Shop now
Shop now

Privacy Policy

INFORMATION ABOUT THE PERSONAL DATA CONTROLLER

“UNREMOVABLE SOCKS” EAD is a company incorporated under the Commerce Act of the Republic of Bulgaria, registered under Unified Identification Code (UIC) 203847910, with registered office and correspondence address: Sofia, 1000, Triaditsa District, 27 Petar Parchevich Street, email: support@zenerisocks.com .

LEGAL GROUNDS AND PURPOSES FOR PROCESSING YOUR PERSONAL DATA

We process your personal data on the following legal grounds:

In the following sections, you will find detailed information about the processing of your personal data, depending on the legal ground applied.

PROCESSING FOR THE PERFORMANCE OF A CONTRACT

We process your personal data to perform our contractual and pre-contractual obligations and to exercise our rights under the contracts we have concluded with you.

PURPOSES OF PROCESSING:

Based on the contract concluded between us, we process information regarding the type and content of the contractual relationship, as well as any other information related thereto, including:

The processing of the above personal data is mandatory for us to conclude and perform the contract. Without these data, we would be unable to fulfil our contractual obligations.

DISCLOSURE TO THIRD PARTIES:

We may disclose your personal data to subcontractors, including courier service providers, for the purpose of delivering your ordered goods, or, with your explicit consent, to third parties for direct marketing purposes.

DATA RETENTION PERIOD:

Personal data collected on this ground is deleted two (2) years after termination of the contractual relationship, regardless of the reason (expiry, rescission, or otherwise).

PROCESSING FOR COMPLIANCE WITH LEGAL OBLIGATIONS

We may process your personal data where this is required by law. In such cases, we are under a legal obligation to process your data, for example:

DATA RETENTION PERIOD:

Data collected on this basis are deleted once the statutory obligation to collect and retain them has been fulfilled or no longer applies.

PROCESSING BASED ON CONSENT

We process your personal data on this ground only after receiving your explicit, unambiguous, and voluntary consent. Refusal to provide consent shall have no adverse consequences for you.

Consent is a separate legal ground for processing, and its specific purpose is stated therein. If you have granted such consent, and until it is withdrawn or any contractual relationship between us is terminated, we may prepare offers suitable to your interests by performing detailed analyses of your basic personal data.

DATA PROCESSED ON THIS BASIS:

We may process personal data for direct marketing purposes, including data regarding your use of our website and your social media profiles.

DISCLOSURE TO THIRD PARTIES:

We may share your data with marketing agencies, Facebook, Google, or other similar entities.

WITHDRAWAL OF CONSENT:

You may withdraw your consent at any time. Withdrawal of consent does not affect the performance of contractual obligations. If you withdraw your consent to the processing of personal data for any or all of the purposes described above, we will no longer use your personal data and information for those purposes. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To withdraw the consent you have given, you may do so via our website or by using the contact details provided.

DATA RETENTION PERIOD:

Data collected on this ground is deleted upon your request or twelve (12) months after their initial collection, whichever occurs first.

HOW WE PROTECT YOUR PERSONAL DATA

To ensure adequate protection of company and client data, we implement all necessary organizational and technical measures as required by the Personal Data Protection Act.

The company has established internal rules and procedures to prevent misuse and security breaches, thereby protecting and safeguarding your data.

For maximum security in processing, transfer, and storage, we may use additional protection mechanisms, such as encryption and pseudonymization.

RIGHTS OF DATA SUBJECTS (USERS)

Each user of the website is entitled to all rights provided under Bulgarian law and EU data protection law.

You may exercise your rights by sending a request to our email address.

Each User has the right to:

– Be informed (regarding the processing of their personal data by the controller);

– Access their personal data;

– Rectification (in case of inaccurate data);

– Erasure of personal data (“right to be forgotten”);

– Restriction of processing by the controller or processor;

– Data portability between controllers;

– Objection to the processing of their personal data;

– Not to be subject to automated decision-making, including profiling, which produces legal effects concerning them or similarly significantly affects them;

– Seek protection before the competent administrative or judicial authority in case their rights have been violated.

RIGHT TO ERASURE:

You may request erasure where one of the following applies:

The data are no longer necessary for the purposes for which they were collected or processed;

You withdraw your consent, and there is no other legal basis for processing;

You object to the processing, and there are no overriding legitimate grounds;

The data have been unlawfully processed.

The personal data must be erased to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject.

The data were collected in relation to the offer of information society services to a child, and the holder of parental responsibility gave consent.

RIGHT TO RESTRICT PROCESSING:

You may request a restriction where:

Contested the accuracy of the personal data. In this case, the restriction of processing shall be for a period enabling the controller to verify the accuracy of the personal data;

The processing is unlawful, but you oppose erasure and request restriction instead;

The controller no longer needs the data, but you require it for the establishment, exercise, or defence of legal claims;

Objects to the processing pending verification of whether the legitimate grounds of the controller override those of the user.

RIGHT TO DATA PORTABILITY:

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

RIGHT TO DATA PORTABILITY

The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, where the processing is based on consent or on a contractual obligation and is carried out by automated means. When exercising the right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible.

RIGHT TO OBJECT

Users have the right to object to the processing of their personal data by the controller. The controller is obliged to cease processing unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims. Where the objection concerns the processing of personal data for direct marketing, such processing shall be terminated immediately.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

Each user has the right to complain about the unlawful processing of their personal data with the Commission for Personal Data Protection (CPDP) or before the competent court.