Privacy Policy

This Privacy Policy is aimed at helping you understand which of your personal data we may collect, the purposes for which we collect them and what we do with them. We want you to be informed about how we use the personal information you provide, what rights you have with regard to the data provided and how you can exercise your rights.

We respect the right to privacy and work towards keeping the data we process minimized and optimally protected.

This Privacy Policy applies to your personal data when you visit www.kortenwinery.com

The Data Controller within the meaning of the General Data Protection Regulation is Domain Boyar International EAD, (DBI EAD), UIC 175404883.

Address: Sofia, 2 Marinkovitsa St.;

Phone: 02 96 97 980

e-mail: info@kortenwinery.com

To exercise your rights, as well as to ask any questions related to personal data protection, you may also contact the Supervisory body - the Commission for Personal Data Protection, as follows:

Address: Sofia 1592, 2 Tsvetan Lazarov Blvd.

Tel. +359 2 915 3580 Fax +359 2 915 3525

Email: kzld@cpdp.bg

Website: http://www.cpdp.bg/

Personal data are data that describe and relate to someone in their personal capacity. These are data by which individuals can be identified.

We process and use only data you have voluntarily provided to us. Any person providing the data, is responsible for their credibility and for not disclosing data to third parties in violation of their privacy rights, since DBI EAD has no practical opportunity to control such process.

In the course of our activity, we do not process personal data of minors, and our website is inaccessible to persons under 18 years of age. If we receive information that we have collected personal data from a minor, we will immediately delete such data.

We process the below personal data to achieve the following purposes: the name of the person, their e-mail address, if necessary a telephone number and an exact address. The data above is necessary for us to be able to contact you, for feedback when you leave us a message.

In view of the storage of the information we receive for you, we have undertaken technical and organizational measures that are appropriate and necessary to protect your personal data, including against any accidental or unlawful loss, access or disclosure; to identify reasonably foreseeable network security risks and to minimize security risks.

Personal data is only accessible to authorized persons who need access to perform their duties and to be of maximum use to you, and who are required to treat such information confidential in accordance with the principles of legality, good faith, confidentiality and punctuality.

We do not provide your personal data to third countries outside the EU, and unless there is an explicit legal or contractual basis for that; we do not sell or distribute personal data.

We keep the personal data until the relationship between us is terminated and, if there are grounds for that, the data may be kept for as long as the rights and obligations of DBI EAD are exhausted and until the expiry of the applicable limitation periods in relation to the relations between the parties.

The provision of personal data to third parties is only possible when it is necessary in connection with sending a shipment through a courier company. No personal data is provided for any purposes other than those specified.

YOUR RIGHTS

As a data subject, you are entitled at any time:

• To request confirmation whether personal data relating to you are being processed and request a copy of your personal data, as well as information relating to the collection, processing and storage of your personal data.
• To request your personal data to be erased for any of the following reasons: such personal data is no longer needed for the purposes for which it was collected; where you have objected to the processing if the processing is unlawful; where data is processed based on your consent and you withdraw that consent; where personal data must be deleted to comply with a legal obligation under the EU or a national law.
• To request your personal data to be rectified if it is inaccurate, or to be supplemented if it is incomplete.
• To request restriction of the processing of your personal data if applicable and there are grounds to do so.
• To request to receive the personal data that concern you and which you have provided to DBI EAD in a structured, commonly-used and machine readable format, and you have the right to transfer such data to another Controller if the processing is based on your consent or on a contractual obligation and the processing is carried out in an automated manner.

In order to be able to provide you with full assistance, please provide us with accurate information about yourself and specify your request. In the exercise of your rights, we may ask for additional information in order to identify you and fulfill your request.

Please note that if your requests are clearly unreasonable or excessive, in particular because of their repeatability, we can:

1. charge a fee, taking into account the administrative costs of providing the information or communication or taking action, or

2. refuse to take action on the request.

We will make reasonable efforts to fulfill your request within 30 days of its receipt. If necessary, this period may be extended by two more months, taking into account the complexity and the number of requests.

"DBI" EAD reserves the right to amend or update this Privacy Policy, upon, including but not limited to, changes to the applicable legislation. Any changes to this Policy will be published on our website for information purposes.