation of legal provisions regarding clients.
4. LIZA KAIN has the right and obligation to verify the accuracy of the personal data recorded in the database, and for this purpose requires you to verify the data and, if necessary, correct it or confirm the accuracy of your data.
5. Different types of personal data may be processed independently or in combination with each other.

IV. Purposes and legal grounds for processing personal data
1. Processing of personal data which is necessary for entering into or performing contracts with us or in connection with preparation for entering into contracts with us.
LIZA KAIN processes your data for the following purposes:
(i) Identification of a client when: concluding a new or amending an existing contract with us; clarifications about the services used; execution of a concluded contract.
(ii) Preparation of proposals for the conclusion of contracts, sending of pre-contractual information and draft contract; management of pre-sales activities;
(iii) Data received from you in the performance of obligations arising from contracts concluded with you or a company represented by you, exercising rights and ensuring the performance of contracts by our clients;
(iv) Administration and response to customer complaints/inquiries/grievances/claims; refunds and goods; product replacement;
(v) Technical assistance for creating an account/s and recovering a forgotten password to access our Site, for electronic servicing of electronic invoices.
(vi) Identification and validation of legal age when shopping online;
(vii) Payment of debts, deferral of amounts due; management of collections of receivables;
(viii) Warranty and service;
(ix) Updating dealer offers; sharing important information regarding changes to our policies and other administrative information;
(x) Management and administration of online shopping activities; payment management.
2. In fulfillment of its legal obligations, LIZA KAIN processes your data for the following purposes:
(i) Issuance of invoices;
(ii) For carrying out tax and social security control by the relevant competent authorities;
(iii) Fulfillment of obligations in relation to distance selling, off-premises selling, as provided for in the Consumer Protection Act;
(iv) Providing information to the Personal Data Protection Commission in connection with obligations provided for in the legal framework for the protection of personal data - Personal Data Protection Act, Regulation (EU) 2016/679 of 27 April 2016, etc.;
(v) Obligations provided for in the Accountancy Act and the Tax and Social Security Procedure Code and other related regulatory acts, in connection with the keeping of proper and lawful accounting records.
3. LIZA KAIN processes the relevant data provided with the client's explicit written consent for their processing for the following purposes:
(i) Creation and management of a personal profile on the Site; technical assistance for creating a profile(s) and recovering a forgotten password to access our Site;
(ii) Direct marketing of products and services;
(iii) Participation in and management of surveys, giveaways, promotional campaigns;
(iv) Participation and management of LIZA KAIN.
4. Processing is necessary for the purposes of the legitimate interests of LIZA KAIN.
(i) In order to protect and ensure the protection of the property, interests and security of LIZA KAIN, its visitors and employees, LIZA KAIN uses video surveillance equipment.
(ii) To assess and determine user satisfaction and the effectiveness of the advertising we offer to you and others, and to meet your expectations by presenting adequate advertising;
(iii) Analysis of data on customer purchase history, preferences and behavior;
(iv) Ensuring quality of customer service (video recording, audio recording).

V. Categories of third parties who access and process your personal data
(i) Transport/courier companies, postal operators in order to fulfill our contractual obligations, send correspondence and communications in connection with the contract between us, send purchased goods;
(ii) Persons who, upon assignment by LIZA KAIN, maintain equipment and software used to process your personal data;
(iii) Debt collection service providers, notary, lawyer, bailiff or other third party, if the customer has breached the obligation arising from a contract with us;
(iv) The banks servicing payments made by and to you;
(v) Persons to whom LIZA KAIN has entrusted the performance of part of the activities or obligations related to a specific service that we owe to you; persons processing personal data who, based on a contract with LIZA KAIN, process your personal data on behalf of LIZA KAIN;
(vi) Persons providing consulting services in various fields – lawyers, accountants, marketing agencies, etc.;
(vii) Authorities, institutions and persons to whom we are obliged to provide personal data under applicable law;
(viii) Security companies holding a license to perform private security activities, processing video recordings from LIZA KAIN sites/offices and/or maintaining other registers in the process of ensuring the access regime in the same sites.

VI. For how long is your personal data stored?
The duration of storage of your personal data depends on the purposes of the processing for which they were collected:
1. Personal data processed for the purpose of concluding/amending and executing contracts between LIZA KAIN and you or a company represented by you – for the duration of the contract and until the final settlement of all financial relations between the parties. LIZA KAIN may store some of your personal data for a longer period until the expiration of the relevant statute of limitations for the purpose of protection against possible claims of clients in connection with the execution/termination of contracts with us, as well as for a longer period in the event of an already arisen legal dispute until its final resolution by a court/arbitration decision that has entered into force;
2. Personal data processed for the purpose of issuing accounting/financial documents for tax and social security control, such as but not limited to invoices, debit and credit notes, acceptance and delivery protocols, contracts for the provision of services/goods, are stored for at least 11 years after the expiration of the limitation period for repayment of the public claim, unless the applicable legislation provides for a longer period.
3. Personal data processed for the purpose of participation in the LIZA KAIN club and profile management on the Site – until the explicit withdrawal of the given consent or receipt of an objection to the processing of personal data for profile management or participation in the LIZA KAIN club.
4. Personal data processed for direct marketing purposes – until the explicit withdrawal of the consent given for direct marketing or receipt of an objection to the processing of personal data for direct marketing.
5. Data from video recordings from security cameras – up to 60 days from the creation of the recording. Telephone conversations are stored up to 360 days from the time the conversation was made.

VII. Your rights in relation to the processing of your personal data
1.General rights
In connection with the processing of personal data, you have the following rights, which you may exercise at any time while we are storing or processing your personal data by sending a request to the address of LIZA KAIN specified above, or electronically to email: info@lizakain.com
You have the right to request from LIZA KAIN:
• a copy of your personal data and access to it at any time;
to correct without undue delay your inaccurate personal data, as well as data that is no longer up to date;
• your personal data in a form convenient for transferring to another personal data administrator, or to request that we do so, without being hindered by us (right to portability);
• to have your personal data deleted without undue delay if there is any legal basis for this;
• to restrict the processing of your personal data, in which case your data will only be stored, but not processed. Our refusal to restrict will be explicit only in writing, and we are obliged to motivate it with the lawful reason.
You also have the right:
• withdraw your consent to the processing of your personal data at any time by a separate request addressed to LIZA KAIN, in the case of processing based on consent;
• object to the processing of your personal data;
• to object to automated processing, including profiling;
• not to be subject to a decision based solely on automated processing, including profiling.
2. Supervisory authority
You have the right to file a complaint directly with the supervisory authority, the competent authority for this is the Commission for Personal Data Protection, address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. (www.cpdp.bg).
In case you wish to file a complaint regarding the processing of your personal data by LIZA KAIN, you can do so at the specified contact details of the administrator or directly to the data protection officer (at the contact details specified above).
3. Automated processing and profiling
When you visit our Site, we use automated processing to adapt the products and services to your needs in the best possible way.
4. Objection to use for direct marketing
You have the right to object to the future processing of your personal data for direct marketing and advertising purposes, as well as to their disclosure to third parties and their use on their behalf for direct marketing and advertising purposes, by withdrawing your consent at any time. To do this, you can send an email with the relevant request to cease the use of your data for direct marketing purposes to the following address: info@lizakain.com
5. Can you refuse to provide personal data to LIZA KAIN and what are the consequences of this?
In order to enter into a contract with you and/or to provide you with the requested products and/or services and/or to deliver the ordered goods in accordance with our legal and subsequently contractual obligations, LIZA KAIN needs certain data to identify the party to the contract, its attorney-in-fact, contact details, and payment details.
Failure to provide such data prevents us from being able to enter into a contract with you.
In order to make a purchase from our Site and for us to deliver the goods or services you have ordered, you must have created an account on the Site. During the account creation process, LIZA KAIN requires certain data to identify you, contact details, etc. Failure to provide such data will prevent the purchase and delivery of goods or services by you.

VIII. How we protect your data
LIZA KAIN implements organizational, physical, information technology and other necessary measures to ensure the security and protection of your personal data and the monitoring of the processing of personal data.
Among other things, such security measures include the following activities:
– LIZA KAIN has established the requirements for processing, registering and storing personal data with internal procedures, compliance with which is constantly monitored;
– LIZA KAIN employees' access to personal data and permission to process personal data in LIZA KAIN's database is limited, depending on their duties;
– LIZA KAIN has established confidentiality obligations for its employees;
– access to LIZA KAIN's office equipment and each employee's computers is limited.
– we implement all necessary organizational and technical measures provided for in the Personal Data Protection Act, as well as best practices from international standards
– For the purpose of maximum security in the processing, transmission and storage of your data, we may use additional protection mechanisms such as encryption, pseudonymization, etc.
The security measures we implement are subject to constant improvement and adaptation to the most modern technologies.

IX. Link to other sites
Sometimes the Site may contain links/references (hyperlinks) to other sites. We do not operate the linked sites and do not endorse the content, services and products of these sites. We advise you to use the linked sites carefully and with due attention to their content and terms of use. LIZA KAIN is not responsible for the privacy policy or content of such sites and we advise you to review their privacy policies. However, as soon as LIZA KAIN receives information about illegal activities or illegal information on such Internet sites, LIZA KAIN will take immediate measures to remove electronic references (links) to them.

X. Cookie Policy
To familiarize yourself with the Cookie Policy, please visit the Cookie Policy page.

Personal data about children
We do not knowingly collect personal information from children under the age of 18. If we learn that we have collected personal information from a child under the age of 18, we will take steps to delete the information as soon as possible or obtain the consent of the person having parental responsibility for the child.
Privacy Policy Changes
We may update our Privacy Policy from time to time. If we make any changes to this Policy, a notice will be posted on our website, along with the updated Privacy Policy. Any changes or additions to the Privacy Policy will be effective only upon posting of the updated Privacy Policy on our Website.