This Privacy Policy describes how belsta.bg ("Site" or "we") collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at belstabulgaria@gmail.com or by mail using the details provided below:

Tel.+359 877 877 710 / 0877 877 710

Collection of personal data

When you visit the Website, we collect certain information about your device, your interaction with the Website, and information necessary to process your purchases. We may also collect additional information when you contact us for customer service. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

Device Information

• Purpose of collection: To load the website accurately for you, and to perform analytics on website usage to optimize our website.
• Source of collection: Collected automatically when you access our Website using cookies, log files, web beacons, tags, or pixels.
• Commercial disclosure: Sent to our Shopify processor.
• Personal data collected: web browser version, IP address, time zone, cookie information, what websites or products you view, search terms, and how you interact with the website.

Order information

• Purpose of collection: To provide you with products or services to fulfill our contract, process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and provide you with information or advertising relating to our products or services, in line with the preferences you have shared with us.
• Source of collection: collected from you.
• Commercial disclosure: Sent to our Shopify processor.
• Personal data: name, billing address, shipping address, payment information, email address, and phone number.

Customer service information

• Personal Information collected: personal data from the Buyer's database (without additional notice to the Buyer) for the purpose of lifelong data storage, their accumulation, updating, modification (if necessary). The Buyer undertakes to ensure the protection of data from unauthorized access by third parties, not to disseminate or transfer data to third parties (with the exception of data transfer to affiliated persons, business partners, persons designated by the seller for direct data processing for these purposes, as well as upon mandatory request from a competent state body).
• Purpose of retrieval: Providing customer support.
• Source of collection: collected from you.
• Personal data: The Buyer confirms that they are informed of the procedure and conditions for processing their personal data.

Minors

The Site is not intended for individuals under the age of 13. We do not knowingly collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at the address above to request deletion.

Other Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

• We use Shopify to power our online store. For more information about how Shopify uses your Personal Information, please visit: https://www.shopify.com/legal/privacy.
• We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
• In case of unwillingness to receive the newsletter, the buyer has the right to contact the seller by writing a statement of refusal to receive advertising materials and sending it to the postal or email address.

Behavioral Advertising

As described above, we use your collected Personal Data to provide you with targeted advertising or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. Additional information about how Google uses your Personal Data can be found here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
• We use Shopify Audiences to display ads on other websites with our advertising partners to buyers who have purchased from other Shopify merchants and who may also be interested in our offer. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, allowing other Shopify merchants to make offers that may be of interest to you.

For more information about how targeted advertising works, visit the Network Advertising Initiative ("NAI") educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Use of Personal Data

We use your Personal Information to provide you with our services. This includes: offering products for sale, processing payments, sending and fulfilling your order, and notifying you of new products, services, and offers.

Legal Basis

In accordance with the General Data Protection Regulation ("GDPR"), if you are in the European Economic Area ("EEA"), we process your personal data on the following legal bases:

• your permission;
• Performance of a contract between you and the website;
• Compliance with our legal obligations;
• To protect your vital interests;
• To perform a task carried out in the public interest;
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Storage

If you place an order through the Website, we will retain your Personal Information for our records unless you ask us to erase this information. For more information about your right to erasure, please see the Your Rights section below.

Automated decision-making

If you are an EEA resident, you have the right to object to processing based solely on automated decision-making (including profiling), where such decision-making has legal consequences for you or otherwise significantly affects you.

We DO NOT engage in fully automated decision-making that has a significant legal or other impact on customer data.

Our processor, Shopify, uses limited automated decision-making for fraud prevention that does not have a significant legal or other impact on you.

Services that include elements of automated decision-making include:

• Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist is retained for a small number of hours.
• Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist is retained for a small number of days.

Your Rights

You have the following rights in relation to your personal data:

• You have the right to know why your personal data is needed, what is done with it, and how long it will be stored.
• Right to access: You have the right to access the personal data we hold about you.
• Right to rectification: You have the right to complete, correct, erase or block your personal data at any time.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data erased.
• Right to data portability: You have the right to request all your personal data from the controller and to transfer it in its entirety to another controller.
• Right to object: You may object to the processing of your data. We comply with this, unless there are legitimate grounds for processing.

To exercise these rights, please contact us. See contact information at the end of this cookie policy. If you have a complaint about how we handle your data, we would like to hear from you, but you also have the right to lodge a complaint with a supervisory authority (data protection authority).

GDPR

If you are an EEA resident, you have the right to access the Personal Information we hold about you. You can transfer it to the new service and request that your Personal Data be corrected, updated or deleted. If you wish to exercise these rights, please contact us using the contact information provided above.

Your personal data will first be processed in Ireland and then transferred outside Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with GDPR, please see the GDPR Whitepaper at: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

CCPA

If you are a California resident, you have the right to access the Personal Information we hold about you (also known as the "right to know"), to transfer it to the new service, and to request that your Personal Information be corrected, updated, or deleted. If you wish to exercise these rights, please contact us using the contact information provided above.

If you wish to designate an authorized representative to make these requests on your behalf, please contact us at the address above.

Cookies

Cookies are a small amount of information that is downloaded to your computer or device when you visit our website. We use a number of different cookies, including functional, performance, advertising, social media or content cookies. Cookies improve your browsing experience by allowing the website to remember your actions and preferences (such as your login and region selection). This means that you do not have to re-enter this information every time you return to the website or navigate from one page to another. Cookies also provide information about how users use the website, such as whether it is their first visit or frequent visitors.

We use the following cookies to optimize your experience on our website and to provide our services.

Cookies necessary for the operation of the store

Set function duration

_ab Used in connection with administrator access. 2 years

_secure_session_id Used in connection with storefront navigation. 24 hours

_shopify_country Used during checkout. session

_shopify_m Used to manage customer privacy settings. One year

_shopify_tm

Used to manage customer privacy settings.

30 minutes

_shopify_tw Used to manage customer privacy settings. 2n

_storefront_u Used to facilitate updating customer account information. 1 minute

_tracking_consent Tracking preferences. One year

c Used in conjunction with a cash register. One year

cart Used in connection with the shopping cart. 2h

cart_currency Used in the shopping cart. 2h

cart_sig

Used in conjunction with a cash register. 2h

cart_ts Used when placing an order. 2h

cart_ver Used in the shopping cart. 2h

checkout Used in connection with the checkout. 4 W

checkout_token Used when placing an order. One year

dynamic_checkout_shown_on_cart Used during checkout. 30 minutes

hide_shopify_pay_for_checkout Used during checkout. session

keep_alive Used in connection with customer localization. 2h

master_device_id Used when logging into the dealer. 2 years

previous_step Used in connection with the cash register. One year

Remember_me Used in connection with an order. One year

secure_customer_sig Used when a customer logs in. 20 years

shopify_pay Used during checkout. One year

shopify_pay_redirect Used during checkout. 30 minutes, 3 weeks or 1 day depending on the price

storefront_digest Used in connection with customer login data. 2 years

tracked_start_checkout Used during checkout. One year

checkout_one_experiment Used in connection with payment. session

checkout_session_lookup Used during checkout. 3d

checkout_session_token_<<token>> Used during checkout. 3d

identity-state Used in connection with customer authentication. 24 hours

identity-state-<<token>> Used in connection with customer authentication. 24 hours

identity_customer_account_number Used in connection with customer authentication. 12 W

accountability and analytics

Name function duration

_landing_page Track landing pages. 2h

_orig_referrer Track landing pages. 2h

_s Shopify analytics. 30 minutes

_shopify_d Shopify Analytics. session

Shopify Analytics from _shopify_. 30 minutes

_shopify_sa_p Shopify Analytics related to marketing and referrals. 30 minutes

_shopify_sa_t Analytics related to Shopify Market

5.1 Technical or functional cookies
Some cookies allow certain parts of the website to function correctly and remember your user preferences. By setting functional cookies, we make it easier for you to visit our website. This way, you do not always have to enter the same information when visiting our website, and for example, items remain in your shopping cart until you pay for them. We can place these cookies without your consent.

5.2 Statistical cookies
We use statistical cookies to optimize the website experience for our users. With these statistical cookies, we gain insight into how our website is used. We ask for your permission to place statistical cookies.

5.3 Marketing/tracking cookies
Marketing/tracking cookies are cookies or any other form of local storage used to create user profiles for displaying advertisements or tracking a user on this website or across different websites for similar marketing purposes.

5.4 Social media button
On our website, we have integrated Facebook and Instagram buttons to promote web pages (e.g., "Like," "Pin") or posts (e.g., "Tweet") on social networks such as Facebook and Instagram. These buttons work with code fragments from Facebook and Instagram themselves. This code places cookies. These social media buttons may also store and process certain information to provide you with personalized ads.

Please see the privacy statements of these social networks (which may change regularly) to understand what they do with your (personal) data that they process with these cookies. The data obtained is anonymized as much as possible. Facebook and Instagram are based in the USA.

The length of time a cookie remains on your computer or mobile device depends on whether it is a "persistent" or "session" cookie. Session cookies last until you stop browsing, and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please note that deleting or blocking cookies may adversely affect your user experience, and some parts of our website may not be fully accessible.

Most browsers automatically accept cookies, but you can choose whether to accept cookies in your browser settings, which can often be found in the "tools" or "preferences" menu of your browser. For more information on how to change your browser settings or how to block, manage or filter cookies, please refer to your browser's help file or visit websites such as: www.allaboutcookies.org.

Please note that blocking cookies cannot completely prevent us from sharing information with third parties, such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the behavioral advertising section above.

Do Not Track
Please note that we do not alter our data collection and usage practices when we detect such a signal from your browser, as there is no industry consensus on how to respond to "Do Not Track" signals.

Changes
We may update this Privacy Policy from time to time, for example, to reflect changes in our practices or for other operational, legal, or regulatory reasons.

Complaints
As mentioned above, if you wish to make a complaint, please contact us by email or regular mail using the details provided in the "Contact Us" section above.

If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with the relevant data protection authority. You can contact your local data protection authority.

Last updated: 20.06.2023