Privacy Policy of EXTREME BULGARIA EOOD
We at EXTREME BULGARIA EOOD know how important the privacy of the data you — our clients, partners and collaborators — entrust to us is, which is why we treat its collection, storage and processing with all the responsibility arising from the applicable legislation and from our ambition and desire to earn and keep your trust. Regulation (EU) 2016/679 on the protection of personal data has been in force since 25 May 2018. In its capacity as a personal data controller, EXTREME BULGARIA EOOD meets all requirements of the regulation, collecting personal data only to the extent necessary for providing its services and processing and storing it responsibly and lawfully. By accepting our Privacy Policy, you agree to and accept the use of your personal information as described in this document.
Data controller details
Name: EXTREME BULGARIA EOOD. Company number (EIK): 103816814. VAT No: BG103816814. Registered seat and management address: 6 Todor Dimov Str., fl. 4, apt. 11, Primorski district, Varna 9002, Bulgaria. Business address: 27 Gen. Zimmerman Str., Varna. Correspondence address: 27 Gen. Zimmerman Str., Varna. E-mail: dataprotection@extreme.bg. Phone: +359 899 144 225.
Competent supervisory authority
Name: Commission for Personal Data Protection. Seat and correspondence address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria. Phone: +359 2 915 3 518. E-mail: kzld@government.bg, kzld@cpdp.bg. Website: https://cpdp.bg
1. Purposes and principles in collecting, processing and storing your personal data
EXTREME BULGARIA EOOD collects and processes the personal data you provide to us for the following purposes: creating a user profile and ensuring full functionality in providing our services; identifying you as a party to an order or delivery contract; registering participants in events organised by the company; accounting purposes; statistical purposes; protection of information security; securing the performance of the contract for the respective service; sending informational messages, notices of changes to the service and recommendations for improving your use of the site; improving and personalising our services by offering you suitable offers for other products and services that may interest you. When processing your personal data the company observes the following principles: lawfulness, fairness and transparency; purpose limitation; relevance to the purposes of processing and minimisation of the data collected; accuracy and currency of the data; storage limitation in view of achieving the purposes; integrity and confidentiality of processing and an appropriate level of personal data security; accountability.
2. Legal bases for processing your personal data
Your personal data is protected not only by the dedication of the employees and the high standards of EXTREME BULGARIA EOOD, but also by the law. Under the applicable legislation we may process your personal data only if there is a genuine reason to do so, and that reason may be at least one of the following: to perform a contract between us and you; we have a legal obligation; you have given your consent to the processing; it is in our legitimate interest; it is in the public interest; it is in your vital interest. When we have commercial or business reasons to process your personal data, this is defined as a legitimate interest. Where our legitimate interest applies, your personal data remains protected and we must not process it in a way that would be unfair to you or your interests. If the reason we process your personal data is a legitimate interest, we will inform you that we are doing so, tell you what our legitimate interests are, and provide you with a way to raise questions or objections. Nevertheless, compelling grounds for processing such information may override your right to object.
3. What types of personal data the company collects, processes and stores
When you use the websites extreme.bg, shop.extreme.bg and ra.extreme.bg, the company may collect and process the name and e-mail address you provide through the available contact form and any profile you hold on those sites. When ordering our products or services from the online shop shop.extreme.bg, the online system ra.extreme.bg or in person at our offices, additional personal information may be requested and processed in order to fulfil the submitted orders and to contact you. The operations are: registration of a user on the website — creating a profile linked to orders placed or a service used; concluding and performing a commercial transaction with a client or partner and its administration; sending informational messages concerning inquiries, order fulfilment and changes to the services; sending a newsletter to clients who have stated that they wish to receive such information. Categories processed: your identifying data (first and last name, e-mail) — for registration and profile creation, for answering inquiries through the contact forms, social networks, by phone or in a meeting at our offices, and for contacting you, including where you have expressed a wish to receive newsletters and promotional messages; the basis is your acceptance of the Terms and Conditions and your registration on the website. On registration and when ordering through the online shop we additionally collect an address, contact phone and other details where necessary — for delivering the ordered items, issuing invoices, managing orders in shop.extreme.bg and ra.extreme.bg and receiving company seals; the processing is necessary for the performance of a contract to which the data subject is party, and for compliance with legal requirements applicable to the controller. We also collect and store electronic files where they are needed to fulfil your orders — they may contain personal data depending on the specifics of the product, for example business cards, awards and certificates. Identity-card data is processed on the basis of legal requirements applicable to the controller, but only where the user has placed a specific order for the making of a company seal. The company does not collect or process personal data revealing racial or ethnic origin; political, religious or philosophical beliefs or trade-union membership; genetic and biometric data, health data, or data concerning sex life or sexual orientation. If you have questions about the collection and processing of your data, contact us at dataprotection@extreme.bg
4. Processing and protection of personal data
EXTREME BULGARIA EOOD applies adequate technical and organisational measures for processing and protecting the data under our control against accidental or deliberate manipulation, loss, destruction and unauthorised access. As new technologies appear, our procedures for protecting the data we collect are continuously improved as well.
5. How long we store your personal data
The company stores your personal data for no longer than the existence of your profiles on shop.extreme.bg or ra.extreme.bg. After that period expires we take the necessary care to delete and destroy all your data without undue delay. We will notify you in every case where the storage period needs to be extended in view of achieving the purposes, performing the contract, the company's legitimate interests or otherwise. We store the personal data we are obliged to keep under the applicable legislation for the respective prescribed period, which may exceed the lifetime of your registration. For example, orders you have placed on shop.extreme.bg or ra.extreme.bg are stored for 5 years after the order is completed pursuant to the requirements of the Accountancy Act, even where your profile has been deleted. Files collected for the purpose of fulfilling orders are stored for up to 5 years after the order is fulfilled.
6. Your rights in connection with the processing of your personal data
You have the right to withdraw your consent to the processing of your personal data at any time by a free-form request; we may ask you to verify your identity. On withdrawal of consent for data required to maintain your registration, your profile will become inactive. You have the right of access to your personal data — to request confirmation whether data relating to you is being processed, detailed information on the purposes, bases and methods of processing, and a copy of the processed data in electronic or other suitable form; access is free of charge, but the company reserves the right to impose an administrative fee where requests are repetitive or excessive. You have the right to rectification of inaccurate or incomplete data — directly through your profiles or by a request to us. You have the right to erasure ("right to be forgotten") where the data is no longer necessary for the purposes for which it was collected; where you withdraw your consent and there is no other legal basis; where you object to the processing, including for direct marketing, and there are no overriding lawful grounds; where the data has been processed unlawfully; or where it must be erased for compliance with a legal obligation. We are not obliged to erase the data where we process it for exercising the right of freedom of expression and information; for compliance with a legal obligation or the performance of a task in the public interest; for reasons of public interest in the area of public health; for archiving in the public interest, scientific or historical research or statistical purposes; or for the establishment, exercise or defence of legal claims. You have the right to restriction of processing where you contest the accuracy of the data, where the processing is unlawful but you do not want erasure, where the company no longer needs the data but you require it for the defence of legal claims, or where you have objected pending verification. You have the right to data portability and the right to object to processing, including profiling or direct marketing. You also have rights in cases of personal data breaches: if we establish a breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay of the breach and of the measures taken, except where we have applied appropriate technical and organisational protection measures, where we have taken subsequent measures ensuring that the breach will not lead to a high risk, or where notification would require disproportionate effort. Exercising your rights requires a written request to the company at its address or electronically to dataprotection@extreme.bg. We will provide information on the action taken without undue delay and in any event within one month of receiving the request; where necessary the period may be extended by a further two months depending on the complexity and number of requests, of which we will inform you within one month, stating the reasons. In case of difficulties or doubts about the lawfulness of the processing, you have the right to lodge a complaint with the supervisory authority at the contact details given above.
7. Provision of personal data to third parties
EXTREME BULGARIA EOOD may provide clients' personal data to other partner companies, but only under a confidentiality declaration from them guaranteeing that the data is stored securely and processed in accordance with the regulatory requirements, as follows: providers of courier services, providers of marketing services, insurers, providers of payment or banking or other services delivered by companies with which we may develop joint programmes for marketing our goods and services. Data may be provided to state authorities or local government bodies where this follows from legal requirements applicable to the company. EXTREME BULGARIA EOOD does not provide personal data outside the EU or to international organisations.
8. Use of cookies
For details of how we use cookies, see our Cookie Terms of Use.
9. Changes to our Privacy Policy
EXTREME BULGARIA EOOD reserves the right to update, amend and supplement this Privacy Policy at any time. Every amendment will be published on the site together with a notice of the change made and will take effect upon publication. We recommend checking this web page periodically for updates. If you cannot find the answer to a question about the protection of your personal data in this Privacy Policy, contact us at: dataprotection@extreme.bg
10. Marketing emails
We send marketing emails (welcome, abandoned cart, post-purchase, win-back, monthly newsletter) only with explicit consent given at registration, at checkout or via the footer form. Records of consent, unsubscribe and preferences are kept as a legal trail. Unsubscribing is one click in the email or from the email preferences page and takes effect immediately.
11. Tracking in marketing emails
Our marketing emails contain a 1×1 tracking pixel for registering opened messages and UTM parameters in the links for click reporting. This data is kept only at an aggregate level (opens and clicks per campaign) and is not shared with third parties. Transactional emails — confirmations, invoices and proofs — are not tracked.
