Privacy Policy

Information for the personal data administrator:

Website: https://pamaura.com/

The site is managed by "DILON" Ltd., UIC 203244428

This Privacy Policy governs the relations between the Administrator and the data subjects of the Site.

Contact details

email: office@pamaura.com;

phone: +359 886 537 710

The grounds and purposes for which we use your personal data

We process your personal data on the following grounds:

  • "The conclusion of a contract between us and you with the aim of fulfilling our obligations under it;"
  • Explicit consent from you – the purpose is specified for each specific case;
  • In case of a statutory obligation;
  • In view of our legitimate interest

In this privacy policy, you will find detailed information regarding the processing of your personal data depending on the basis on which we process it.

FOR THE PERFORMANCE OF THE CONTRACT OR IN THE CONTEXT OF PRE-CONTRACTUAL RELATIONS

"We process your personal data in order to fulfill contractual and pre-contractual obligations and to exercise rights under the contracts concluded with you."

Processing objectives:

  • establishing your identity;
  • management and execution of your request and execution of the concluded contract;
  • preparation of a proposal for concluding a contract;
  • preparation and sending of an invoice/bill for the services you use with us;
  • to provide you with the necessary comprehensive service, as well as to collect the amounts due for the services used;
  • "keeping correspondence related to placed orders, processing requests, reporting issues, etc."
  • notification for everything related to the services you use with us;
  • we will establish and/or prevent unlawful actions or actions that contradict our terms for the respective services;

Category of data subjects

On this basis, data about our Clients is processed. A Client is any individual or representative of a legal entity that is in contractual or pre-contractual relations with us and wishes to use the Services provided by us.

Services provided

On the Site, we provide the sale of goods in the online store.

Data we process on this basis:

"Based on the agreement concluded between us and you, we process information regarding the type and content of the contractual relationship, as well as any other information related to the contractual relationship, including:"

  • names
  • email
  • address
  • correspondence regarding the overall service
  • phone number

 

The processing of some of the specified personal data is mandatory for us to be able to conclude the contract with you and to fulfill it. Without providing us with the aforementioned data, we would not be able to fulfill our obligations under the contract. Such personal data is marked in a specific way with “*” or another sign. All other personal data is collected voluntarily.

Provision of personal data to third parties

We provide your personal data to third parties, with our main goal being to offer you quality, fast, and comprehensive service. We do not provide your personal data to third parties until we ensure that all technical and organizational measures have been taken to protect this data, as we strive to maintain strict control over the implementation of this goal. In this case, we remain responsible for the confidentiality and security of your data. We have a contract for the processing of personal data with the parties to whom we transfer personal data.

"We provide personal data to the following categories of recipients (data controllers):"

  • Postal operators and couriers
  • "persons providing consulting services in various fields such as law, accounting, business consulting, and similar."

When we delete the data collected on this basis

"The data collected on this basis will be deleted 3 or 5 years after the termination of the contractual relationship, regardless of whether due to the expiration of the contract, cancellation, or other grounds. The period is determined by the statute of limitations applicable by law for possible claims arising from the contract."

The data collected in relation to pre-contractual relationships is deleted after 12 months.

Contact form

Through the contact form, we collect the data voluntarily provided by you. By sending the data through the contact form, you agree to this Privacy Policy. The data you send us is processed solely for the purpose of providing our services and the potential conclusion of a contract. The data is processed and deleted in accordance with the rules of this Privacy Policy and specifically the rules for data collected on a contractual or pre-contractual basis.

Automated solutions

We do not use automated algorithms for processing personal data.

FOR THE FULFILLMENT OF REGULATORY OBLIGATIONS

"It is possible that the law provides for an obligation for us to process your personal data. In these cases, we are obliged to carry out the processing, such as:"

  • Obligations under the Law on Measures Against Money Laundering;
  • "Performance of obligations related to distance selling, off-premises selling, provided for in the Consumer Protection Act;"
  • Providing information to the Consumer Protection Commission or third parties as provided for in the Consumer Protection Act;
  • Providing information to the Commission for the Protection of Personal Data in connection with the obligations set out in the legislation on the protection of personal data;
  • "Obligations provided for in the Accounting Act and the Tax and Social Security Procedure Code and other related regulatory acts, in connection with maintaining lawful accounting;"
  • Providing information to the court and third parties, within the framework of court proceedings, in accordance with the requirements of the applicable regulatory acts related to the proceedings;
  • Age verification when shopping online.

When we delete the personal data collected on this basis

"The data collected in accordance with a legal obligation will be deleted once the obligation to collect and store it has been fulfilled or has ceased to exist. For example:"

  • under the Accounting Act for the storage and processing of accounting data (11 years),
  • "obligations to provide information to the court, competent state authorities and other grounds provided for in the applicable legislation (5 years)."

Provision of data to third parties

"When we are legally required to do so, we may provide your personal data to the competent state authority, natural or legal person."



 

AFTER YOUR CONSENT

"We process your personal data on this basis only after explicit, unambiguous, and voluntary consent from your side. We will not foresee any adverse consequences for you if you refuse the processing of personal data."

Consent is a separate basis for processing your personal data, and the purpose of the processing is specified in it, and does not overlap with the purposes listed in this policy. If you give us the appropriate consent and until its withdrawal or termination of any contractual relationship with you, we prepare suitable service proposals for you.

Data we process on this basis:

On this basis, we process only the data for which you have given us your explicit consent. The specific data is determined for each individual case. Usually, this data includes email and name.

"In case we transfer data to third parties, we will notify you in advance before you give your consent."

Withdrawal of consent

The provided consents can be withdrawn at any time. The withdrawal of consent does not affect the performance of contractual obligations. If you withdraw your consent for the processing of personal data for any or all of the purposes described above, we will not use your personal data and information for the purposes specified above. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can withdraw your consent by contacting us at the provided contact details.

When we delete the data collected on this basis

"The data collected on this basis will be deleted upon your request or will be stored for the period specified in the given consent. If no such period is specified, we will delete the data within 12 months from their initial collection." 

 

Email marketing

"In case you subscribe to receive emails from us, you will receive messages with up-to-date information about our services, services from our partners, or other useful information. You can unsubscribe from the email newsletter by clicking the button in the email labeled "unsubscribe," "отписване," or other similar text. You can also unsubscribe by using our contact details provided in this Policy."

LEGITIMATE INTEREST

We process and analyze data based on legitimate interest. This data is collected to improve our overall service. On this basis, we analyze user behavior and perform data analyses. Such data includes: anonymized IP address, which shows only general location, website behavior; non-anonymized IP address, Facebook profile data, exact location.

In case the collection of the above-mentioned data goes beyond the legitimate interest of the personal data controller, he will collect them only after explicit consent. 

"Your data can also be anonymized. Anonymization is an alternative to data deletion. In anonymization, all personally identifiable elements/elements that allow for your identification are irreversibly removed. There are no regulatory obligations to delete anonymized data, as they do not constitute personal data."

How we protect your personal data

"To ensure adequate protection of the company's and its clients' data, we implement all necessary organizational and technical measures provided for in the Personal Data Protection Act."

The company has established rules to prevent abuse and security breaches and has taken measures to maintain the security of personal data.

To ensure maximum security in the processing, transfer, and storage of your data, we may use additional protection mechanisms such as encryption, pseudonymization, etc.