Privacy Policy

Table of Contents

Thank you for shopping at Ivan Aleksander.

The privacy and security of your personal information is extremely important to us. This Privacy Policy explains how and why we use your personal data, to make sure you can be confident and feel secure about giving us your information.

Please take a moment to familiarise yourself with it, since our services require the collection of personal data. In all events, we take extreme care in handling your personal information and we fully comply with the applicable EU and national law.

Definitions

“Personal Data” means any information relating to a natural person which is identified or can be identified directly or indirectly by an identification number or by one or more specific factors.

“Privacy Policy” means the present privacy policy of Ivan Aleksander OOD

“Processing of Personal Data” means any operation or set of operations which may be performed upon Personal Data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, rendering, alignment or combination, blocking, erasure or destruction.

“Ivan Aleksander” means Ivan Aleksander EOOD, a company duly incorporated under Bulgarian law, registered with the Commercial Register to the Registry Agency of the Republic of Bulgaria with Company No 207143216.

Why We Collect Personal Information

We use the data we collect to operate our business and to provide you with a range of products and services we offer. This includes using data to improve our products and to personalise your experience with us. We share your personal data with your consent, or as necessary, to complete any transaction or provide updates regarding the product(s) you’ve ordered.

How We Collect Personal Information

We collect your personal information, such as your name, your email address and your phone number, when you:

●  Make a purchase at www.IvanAleksander.com
 
●  Make a purchase at any market place where we have advertised our products
 
●  Visit one of our social media channels
 
●  Request a bespoke product
 
●  Make contact via email, phone, message or in person
 

What Personal Data We Collect

We may collect, store and use the following kinds of personal information:

●  Information about your browsing device and about your visits to and use of this website (including your IP address, geographical location, browser type, referral source, length of visit, entry and exit points and number of page views)
 
●  Information relating to any transactions carried out between you and us, on or in relation to this website, including information relating to any purchases you make of goods (including postal address and card details)
 
● Information that you provide to us for the purpose of subscribing to our email communications (including name, email address and telephone number)
 
● Information about how you interact with our website and our emails (including opens, clicks and preference information)
 
● Mobile Device Data such as your mobile device ID, model, and manufacturer, and information about the location of your device, if you access the Site from a mobile device.
 
● Any other information that you choose to share with us
 

How We Use Your Personal Information

We use the personal information you provide us with in the following ways:

● To maintain our customer relationship management systems for customer orders and supply chain management
 
● To sell our goods during the order process and to provide you with information of related services (this may include telephone call recording for quality, training and monitoring purposes, live chat on the website, fraud prevention at point of sale, network and information security on the website, and disclosure to third-party shipping companies
 
● To send you service messages relating to the status of your order(s) once complete
 
● For crime prevention and detection, and reporting of possible criminal acts or threats to the authorities
 
● To collect debts, deal with disputes and bring and defend legal claims against our company. This includes credit checks, involvement of legal advisors, etc.
 
● To send you relevant marketing communications that you opt-in to receive (you can tell us at any time that you no longer want to receive these communications)
 
● To personalise the user experience through associated data sharing and digital profiling by third parties, e.g. Google
 

When We Use Your Personal Information

We only use your personal information under certain circumstances. These are:

● Consent: When your consent is given for one or more specific purposes
 
● Contract: When you enter into a contract with us for a specific purpose
 
● Legal obligation: When we are required by law to do so
 
● Legitimate interest: Where we’ve identified this as a legitimate interest of ours or a third party; we consider that use of your personal information is necessary to achieve that Legal claim: To establish, exercise or defend a legal claim
 
● Prevention/detection of unlawful acts: This is where we must use personal information without consent so as not to prejudice preventing or detecting unlawful acts
 
● Public domain: You’ve deliberately put your sensitive personal information into the public domain.
 

Legitimate Interests

Our legitimate interests are:

● Customer relationship management
 
● Fraud prevention
 
● Direct marketing
 
● Internal administration of customer personal information within our company
 
● Network and information security
 
● Reporting possible criminal acts/threats to competent authorities.
 

Personal Information Collected Indirectly

We collect the following categories of personal information indirectly (e.g. from third parties):

● Confirmation of payment (from a payment processor)
 
● Confirmation of delivery (from a third-party shipping/courier company)
 
● Legal advice (from legal advisors)
 
● Report on a dispute
 

Links To Other Sites

Our service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third-party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Children’s Privacy

Our service does not address anyone under the age of 18 (“Children”).

We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us. If we discover that a child under 18 has provided us with Personal Information, we will delete such information from our servers immediately.

Email Marketing Policy

We will, with your consent, send you email communications with details of offers, promotions, new products and the latest trends. We won’t sell or rent your personal information and we will never share your information with companies outside of our own for inclusion in their marketing emails.

We send emails to both our customers and subscribers. You control what communications you receive via a preference centre which is linked to within those emails.

On occasion, where you have browsed a particular product or abandoned your basket mid-way through a purchase, we’ll use your consented cookie activity to send you remarketing emails. We will only send you remarketing emails with content that is relevant to you. You can unsubscribe to these emails at any time, using the unsubscribe link within any remarketing emails you receive. This is a separate unsubscribe link to our own marketing emails, so if you wish to be removed from both lists you must unsubscribe to both. Unsubscribes will be processed within one week.

You can unsubscribe from marketing emails at any time by using the unsubscribe link within any email you receive from us, or by emailing.

Please note that we are required via our purchase contracts to send you relevant and necessary updates regarding your order, which includes order confirmation emails, known as service emails. Due to the legality of these communications, you are not able to unsubscribe from digital order-related communications.

Who We Share Your Data With

We may share your information with the following:

● Payment processors (to process payments)
 
● A third-party shipping /courier company (for delivery)
 
● Legal advice (for legal claims)
 
● Google (we only use pseudonymised data for market research)
 
● Other recipients as permitted or required by applicable law
 
● Business Partners (to offer you certain products, services or promotions)
 
● Affiliates, in which case we will require those affiliates to honour this Privacy Policy Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
 
● Third-party advertisers (to serve advertisements when you visit the site, about goods and services of interest to you).
 

How Long We Store Data

Data provided on a contractual basis:

  1. Account data

Account data is associated with the data we collect for processing your online orders. In the absence of an order you still have the legal expectation to be permitted to use those services until you wish to and you are provided the functional opportunity at any time to contact us if you wish to have your account removed and your data erased. All account data is kept for 7 years.

  1. Online order data

All data related to the order of a product(s) shall be kept for until 5 years from the date of the specific order.

  1. Data relating to the collection and verification of accounting data and accounting compliance.

All accounting records and financial statements, including tax audit, audit and subsequent financial inspection documents, shall be kept for 10 years from 1st January of the reporting period.

Data provided by consent:

Your data on the blog of Ivan Aleksander EOOD and any social media channel of Aleksander EOOD is related to the comments you posted because they represent the exercise of your constitutional right to free expression in your chosen format and content. Therefore, no deadline is set after the expiration of which processing ceases, and instead you are allowed to remove the published content by exercising your rights as a data subject in the form and manner prescribed in this Policy.

When the content of a specific comment contains offensive words or phrases, discriminatory, disgraceful, libellous and/or damaging the reputation of Ivan Aleksander EOOD, the company has the right to legitimately remove the content of the comments and block the offender from posting further comments.

Data Security Measures

We are committed to implementing robust measures to ensure the safeguarding of customer data.

Below are the security measures we have in place:

  1. Secure Sockets Layer (SSL) Encryption: All data transmitted between your browser and our website is encrypted using SSL technology. This encryption ensures that your personal information, including payment details, remains confidential and protected during transmission.
  2. Secure Hosting and Data Centres: Our website is hosted on secure servers with a reputable hosting provider. Their data centres adhere to industry-leading security standards, implementing measures such as firewalls, access controls, and regular security audits to protect against unauthorized access.
  3. Internal measures: Firewalls, anti-tracking and encryption, regular back-ups.
  4. Access Controls: Access to customer data is restricted to authorised personnel only

Despite our stringent security measures, we acknowledge the possibility of unforeseen incidents. The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

By implementing these security measures, we strive to provide a secure and trustworthy environment for your online interactions with Ivan Aleksander. Our commitment to your privacy and data security is unwavering.

Your Rights Over Your Personal Data

  1. Right of access, including the right to copy the data under processing:

You have the right to request information about the personal data we hold on you at any time. You may contact us and, based on a written request and authentication of your identity, the data will be provided to you.

  1. Right to rectification:

You have the right to request rectification of your data if the information is incorrect, including the right to have incomplete personal data completed. You can do so through your account/profile or by writing to us, after duly authenticating your identity.

  1. Right to erasure (“Right to be forgotten”) in the following cases:
    1. The personal data are no longer necessary to the purposes for which they were collected or otherwise processed;
    2. Withdrawal of consent when processing is based on consent;
    3. Illegal data processing;
    4. Legal obligation to delete.

The right to be forgotten is not an absolute right and may not be granted in the cases provided for by the law or due to a lack of proper authentication of your identity.

  1. Right to restriction when:
    1. You object to processing based on Ivan Aleksander’s legitimate interest, the company shall restrict all processing of such data pending the verification of the legitimate interest;
    2. You have claimed that your data is incorrect, Ivan Aleksander must restrict all processing of such data pending the verification of the accuracy of the personal data;
    3. The processing is unlawful you can oppose the erasure of personal data and instead request the restriction of the use of your data;
    4. If Ivan Aleksander no longer needs the personal data but it is required by you to defend legal claims.

In the case of rectification, erasure or restriction of processing, we will inform any recipient to whom personal data have been disclosed, unless this is impossible or involves a disproportionate effort.

  1. The portability of machine-readable data, according to which we will:
    1. Provide the data directly to you;
    2. If requested by you and it is a technical possibility, the data is provided to another controller of your choice;
  1. Right to object to processing based on a legitimate interest:

You may object to the processing of your personal data based on the legitimate interest of Ivan Aleksander or a third party. We will not continue to process your personal data unless it is proven that there are compelling legal bases that have priority over your interests and rights or due to litigation and other procedural and extra-procedural actions.

  1. Right to object to direct marketing:

Our main mission is to make Ivan Aleksander products as accessible as possible and more popular both on the territory of Bulgaria and around the world. To do this, we send information to our customers about our offerings. Nevertheless, you have the right to object to receiving marketing communications, including profiling and analysis for direct marketing purposes.

  1. Right to complain with a supervisory authority in the Member State of habitual residence, place of work or place of suspected violation if you consider that the processing of your data is in breach of the provisions of Regulation (EC) 2016/679. On the territory of the Republic of Bulgaria, where the Ivan Aleksander EOOD is located, the supervisory authority is the Personal Data Protection Commission.

Withdrawal of Consent

You have a right to withdraw any consent you give us at any time. This will not affect the legality of our consent-based use before you withdraw consent.

To exercise your right to withdraw, please contact us. Please make it clear you want to exercise this right, for example by putting “Withdrawal of consent” in the subject line of the email. You will receive an answer to your request within one month of receipt of your written request.

Legal Contract Requirement

  1. It is a purchase contract requirement that you provide your contact details, the address to which your product should be delivered and other mandatory information within the order process.
  2. You understand that the information, falling under the notion of Personal Data, must be submitted to Ivan Aleksander EOOD correctly. The submission of wrongful information constitutes a reason for which Ivan Aleksander EOOD may terminate the contract. You may always contact us in case you would like to rectify the submitted information.
  3. This Privacy Policy is an integral part of Ivan Aleksander’s Terms and Conditions.
  4. We will disclose your Personal Information where required to do so by law or subpoena.

Automated Decision-making

We do not conduct automated decision-making in conjunction with creating a contract of sale. We do not use automated algorithms and/or profiling. All decisions about you will be made by humans.

Log Data

We collect information that your browser sends whenever you visit our Service (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics.

Cookies

For full details of the Cookies we use on our website, view our Cookie Policy.

Updates

To be compliant with changing regulatory requirements and privacy practices, we must examine and update this privacy policy routinely. Customers are reminded to note the effective date of this Privacy Policy and ensure they have the latest version.

This document was last updated on 1st July 2024.