Privacy Policy

The website and online store “AmonRa Energy AD” (www.amonraenergy.eu) processes personal data of visitors and registered users for the purposes of selling and delivering products offered by www.amonraenergy.eu, for related activities, and for online advertising related to the offered products.

This information aims to inform you about all aspects of the processing of your personal data by the Administrator and the rights you have in connection with this processing.

Information about the “Administrator” of personal data – the company that processes your data:

Name: AmonRa Energy AD

EIK/BULSTAT: 206304834

Registered office and management address: Sofia, 1220, 1 Lokomotiv Str.

Correspondence address: Sofia, 1220, 1 Lokomotiv Str.

Phone: 0700 16 886; Email: [email protected];

Website: www.amonraenergy.eu

Information about the competent supervisory authority for personal data protection:

Name: Commission for Personal Data Protection

Registered office and management address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Correspondence address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Phone: 02 915 3 519

Email: [email protected], [email protected]

Website: https://www.cpdp.bg/

Types of personal data we process and the basis for their processing

I. We process the following categories of data on a contractual basis:

Data for your profile on the online store www.amonraenergy.eu, created for you upon entering into an informal contract with the MERCHANT by accepting the Terms and Conditions for the use of the website and online store www.amonraenergy.eu

First and last name

Email

Contact details: Phone and Fax

Address (city, address, region, postal code, country)

Password

Data for an online order placed through the online store www.amonraenergy.eu, made by you upon entering into an informal distance contract with the Administrator under the Terms and Conditions:

First and last name of the person for delivery

Delivery address – country, city, region, postal code, address

Delivery phone number

Invoice details – names, phone, city, country, postal code, address

Delivery method

Payment method

Order number

Payment amount

Payment status

Delivery status

II. We process the following data based on your consent, expressed through a specific action – independently entering optional data and/or freely selecting specific options:

Data for your profile on the online store www.amonraenergy.eu:

First and last name

Email

Contact phone and Fax

Address (city, address, region, postal code, country)

Password

Contact details and sent messages or comments provided when filling out a contact form on the online store www.amonraenergy.eu, sending an email to us, conventional mail, telegram, fax, phone call, SMS, posting a comment on the site, using online chat, or other forms of communication and/or expression:

First name, last name, or pseudonym (fictitious name)

Email address

Phone number

Fax number

Address

Content of the comment/message

The various contact forms require different data from those listed above.

Data for an online order through the online store www.amonraenergy.eu:

Delivery address – country, city, postal code, address

Delivery phone number

Invoice details – names, phone, city, country, postal code, address

Delivery method

Payment method

Order number

Payment amount

Payment status and history

Delivery status and history

Order history

You can withdraw any of the consents provided above by sending a notification to [email protected]. Upon withdrawal of consent, the processing of the respective type of personal data for the specified purposes will cease. The withdrawal of consent does not affect the lawfulness of processing based on the consent given prior to its withdrawal.

III. We process the following data on a legal basis, in accordance with local and EU legislation:

Data for your profile on www.amonraenergy.eu:

First and last name

Email

Contact phone and Fax

Address (city, address, region, postal code, country)

Password

Data for an online order through the online store www.amonraenergy.eu:

Delivery address – country, city, postal code, address

Delivery phone number

Invoice details – names, phone, city, country, postal code, address

Delivery method

Payment method

Order number

Payment amount

Payment status and history

Delivery status and history

Order history

IV. We process the following data based on legitimate interest:

Data for your profile on the online store www.amonraenergy.eu

First and last name

Email

Contact phone and Fax

Address (city, address, region, postal code, country)

Password

Data for an online order through the online store www.amonraenergy.eu:

Delivery address – country, city, postal code, address

Delivery phone number

Invoice details – names, phone, city, country, postal code, address

Delivery method

Payment method

Order number

Payment amount

Payment status and history

Delivery status and history

Order history

V. Purposes of personal data processing

Data for your profile on the online store www.amonraenergy.eu is processed for the following purposes:

  • Fulfilling the Administrator’s accountability obligation by recording legally significant identification data in electronic logs – technical logs
  • Delivery of ordered products
  • Providing support for technical issues, informing customers about their orders or complaints, tracking deliveries, payments, etc.
  • Verification by sending an email to ensure the security of access to your profile data and during password changes
  • Authentication upon logging into your profile
  • Sending messages via email and/or push notifications and/or online chat for direct marketing and advertising purposes with your explicit consent
  • Compliance with legal provisions, court decisions, lawful orders, and decisions of authorities and supervisory bodies. This includes using your personal data to collect and verify accounting data and comply with accounting reporting rules

Data for an online order through the online store www.amonraenergy.eu is processed for the following purposes:

  • Delivery of ordered products
  • Providing support for technical issues, informing customers about their orders or complaints, tracking deliveries, payments, etc.
  • Preventing and investigating abuses in online orders and related deliveries, as well as losses and fraud
  • Compliance with legal provisions, court decisions, lawful orders, and decisions of authorities and supervisory bodies. This includes using your personal data to collect and verify accounting data and comply with accounting reporting rules
  • Analyzing statistical data obtained after anonymizing your data
  • The contact details and sent inquiries, messages, or published comments are processed for the purposes of:
  • Identifying you as the sender/author of a message or published comment
  • Communicating with you

VI. Third parties with access to personal data in connection with their activities and services provided jointly with www.amonraenergy.eu

We use the following providers of hosting, cloud services, and servers:

We use the services of the following providers and courier companies:

State authorities and institutions in connection with inspections carried out by them in accordance with legal requirements and restrictions.

VII. Data retention periods:

The duration of personal data retention is determined by the respective retention period (e.g., commercial and tax periods). After this period expires, the relevant data will be deleted, provided it is no longer necessary for the performance or initiation of the contract and/or there are no longer legitimate interests on our part for further retention.

Data provided on a contractual basis:

Profile data – until 5 years have passed from the date of your last online order, or in the absence of an order – until the profile is deleted via the online store’s functionalities or until 5 years have passed from the date of your last login, whichever comes first. Profile data is also linked to data determining online orders, which determines the application of the retention period related to them. In the absence of an order, based on the informal contract, there is a legal expectation for the use of the profile as a user. If you wish to delete your profile before the deadline, we provide you with the functionality to do so at any time.

Online order data – until 5 years have passed from the date of the specific order. The period is determined based on the limitation period for claims.

Data related to the collection and verification of accounting data and compliance with accounting reporting – accounting records and financial statements, including documents for tax control, audit, and subsequent financial inspections, are stored for 10 years, starting from January 1 of the reporting period following the reporting period to which they relate; all other accounting information carriers – three years, starting from January 1 of the reporting period following the reporting period to which they relate.

Data provided based on consent – until its withdrawal, in the manner in which it was provided, including through the online store’s functionalities or by deletion, and with regard to the online store – until 5 years have passed from the date of your last login or last order, whichever comes first.

Regarding your data related to comments posted by you on the site (expressed opinions or comments on articles or products), as they constitute the exercise of your constitutional right to free expression in your chosen format and content, no final deadline is set after which their processing ceases. Instead, you are provided with the option to remove the posted content by exercising your rights as a data subject in the manner prescribed in this Policy. If the content of a specific comment contains offensive words or phrases, defamatory statements, or statements that damage the reputation of the Administrator or third parties, the Administrator has the right, based on its own or third parties’ legitimate interests, to remove the comment’s content from its sites.

After the specified period expires, the data is deleted and cannot be recovered or used further. The data is not deleted but continues to be processed solely for the purposes of protecting our legitimate rights and interests or fulfilling our legal obligations, if, at the date of the period’s expiration, there is an ongoing judicial, administrative, or pre-trial proceeding, or during an ongoing investigation regarding abuses, received complaints, or potential violations – until their completion.

VIII. Your rights regarding your personal data

Right of access:

You have the right to request and receive confirmation from the Administrator whether personal data related to you is being processed. You can view the data we process about you in your profile at any time if you are a registered user.

You can contact us at [email protected] and request information about your data that we store and information regarding the collection, processing, and storage of your personal data. Upon written request and verification of your identity, the data will be provided to you.

Providing access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of repetitive or excessive requests.

Right to rectify inaccurate personal data

You have the right to request the correction of your personal data if it is incorrect, including the completion of incomplete personal data. You can do this through your profile or by submitting a written request to us, after duly verifying your identity.

Right to erasure in the following cases:

You have the right to request the erasure of some or all personal data related to you, and the Administrator is obliged to erase it without undue delay when one of the following grounds applies:

  • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed
  • You withdraw your consent on which the processing is based, and there is no other legal ground for the processing
  • You object to the processing of your personal data, including for direct marketing purposes, and there are no overriding legitimate grounds for the processing
  • The personal data has been processed unlawfully
  • The personal data must be erased to comply with a legal obligation under EU law or the law of a Member State applicable to the Administrator
  • The personal data was collected in connection with the offering of information society services
  • The Administrator is not obliged to erase the personal data if it is stored and processed:
  • To exercise the right to freedom of expression and the right to information
  • To comply with a legal obligation requiring processing, as provided for in EU law or the law of a Member State applicable to the Administrator, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Administrator
  • For reasons of public interest in the area of public health
  • For archiving purposes in the public interest, scientific or historical research, or statistical purposes
  • For the establishment, exercise, or defense of legal claims

In the event of exercising your right to erasure, the Company will erase all your data, except for the following information:

Information necessary to verify that your right to erasure has been fulfilled – email, IP address

Technical information about the functioning of the online store, which cannot be linked to your identity in any way

To exercise your right to erasure, you need to take the following steps:

Submit a free-text request via your email address to [email protected]

If you submit a request via email, you need to verify yourself as the account holder

If there is an order placed by you that is being processed, the earliest moment you can request to be “erased” is upon the successful completion of the order.

With the erasure of your personal data, your account will become inactive. However, you will still be able to browse the online store and the offered products and place orders as a guest or create a new registration.

The Administrator does not erase data that it has a legal obligation to retain, including for defense against legal claims made against it or to prove its rights.

Right to restriction of processing when:

– The accuracy of the data is contested, for the period during which its accuracy must be verified; or

– The processing of the data lacks a legal basis, but instead of erasing it, you request restricted processing; or

– The data is needed for the establishment, exercise, or defense of your legal claims; or

– An objection to the processing of the data has been lodged, pending verification of whether the Administrator’s grounds are lawful

You can request the restriction of the processing of your data by submitting a written request to [email protected]. After verifying your identity, the data will be provided to you.

In the event of exercising your right to restriction, the Company will suspend the processing of your data but will not remove the posts you have made on the site.

In the event of rectification, erasure, or restriction of processing, we will notify each recipient to whom the personal data has been disclosed, unless this is impossible or requires disproportionate effort.

Right to data portability in a machine-readable format, whereby:

  • We provide the data directly to you; or
  • Upon your request and if technically feasible, the data is provided to another administrator of your choice

You can obtain the data stored and processed about you in connection with the use of the Administrator’s services in a machine-readable format at any time by submitting a written request to [email protected]. After verifying your identity, the data will be provided to you.

Right to receive information

You can request the Administrator to inform you about all recipients to whom the personal data, for which rectification, erasure, or restriction of processing has been requested, has been disclosed. The Administrator may refuse to provide this information if it would be impossible or require disproportionate effort.

Right to object:

You can object at any time to the processing of personal data by the Administrator that relates to you, including if it is processed for profiling or direct marketing purposes.

The Administrator will cease processing your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests and rights, or due to legal disputes and other procedural or non-procedural actions that require it.

You have the right to object to receiving marketing communications, including profiling and analysis for direct marketing purposes. You can unsubscribe from receiving marketing communications by submitting a written request/free-text to [email protected]

Right to lodge a complaint with a supervisory authority

In the event of a violation of your rights under applicable personal data protection legislation, you have the right to lodge a complaint with the Commission for Personal Data Protection as follows:

Name: Commission for Personal Data Protection

Registered office and management address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Correspondence address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Phone: 02 915 3 518

Website: www.cpdp.bg

Your rights in the event of a personal data security breach:

If the Administrator identifies a personal data security breach that may pose a high risk to your rights and freedoms, it will notify you without undue delay about the breach, as well as the measures that have been taken or are to be taken.

The Administrator is not obliged to notify you if:

  • Appropriate technical and organizational protection measures have been taken regarding the data affected by the security breach
  • Subsequent measures have been taken to ensure that the breach will not result in a high risk to your rights
  • Notification would require disproportionate effort

You can exercise all your rights regarding the protection of your personal data through the functionalities in your profile. You can submit your requests in any form that contains a statement to that effect and identifies you as the data owner at [email protected].

Methods used for automated individual decision-making, including profiling

We do not use automated algorithms and/or profiling.

Use of “cookies”

The website and online store www.amonraenergy.eu uses so-called “cookies” to provide the most relevant information for you and ensure the best experience. They help you receive a personalized experience while on our site and using our services, while also helping us provide content relevant to you.

For information about the data contained in the “cookies” of the online store www.amonraenergy.eu and third parties, you can refer to our Cookie Policy.

Security measures taken by the Administrator and the online store www.amonraenergy.eu regarding the security of personal data

Measures taken by the Administrator

To protect the personal data of users and customers of the website and online store www.amonraenergy.eu, we use an encryption protocol – Secure Sockets Layer (SSL security certificate). When you access the website www.amonraenergy.eu via its application in the web browser HTTPS (Hypertext Transfer Protocol Secure), an encrypted connection is established between the web server (the site) and the browser you are using.

More about the nature and role of SSL certificates can be found here https://help.superhosting.bg/ssl-certificates-secure-communication.html#whichssl

Measures taken by our hosting company Superhosting for the security of personal data:

Security system for Superhosting’s entire infrastructure – SH Protect

Comprehensive system for protection against DDoS attacks, aimed at blocking malicious actions toward the information stored on their servers.

More information can be found at https://www.superhosting.bg/web-hosting-page-privacy-policy.php and https://blog.superhosting.bg/security-challenge-accepted.html

The Administrator may amend the Privacy Policy by posting a notice to that effect on its website.