Privacy Policy
The purpose of this Privacy Policy (Privacy Policy) is to inform you about the processing of your personal data in connection with your interaction with https://shprss.com/, the obligations of the controller and your rights of protection arising from the processing, as well as the manner in which they can be exercised.
Information about the company that processes your personal data:
When you use the website / online store https://shprss.com/, referred to for short as “site”, “website”, “online store”, your personal data is collected and processed by DIDI ENTERTAINMENT LTD, a Bulgarian legal entity with its registered office and registered address in Sofia, Bulgaria. Sofia, Poduyane district, ul. Mednikarska № 1, with UIC 201633295 (hereinafter referred to as “the company”, “we”, “us”).
The Company operates in full compliance with Regulation (EU) 2016/679 (“EU General Data Protection Regulation” or “GDPR”), as well as the Personal Data Protection Act of the Republic of Bulgaria. For the purposes of the legislation on the protection of natural persons with regard to the collection, processing and storage of personal data and their free movement, the company is the data controller (hereinafter referred to as the “controller”).
Contact details of the data controller:
Picture name: Didi Entertainment Ltd.
UIC/BULSTAT: 201633295
Address for correspondence. Address for correspondence. Sofia, Mednikarska № 1
El. Mail: [email protected]
Website: https://shprss.com/
Phone: +359 884 17 99 18
Information on the competent supervisory authorities for the protection of personal data:
Commission for Personal Data Protection (CPDP)
Address. “Prof. No. 2 Tsvetan Lazarov
El. Mail: [email protected]
Website: www.cpdp.bg
Phone: +35929153555
European Data Protection Board (EDPB)
Address for correspondence: Rue Wiertz 60, B-1047 Brussels
Business address: Rue Montoyer 30, B-1000 Brussels
El. Mail: [email protected]
Website: www.edpb.europa.eu/
1. Basis for collection, processing and storage of personal data:
Ensuring the protection of personal data is an important commitment of the company. We process your data provided to us by you in connection with your use of the website services on the following grounds:
- your express consent as a visitor and user of the services on the site
- Where the processing is necessary for the performance of a contract to which you are a party or to take steps at the request of the data subject before entering into a contract;
- Where processing is necessary to comply with a legal obligation to which the controller is subject;
2. Protection of personal data
In the performance of our duties as controller, we ensure that your rights and freedoms are respected by taking the necessary technical and organisational measures to protect personal data from accidental or unlawful destruction, accidental loss, unauthorised access, alteration or dissemination, as well as from other unlawful forms of processing.
3. Principles of personal data processing:
In relation to the processing of your personal data, the company complies with the following principles:
- legality, integrity and transparency
- relevance of processing to the purposes
- data minimization
- data accuracy and timeliness
- storage restriction
- reporting
- integrity and confidentiality
- user consent to data processing
4. Purposes of processing personal data
The personal data provided by you will be processed by the controller for the following purposes:
4.1. Provision of services for your benefit
- For delivery of the products you have ordered from the online store, i.e. in order to fulfil our obligations under the contract for the purchase and sale of the products from the online store.
- Creation of an account by the user in the online store.
- Preparation of responses and taking the necessary actions on inquiries, complaints, complaints, etc. from users of the online store.
- When responding to an enquiry from you regarding the products available in the online store, information regarding delivery and anything else regarding the content of the online store, via a telephone call or via another type of communication source that can be found on the website (telephone call, email address or reference to messages on the company’s official social networks).
4.2. The technical functioning of the site
The company also processes data about your IP address. The collection of this data is necessary for the technical functioning of the website. The IP address alone does not allow the identification of a specific individual. Your IP address data is used for statistical and marketing research purposes, as well as for the purposes of improving the security of the service and identifying the user as a person using the services from a specific country.
4.3. Direct Marketing
In order to promote and develop our business and to provide you with information that we believe will be of interest to you, we may send you any type of communication to the e-mail address you provide.
You may withdraw your consent at any time by contacting us using the contact details set out above in this policy.
4.4. Adapt the services offered to your preferences
The Company may collect and process information about your visits to the Site to personalize your online experience. This is done through cookies/cookies for marketing and statistical purposes, as well as to tailor subsequent offers to your preferences. More information about cookies can be found in our Cookie Policy.
5. Categories of personal data subject to collection and processing by the controller
The Company collects and processes personal data that is directly collected from you. These are first name, email address, phone number, age and physical details, photos. An email address and/or phone number is required to make the necessary communication to provide the services. For the technical functioning of the website, data about your IP address is also processed.
When the user places an order by phone call, the operator informs him that by continuing the conversation and by placing an order and/or making an inquiry on the phone number indicated on the site DIDI ENTERTAINMENT LTD collects and processes personal data by phone, which are necessary for the performance of its activities and the execution of contracts for the purchase and sale of goods with users of the online store, which the user agrees to by continuing the phone call and/or placing the order by phone. The operator informs the user during the telephone call of these circumstances and invites him to read once again the terms and conditions and the current privacy policy available on the site.
By continuing the telephone call and/or making an enquiry for which the collection and processing of the user’s personal data by telephone is necessary, it is presumed that the latter gives his free, explicit and informed consent to the processing of the personal data voluntarily provided by him during the telephone call. It is also presumed that they have read the terms and conditions and privacy policy of IDI ENTERTAINMENT LTD.
5.1. Collection and processing of personal data of children
As regards the processing of personal data of children, the controller shall fully comply with the provisions of the GDPR by processing such data on the basis of explicit consent if the child is at least 16 years old. If the child is under 16 years of age, the controller shall process the personal data only if and to the extent that such consent is given or authorised by the person having parental responsibility for the child.
5.2. Sensitive personal data
The Company does not collect and process special categories of personal data, i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data, data concerning health or sexual life or orientation.
6. Storage period for personal data
The Controller shall retain your personal data for as long as necessary to achieve the purposes set out in this policy or to comply with the requirements of the legislation.
The Controller deletes and erases personal data related to analysis and/or consulting packages purchased through the website and/or ordered after the expiration of the statutory retention periods under the applicable accounting, financial and tax legislation in the Republic of Bulgaria.
After the performance of the service, the Controller shall take the necessary care to delete and destroy all your data without undue delay or to anonymize them (i.e. to depersonalize them, to put them in a form that does not reveal your identity), unless the applicable law imposes an obligation on the Controller to keep the personal data for a period that may exceed the period of performance of the service or its prefecting.
7. Providing your personal data to third parties
The Company may provide personal data to third parties only when this obligation arises from law or other regulatory act, as well as when it is necessary for the performance of a contract between the Company and the User, incl. In the case of products or services ordered through the website.
8. Your rights in the collection, processing and storage of your personal data
8.1. Right of access to data concerning you
At any time, you can ask us whether your personal data is being processed and, if so, obtain access to the data and further information about processing and storage. You also have the right to receive a copy of your personal data that is being processed. For additional copies, the administrator may charge a reasonable fee based on administrative costs.
8.2. Right of rectification
At any time, you can correct or complete inaccurate or incomplete personal data relating to you in your profile/account on the website. You can also contact us with the same request.
8.3. Right to erasure (right to be forgotten)
You may request us to delete the personal data relating to you at any time and we, as the data controller, will delete it without undue delay where any of the following grounds apply:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
– You withdraw your consent on which the processing is based and there is no other legal basis for the processing;
– You object to the processing of personal data relating to you and there are no legitimate grounds for the processing that override. The same applies if you object to the processing of your personal data for direct marketing purposes.
– personal data have been unlawfully processed;
– the personal data must be erased in order to comply with a legal obligation under European Union or Member State law to which the controller is subject;
– personal data have been collected in connection with the provision of information society services.
We are not obliged to delete personal data processed by us if the processing is necessary:
- to exercise the right to freedom of expression and the right to information;
– for compliance with a legal obligation which requires processing provided for in European Union law or the law of a Member State to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
– for public health reasons;
– for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
– for the establishment, exercise or defence of legal claims.
8.4. Right to restriction of processing;
You can ask us to restrict processing at any time when:
- challenge the accuracy of the personal data, for a period that allows us to verify the accuracy of the personal data;
- the processing is unlawful, but you do not wish the personal data to be erased, but instead request that its use be restricted;
- the controller no longer needs the personal data for processing purposes, but you require it for the establishment, exercise or defence of your legal claims;
- You have objected to processing pending verification whether the controller’s legitimate grounds override your interests;
- if you exercise your right to restrict processing, the controller will cease processing your personal data, except for its storage. Such data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural person, or for important circumstances of public interest for the European Union or a Member State;
- where you have requested the restriction of processing, the controller shall notify you before the restriction of processing is lifted.
8.5. Right to data portability
At any time, you may obtain the personal data you have provided to us and/or transfer this data to another controller. You can also ask us to transfer your data directly to another controller where this is technically feasible.
8.6. Right to notification of a personal data breach
Where we become aware of a personal data breach that may pose a high risk to your rights and freedoms, we will notify you without undue delay of the breach and of the measures that have been or are to be taken.
Our obligation to notify you of the breach ceases when:
- we have taken appropriate technical and organisational measures to protect the personal data affected by the breach
- we have taken measures to ensure that the high risk to your rights and freedoms is no longer likely to materialise
8.7. Right to judicial and administrative protection:
8.7.1. Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data by the controller violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority.
8.7.2. Right to an effective judicial remedy against a supervisory authority
You have the right to an effective judicial remedy against a binding decision of a supervisory authority concerning you. You also have the right to an effective remedy where the supervisory authority has not dealt with your complaint or informed you within three months of its progress or outcome.
The supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection (CPDP). Contact details for the CPC can be found above in this policy.
8.7.3. Right to an effective judicial remedy against the controller
If you consider that the processing of your personal data by the controller violates the provisions of the GDPR, you have the right to an effective judicial remedy against the controller.
8.8. Right to compensation for damages
If you have suffered material or non-material damage as a result of a breach of the GDPR by the controller, you are entitled to receive compensation for the damage caused, unless the controller proves that it is in no way responsible for the event that caused the damage.
8.9. The right to withdraw consent at any time, without prejudice to the lawfulness of processing based on consent given before it is withdrawn
You may withdraw your consent at any time if you do not wish your personal data to continue to be processed by us. By withdrawing your consent to the processing of your personal data, which is required to maintain your profile/account on the site, the latter will be deactivated.
9. Procedure for exercising your rights in the collection, processing and storage of your personal data
As the subject of the personal data collected, you may exercise your right of access, erasure, rectification or restriction of processing by submitting a written request to us.
Our contact details can be found above in this policy.
We shall provide you with information on the action taken in relation to the request without undue delay and in any event within one month of receipt of the request. If necessary, this period may be extended by a further two months, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of the request, including the reasons for the delay. Where you make a request by electronic means, the information shall, where possible, be provided by those means unless you have requested otherwise. If we do not take action on your request, we shall inform you without delay and at the latest within one month of receipt of the request of the reasons for not taking action and of the possibility of lodging a complaint with a supervisory authority and seeking judicial redress.
10. Changes to the Policy on the collection, processing, storage and protection of personal Data
The controller reserves the right to update, amend and supplement the privacy policy at any time in the future when circumstances so require.