Goals

„Hometex.bg ” collects and uses the information for the following purposes:

  • direct marketing and sales;

  • fulfillment of its contractual obligations to Consumers

  • Provides information about new products and services related to Hometex.bg

„Hometex.bg” processes users„ personal data on the basis of the agreement concluded between the User and “Hometex.bg”contract.".

By checking the box, the user consents to the processing of their personal data for the purposes of generating documents and marketing products and services.

The user may withdraw their consent at any time by checking the box located in their profile after logging in

Users' personal data is retained for a period of 5 years.

 

Consumer Rights

Every User of the website is entitled to all rights regarding the protection of personal data under Bulgarian law and European Union law. Every User has the right to:

  • Right to be informed (regarding the processing of his personal data by the controller);

  • Access to your own personal data;

  • Correction (if the data is inaccurate);

  • Deletion of personal data (the „right to be forgotten“);

  • Restriction of processing by the controller or processor;

  • Portability of personal data between individual controllers;

  • Objection to the processing of his personal data;

  • The data subject also has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning the data subject or similarly significantly affects him or her;

  • The right to seek legal or administrative remedies in the event that the data subject’s rights have been violated.

The user may request deletion if any of the following conditions apply:

  • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

  • The user withdraws the consent on which the data processing is based, and there is no other legal basis for the processing;

  • The data subject objects to the processing, and there are no legitimate grounds for the processing that take precedence;

  • The personal data was processed unlawfully;

  • Personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject;

  • The personal data was collected in connection with the provision of information society services to children, and consent was given by the person with parental responsibility for the child.

The user has the right to restrict the processing of their personal data by the controller when:

  • Challenge the accuracy of the personal data. In this case, the restriction on processing shall apply for a period that allows the controller to verify the accuracy of the personal data;

  • The processing is unlawful, but the User does not wish to have the personal data erased; instead, the User requests that its use be restricted;

  • The administrator no longer needs the personal data for the purposes of processing, but the user requires it to establish, exercise, or defend legal claims;

  • objects to the processing pending verification of whether the controller’s legitimate interests take precedence over the User’s interests.

 

Right to data portability.

The data subject has the right to receive the personal data concerning him or her that he or she has provided to a controller, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another controller without hindrance from the controller to whom the personal data were provided, when the processing is based on consent or a contractual obligation and the processing is carried out by automated means. When exercising their right to data portability, the data subject has the right to receive and have the personal data transferred directly from one controller to another, where technically feasible.

 

Right to object.

Users have the right to object to the controller regarding the processing of their personal data. The data controller is required to cease processing unless it can demonstrate that there are compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims. In the event of an objection to the processing of personal data for direct marketing purposes, the processing must be discontinued immediately.

 

Complaint to the supervisory authority

Every User has the right to file a complaint regarding the unlawful processing of their personal data with the Personal Data Protection Commission or with the competent court.

 

Obligations of the Data Controller:

The data controller has the following obligations:

  • Processes data in accordance with the principles of personal data protection set forth in the regulation and is able to demonstrate this (accountability);

  • Ensures data protection by design and by default;

  • Notifies the supervisory authority and the data subject in the event of a personal data breach, and documents any personal data breach, including the facts related to the breach, its consequences, and the actions taken to address the breach;

  • Conducts a data protection impact assessment;

  • Implements appropriate technical and organizational measures to ensure data security, such as:

    • Pseudonymization;

    • Encryption;

    • Ensuring the ongoing confidentiality, integrity, availability, and resilience of processing systems and services;

    • Timely restoration of the availability of and access to personal data in the event of a physical or technical incident;

    • Regular testing, review, and evaluation of the effectiveness of technical and organizational measures;

    • Cooperation with the data protection supervisory authority in fulfilling the obligations arising from the Regulation.

  • It develops and implements internal procedures regarding the receipt, review, and response—within one month—to requests from Users to exercise their rights as data subjects.

 

Maintaining a Register

Hometex.bg maintains a record of the processing activities for which it is responsible. This record contains all of the following information:

  • the administrator's name and contact information

  • the purposes of the processing;

  • a description of the categories of data subjects and the categories of personal data;

  • the categories of recipients to whom the personal data has been or will be disclosed, including recipients in third countries or international organizations;

  • whenever possible, the timeframes specified for the erasure of the various categories of data;

  • where possible, a general description of the technical and organizational security measures,

The data controller uses the services of a data processor—„SuperHosting.BG“ Ltd., Sofia, Iztok District, 36 Dr. G. M. Dimitrov Blvd., UIC 131449987.  

A data processor shall not engage another data processor without the prior specific or general written authorization of the controller.

 

REGULATORY BODIES

The authorities that regulate the activities of „Hometex.bg“ are the Consumer Protection Commission (CPC) and the Personal Data Protection Commission (PDPC), with the following contact information:

About the CPC:

• Website: https://kzp.bg/kontakti

• Phone: 0700 111 22

• Email: info@kzp.bg

• Address: Sofia, Slaveykov Square, No. 4A, floors 3, 4, and 6

About the CPDP:

• Website: https://www.cpdp.bg

• Phone: 02/91-53-518

• Email: kzld@cpdp.bg

• Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

 

DISPUTES

Consumers can use the European Online Dispute Resolution (ODR) platform, available at /http://ec.europa.eu/odr/ — a single access portal that allows consumers and merchants in the EU to resolve disputes between themselves.

Alternative dispute resolution (ADR) between consumers and merchants is an out-of-court conciliation process based on voluntary participation.

General conciliation commissions help facilitate agreements between consumers and merchants in disputes over service contracts.

General conciliation commissions are established on a regional basis, and they have jurisdiction to resolve disputes between „Hometex.bg“and ‘User’ means the General Conciliation Commission, headquartered in Varna and operating within the territories of Varna Province, Dobrich Province, and Silistra Province;”;

The consolidated list of recognized ADR bodies in the member states of the European Union can be found at https://webgate.ec.europa.eu/odr/main/index.cfm?event=main.adr.show