Privacy policy
This Privacy Policy aims to inform you about how Art Service Ltd. processes your personal data as an administrator, as well as how you can control your preferences and settings regarding this processing.
What do these Privacy Rules regulate and on what legal basis? From May 25, 2018, the General Data Protection Regulation (GDPR) began to apply in Bulgaria. It was adopted by the European Union and its purpose is to harmonize the policies of EU member states related to the collection and use of personal data. Another goal is to guarantee our right to privacy, to protect our personal data, and to provide more security against abuses of personal information for each of us. The new regulation comes with a number of requirements that Art Service Ltd. implements and which you can familiarize yourself with here. Among them are:
- To inform you about what data we use.
- To inform you why we use it.
- To ask for your consent to use it when we provide additional services based on it, such as targeted advertising, for example.
- To give you the opportunity to change your consent for different purposes through this site, so you have more freedom.
- To guarantee your right to request correction of your data, their deletion, as well as to be "forgotten." Additionally, we can provide you with the data for download or transfer them if you notify us and authenticate yourself in the appropriate ways.
- To specify all third parties/other companies with whom we exchange your data. Please note that the internet is a global network, and we often use standardized services that register logins and track behavior in an anonymized way, such as Google Analytics.
All data that can identify a given user is considered personal data. Such data may include email, names, mobile phone, residential address, IP address.
What data do we collect from our registered users?
Art Service Ltd. collects specific data from users of its portfolio websites based on their registrations to analyze user behavior, as well as to provide them with more relevant content and advertisements, namely the following categories of personal data:
From artandhobby.eu – email address for receiving an invoice and warranty card, IP address, as well as phone number, address for receiving the shipment, as well as other personal data that are not mandatory for the user to provide upon registration, email address for receiving email marketing;
Data collected from all visitors to our websites:
On all websites in our portfolio, we collect data from all visitors – registered users and unregistered visitors, namely the following categories of data:
- IP address;
- User identifier with a high degree of uniqueness;
- Device identifier (device ID) for mobile applications, with a high degree of uniqueness;
- Browser identifier, with a high degree of uniqueness;
- History of visited pages, including secondary processing, to establish your preferences for certain types of content;
- History of searches you have made on our pages;
- Some types of behavior – e.g., a list of viewed ads according to their category and your interaction with them – availability of the ad in the visible part of your browser; clicks made and others.
- Data collected from reading cookies: When users use our services and portfolio of websites – reading news, watching videos, using email, etc., among the data that help us understand how our services work best and to make them even better for you are cookies. They are small text files sent from the web server to the browser used and stored on your device so that the site can recognize it. There are two types of cookies – persistent and temporary or "session" cookies. Persistent cookies are stored as a file on your computer or mobile device for a longer period. Session cookies are temporarily stored on your computer when you visit a site from our portfolio, but are deleted the moment you close the page. Most cookies do not contain sensitive information about you or personal data with which we can directly identify you. You can learn more about cookies here. The purposes for which we use cookies are primarily to track your behavior in the following areas:
- Tracking sections on the sites you visit;
- How much time you spend on a given site;
- How long you watch a given video;
- The ads you have seen and/or interacted with;
- When you visit our sites and the sites of our partners serving our Java scripts, etc.
To whom do we share and disclose your personal data
Sometimes we store part of the information on our servers or send it to third parties. This is necessary to ensure the best experience when using our services, and sometimes – to ensure the availability and accessibility of the service you use.
Art Service Ltd. does not grant the right to use, does not sell, does not disclose, and does not share information about you (personal data within the meaning of GDPR) with other persons or unrelated companies, except when this is necessary to provide you with services you have requested and when you have provided your consent, or in any of the following hypotheses:
The information is provided to trusted partners who work on behalf of Art Service Ltd. based on contractual relationships and under confidentiality agreements. However, these companies do not have the right to independently share this information. These companies include, but are not limited to:
- Google with its respective products: Google Analytics, Google Tag Manager, DoubleClick for Publishers, AdX, AdSense, Google Case, Google IMA, Google Plus: https://privacy.google.com/# ;
- Facebook with its respective products: Facebook Tracking Pixel, Facebook Tools – Plug-in “like” button, Sign in with Facebook profile, etc.: https://www.facebook.com/privacy/explanation ;
- Mail Chimp: https://mailchimp.com/legal/privacy/ ;
- Instagram: https://help.instagram.com/155833707900388;
- Pinterest: https://policy.pinterest.com/en/privacy-policy.
The information is provided in compliance with the lawful requirements of court orders based on legitimate requests from authorized bodies (under the Electronic Communications Act, the Criminal Procedure Code, the Criminal Code, etc.).
If you do not want us to send information to some of our partners, you can withdraw your consent here.
Data protection
When we store information with us, it is physically kept on our own servers, co-located in data storage centers on the territory of the Republic of Bulgaria. When selecting our partners for server colocation, we conduct a detailed check of their certification, requiring, for example, coverage of the following industry standards:
ISO/IEC 27001:2013 Information security certificate PCI DSS 3.2 compliance (chapters 9 and 12) ISO 9001:2008 ISO 27001:2013 BS OHSAS 18001:2007
Compliance with the specified standards guarantees maximum security of our users' data. We restrict access to information about you by employees acting under the direction of Art Service Ltd., except in cases where there are reasonable grounds to handle this information in order to provide you with services or in connection with the work obligations performed by these employees. We have physical, electronic, and procedural safeguards that correspond to our legal obligations regarding the protection of information about you.
Data transfer
Some of our partners may transfer data outside the EEA when there is a decision regarding the adequate level of protection, for example – in the case of the Privacy Shield in relations between the EU and the USA (EU-U.S. Privacy Shield). For more information, you can review the privacy policies of our partners.
How long do we store the information
Data storage continues as long as we have a basis for their storage. For example – our user has given consent for us to collect and process information about them.
We apply the following retention periods for different types of personal data according to their purpose, namely:
For the purposes of measuring user behavior on the websites in our portfolio – according to the validity period of the respective cookie recording;
For the purposes of behavioral targeting – no more than 1 (one) year.
Regarding traffic data, the Electronic Communications Act applies, and the data is stored for 6 months. This data is transmitted to specialized authorities and institutions only when legal provisions are met and with proper grounds.
Rights of data subjects under GDPR
Right of access to your personal data: you have the right to obtain confirmation from us whether personal data concerning you is being processed and, if so, you have the right to access the personal data and information.
Right to rectification of personal data: if you find that the personal data we process for you is inaccurate, you have the right to have us correct this personal data.
Right to erasure of personal data (the right to be forgotten): under certain circumstances, such as if your personal data has been processed unlawfully or you have withdrawn your consent (if the processing of personal data is based on consent), you have the right to request and obtain the erasure of your personal data from us.
Right to restriction of processing: under certain circumstances, such as if you doubt the accuracy of your personal data or you have objected to our legitimate purpose for processing your personal data, you have the right to request that we restrict the processing of your personal data until a resolution is found.
Right to object to processing: under certain circumstances, such as if you doubt our legitimate interest in processing your personal data, you have the right to object on grounds relating to your particular situation against such processing.
Right to data portability: if your personal data is processed by automated means based on your consent or for the purpose of fulfilling our contractual relations, you have the right to request that we provide your personal data in a machine-readable format for transfer to another data controller.
Right to lodge a complaint with a supervisory authority: you have the right to lodge a complaint regarding the processing of your personal data by us with the relevant supervisory authority.
Contacts:
Administrator: Art Service Ltd. UIC 130749946, 6 Trapetzitsa St., Sofia 1000, Bulgaria, tel. +359 894 601 650 /Data Protection Officer/ Data Protection Officer: Ivan Ilchev; email: office@artandhobby.eu