Privacy Policy

Protection of personal data

Mandatory information on individuals' data protection rights (Privacy notice)

General information

As of 25 May 2018, a new General Data Protection Regulation (GDPR) adopted by the European Union comes into force. The regulation aims to ensure the protection of data of individuals from all EU member states and to harmonize the regulations for their processing.

As the data controller of the personal data on the goods and services for sale displayed on the website, bluebag.coffee complies with all the requirements of the new regulation by collecting only data of individuals to the extent necessary for the provision of the service and keeping it responsibly and lawfully.

Information about the Data Controller

  1. Name "Blue Bug" Ltd.
  2. UIC/BULSTAT :207270018
  3. Registered office and management address. Amsterdam 7
  4. Address for the exercise of the activity. Sofia, 1528 NPZ Iskar Str. 7 Amsterdam
  5. Correspondence data. Address for correspondence: 1528 Iskar Str., Sofia, 1528 NPZ Iskar Str. 7 Amsterdam
  6. E-mail: info@bluebag.coffee
  7. Phone: 0878 580 171/ 0878 367638
  8. Personal data controller certificate number No 1443380

Information on the Data Protection Officer

  1. Picture name: "Deyan Georgiev"
  2. UIC/BULSTAT : 207270018
  3. Registered office and registered address. Registered office and registered office at 1528 Sofia Str. Amsterdm 7.
  4. Correspondence data. Address for correspondence: 1528 Iskar Str., Sofia, 1528 NPZ Iskar Str. 7 Amsterdam
  5. Phone: 0878580171
  6. Email: info@bluebag.coffee

Information on the competent supervisory authority

  1. Name: Commission for Personal Data Protection
  2. Registered office and registered address. Registered office and registered office: 1592 Sofia Blvd. "1592, Proff. No. 2 Tsvetan Lazarov
  3. Correspondence data. 1592 Sofia Blvd. "1592, Proff. No. 2 Tsvetan Lazarov
  4. Phone:02 915 3 518
  5. Email: kzld@government.bgkzld@cpdp.bg
  6. Website: cpdp.bg

"bluebag.coffee" carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Basis for collecting, processing and storing your personal data

Art. 1. (1) bluebag.coffee (Blue Bug Ltd.) collects and processes your personal data in connection with the provision of services, the sale of goods in real and virtual space and the conclusion of contracts with the company on the basis of Art. 1, Regulation (EU) 2016/679, in particular on the basis of the following:

  • Explicit consent obtained from you as a customer;
  • Fulfilling the obligations of Blue Bug Ltd. under contract with you;
  • Compliance with a legal obligation that applies to Blue Bug Ltd.
  • For the purposes of the legitimate interest of Blue Bug Ltd.;

(2) Blue Bug Ltd. is the data controller in respect of your data as users of our services/goods. With respect to personal data that you process using our online store, bluebag.coffee acts as a processor of personal data.

Purposes and principles for the collection, processing and storage of your personal data

Art. 2. (1) bluebag.coffee collects and processes the personal data that you provide to us in connection with the use of our online store and for the conclusion of a contract with the company, as well as for registration for participation in our events, including for the following purposes:

  • setting up a profile and providing full functionality in the sale of our products on the Internet and in our shop at ul. Amsterdam 7, town. Sofia 1528
  • individualization of a party to a contract;
  • registration of a participant in an event organised by Blue Bug Ltd.;
  • accounting purposes;
  • statistical purposes;
  • information security protection;
  • securing the performance of the contract for the provision of the relevant service/product;
  • sending information messages, announcements about changes in the service/available goods, recommendations for improving the use of the platform/goods, new and upgraded subscription plans, promotions, etc.
  • enhance and personalize each purchase by offering you relevant renewal offers, events and other products and services that may be of interest to you;
  • providing technical support by contacting us;

 (2) bluebag.coffee complies with the following principles when processing your personal data:

  • legality, fairness and transparency;
  • limitation of the purposes of processing;
  • relevance to the purposes of the processing and minimisation of the data collected;
  • data accuracy and timeliness;
  • limitation of storage to achieve the objectives;
  • integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.

(3) In the processing and storage of personal data, bluebag.coffee may process and store the personal data in order to protect its legitimate interests:

  • fulfilling its obligations to the National Revenue Agency, the Ministry of the Interior and other state and municipal authorities.

What types of personal data does bluebag.coffee collect, process and store?

Art. 3. (1) bluebag.coffee performs the following operations with personal data for the following purposes:

  • User registration on the website and execution of a contract for the provision of products/services. The purpose of this operation is for the user to provide Name, Phone and Address for delivery of the product ordered through our webshop. bluebag.coffee. 
  • By accepting the terms of use when placing an order from our online store or when placing an order via telephone, the Customer/User agrees to the terms of use. Based on the above impact assessment, the Data Protection Officer considers that the operation "Conclusion of a contract for the supply of goods/services" is permissible to perform and provides sufficient guarantees for the protection of the rights and legitimate interests of data subjects in accordance with the requirements of the GDPR.
  • Conclusion and execution of a commercial transaction with a customer or partner - the purpose of this operation is the conclusion and execution of a contract with a commercial partner or customer and its administration;
  • Sending information messages - the purpose of this activity is to administer the process of sending messages to customers regarding improvements or changes to services/products.
  • Newsletter sending - the purpose of this operation is to administer the process of sending newsletters to customers who have requested to receive this information;

 (2) bluebag.coffee processes the following categories of personal data and information for the following purposes and on the following grounds:

  • Data: your personal data (first and last name, e-mail, country, telephone)

    • Purpose for which the data is collected:1) User registration; 2) Contacting the user and sending information to the user, including, if requested, sending newsletters and advertising messages;
    • Basis for processing your personal data - By accepting the terms and conditions and registering on the website and purchasing the service/good, between eu and you a contractual relationship is established, on the basis of which we process your personal data - Art. 6, para. 1 (b) GDPR.

  • Additional data provided by you- If you wish to add to your profile, you can fill in your address and email details for technical contact.

    • Purpose for which the data is collected:Supplement user information in the user account.
    • Grounds for data processing:By accepting the terms and conditions and registering on the website and purchasing a good or service, between eu and you a contractual relationship is established, on the basis of which we process your personal data - Art. 6, para. 1 (b) GDPR.

  • Other data that bluebag.coffee processes- When you log in to our website or your account, bluebag.coffee collects data about the IP address used.

    • Purpose for which the data is collected:Improving service security and interface localization, statistical and market research.
    • Grounds for data processing:The processing is necessary for the performance of a contract to which the data subject is a party - Art. 6, para. 1 (b) of the GDPR. Until the creation of a user profile, the IP address is collected on the basis of the pursuit of the legitimate interests of the controller - Art. 6 para. 1 (f) of the GDPR;

  • Your details for issuing an invoice to an individual- If you wish to be invoiced as an individual, you must provide your name and surname.

    • Purpose for which the data is collected:Issuing an invoice for making payments under a contract for the provision of goods and/or services.
    • Basis for processing your personal data- By accepting the terms and conditions and registering on the website, or by entering into a written contract, between Blue Bug Ltd. and you a contractual relationship is established, on the basis of which we process your personal data - Art. 6, para. 1 (b) GDPR.

(3) Blue Bug Ltd. does not collect or process personal data relating to the following:

  • reveal racial or ethnic origin;
  • reveal political, religious or philosophical beliefs, or trade union membership;
  • genetic and biometric data, health data or data on sex life or sexual orientation.

(4) The personal data were collected from Blue Bug Ltd. by the persons to whom they relate.

(5) The Company does not perform automated decision making with data.

Storage period of your personal data

Art. 4. (1) Blue Bug Ltd. stores your personal data for a period of 10 years. After this period, Blue Bug Ltd. takes reasonable care to delete and destroy all your data without undue delay.

(2) Blue Bug Ltd. notifies you in the event that the data retention period needs to be extended in order to fulfil the purposes, performance of the contract, legitimate interests of the bluebag.coffee or otherwise.

(3) Blue Bug Ltd. stores the personal data it is required to keep under applicable law for the relevant period provided for, which may exceed the duration of your registration, in our online shop: bluebag.coffee.

Transfer of your personal data for processing

Art. 5. (1) Blue Bug Ltd. may, at its own discretion, transfer some or all of your personal data to processors for the purposes of processing, subject to the requirements of Regulation (EU) 2016/679.

(2) Blue Bug Ltd. notify you if it intends to transfer some or all of your personal data to third countries or international organisations.

Your rights in the collection, processing and storage of your personal data

Withdrawal of consent to the processing of your personal data

Art. 6. (1) If you do not want all or part of your personal data to continue to be processed by bluebag.coffee for any or all processing purposes, you may withdraw your consent to processing at any time by making a free text request.

(2) bluebag.coffee may ask you to verify your identity and the identity of the person to whom the data relate.

(3) By withdrawing your consent to the processing of personal data that is required to create and maintain your registration to use the services/purchase goods, your account will become inactive.

Right of access

Art. 7. (1) You have the right to request and receive from bluebag.coffee confirm whether personal data relating to you is being processed.

(2) You have the right to obtain access to the data relating to it, as well as to the information concerning the collection, processing and storage of your personal data.

(3) bluebag.coffee provide you, upon request, with a copy of the personal data processed relating to you in electronic or other appropriate form.

(4) Providing access to the data is free, but bluebag.coffee reserves the right to impose an administrative charge in the event of repetition or excessive requests.

Right of correction or completion

Art. 8. You may correct or complete inaccurate or incomplete personal data relating to you directly through your website profile or by making a request to bluebag.coffee

Right to erasure ("being forgotten")

Art. 9.(1) You have the right to request from bluebag.coffee deletion of personal data relating to you, and bluebag.coffee has the obligation to delete them without undue delay where any of the following grounds apply:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • You withdraw your consent on which the processing is based and there is no other legal basis for the processing;
  • You object to the processing of personal data relating to you, including for direct marketing purposes, and there are no legitimate grounds for the processing that override;
  • personal data have been unlawfully processed;
  • the personal data must be erased in order to comply with a legal obligation under EU or Member State law to which it is subject Blue Бag Ltd.;
  • personal data have been collected in connection with the provision of information society services.

(2) bluebag.coffee is not obliged to delete personal data if it stores and processes them:

  • to exercise the right to freedom of expression and the right to information;
  • to comply with a legal obligation requiring processing provided for in EU or Member State law to which the Controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
  • for public health reasons;
  • for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
  • for the establishment, exercise or defence of legal claims.

(3) In order to exercise your right to be "forgotten", you must submit a written request sent to info@bluebag.coffeeand to verify your identity and the identity of the person to whom the data relates before bluebag.coffeeby presenting your identification card on the spot for identification purposes and, if necessary, entering your login details in the data subject's account to an employee of the bluebag.coffee.
- you can delete your account details as well as your account itself here: https://bluebag.coffee/bg/moyat-profil/

(4) bluebag.coffee does not delete the data which it has a legal obligation to store, including for the purpose of defending legal claims made against it or proving its rights.

Right to restriction

Art. 10. You have the right to request bluebag.coffee restrict the processing of data relating to you where:

  • challenge the accuracy of the personal data, for a period that allows the eu verify the accuracy of the personal data;
  • the processing is unlawful, but you do not want your personal data to be erased, but only for its use to be restricted;
  • eu no longer needs the personal data for processing purposes, but you require it for the establishment, exercise or defence of legal claims;
  • You have objected to processing pending verification that the lawful grounds of eu take precedence over your interests.

Right to portability

Art. 11. (1) You can at any time view the data that is stored and processed about you in connection with the use of the e-shop of bluebag.coffee, or request them by email.
You can export your account data here: My Profile | Bluebag.coffee

Change the personal data you have submitted to bluebag.coffee can be requested here: My Profile | Bluebag.coffee

(2) You may request from bluebag.coffee directly transfer your personal data to a controller designated by you, where technically feasible.

Right to receive information

Art. 12. You may request from bluebag.coffee inform you of all recipients to whom the personal data for which rectification, erasure or restriction of processing has been requested has been disclosed. bluebag.coffee may refuse to provide this information if it would be impossible or would require a disproportionate effort.

Right to object

Art. 13. You may object at any time to the processing of personal data by bluebag.coffeerelating to you, including if it is processed for profiling or direct marketing purposes.

Your rights in the event of a data breach

Art. 14. (1) If bluebag.coffee identifies a breach of the security of your personal data that may pose a high risk to your rights and freedoms, we shall notify you without undue delay of the breach and of the measures that have been taken or are to be taken.

(2) bluebag.coffee is not obliged to notify you if:

  • has taken appropriate technical and organisational measures to protect the data affected by the security breach;
  • has subsequently taken measures to ensure that the infringement does not result in a high risk to your rights;
  • notification would require a disproportionate effort.

Persons to whom your personal data is provided

Art. 15. Econt Express or another logistics company that processes your personal data for the purpose of delivering the goods you have purchased from Blue Bug Ltd..

Art. 16. The controller does not transfer your data to third countries.

Other provisions

Art. 17. In the event of a breach of your rights under the above or applicable data protection legislation, you have the right to lodge a complaint with the Data Protection Commission as follows:

  1. Name: Commission for Personal Data Protection
  2. Registered office and registered address. Registered office and registered office: 1592 Sofia Blvd. "1592, Proff. No. 2 Tsvetan Lazarov
  3. Correspondence data. 1592 Sofia Blvd. "1592, Proff. No. 2 Tsvetan Lazarov
  4. Phone:02 915 3 518
  5. Email: kzld@government.bgkzld@cpdp.bg
  6. Website: cpdp.bg

Art. 18. You can exercise all your rights regarding the protection of your personal data using the forms attached to this information. Of course, these forms are optional and you may make your requests in any form that contains a statement to that effect and identifies you as the data holder.

Art. 19. If the consent relates to a transfer, the Controller shall describe the possible risks of the transfer of the data to third countries in the absence of an adequate protection solution and appropriate safeguards.

Art. 20(1). When you assign the bluebag.coffee to process personal data of a third party for the purpose of purchasing goods/services, Blue Bug Ltd. acts as a processor of personal data.

(2). In the cases referred to in par. 1, bluebag.coffee acts solely on your instruction as a user of the service and only insofar as it can have control over the personal data you process. bluebag.coffee has no control over the content and data that you, as a user of the Service, choose to upload to the Service (including whether or not such data includes personal data). In this case bluebag.coffee has no role in deciding whether the user uses the service to process personal data, for what purposes and whether the data is protected. Accordingly, the responsibility of bluebag.coffee in this case is limited to 1) compliance with the instructions of the service user according to the contract and the terms and conditions and 2) the provision of information about the product/service and its functionalities through its interface.

Cookie Policy

The website of bluebag.coffee uses cookies, which are important for its correct operation. By visiting our site, you accept the use of cookies.

Basis for collecting, processing and storing your personal data

Types of cookies we use:

  • Mandatory cookies

These cookies are necessary for the correct operation of the website. For example, with these cookies we show you the information on our website in the correct language and the prices according to the currency and VAT for the respective country. Such cookies are also the ones to enable caching, etc.

  • Analytical cookies

Thanks to these cookies, we monitor the traffic on our website and can analyse how easy it is for our users to use it (Google Analytics cookies). These cookies do not give us any information about your personal data. They show us which pages of our site you have viewed, whether you have visited our site via a mobile or desktop device and other anonymous data. For Google Analytics, we also use IP anonymisation using _anonymizelp. The maximum period for which we keep analytics data in Google Analytics is 50 months.

  • Functional cookies

These cookies allow you to use the full functionality of our site, watch the videos on it, chat to us, and remember your preferred language to load information on our site.

  • Cookies for precise targeting

These cookies contain information about how you have used our site and may be triggered by our advertising partners. They do not store personal information. Thanks to them, you will not be shown information that is irrelevant to you. These are dynamic cookies from Facebook, Google, Adform, Adwise, etc.

You can check and change the cookie settings on our website here:
Setting cookies

You can set the cookies you receive from our site in the browser you use.

You can find further information on how to change your cookie settings for the browser you are using from the following list:

Please note that if you restrict certain types of cookies, our site may not work properly and you may not be able to use its full functionality.

What security measures have we taken in bluebag.coffee regarding the security of the personal data you store on our infrastructure?

The security of any type of information, including personal data, located on our infrastructure is a priority for us as a company. Security is something we cannot afford to compromise. That is why below we provide information about the protection our hosting provider provides on their platform and the way they protect our email accounts and our communication with you. Our website is hosted on a platform registered with www.superhosting.bg; They in turn claim the following:

"In addition to making every effort to fully comply with the new data protection regulation, before PET years we implemented a completely new, developed by us, security system for our entire infrastructure - SH Protect. It works on multiple levels and blocks tens of thousands of attempts to compromise customer sites and customer information, including personal data, every day.
Every day we add new rules and make sure our customers' information is protected at the highest level.
Also before PET years, we have implemented a comprehensive DDoS protection system. The DDoS protection system detects 95% of the known types of DDoS attacks and is continuously updated to newly reported attacks.
With all these actions, we have blocked and continue to block hundreds of thousands of attempts per year to maliciously access the information that customers store on our servers. "

You can find out more about how we keep information safe in your web projects and posts on our blog:
https://blog.superhosting.bg/security-challenge-accepted.html

en_USEnglish