Dieses Dokument liegt auf Englisch und Bulgarisch vor
This policy explains what personal data we collect through milanogroup.eu, why we collect it, how long we keep it and what rights you have. It is written for Regulation (EU) 2016/679 and the Bulgarian Personal Data Protection Act.
1. Who processes your data
The controller is MILANO GROUP COMPANY EOOD, company number 130160944, registered office Sofia 1271, Nadezhda district, 31 Rozhen Blvd., Iliantsi trade centre, shop-warehouse No. 3240.
Contact for data protection matters: office@milanogroup.eu, telephone +359 887 278 782.
2. What data we collect
When you order
Name of the contact person, company name, company and VAT numbers, delivery and invoicing addresses, telephone, e-mail, the contents of the order, the payment method and the order history.
When you create an account
The data above, a user name and a password, stored only in irreversible form.
When you write to us
Name, e-mail, telephone if you gave one, and the content of your message.
Automatically, as you browse
Network address of the device, browser and device type, language, pages visited and time of the visit, and the source of the visit. This data is used in aggregate.
We do not collect health data. A prescription, if mentioned in an enquiry, is used only to fulfil that particular order and for nothing else.
We do not store card details. They are entered on the payment provider’s page and never reach us.
3. Why we process it and on what basis
| Purpose | Legal basis |
|---|---|
| Fulfilling an order, delivery, invoicing | performance of a contract |
| Maintaining a customer account | performance of a contract |
| Answering an enquiry | our legitimate interest in replying to an enquiry addressed to us |
| Accounting and tax obligations | legal obligation |
| Complaints and warranty claims | legal obligation and performance of a contract |
| Site security and prevention of abuse | our legitimate interest |
| Newsletter about new models and offers | your consent, which you may withdraw at any time |
4. Cookies
A cookie is a small record the site leaves in your browser. We use the following:
| Which | What for | How long |
|---|---|---|
| Technical | basket, sign-in, chosen language, cookie consent | from one session up to one year |
| Payment provider | payment security | set by the provider |
| reCAPTCHA | detecting automated form submissions | set by Google |
Technical cookies are necessary for the shop to work and cannot be switched off without the site ceasing to function. You can delete them in your browser settings.
5. Who we share data with
We share personal data only as far as the shop needs it to work:
| Recipient | What they receive |
|---|---|
| Hosting provider | storage of the site and the database |
| Stripe | payment data |
| The company’s warehouse system | order data for fulfilment |
| Courier | name, address and telephone for delivery |
| Google reCAPTCHA | technical data when a form is submitted |
| Accounting service | data appearing on invoices |
We do not sell or rent personal data.
6. Transfers outside the European Union
Some of the services we use are provided by companies outside the European Economic Area. In those cases the transfer takes place on the basis of an adequacy decision of the European Commission or of standard contractual clauses.
7. How long we keep data
| What | How long |
|---|---|
| Accounting documents and invoices | eleven years, as required by tax law |
| Order data other than accounting records | five years from fulfilment |
| Customer account | while the account exists and twelve months after the last sign-in |
| Correspondence about an enquiry | twelve months |
| Newsletter consent | until consent is withdrawn |
8. Your rights
You have the right to obtain access to your data, to have inaccurate data corrected, to erasure, to restriction of processing, to portability, and to object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Rights are exercised by a request to office@milanogroup.eu. We reply within one month. If the request is complex the period may be extended by a further two months, of which we will inform you.
9. Complaints
If you believe your rights have been infringed you may complain to the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, or to the courts.
10. Changes to this policy
This policy may be amended. The version in force is always at this address, with the date of the last change.