Privacy Policy

This Privacy Policy governs your use of products, services, content, functions, technologies, etc. provided by INVIKTA LTD.

In the cases where “we”, “us” or “our” is used in this Privacy Policy, it means INVIKTA Ltd., the company managing your personal data.

By pressing a button or confirming a box, on or after which the phrase “I agree” or “Confirm” is displayed, which you hereby accept as your ordinary electronic signature according to Art. 3, item 10 of Regulation (EU) No. 910/2014, you express your consent to be bound by this Privacy Policy.

By accepting this Privacy Policy, you expressly consent to our use and disclosure of your personal information and instruct us to do so in the manner described in this Privacy Policy.

1. General provisions

1.1. This Privacy Policy is an integral part of the General Terms and Conditions of montebelo.bg .

We, which means INVIKTA LTD., attach great importance to the protection of the personal data of our customers. In this Privacy Policy, we inform the Client about the collection, use and processing of the Client’s personal data when registering or using our services and all its elements.

Any personal data of customers is collected, processed and stored in accordance with the principles established in the applicable legislation and in Regulation 2016/679 (General Data Protection Regulation).

1.2. You are required to read this Privacy Policy carefully in order to be familiar with the policies and practices that will be applied to the Customer’s personal data, how it will be used and how we will treat it. In the event that You do not agree to this Privacy Policy, You should not use our Services (as defined in the Agreement with You). By providing us with your personal data and maintaining a contractual relationship with us after you have already familiarized yourself with this Privacy Policy, we will consider that you have agreed to the collection, use and disclosure of your personal data in accordance with the conditions established in this Privacy Policy, unless you notify us otherwise.

2. The Information We Collect.

We mainly process three categories of personal data, depending on the basis of their processing:

2.1. Information that we process for the purposes of fulfilling our contractual relationships

We ask you for and collect the following information in case you wish to use our services. This information is necessary for the adequate and correct execution of the contract between. Without its collection, we will not be able to provide you with the relevant services.

• Names of the person ordering the goods/services
• Names of the person who will receive the goods/services
• Phone number
• Email address
• Shipping address

2.2. Information that we process based on your consent or the consent of third parties.

You may choose to provide us with additional information about yourself or other individuals. In the event that you provide us with personal data of other persons other than you, you declare to us that you have had the consent of the relevant person for the disclosure of the relevant personal data. These personal data will be processed on the basis of your consent or the consent of the third party for whom you have provided us with data. Such information could be:

• Any information disclosed by you in connection with a communication initiated between us, for the purpose of providing customer service.
• Any additional personal data, such as contact details or other delivery addresses, for the purposes of providing any additional services you may request from us.
• Data related to your complaints – we are obliged to keep a register of complaints and collect data about your complaints.

2.3. Information that we process based on our legal obligations and legitimate interest.

In the event that you use our services and websites, you agree that we will collect, including automatically, information, including that which may be considered personal data (such as IP address). This information is necessary to fulfill our legal obligations, as well as for our legitimate interests to improve the functionalities and conditions of our services:

• Data on an official document, if applicable, for the purposes of issuing tax invoices, in accordance with the statutory procedure, as well as for the purposes of providing the opportunity to recover VAT, customs duties and other similar taxes and fees.
• Service usage information – we retain information about the use of our services, such as the orders you have placed.
• Access information: we automatically collect data about the accesses made to our web pages, such information including but not limited to: IP addresses, date and exact time of access, information about the browser through which it is accessed, other unique identifiers.
• “Cookies”: we use cookies and other similar technologies that may be implemented in the future that allow us to provide you with our services in a way that is convenient for you. For more information about the Cookies we use, please read the Cookies Policy.
• Data about the payment card used (for the purpose of executing a payment transaction, if applicable). We cannot see the payment card data entered by you, but this data is processed in an automatic and secure way by the Virtual POS placed on our sites, and the relevant information is used by the servicing financial institution for the purposes of initiating and processing the card transaction.

3. How we use the information we collect.

We use, store and process information, including personal data, for the purposes of providing our services to end customers. We do not use your personal data for profiling, marketing or any other similar purposes.

We may in the future implement systems that process the information we receive for the purposes of improving the functionalities of our sites, for better customer support, easier communication, and for the purposes of improving the security of our online services .

4. Terms for sharing personal data

4.1. With your consent

In the event that you have given your consent, we will share your personal data in accordance with the prescriptions of your consent, such as for the purposes of providing warranty service provided by third parties.

4.2. Sharing between companies in our corporate group.

For the purposes of fulfilling our obligations to provide our goods and services to you, we may share certain personal data between members of our corporate group as follows:

4.3. Sharing with third parties.

For the purposes of lawfully fulfilling our obligations in providing our goods and services to you, we may share certain personal data with third parties as follows:

4.3.1. For the purposes of providing warranty service from subcontractors: We may share your names and contact information with our subcontractors to whom we escalate certain service activities.

4.3.2. For the purposes of fulfilling our obligations under applicable legislation for accounting and tax purposes, for the purposes of issuing invoices: We may share your personal data with the accounting firms whose services we use.

4.3.3. For the purpose of delivering goods and services: We may share your names, contact details and addresses, including the delivery address you have provided, with the courier companies whose services we use for forwarding.

4.3.4. For the purpose of providing online content: Our hosting providers and other online services automatically record information about you, such as IP addresses, accesses made and other data about your behavior on our sites.

4.3.5. For the purpose of providing the card payment acceptance service on our websites: Our servicing financial institution (acquirer) automatically processes your payment details such as PAN, CVC, Emboss name, Expiration date and other similar information in case you use the functionality to pay for goods or services by means of a payment card.

5. Period of storage of your personal data.

We will store your personal data in accordance with the minimum legal requirements for the storage of the relevant category of personal data.

In the event that there is no applicable legal retention requirement for a relevant category of personal data, your personal data will be retained by us for a period not longer than that required for the expiry of the statute of limitations for any legal relationship that may be born between us.

6. Fulfillment of legal obligations.

We may share your information, including personal data, with courts, pre-litigation authorities, governmental authorities or other legally authorized third parties, if and to the extent that we are required to do so or permitted by law, for the purposes of (i) the performance of our legal obligations; (ii) the enforcement of procedural rules and to defend against claims directed against us; (iii) responding to proper inquiries by authorities investigating criminal or other illegal activities, or investigating other conduct that may expose us, you or any of our customers to legal risk; (iv) the enforcement and administration of our Terms and Conditions and any other contracts, policies and legal relationships; (v) to protect our rights, property or privacy, those of our employees, our corporate family companies, or the public.

7. Information sharing outside the European Economic Area (“EEA”).

We use a variety of service and goods providers for the purposes of providing our services to you.

In order to facilitate our operations on a global scale, we may be required to transfer, store and process information relating to you within our group of companies or service providers. The laws in these countries may differ from the laws applicable in your country of residence. In such cases, we ensure compliance with appropriate security measures to protect any information that could be considered your personal data. Such measures could be based on an adequacy decision by the European Commission in the relevant non-EEA countries. We will provide you with additional information about these measures upon request, if applicable.

8. Your Rights

You may exercise any of your rights set forth below in this section by sending an email to  montebelovillas@abv.bg . Please note that we may ask you to verify your identity before processing such a request.

8.1. Access to your personal data

You have the right to access and request the receipt and/or transfer of your personal data that we process in the manner described above. You will receive a response within one month at the latest, unless this is impossible due to the nature of your request and its complexity, in which case we will notify you of the need to extend this period within the same period. In particular, you have the right to:

• Receive a copy of the personal data in a structured, widely used and machine-readable format
• Transfer this data from one administrator to another;
• store your personal data for further personal use on a private device; and
• to transfer your data between administrators without hindrance

Applicable law may give you the right to request copies of your personal data held by us.

We reserve the right to deny you the exercise of this right in the event that we can demonstrate the manifest unreasonableness or excessive nature of your request.

8.2. Changing incomplete or incorrect information.

You have the right to ask us to correct incorrect or incomplete information about you (which you cannot change yourself through our online services). You will receive a response within one month at the latest, unless this is impossible due to the nature of your request and its complexity, in which case we will notify you of the need to extend this period within the same period.

We reserve the right to deny you the exercise of this right in the event that we can demonstrate the manifest unreasonableness or excessive nature of your request.

8.3. Right to erasure (“Right to be forgotten”)

You have the right to ask us to delete any personal data we process about you. You will receive a response within one month at the latest, unless this is impossible due to the nature of your request and its complexity, in which case we will notify you of the need to extend this period within the same period.

We reserve the right to deny you the exercise of this right in the event that we can prove the manifest unreasonableness or excessive nature of your request, as well as in the event that we are not entitled to delete your personal data due to a legal obligation.

8.4. Right to restriction of personal data processing

You have the right to ask us to restrict the processing of your personal data. You will receive a response within one month at the latest, unless this is impossible due to the nature of your request and its complexity, in which case we will notify you of the need to extend this period within the same period.

We reserve the right to deny you the exercise of this right in the event that we can prove the manifest unreasonableness or excessive nature of your request, as well as in the event that we do not have the right to restrict the processing of your personal data due to a legal obligation.

8.5. Right to object.

You have the right to object to our automatic processing of your personal data and to request that the latter be processed through human intervention. You will receive a response within one month at the latest, unless this is impossible due to the nature of your request and its complexity, in which case we will notify you of the need to extend this period within the same period.

We reserve the right to deny you the exercise of this right in the event that we can demonstrate the manifest unreasonableness or excessive nature of your request.

8.6. Right to withdraw consent.

In cases where we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time and, in the event that there is no other lawful basis for processing your personal data, we will be obliged to stop processing the relevant personal data.

9. Security

We constantly implement and update our administrative, technical and physical security measures for the purpose of improving the security of your information against unauthorized access, loss, destruction or alteration. Some of the measures we apply are encryption, pseudonymisation, firewalls and access management to personal data. In the event that you know or have doubts about unauthorized access to your personal data, please contact us using the contact details on our site.

10. Changes to the Privacy Policy.

We reserve the right to change this Privacy Policy at any time, in accordance with the provisions of this section. In the event that we amend this Privacy Policy, we will post the amended Privacy Policy on our website, whereby all of our customers will be deemed to have been notified. In the event that you do not object to the changes made, the provisions of the new Privacy Policy will enter into force for you without the need for additional confirmations on your part.