Information About the Personal Data Controller

The address of our website is: esbo.ltd.

ESBO EOOD is a company registered in the Commercial Register of the Registry Agency with UIC 2055555555, with registered office and management address: Northern District, 25 Maritsa Blvd., 4003 Plovdiv, Tel.: +359 88 888 8888; e-mail: contact@esbo.ltd.

We process your personal data on the following grounds:

Your explicit consent — the purpose is specified for each individual case.

In the following paragraphs, you will find information regarding the processing of your personal data depending on the legal basis on which we process it.

1. Collection and Processing of Personal Data

Personal data is information that serves to identify you, such as name, telephone number, email address or postal address. esbo.ltd does not collect personal data from you unless you provide it in specific cases, for example when ordering products or subscribing to receive advertising messages.

By providing your personal data, you agree to receive email messages regarding current commercial offers, promotions, news, as well as the organization of events and marketing campaigns.

1.1 With Your Consent

We process your personal data on this basis only after your explicit, clear and voluntary consent. We will not impose any negative consequences on you if you refuse the processing of your personal data.

Consent is a separate legal basis for processing your personal data. The purpose of processing is stated in the consent and does not overlap with the purposes listed in this policy. If you provide us with the relevant consent, until its withdrawal or termination of any contractual relationship with you, we may prepare suitable offers for products/services for you.

On this basis, we process only the data for which you have given us your explicit consent. The specific data is determined for each individual case. Usually, the data includes:

Email
Telephone
Address
Names

The consents provided may be withdrawn at any time. Withdrawal of consent does not affect the performance of contractual obligations. If you withdraw your consent for the processing of personal data for any or all of the purposes described above, we will not use your personal data and information for the purposes specified above.

2. Use and Storage of Personal Data

esbo.ltd uses your personal data solely for the purposes of technical management of the website, to provide you with access to special information or for general communication with you.

esbo.ltd will not sell your personal data to third parties, nor will it trade it elsewhere. The employees of esbo.ltd are obliged to protect the confidentiality of your data and comply with a confidentiality agreement.

2.1 Processing of Anonymized Personal Data

We process your data for statistical purposes, meaning analyses in which the results are only aggregated and therefore the data is anonymous. Identifying a specific person from this information is impossible.

2.2 Automatically Recorded Information

When you access the esbo.ltd website, certain general non-personal data is automatically recorded, not as part of registration, such as the internet browser used, number of visits, average time spent on the website and pages viewed.

This information is used to assess how attractive our website is and to improve its content and functionality. Your data is not processed further and is not transferred to third parties.

2.3 Cookies

Cookies are small files that are temporarily stored on your hard drive and allow our website to recognize your computer the next time you visit esbo.ltd. esbo.ltd uses cookies only to collect information about the use of our website.

2.4 Security

esbo.ltd places great importance on ensuring the security of your personal data. Your data is carefully protected against loss, destruction, distortion/falsification, manipulation, unauthorized access or unauthorized disclosure.

2.5 Minors

esbo.ltd advises all parents and guardians to educate their children about safety and responsibility when providing personal data on the internet. Minors should not submit personal data on the esbo.ltd website without the permission of their parents or guardians.

esbo.ltd will never knowingly collect personal data from minors, nor use it in any way or disclose it to third parties without permission.

2.6 Links to Other Websites

This privacy statement applies to the website esbo.ltd. Subpages of this website may contain links to other providers that do not apply this privacy statement. When you leave esbo.ltd, please look for and read the privacy statement of every website that collects personal information.

3. How We Protect Your Personal Data

To ensure adequate protection of the company’s and its customers’ data, we apply all necessary organizational and technical measures provided for in the Personal Data Protection Act.

For maximum security during the processing, transfer and storage of your data, we may use additional protection mechanisms such as encryption, pseudonymization and others.

4. User Rights

Every user of the website has all rights related to personal data protection under Bulgarian legislation and European Union law. Every user has the right to:

Information regarding the processing of their personal data by the controller;
Access to their own personal data;
Correction if the data is inaccurate;
Deletion of personal data, also known as the “right to be forgotten”;
Restriction of processing by the controller or personal data processor;
Portability of personal data between individual controllers;
Objection to the processing of their personal data;
The data subject also has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
Judicial or administrative protection if the rights of the data subject have been violated.

The user may request deletion if one of the following conditions applies:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
The user withdraws their consent on which the data processing is based and there is no other legal basis for processing;
The user objects to the processing and there are no legitimate grounds for processing that override the user’s interests;
The personal data has been processed unlawfully;
The personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State applicable to the controller;
The personal data was collected in connection with the provision of information society services to children and the consent was given by the holder of parental responsibility for the child.

The user has the right to restrict the processing of their personal data by the controller when:

They contest the accuracy of the personal data. In this case, the restriction of processing applies for a period that allows the controller to verify the accuracy of the personal data;
The processing is unlawful, but the user does not want the personal data to be deleted and instead requests restriction of its use;
The controller no longer needs the personal data for the purposes of processing, but the user requires it for the establishment, exercise or defense of legal claims;
They have objected to processing pending verification of whether the legitimate grounds of the controller override the interests of the user.

4.1 Right to Data Portability

The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and has the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, where the processing is based on consent or a contractual obligation and is carried out by automated means.

When exercising the right to data portability, the data subject also has the right to obtain direct transfer of the personal data from one controller to another, where technically feasible.

4.2 Right to Object

Users have the right to object before the controller to the processing of their personal data. The personal data controller is obliged to stop the processing unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

In the event of an objection to the processing of personal data for direct marketing purposes, the processing must be stopped immediately.

4.3 Complaint to the Supervisory Authority

Every user has the right to file a complaint against unlawful processing of their personal data with the Commission for Personal Data Protection or with the competent court.

5. Notice of Changes

All changes to our personal data protection policy will be announced in the privacy statement, on the homepage and in other places that we consider appropriate.

6. Processing of Personal Data for Shopping Through the Online Store

You can shop online on our website. You may use this service with or without registration. The data provided in both cases will be used solely for the purpose of fulfilling the order.

Additionally, you have the option to subscribe to our newsletter. Not giving consent for this does not in any way prevent you from becoming a customer of our online store.

Please, before registering, familiarize yourself in detail with who we are and what the purposes and periods are for which your personal data is processed.

When processing personal data, ESBO EOOD complies with the legal and regulatory framework applicable in Bulgaria in relation to personal data protection, including but not limited to Regulation (EU) 2016/679, hereinafter referred to as the “Regulation”.

7. Conclusion of Contract

By clicking the “Registration” or “Buy” button, you make an electronic statement by which you enter into a contract with ESBO EOOD under these Terms and undertake to comply with them. Before clicking the “Order” button, you have the opportunity to review and edit the information you have provided.

You accept that electronic statements to ESBO EOOD and electronic statements from ESBO EOOD to you shall be considered signed with a simple electronic signature in accordance with Article 3, paragraph 10 of Regulation (EU) No. 910/2014, with the effect of a handwritten signature.

By giving your consent for registration and completing an order, you agree that ESBO EOOD, UIC: 203538223, Bulgaria, Northern District, 25 Maritsa Blvd., 4003 Plovdiv, may use the personal data provided by you — email, first name, last name, address including country, city/town, postal code, and telephone number.

If you want an invoice, you must give explicit consent for ESBO EOOD to use the data necessary for issuing it.

In addition, ESBO EOOD stores information about the registration and agreement to the Terms, including date, time and IP address, and also maintains a log of the fact of sending the statement, without its content, for a period of 1 year. The log contains the date of the statement, the name and email address of the sender, as well as identification of the recipient.

When processing your personal data, you will not be subject to a decision based solely on automated processing, including profiling.

ESBO EOOD protects the personal data of the user in accordance with the Personal Data Protection Act.

To protect the personal data of the user, ESBO EOOD will send the personal data once to the email address entered by the user during the order.

The user may store data on their end communication device unless they express disagreement with this.

The user agrees that ESBO EOOD has the right to send the user electronic newsletters, product purchase offers, promotions and similar messages at any time via electronic communications.

ESBO EOOD has the right to collect, store and process data about the actions of the user while using esbo.ltd.

ESBO EOOD has the right to request the user to identify themselves at any time and to verify the data entered by the user in the online order form on esbo.ltd.

7.1 Notice of Changes

All changes to our personal data protection policy will be announced in the privacy statement, on the homepage and in other places that we consider appropriate.