Policy on the processing of personal data — ANIX (LLC «Фирма ANIX»)
This Privacy Policy describes the manner in which ANIX (LLC «Фирма ANIX», hereinafter — the Controller) collects, uses and protects personal data of visitors to the website https://anix-bg.com (hereinafter — the Website). The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter — GDPR), the Bulgarian Personal Data Protection Act (Закон за защита на личните данни, hereinafter — ЗЗЛД) and other applicable European and national legislation.
1.1. The Controller considers the protection of the rights and freedoms of natural persons, including the right to privacy and to the protection of personal data, to be one of its main priorities.
1.2. This Policy applies to all personal data that the Controller may obtain from visitors to the Website https://anix-bg.com, and defines the purposes, legal bases, scope and terms of processing, as well as the rights of the data subjects.
2.1. Personal data — any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2.2. Processing — any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2.3. Controller — a natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the purposes of this Policy, the Controller is ANIX (LLC «Фирма ANIX»).
2.4. Processor — a natural or legal person which processes personal data on behalf of the Controller.
2.5. Recipient — a natural or legal person to whom the personal data are disclosed, whether a third party or not.
2.6. Consent of the data subject — any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2.7. Personal data breach — a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
2.8. Data subject — any natural person whose personal data are processed, in particular any visitor to the Website.
2.9. Website — a set of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at the network address https://anix-bg.com.
2.10. Cross-border transfer — the transfer of personal data to a third country or to an international organisation, carried out in accordance with Chapter V of the GDPR.
3.1. The Controller of personal data is:
3.2. The Controller has appointed a Data Protection Officer who can be contacted at the email address above for any questions regarding the processing of personal data and the exercise of data subjects' rights.
4.1. The Controller processes personal data of Website visitors for the following purposes and on the following legal bases under Article 6 of the GDPR:
| Purpose of processing | providing the User with access to services, information and materials contained on the Website; responding to enquiries |
|---|---|
| Personal data | name; email address; phone number; message text; IP address and technical data of the device (log files, cookies) |
| Legal basis | Article 6(1)(a) GDPR — consent of the data subject; Article 6(1)(b) GDPR — performance of a contract or pre-contractual measures; Article 6(1)(f) GDPR — legitimate interests of the Controller |
| Storage period | no longer than required to achieve the purposes of processing, and no longer than the limitation periods provided for by law |
4.2. Where processing is based on consent, the data subject has the right to withdraw his or her consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
5.1. Personal data are processed lawfully, fairly and in a transparent manner in relation to the data subject.
5.2. Personal data are collected for specified, explicit and legitimate purposes and are not further processed in a manner that is incompatible with those purposes.
5.3. Personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimisation).
5.4. Personal data are accurate and, where necessary, kept up to date; every reasonable step is taken to ensure that inaccurate personal data are erased or rectified without delay.
5.5. Personal data are kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (storage limitation).
5.6. Personal data are processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage (integrity and confidentiality).
In accordance with Articles 15-22 of the GDPR and Chapter II of the ЗЗЛД, the data subject has the following rights:
To exercise any of these rights, the data subject may contact the Controller at the email address sales@anix-bg.com. The Controller shall respond to such requests within one month of receipt, in accordance with Article 12(3) of the GDPR.
7.1. Personal data processing is carried out with the consent of the data subject, obtained in a clear and unambiguous manner.
7.2. Personal data processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
7.3. Personal data processing is necessary for compliance with a legal obligation to which the Controller is subject.
7.4. Personal data processing is necessary in order to protect the vital interests of the data subject or of another natural person.
7.5. Personal data processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
8.1. The security of personal data processed by the Controller is ensured through appropriate technical and organisational measures, including pseudonymisation and encryption, to ensure a level of security appropriate to the risk.
8.2. The Controller takes all reasonable measures to exclude access to personal data by unauthorised persons and to prevent accidental loss or damage to personal data.
8.3. Personal data are not transferred to third parties, except where this is necessary for the performance of obligations to the data subject, where the data subject has given consent, or where this is required by law.
8.4. Where processors are engaged, the Controller ensures that the processing is governed by a contract that is binding on the processor with regard to the Controller, in accordance with Article 28 of the GDPR.
8.5. If inaccuracies in personal data are detected, the User may update them by sending a notification to the Controller's email address sales@anix-bg.com.
8.6. The term of personal data processing is determined by the achievement of the purposes for which the personal data were collected, unless a different term is provided for by contract or by law. The User may at any time withdraw consent to the processing of personal data by sending a notification to the Controller via email marked "Withdrawal of consent".
8.7. All information collected by third-party services, including communication tools and other service providers, is stored and processed by such persons in accordance with their own privacy policies. The Controller is not responsible for the actions of third parties.
9.1. The Website uses cookies and similar technologies to ensure the correct functioning of the Website, to improve the user experience and to collect anonymous statistical information.
9.2. The User may restrict, block or delete cookies at any time through the settings of his or her browser. Refusal to use cookies may affect the full functionality of the Website.
9.3. Where the Website uses cookies that are not strictly necessary for the operation of the Website, the Controller obtains consent in accordance with Article 5(3) of Directive 2002/58/EC (ePrivacy Directive) and the applicable national legislation.
10.1. The Controller may transfer personal data to third countries only in accordance with Chapter V of the GDPR, on the basis of an adequacy decision of the European Commission, appropriate safeguards, or an exception provided for by Article 49 of the GDPR.
11.1. In the event of a personal data breach, the Controller shall notify the competent supervisory authority in accordance with Article 33 of the GDPR, and, where the breach is likely to result in a high risk to the rights and freedoms of natural persons, communicate the breach to the data subjects in accordance with Article 34 of the GDPR.
12.1. The User may obtain any clarifications on questions of interest concerning the processing of his or her personal data by contacting the Controller via email at sales@anix-bg.com or by sending a letter to the Controller's address specified in clause 3 of this Policy.
12.2. Any changes to this Policy will be reflected in this document. The Policy is valid indefinitely until it is replaced by a new version. The current version of the Policy is freely available on the Internet at https://anix-bg.com/policy.
12.3. This Policy is governed by the law of the Republic of Bulgaria and the law of the European Union. Disputes shall be settled by the competent courts of the Republic of Bulgaria.
Monday — Friday: 10:00 — 18:00
Saturday, Sunday — closed
Our manager will contact you.
Your message has been sent. Our manager will contact you shortly.
