The protection of personal data and the preservation of the personal information of our customers is a priority for the blinds factory KAMAX Ltd. For this reason, we process your personal data based on the applicable legislation, namely:
REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (better known as GDPR);
Personal Data Protection Act (PDPA);
Consumer Protection Act (CPA);
The Law on Electronic Documents and Electronic Certification Services (ZEDEUS);
and the Electronic Commerce Act (E-Commerce Act).

Who processes and is responsible for your personal data?

KAMAX OOD, UIC 110032086 (ADMINISTRATOR) is a commercial company registered in the Commercial Register at the Registry Agency, with its registered office and management address: Lovech district, Teteven municipality, Teteven town 5700, 70 Beli Vit Str.,
tel. 0700 10 121 , e-mail: info@kamax.bg , website: https://www.kamax.bg

KAMAX Ltd. is a personal data controller within the meaning of Article 4, paragraph 7 of Regulation 2016/679.
You can contact us at the above address, phone number and email address.

Types of data we process

When you purchase our product and/or request a repair, including after-warranty services, as well as when you register a user profile in our online store, we process the following personal data:
- three names;
- telephone number;
- delivery address, in cases where we send one;
- address for repair or service;
- e-mail;
- Personal Identification Number (PIN);
- bank account;
- IP address.

Grounds for processing

KAMAX OOD processes your personal data on the basis of Art. 6, paragraph 1, point (b); point (c) and point (e) of Regulation 2016/679, namely:
- Art. 6, paragraph 1, point "b" of Regulation 2016/679 - processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract;
- Art. 6, paragraph 1, point "c" of Regulation 2016/679 - processing is necessary for compliance with a legal obligation to which the ADMINISTRATOR is subject, such as obligations for accounting of commercial activities, etc.;
- Art. 6, paragraph 1, point "f" of Regulation 2016/679 - processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Purposes of processing

For the purpose of concluding or executing a contract for the supply of goods offered by the ADMINISTRATOR:
- Customer identification when ordering;
- Identification of the recipient of the shipment/goods;
- Delivery of an order, installation or warranty/post-warranty maintenance;
- Updating your personal data;
- Handling and responding to customer complaints, claims, inquiries and applications under Articles 15-22 of Regulation 2016/679/Complaints;
- Payment of amounts for accepted orders;
- Processing by data processors - assignment, reporting, acceptance, payment.

In fulfillment of our legal obligations, we process your data for the following purposes:
- Issuing invoices, preparing a detailed report, when this is provided for in the client's individual contract;
- For financial and accounting processing of the contract with the client and for tax and social security control by the relevant competent authorities.

For the purposes of the Administrator's legitimate interest:
- We send advertising and informational messages to our clients;
- We offer our loyal customers discounts on subsequent purchases in accordance with the Administrator's current commercial policy.
At any time, you may object to the processing carried out on the basis of Art. 6, § 1, b. "f" of Regulation 2016/679 for the purposes of the Administrator's legitimate interests described in this b. "C", in accordance with the terms and conditions set out in Section XI of this Privacy Policy.

Minors and minors

KAMAX Ltd. does not provide services to persons under the age of 18.
In the event that KAMAX OOD receives information that it has collected personal data from a person under the age of 18, the same will be immediately deleted, unless the law obliges KAMAX OOD to store such data.
Please contact us if you believe that we have mistakenly or unknowingly collected information from a person under the age of 18 at the following contacts:
tel. 0700 10 121
e-mail: info@kamax.bg

Data collection method

KAMAX Ltd. processes only data that is provided by our clients voluntarily. This means that each client is responsible for not providing data to third parties in violation of their rights to personal data protection. KAMAX Ltd. does not have access to these individuals and has no practical ability to control whether our clients provide data to third parties with their knowledge and consent, given in accordance with legal requirements.
Therefore, each data subject bears full personal responsibility if they provide us with data to a third party without their knowledge or without obtaining their consent, in compliance with the requirements of applicable personal data protection legislation, including with regard to the names, telephone numbers and addresses of the recipients of the shipments provided to us by a client, including data in a user profile. Each data subject bears full personal responsibility if they provide us with intentionally false data, including intentionally misleading us that they are over 18 years old.

Where we store your data

The data we collect from you is stored within the European Economic Area ("EEA"), in compliance with national and European legislation and in particular REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (better known as GDPR).

Who has access to your data

KAMAX Ltd. does not provide your personal data to third parties without legal or contractual basis, nor does it distribute data to third countries and international organizations outside the borders of the EU and the EEA.
The transfer of your personal data for processing, including to employees of KAMAX Ltd., is carried out solely for the purpose of providing the service/delivery you have selected, in order to fulfill our legal obligations, namely:
- Transport/courier companies for the purpose of fulfilling orders;
- The banks servicing the payments made by you;
- Persons providing consulting services in various fields - legal, accounting, auditing, including forced collection of receivables, etc.;
- State administrative bodies - NRA, etc., when applicable in cases provided for by law.

Processing and storage period. Data destruction

KAMAX Ltd. stores the minimum necessary personal data for periods no longer than necessary for the purposes for which the personal data is processed, or for periods explicitly defined by law or directly related to the fulfillment of our legal obligation.
The destruction of personal data is carried out in compliance with a prescribed procedure for this, according to the internal documents of KAMAX Ltd. In case you wish to receive more information regarding whether your personal data has been destroyed, you can exercise your rights, described in detail in the legal provisions.

Security measures

KAMAX Ltd. has taken a wide range of technical and organizational measures to protect your personal data against loss or other forms of unlawful processing, in accordance with Article 32 of Regulation 2016/679.

Personal data is only accessible to those individuals who need access to perform their job in connection with the provision of our services. These individuals are trained and authorized accordingly.

What are your rights?

1. Right of access:
At any time, you have the right to request information about your personal data that we store, the basis, purposes, processing and storage periods, whether it has been provided to a personal data processor, whether it has been destroyed, etc.

2. Right to rectification:
You have the right to request correction of your personal data if it is incorrect, including completion of incomplete personal data.

3. Right to erasure (right to be forgotten):
You have the right to delete all personal data processed by KAMAX OOD at any time, except when the processing is necessary for at least one of the following purposes, namely:
a) for the exercise of the right to freedom of expression and the right to information;
b) for compliance with a legal obligation that requires processing, provided for in Union law or the law of the Republic of Bulgaria;
(c) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of Regulation 2016/679, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the purposes of such processing or the establishment, exercise or defence of legal claims.

4. Right to restriction
You have the right to request KAMAX OOD to restrict the processing of your personal data under the following circumstances:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful, but you do not want the personal data to be deleted, but instead restrict their use;
c) the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims;
d) You have objected to the processing pursuant to Article 21(1) or (2) of Regulation 2016/679, pending verification whether the legitimate grounds of the controller override your interests.

5. Right to portability:
Where KAMAX Ltd. processes your personal data in an automated manner on the basis of a contract, you have the right to receive a copy of your data in a structured, commonly used and machine-readable format, transferred to you or to another party. This includes only the personal data you have provided to us.

6. Right to object to processing based on legitimate interest:
You have the right to object to the processing of your personal data based on the legitimate interest of KAMAX Ltd. We will not continue to process your personal data unless it is proven that there are compelling legal grounds for doing so that override your interests and rights or due to legal claims.

Exercising your rights

KAMAX Ltd. takes the protection of personal data very seriously, which is why we have a customer service team that handles your requests in connection with the above rights. You can always contact them at the following contacts:
tel. 0700 10 121
e-mail: info@kamax.bg
You should send your requests in writing in free text to the ADMINISTRATOR or use our Application form under Art. 15-22 of Regulation 2016/679.
Please note that where your requests are manifestly unfounded or excessive, in particular because of their repetitive nature, we may: impose a fee taking into account the administrative costs of providing the information or communication, or taking the requested action, or refuse to act on the request.
We will endeavour to honour your request within 30 days of receipt of your application. If necessary, this period may be extended by a further two months, taking into account the complexity and number of requests.

Reports of irregularities and complaints

If you believe that we have violated your rights in relation to your personal data, as well as that there is a risk of a breach of the security of your personal data, you can report it to the following contacts:
tel. 0700 10 121
e-mail: info@kamax.bg
Exercising the above rights does not deprive you of the right to complain.
You can submit one to the supervisory authority of Bulgaria - the Commission for Personal Data Protection. More information can be found at: www.cpdp.bg.