Защита на личните данни

The company “ZEN WORKS” Ltdregistered in the Bulgarian Commercial Register at the Registry Agency with UIC: 207543132, having its seat and registered office in the Republic of Bulgaria, Sofia, Vitosha District (hereinafter referred to as “Fastroofbg,” “we,” “us,” or “our company”), is the data controller of the personal data of customers and visitors to its stores, which are processed under this Policy.

Data Collection and Processing

For the operation of its physical stores and the provision of its services, Fastroofbg processes personal data obtained mainly from the data subjects themselves, namely the users of the website. 

All such data are collected for lawful purposes and processed in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR) and national legislation. Before any processing takes place, data subjects are fully and transparently informed of the purposes of the processing, third parties that receive the data, their rights as data subjects, technical and organizational data protection measures, contact methods for our company, etc.

This General Data Protection Policy aims to inform you of the general principles we follow regarding the management of your personal data in cases where a specific data processing notice refers to this text, or in cases where we receive your data without you yet being a customer of our products or services.

You are required to provide your personal data only if you have a contractual or legal obligation to do so. If you do not provide your data, we may not be able to conclude or fulfill a contract with you or pursue any of the processing purposes outlined in this General Data Protection Policy or a specific data processing notice.

Legal Basis and Purposes of Processing

The legal basis for the processing and the purposes for processing your data, which are necessary for the provision of our services, will be communicated to you before any service is delivered.

If you contact us with an inquiry about our products or services before making a purchase or receiving a service, some of your data is necessary so that we can respond, as it is in our legitimate interest to facilitate customers in completing their purchase.

If you contact us after a purchase or service, your data will be processed to review our contractual obligations for the purpose of performing the specific transaction (Article 6(1)(b) GDPR).

For our legitimate interests (Article 6(1)(f) GDPR), we are also entitled to send you direct marketing/advertising information via phone, mail, email, SMS, or other suitable communication methods, using your lawfully obtained contact data from a transaction for the provision of goods or services (according to Directive 2002/58/EC on privacy and electronic communications, and applicable national legislation), unless you object to such communication. This information may include our products, offers, promotional activities, or marketing competitions organized by or in cooperation with other companies (without sharing your data with them). We may also use OTT services such as Viber or WhatsApp to communicate efficiently and reduce communication costs. For our legitimate interests (Article 6(1)(f) GDPR), we may also contact you after a sale to evaluate your experience with our services and those of our partners.

Some personal data is processed to comply with our legal obligations (Article 6(1)(c) GDPR), e.g., when tax authorities require the data for audits or in the case of ongoing regulatory, administrative, or legal proceedings.

Data Information and Updates

Your personal data should be up to date to ensure it remains yours during processing. We will correct it upon your request if it is inaccurate or outdated.

As a data controller, our company strives to keep customer data accurate and, when necessary, up to date, taking all reasonable measures to promptly delete or correct inaccurate data in light of the purposes for which it is processed.

Types of Data and Recipients

Depending on the service(s) you received, you were informed about the personal data collected and who, apart from our company, may be recipients. 

We may also collect your data in other ways, such as:

– Identification and contact data: your name, postal address, email, mobile or landline number.

– Communication-related data: information you share with us when seeking information, returning products, submitting complaints, etc.

– Any other data necessary for the relevant processing purpose.

We process this data mainly within Fastroofbg (through our employees and legal representatives). Some of your data may also be shared with authorities, transport, installation and/or security service providers, lawyers, auditors, consultants, and other service providers or partners of Fastroofbg (especially in the case of complaints about defective products).

 Your data and comments collected through contact forms on www.Fastroofbg.com, product/service reviews, emails, phone, or social media (e.g., Facebook, Instagram) related to customer service are retained for 2 years from the date of contact and then anonymized for statistical purposes.

Data Subject Rights

All individuals, as data subjects, may exercise their rights at any time as provided in the General Data Protection Regulation (EU) 2016/679 (particularly Articles 12–23) and the applicable national legislation. These rights include:

1. You have the right to obtain confirmation as to whether or not personal data concerning you is being processed. Where this is the case, you have the right to access the data, relevant information about the processing, and to receive a copy of your personal data.

2. Right to Restrict Processing You may request that we restrict the processing of your personal data under certain circumstances.

3. Right to Rectification and Erasure (Right to Be Forgotten). You may request the correction of inaccurate or incomplete personal data and/or the erasure of your data where certain conditions are met. 

4. Right to Object. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on legitimate interest. In such cases, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. If the objection relates to processing for direct marketing purposes, we are obliged to cease processing without exception. You may also object to processing for scientific, historical, or statistical purposes unless the processing is necessary for public interest

5. Right to Data Portability If we process your personal data based on your consent or a contract, you may request to receive your personal data in a structured, commonly used, and machine-readable format and/or request its transmission to another data controller.

6. Right to Withdraw Consent Where processing is based on your consent, you may withdraw it at any time. The withdrawal will not affect the lawfulness of processing before the withdrawal.

These rights may be exercised in accordance with the limitations set by the GDPR and applicable national legislation (such as the Bulgarian Personal Data Protection Act), by submitting a request to: office@fastroofbg.com. If you request access to your personal data, we may need some time to collect it. Copies of your data are provided free of charge, unless the requests are manifestly unfounded or excessive.

If you use any of the above rights, Fastroofbg will take all necessary measures to fulfill your request within one (1) month of its valid submission. If additional time is needed, you will be duly notified. To ensure your rights are validly exercised, you may be required to provide proof of identity so we can confirm the data belongs to you.

You may also opt out of receiving direct marketing communications (via email, SMS, or Viber) at any time by following the unsubscribe link in our emails, calling us at +359 889 659 308, or emailing us at the address above.

Data Retention Period

Your personal data is generally stored for a period of six (6) months, unless otherwise specified in relation to a particular service or processing activity. You may always request the deletion of your data by exercising your rights above. We retain your contact data for marketing communication purposes until you opt out of all or specific communication channels.

However, certain transaction-related data may be retained for legal compliance, proof of lawful processing, or to establish or defend legal claims (e.g., tax-related obligations).

Special Categories of Data

The services we provide and our communication with you do not involve the collection or sharing of special categories of data (such as health or political opinions).

Transparency Requirement

For any information related to your personal data and its processing or protection, you may contact our Data Protection Officer (DPO) at: office@fastroofbg.com. If you are dissatisfied with our response or how your data is processed, you have the right to file a complaint with the competent supervisory authority: Commission for Personal Data Protection Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. Email: kzld@cpdp.bg Website: www.cpdp.bg

Technical and Organizational Measures

Fastroofbg, any data processors it engages, and third parties acting under its authority, are required to implement appropriate technical and organizational measures to ensure the best possible protection of your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, and against unlawful processing in general (including remote access). Measures are in place to ensure data availability and recovery as needed.

These measures are chosen based on the nature and sensitivity of the data, Fastroofbg’s technical capabilities, current technological standards, implementation costs, and the context and purpose of the processing, while also ensuring regular testing and assessment of their effectiveness.

All parties involved are contractually bound to maintain confidentiality and must not disclose or allow third-party access to your data unless required by law or you have been previously informed.

Fastroofbg declares that your personal data will not be used for purposes other than those described in this policy unless you have been duly informed and, where applicable, have given your explicit consent.