PERSONAL DATA PROTECTION POLICY
XION LTD („XION“ or „Controller“) is a personal data controller. XION LTD limited liability company, registered in the Bulgarian Commercial Register with the Registry Agency under UIC 206115285
You can contact the Controller in one of the following ways:
The Controller collects and processes your personal data in connection to your access and usage of the website operated by the Controller - www.smartwheels.store, contact with users of the website, as well as operation of the online store of the Controller on the website www.smartwheels.store and conclusion of contracts for purchase of goods from the online store, including – in the process of performing the contracts for purchase of goods from the online store, pursuant to Art.6, Para 1 of the Personal Data Controller and any necessary information as required by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
The Controller does not collect or otherwise process sensitive data included in special categories of personal data in the General Data Protection Regulation. Additionally, the Controller does not want to collect or process data of minors under the age of 16.
3.1. Personal data
The personal data, that the Controller collects and processes for you, are:
3.1.1. Automatically collected personal data:
3.1.2. Personal data provided by you:
Please note that the data you might be requested to provide upon payment – bank account, number, dates and/or data from bank cards are not received by the Controller, but by a third party via which the payment is processed. The Controller is not able to control processing of these data by the third party and the Controller cannot be held responsible for its processing. 3.2. Legal grounds for the personal data processing by the Controller
The Controller processes your personal data on the basis of:
a/ Art. 6, paragraph 1, letter a) of the General Data Protection Regulation, namely – on the basis of your explicit consent with regard to accessing and browsing the website of the online store and/or contacting the online store and/or creating a profile in the online store and/or usage of cookies;
b/ Art. 6, paragraph 1, letter b) of the General Data Protection Regulation, namely - processing is necessary in order to take steps prior to entering into a contract as well as for the conclusion and performance of the contract for purchase of goods from the online store;
c/ Art. 6, paragraph 1, letter c) of the General Data Protection Regulation, namely – processing is necessary for compliance with a legal obligation to which the Controller is subject, including but not limited to – for fulfilment of the legal obligations of the Controller under the Law on Accounting as well as the applicable tax legislation.
d/ Art. 6, paragraph 1, letter f) of the General Data Protection Regulation, namely – processing is necessary for the purposes of the legitimate interests pursued by the Controller for performance and protection of its commercial activity (including but not limited to - measures to protect the website and its users, measures to prevent and detect attempts at fraud; measures to manage various other risks);
3.3. Purposes of the personal data processing by the Controller
The specified personal data provided by you with regard to your access and browsing the website www.smartwheels.store, contacting, creating a profile and usage of the online store, including – upon conclusion of a contract for purchase of goods from the online store is processed by the Controller for the following purposes:
3.4. The specified personal data of yours may be provided to the following recipients and categories of recipients:
In case the Controller is required by law or if it is necessary to protect its legitimate interests, the Controller may disclose certain personal data to public authorities as well.
The Controller shall ensure that access to your personal data by third parties - private entities takes place in accordance with the legal provisions on personal data protection and the confidentiality of information on the basis of contracts concluded with them.
3.5. Term of storage of the provided personal data by the Controller
а) For the term of effectiveness of the contract for purchase of goods from the online store concluded between you and the Controller, and within the 5-year limitation period afterwards;
3.6. Providing personal data outside of the territory of Bulgaria
The Controller does not intend to provide your personal data to recipients in countries outside of the European Union and/or the European Economic Area. Nevertheless, provided that in case any of your personal data is transmitted to recipients in countries outside of the European Union including in countries for which the European Commission has not recognized an adequate level of personal data protection, the Controller will take action to ensure that any international transmission of personal data is carefully conducted in order to protect your rights and interests.
4.1. Rectification of your personal data in case the personal data processed for you is inaccurate. You also have the right to have any incomplete personal data of yours completed, including by adding a declaration thereto.
4.2. Erasure of your personal data in case:
а) The personal data is no longer necessary for the purposes, for which they have been collected and processed;
The Controller may refuse to fulfil your request for erasure of your personal data provided that the processing of personal data is required:
- for fulfilment of legal obligation; or
- in order to establish, exercise or protect a legal claim;
4.3. Restriction of the processing of your personal data in case:
а) You dispute the accuracy of the personal data – for a period that allows the Controller to verify the accuracy of your data;
4.4. Object the processing of your personal data in case:
а) The processing of your personal data is necessary for the legitimate interests of the Controller or a third party;
4.5. Withdraw your consent for processing personal data
You have the right to withdraw your consent for processing your personal data at any time (regarding the personal data processed under consent) – but it shall not affect the lawfulness of processing performed by the Controller based on your consent before its withdrawal. Irrespective of the above, the Controller will process your personal data for purposes related to the performance of the contract concluded between you and the Controller for purchase of goods from the online store as well as any possible disputes between you and the Controller in connection with or resulting from the concluded contract for purchase of goods from the online store.
All rights hereunder this item 4 may be exercised by sending a written request to the Controller’s address or by sending an electronic request to the Controller’s e-mail address, specified hereinabove, in item 2 of this document.
You have the right to obtain from the Controller:
а) confirmation as to whether or not personal data concerning you are being processed;
For any further copies requested by you, the Controller may charge a reasonable fee based on administrative costs.
You have the right to receive the personal data concerning you that you have provided to the Controller in an appropriate format and have the right to transmit those data to another controller regarding the personal data the processing of which by the Controller is based on your consent or needed for fulfilling of the contractual obligations under the contract for purchase of goods from the online store and the processing is carried out by automated means (i.e. by automated electronic systems and not in a paper archive). You have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
You have the right to lodge a complaint with the Bulgarian Personal Data Protection Commission (CPDP) if you believe that your personal data is being processed unlawfully or your rights in relation to your personal data are being violated.
Contacts of the CPDP:
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592,
Please note that the provision of your personal data in connection with your order and the conclusion of a contract for purchase of goods from the online store is necessary for the conclusion and performance of the contract for purchase of goods from online store and your rights arising from the contract or the applicable law. You are not obliged to provide your personal data in connection with ordering goods from the online store and the conclusion of a contract for purchase of goods from the online store but the provision of your personal data is an absolutely necessary condition and a requirement for the conclusion of a contract for purchase of goods from the online store and its execution. You may choose not to provide your personal data and you may at any time exercise your rights regarding the personal data provided by you, but in case the Controller does not have your personal data, it may prevent the performance of the contract for purchase and fulfilment of the contractual or legal obligations of the Controller in relation to the concluded contract.
Please note that the provision of your personal data in connection with the access to the website of the online store, its viewing and using, including – creation a profile in the online store, as well as in connection with sending a message to the online store/the Controller is necessary for the usage of the website in its full functionality, respectively – for contact with the online store. You may choose not to provide your personal data and you may at any time exercise your rights regarding the personal data provided by you in connection with the access to the website of the online store, its viewing and using, respectively - in connection with contacting the online store/the Controller, but in this case the Controller is not able to grant you access to the content of the online store or guarantee that you can use the website in full scope functionality, respectively – in this case it is not possible to contact the online store/ the Controller.
In order to perform analyses to improve the performance of the website and provide personalized service to each individual user of the website, according to its individual preferences, the Controller can collect and process data about the user's interests and preferences, such as analysing the number of visits and/or viewed/ordered goods from this user. This allows for a better understanding of the user's expectations and adaptation to his/her needs without significantly affecting his/her decisions. Thanks to the use of advanced technologies by the Controller, the above activities can be run by the system automatically, thanks to which the submitted content will be as up-to-date and useful to the user of the website as possible.
An analysis of interests or preferences can also be used for automatic creation, delivery and performance of user-targeted ads, offers or promotions (discounts). The result of such actions of the Controller can significantly affect your consumer choices - e.g. the result may be a very good temporary offer for goods addressed to you only based on the history of your purchases and your behaviour in the website of the online store that will not be accessible for our other users of the website.
You have the right to request from the Controller not to be subject to a decision based solely on automated processing, but only provided that such decision:
а) produces legal effects concerning you, or
The above shall not apply if the decision:
The present Personal Data Protection Policy was adopted on 01.07.2020 and it is valid until revoked or amended upon the respective publication on the website www.smartwheels.store.