Privacy Policy
3D Printing - Privacy Policy
Privacy Policy
Mandatory information on the rights of individuals regarding personal data protection
Information regarding the company that processes your data:
Name: "NADKAM-1965 EOOD"
UIC/BULSTAT: 202983334
Registered office and management address: Sofia, Gorski Patnik No. 68
Correspondence address: Sofia, 68 Gorski Patnik St., office 3
Phone: : +359 882 02 90 48
E-mail: office@3dlarge.com
Website: www.3dlarge.com
Information regarding the competent supervisory authority for personal data protection:
Name: Commission for the Protection of Personal Data
Seat and management address: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov" No. 2
Correspondence address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg
"NADKAM-1965 EOOD" (hereinafter referred to as "Administrator" or "Company") carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. This information aims to inform you about all aspects of the processing of your personal data by the Company and the rights you have in relation to this processing.
Basis for the collection, processing, and storage of your personal data
Art. 1. The administrator collects and processes your personal data in connection with the use of the online store www.3dlarge.com and the conclusion of contracts with the company based on Article 6, paragraph 1, Regulation (EU) 2016/679 (GDPR), and specifically on the following basis:
· Explicit consent obtained from you as a client;
· Fulfillment of the Administrator's obligations under the contract with you;
· Compliance with a legal obligation applicable to the Administrator;
· For the purposes of the legitimate interests of the Administrator or a third party;
Goals and principles in the collection, processing, and storage of your personal data
Art. 2. (1) We collect and process the personal data that you provide to us in connection with the use of the online store and the conclusion of a contract with the company, including for the following purposes:
· creating a profile and providing full functionality when using the online store;
· conclusion and execution of a contract at a distance;
· individualization by country according to contracts;
· accounting purposes;
· statistical goals;
· information security protection;
· ensuring the execution of the contract for the provision of the respective service.
· sending an informational newsletter upon your request;
(2) We adhere to the following principles when processing your personal data:
· legality, good faith, and transparency;
· limitation on the purposes of processing;
· relevance to the processing objectives and minimization of the data collected;
· accuracy and relevance of the data;
· restriction on storage in order to achieve the objectives;
· integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.
(3) In processing and storing personal data, the Administrator may process and store personal data for the purpose of protecting the following legitimate interests:
· fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior, and other state and municipal authorities.
What types of personal data does our company collect, process, and store?
Art. 3. (1) The Company performs the following operations with the personal data provided by you for the following purposes:
· Registration of a user in the online store and execution of a distance sales contract – the purpose of this operation is to create a profile for using the online store to purchase goods and to provide contact information for the delivery of purchased goods. Registration and profile creation for using the online store is not a mandatory step in providing the service and it is significantly accessible even without creating a profile.
· Conclusion from the impact assessment: Based on the conducted impact assessment, the operation "User registration in the online store and execution of a distance sales contract" is permissible to carry out and provides sufficient guarantees for the protection of the rights and legitimate interests of the data subjects in accordance with the requirements of GDPR.
· Conclusion and execution of a commercial transaction with a client or partner – the purpose of this operation is to conclude and execute a contract with a business partner or client and its administration. Given the limited scope of the personal data collected and the fact that part of it is collected from publicly available sources, conducting an impact assessment is not necessary for the operation.
· Sending a newsletter – the purpose of this operation is to administer the process of sending newsletters to customers who have requested to receive them. Given the limited scope of the personal data collected, conducting an impact assessment is not necessary for this operation.
· Exercising the right of withdrawal or making a complaint – the purpose of this operation is to administer the process of exercising the right of withdrawal or complaint by the customer. Given the limited scope of the personal data collected, conducting an impact assessment is not necessary for the operation.
(2) The administrator processes the following categories of personal data and information for the following purposes and on the following grounds:
· Your personalized data (email, name, etc.)
·
· Purpose for which the data is collected: 1) Establishing a connection with the user and sending information to them, 2) for the purposes of registering a user in the online store, as well as 3) for sending a newsletter.
· The basis for processing your personal data – By accepting the terms and conditions and registering in the online store or placing an order without registration, or by entering into a written contract, a contractual relationship is established between the Administrator and you, on the basis of which we process your personal data – Art. 6, para. 1, letter (b) GDPR. Your data for sending a newsletter is processed based on your explicit consent – Art. 6, para. 1, letter (a) GDPR.
· Delivery information (names, phone, address, etc.)
·
· Purpose for which the data is collected: Fulfillment of the administrator's obligations under the sales and delivery contract of the purchased goods.
· The basis for processing your personal data – By accepting the terms and conditions and registering in the online store or placing an order without registration, or by entering into a written contract, a contractual relationship is established between the Administrator and you, on the basis of which we process your personal data – Art. 6, para. 1, letter (b) GDPR.
· Additional data provided by you – If you wish to complete your profile, you can fill in your name, surname, and phone number.
·
· Purpose for which the data is collected: Supplementing information about the user in their user account.
· Grounds for data processing: You have given explicit consent for the processing of your personal data for one or more specific purposes – Article 6, paragraph 1, letter (a) of the GDPR at the time of registration in the online store. Providing this data is not mandatory for registration in the online store.
(3) The administrator does not collect or process personal data related to the following:
· reveal racial or ethnic origin;
· reveal political, religious, or philosophical beliefs, or membership in trade union organizations;
· genetic and biometric data, data on health status or data on sexual life or sexual orientation.
(4) The personal data is collected by the Administrator from the individuals to whom it pertains.
(5) The company does not engage in automated decision-making with data.
Art. 4. (1) The company performs the following operations with the personal data provided by you, as legal representatives or proxies of legal entities-trading partners, for the following purposes:
· Conclusion and execution of a commercial transaction: For the conclusion and execution of a commercial transaction with a commercial company, we process only the full name of the legal representative or the person authorized by the company. Conclusion from the impact assessment: Given the small number of individuals whose data is processed and the limited volume of personal data collected, conducting an impact assessment is not necessary for the current operation.
(2) The personal data is collected by the Administrator from the individuals to whom it pertains and from the Commercial Register at the Registry Agency.
(3) The company does not engage in automated decision-making with data.
Art. 5. The administrator may use so-called "cookies" for the purposes of providing full functionality of the website, improving user experience, statistical purposes, facilitating access, etc., which you agree to by using our website. You can control and/or delete the "cookies" at any time through the settings of your browser. "Cookies" do not constitute personal data and are not used to identify visitors and users of the online store.
Retention period for your personal data
Art. 6. (1) The Administrator stores your personal data for a period not longer than the existence of your profile in the online store. After the deletion of your profile, the Administrator takes the necessary care to delete and destroy all your data without unnecessary delay or to anonymize it (i.e., to render it in a form that does not reveal your identity).
(2) The administrator processes your personal data that you provided when placing an order without registration in the online store, until the order is completed, unless you have given your explicit consent when placing the order for your data to be processed for the purposes of improving the service, providing recommended content for you, individual conditions, promotions, as well as for statistical purposes.
(3) The Administrator stores your personal data provided in connection with online orders for a period of 5 years for the purposes of protecting the legal interests of the Administrator in judicial or administrative disputes with users of the online store.
(4) The Administrator informs you in case the data retention period needs to be extended in view of fulfilling a legal obligation or in view of the legitimate interests of the Administrator or otherwise.
(5) The administrator stores the personal data that must be kept in accordance with applicable legislation for the respective prescribed period, which may exceed the duration of your profile in the online store or until the completion of the order.
Art. 7. The Administrator stores the personal data of the legal representatives of its business partners for the duration of the contract execution, in order to comply with the legitimate interests and legal obligations of the Administrator, and this period may exceed the duration of the concluded contract.
Transmission of Your Personal Data for Processing
Art. 8. (1) The administrator may, at their own discretion, transfer part or all of your personal data to data processors for the fulfillment of the processing purposes you have agreed to, in compliance with the requirements of Regulation (EU) 2016/679 (GDPR).
(2) The administrator will notify you in case of intent to transfer part or all of your personal data to third countries or international organizations.
Your rights regarding the collection, processing, and storage of your personal data
Withdrawal of consent for the processing of your personal data
Art. 9. (1) If you do not wish for your personal data provided by you to be processed for marketing purposes and to receive a newsletter, you can withdraw your consent for processing at any time by filling out the consent withdrawal form in Appendix No. 1 or by sending a request in free text, and sending it to us via email.
(2) After we receive your request, we will send you an email to the address you provided for receiving newsletters and promotional messages, containing detailed instructions for your verification as a recipient of newsletters and a subject of personal data for which consent withdrawal has been requested.
(3) The withdrawal of consent does not affect the legality of the processing of personal data that the Administrator has carried out up to this point.
Right of access
Art. 10. (1) You have the right to request and receive from the Administrator confirmation as to whether personal data related to you is being processed, by sending a request in free text via email.
(2) You have the right to access the data related to you, as well as the information regarding the collection, processing, and storage of your personal data.
(3) After we receive your request, we will send you an email to the address you used for registration or for placing orders in the online store, with detailed instructions for verifying your identity as a data subject to which access has been requested.
(4) After the verification is completed, according to paragraph 3, the Administrator will provide you, upon request, with a copy of the personal data processed concerning you, in electronic or another appropriate form.
(5) Access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in the case of repeated or excessive requests.
Right to correction or completion
Art. 11. (1) You can at any time correct or complete inaccurate or incomplete personal data related to you through the "Edit Profile" option.
(2) You can correct or complete inaccurate or incomplete personal data related to you directly through your profile on the website.
Right to erasure ("to be forgotten")
Art. 12. (1) You have the right to request the Administrator to delete part or all of the personal data related to you, and the Administrator has the obligation to delete them without unnecessary delay when any of the grounds listed below are present:
· personal data is no longer necessary for the purposes for which it was collected or processed in another way;
· You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
· You object to the processing of your personal data, including for the purposes of direct marketing, and there are no legal grounds for processing that take precedence;
· personal data has been processed unlawfully;
· personal data must be deleted in order to comply with a legal obligation under EU law or the law of a member state that applies to the Administrator;
· personal data has been collected in connection with the provision of services of the information society.
(2) The administrator is not obliged to delete personal data if it is stored and processed:
· for exercising the right to freedom of expression and the right to information;
· for compliance with a legal obligation that requires processing, provided for in EU law or the law of the member state applicable to the Administrator, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in him;
· due to reasons of public interest in the field of public health;
· for the purposes of archiving in the public interest, for scientific or historical research, or for statistical purposes;
· for the establishment, exercise, or defense of legal claims.
(3) To exercise your right to be forgotten, you need to send an email request for the deletion of your personal data that the Administrator processes through a free text request, after which the Administrator will send to the email you used for registration or for placing orders in the online store a letter with detailed instructions for verifying you as a user of the store and as a data subject for which a deletion request has been made.
(4) After we verify the identity of the person making the request and the person to whom the data pertains in accordance with the instructions you have sent us, we will delete all data that we process about you, in accordance with paragraph 3.
(5) If you have placed an order that is being processed, the earliest moment you can request to be "forgotten" is upon the successful completion of the order.
Right to Restriction
Art. 13. You have the right to request the Administrator to restrict the processing of your related data by sending us a free-text request via email when:
· contest the accuracy of personal data, for a period that allows the Administrator to verify the accuracy of the personal data;
· the processing is unlawful, but you do not wish for the personal data to be deleted, only for its use to be restricted;
· The administrator no longer needs the personal data for processing purposes, but you require it for the establishment, exercise, or defense of your legal claims;
· You have objected to the processing pending a check on whether the legal grounds of the Administrator take precedence over your interests.
(2) After we receive your request, we will send you an email to the address you used for registration or for placing orders in the online store, with detailed instructions for verifying your identity as a user of the store and as a subject of the personal data for which a request for restriction of processing has been made.
(3) After the verification is completed according to paragraph 2, the Company will cease processing your data, but will not remove any publications you have made in the online store, if any.
Right to portability
Art. 14. (1) If you have given consent for the processing of your personal data or the processing is necessary for the performance of the contract with the Administrator, or if your data is being processed in an automated manner, you may:
· to request from the Administrator to provide you with your personal data in a readable format and to transfer it to another Administrator;
· to request the Administrator to directly transfer your personal data to an administrator specified by you, when this is technically feasible.
(2) You can exercise the right to portability by sending us a free text request via email, after which the Administrator will send to the email you used for registration or for placing orders in the online store a letter with detailed instructions for verifying you as a user of the store and a subject of the personal data for which the portability request has been made.
(3) After the verification is completed according to paragraph 2, the Company will send to the email you provided the data it processes for you, in XML format.
The right to receive information
Art. 15. You may request the Administrator to inform you about all recipients to whom the personal data for which correction, deletion, or restriction of processing has been requested has been disclosed. The Administrator may refuse to provide this information if it would be impossible or would require disproportionate effort.
Right to object
Art. 16. You may object at any time to the processing of personal data concerning you by the Administrator, including if it is processed for the purposes of profiling or direct marketing.
Your rights in the event of a breach of your personal data security
Art. 17. (1) If the Administrator identifies a breach of the security of your personal data that may pose a high risk to your rights and freedoms, they will notify you without undue delay of the breach, as well as the measures that have been taken or are to be taken.
(2) The administrator is not obliged to notify you if:
· has taken appropriate technical and organizational measures to protect the data affected by the security breach;
· has subsequently taken measures to ensure that the violation will not lead to a high risk to your rights;
· notifying would require disproportionate efforts.
Persons who are provided with or have access to your personal data
Art. 18. (1) For the purposes of processing your personal data and providing the service in its full functionality and considering your interests, the Administrator may provide the data or allow access to the following persons who are data processors:
Processing of personal data Purpose of processing personal data
Transport and courier companies Delivery to address
Marketing agencies Marketing goals, website content
Hosting provider For the purposes of displaying the site
(2) The processors of personal data comply with all requirements for legality and security in the processing and storage of your personal data.
Art. 19. The administrator does not transfer your data to third countries.
Art. 20. In case of violation of your rights under the above or applicable data protection legislation, you have the right to file a complaint with the Commission for Personal Data Protection as follows:
Name: Commission for the Protection of Personal Data.
Seat and management address: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov" No. 2
Correspondence address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg
Art. 21. You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are not mandatory, and you can submit your requests in any form that contains a statement to that effect and identifies you as the data subject.
Art. 22. If the consent relates to a transfer, the Administrator describes the possible risks of transferring the data to third countries in the absence of a decision on adequate protection and appropriate safeguards.