PRIVACY AND DATA PROTECTION POLICY

STORE.AUTO-KART.COM

Please read this privacy and data protection policy before accessing the Website and its services. If you do not agree to our privacy policy, you should not visit the Website or use our services.

This document discloses the Privacy and Data Protection Policy ("Policy") that is collected from users of the website with the web address (URL) store.auto-kart.com (the "Website") in connection with your use of the Website, its services, content and resources. The collection, processing and storage of personal data from users of the Website is carried out by AUTO-KART Racing Ltd as the data controller ("Controller", "We").

Effective from: 24.04.2019.

1. 1.

AUTO-CART Racing Ltd. is a commercial company registered under the legislation of the Republic of Bulgaria, with UIC 203999843, with its registered office and registered address in the city of Sofia, gk. Ovcha Kupel 1, bl. 418, in. 266, p.k. 1632

2. Validity and effect

This Privacy Policy ("Policy") sets out what happens to your personal data that you provide to us through the Website.

This Policy forms an integral part of our Website Terms and Conditions of Use ("TOU"), available here. All definitions given in the T&Cs are also applicable in this Policy.

Accessing, viewing and using in any way the services and resources on the Website requires confirmation that you have read, understand the meaning and significance of, and agree to be bound by, this Policy. Before accessing the Website services, you should expressly consent to us collecting, receiving, recording, organizing, collating, updating, modifying, retrieving and otherwise lawfully processing, using and sharing your personal data in accordance with this Policy. You can give your consent to the above actions by clicking on the "I confirm that I have read, understand and unconditionally accept the Terms of Use and Privacy Policy" option when confirming an order.

Use of the Website, its services and resources requires agreement to accept this Policy. Access to this Policy is permanently active at the following address: https://store.auto-kart.com/bg/content/2-politika-za-lichni-danni

The Policy published herein is applicable and valid only for users of the Administrator's services accessible through the Website. This Policy does not apply to other websites, social networks, platforms or companies that the Administrator does not control but to which the services and resources provided through the Website link or are linked, directly or indirectly. You should be aware that all such websites, social networks, platforms or companies have their own privacy policies and that we are not responsible for them. We ask that you review the privacy policies of other websites, social networks, platforms or companies before providing personal information through them.

The collection, processing and storage of Website users' personal data is carried out in accordance with the requirements of the European General Data Protection Regulation EU 2016/679 (GDPR) and the applicable Bulgarian legislation in force.

We reserve the right to make amendments to this Policy at any time. New versions will be posted on the Website. If you disagree with any new revisions to this Policy, you should notify us in writing, after which your Profile will be deleted.

3. Definitions

"Personal Data" means any data that contains identifying information (e.g. name, address, telephone, email, etc.). We require your explicit, informed and freely given consent before we receive and process your Personal Data.

"Processing" means any operation or set of operations which is performed upon personal data or a set of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

4. What data do we collect about you?

You have the right to access the Website without providing your personal data and registration. Access to the Website services requires the provision of personal data, for example when placing an order.

Personal data provided by you:

When you register to use the Website, you will be asked for information that is solely necessary for your use of the Website's services and resources. The collection of this data is carried out in accordance with the strictest legal security requirements.

Use of the Website Services requires that you are at least 18 years of age. By creating a user profile, you confirm that you are an adult with the capacity to enter into contracts and assume obligations.

Successful registration requires the completion of certain mandatory fields marked as required and the creation of a unique password.

When creating an account or placing an order, you should provide your:

- first and last name;

- address;

- postal code;

- email address;

- phone;

- invoice details (for legal entities).

The completion of optional fields upon registration or in the process of using the Website services is entirely at the discretion of Users.

The User is responsible for the contact information and other data provided that is false, fraudulent or refers to third parties (in all cases where the third parties have not consented to this), as well as for any illegal or malicious use of personal data and information.

We do not collect personal data that:

- reveal racial or ethnic origin;

- reveal political, religious or philosophical beliefs;

- disclose membership of political parties or organisations, associations with religious, philosophical, political or trade union aims;

- relate to health, sex life or the human genome;

- are provided by users under the age of 16 without the consent of their parents or legal representatives. The Administrator will delete any information submitted by or relating to users known to be under the age of 16 who use the Website, Services and Content.

Data we collect automatically:

Whenever you visit the Website, we automatically collect the following data:

Information about your Device:

- We collect data related to your device (such as device model, version of operating system and browser you are using, and IP address).

Location Information:

- When you use the Website Services, we may collect and process information regarding your actual location (geo-location). We use a variety of means to determine location, including IP address, GPS, Wi-Fi access points and cell towers.

Information we collect when you use the Website Services:

- Information about web pages that link to the Website and those that the Website links to, date and time of visit, length of visit, Website loading speed, and other data in connection with your interaction with the Website.

Cookies:

- The Website uses cookies. Cookies are small text files that are stored on your computer or mobile device when you visit a website. They allow the Website to remember your actions and preferences (such as username, language, font size and other display settings) for a period of time so that you do not have to enter them each time you visit the Website or move from one page to another.

- By using cookies, the Web server can save, for example, the preferences and settings on the User's computer, mobile phone or other device, which data is automatically restored the next time the User visits. Cookies are used, among other means, to improve the user experience, such as not repeating the login process on a subsequent visit.

- We use the following types of cookies:

o Session cookies - allow the Website to associate User actions during the browser session. They can be used for a variety of purposes, such as to remember user preferences while browsing the Website. They could also be used for security purposes when the User accesses internet banking or to facilitate the use of web-based mail. Session cookies expire after the browser session and are not stored longer term.

o Persistent cookies - stored on the User's device between browser sessions, which allow the User's preferences or actions across the Website (and in some cases across different sites) to be saved. Persistent cookies can be used for a variety of purposes, including User preferences and choices when using a Website or to target advertising.

o First & Third Party cookies - First party cookies are those that are placed on the Website that is selected for the User to visit. Some of the content on the Website may be from a third party provider (e.g. video or advertising). These third parties may also set cookies through the Website. These are third party cookies. Third party providers are responsible for compliance with applicable law and their own cookie policy.

- We may allow third parties, such as advertising or analytics providers, to collect information using these technologies directly from our Website. The data they collect is subject to the applicable privacy policies of those third parties.

- Each User has the option to accept or decline cookies by selecting one of the following buttons when initially accessing the Website.

- Users also always have the option to prevent the use of cookies by changing their browser options. To block cookies in a specific browser, learn more here:

o Cookie settings in Google Chrome

o Cookie settings in Firefox

o Cookie settings in Internet Explorer

o Cookie settings in Safari

- Refusal of cookies by the User may result in limited functionality or inability to use the Website services.

5. What are the purposes of processing your personal data?

The personal data we collect is necessary for the provision of quality services and to provide you with timely technical and other assistance as needed.

We use the personal data you provide for the following purposes:

- For the proper functioning of all services on the Website, including but not limited to: to create a registration on the Website, to place orders through the Website;

- To ensure secure and reliable use of the services and content by verifying your rights to access the services and resources you have requested;

- To continually improve the quality of our services and content by receiving suggestions, advice and ideas sent by you to expand existing services and introduce new services through our Website;

- To send you news, e-newsletters, offers, interesting and useful information and other communications. If you do not wish to receive such communications from us or other partner companies, you should let us know when you register or order, or alternatively at any time via the contact form or by email to: privacy@auto-kart.com

- To provide you with specialised information on how to fully use and access promotions, campaigns, games and other resources on our website, as well as instructions, directions and other useful content through the data we receive about your preferences;

- Invite you to participate in surveys and user opinion polls about the quality of and satisfaction with content and other resources on our Website;

- For other purposes permitted by law in connection with the quality performance of all current and future services and resources on the Website.

If the purposes change, we will inform you and seek your explicit consent to process your personal data in accordance with the new purposes.

5. Who has access to your personal data? 

Your personal data will not be transferred to third parties unless:

- You provide us with your explicit, informed and freely given consent;

- the third parties in question provide us with support under contract for the purpose of providing our products or services;

- this is required by law or by an act of a public authority;

- there is a reasonable need to protect the rights, property or safety of users of the Website or other protectable public interest;

- it is required in connection with the sale of a business, our company or its assets that are subject to confidentiality.

Our employees and partners have access to your personal data for the purposes of maintaining the Website and Services, but they are bound by a duty of confidentiality with respect to the data they access in connection with carrying out that activity.

Our employees and partners are duly informed of the importance of their duty of confidentiality and are responsible for fulfilling that duty.

We may share non-personally identifiable data with our commercial partners (media, marketing agencies and other business partners who have agreed to comply with this Policy) for the purpose of providing you with information about products and services, as well as promotions and offers, with your consent.

For any other purposes not specifically mentioned in this policy, we will ask for your explicit consent, identifying our partners and the purposes for the transfer and sharing of data.

We may be required to disclose a User's identity by a court order or governmental authority, particularly in the event of an investigation into violations of third party rights or the unlawful acquisition of personal data. In such cases, we are not obliged to notify the User concerned that his or her personal data will be disclosed to a public authority.

6. Your rights

Under applicable law, you have the legally recognized right to object to the processing of your personal data at any time without owing anything by sending an explicit request to us via the contact form or at the following email address: privacy@auto-kart.com

You have the right to be informed before your personal data is provided for the first time to third parties for direct marketing purposes, or when it is used on behalf of third parties. You have the right to object to this transfer or use without owing anything.

You have the right to obtain access to the personal data we hold about you in a structured, commonly used and machine-readable format by sending us an explicit request via the contact form or at the following email address: privacy@auto-kart.com

You have the right to request the transfer of your personal data to another controller by sending an explicit request to us via the contact form or at the following email address: privacy@auto-kart.com

In the event that any of the information we hold about you is incorrect or inaccurate, you have the right to correct it by amending the information contained in your profile by sending an explicit request to us via the contact form or at the following email address: privacy@auto-kart.com

You have the right to contact us to request the complete deletion of your personal data by sending an explicit request to us via the contact form or at the following email address: privacy@auto-kart.com

You also have the right to request a restriction on the processing of your personal data in relation to individual collection, processing and sharing activities by sending an explicit request to us via the contact form or at the following email address: privacy@auto-kart.com

You have the right to request that third parties who have access to your data be notified of the restriction, erasure or prohibition of processing of your data, in order for those third parties to delete any links, copies or replicas of your personal data.

In addition, you have the right to lodge a complaint with the competent authority in Bulgaria - the Commission for Personal Data Protection (CPDP), with the address of. 1592 Sofia Blvd. "Prof. 2, or online here.

7. Where do we store your personal data and for how long?

Your personal data that we collect is stored on servers located on the territory of the Republic of Bulgaria.

We store your personal data for the period that you are a registered active user of the Website, or until the Services and/or the Website are discontinued.

In the event that you wish to delete your Account on the Website, the personal data held about you will be deleted without undue delay.

By way of exception, the further retention of personal data is only permitted by law where it is necessary for the exercise of the right to freedom of expression and the right to information, for compliance with a legal obligation, for the performance of a task in the public interest or in the performance of official functions assigned to us in our capacity as Controller, for reasons of public interest in the field of public health, for archiving purposes in the public interest,for scientific or historical research purposes, or for statistical purposes.

8. Technological and organisational security measures for processing. Risks

Our aim is to ensure the quality and integrity of the data provided to us by users of the Website. To this end, adequate technological and organisational measures have been taken to contribute to the protection, accuracy, timeliness and completeness of the data.

All information you provide to us is stored on secure servers. We implement the appropriate technological and organisational measures necessary to protect your personal data and the appropriate level of protection to ensure the confidentiality and integrity of the data and prevent the destruction, loss, unauthorised alteration or unauthorised disclosure of personal data.

In the event that we have provided you with a code/password to access the Website, you acknowledge and agree that you are responsible for the protection and confidentiality of such code/password. Under no circumstances will we ask you to provide these code/passwords to any other person.

Regardless of the measures taken to protect your data, you should be informed that the transmission of data over the Internet or other open network is never completely secure and there is a risk that unauthorised third parties may access and use your data.

9. Contact details

For further information, complaints or to exercise your rights, you can contact us at:

- Address. For further information or to request your rights, please contact us at the following address: Ovcha kupel 1, bl. 418, at. 5, app. 266, Sofia 1632;

- Phone number: +359878722464

- email: sofia@auto-kart.com;

- Contact form: https://store.auto-kart.com/bg/contact-us

This Policy is effective from 24.04.2019 and complies with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC