PERSONAL DATA PROTECTION POLICY AND COOKIE USE POLICY

The policy of Baron OOD and Baron Attractions OOD is fully in line with Regulation (EU) 2016/679 (the Regulation). When using the websites of "Baron" Ltd. and "Baron Attractions" Ltd. - https://palmibg.com it is possible to process personal data and we ask the consent of the user in advance and announce this policy for their protection.


The processing of personal data, such as name, address, e-mail address or telephone number, is always in accordance with the General Data Protection Regulation (GDPR) and complies with country-specific data protection provisions. With this privacy statement we want to inform you about the scope and purpose of the data we collect, use and process. Users are informed, through this declaration, about the protection of their personal data and the rights they have under the Regulation.


Baron OOD and Baron Attractions OOD have implemented a number of technical and organizational measures to ensure the full protection of personal data of individuals received and processed through our site.


1. Definitions

The Data Protection Statement of Baron OOD and Baron Attractions OOD is based on the terminology used in the General Data Protection Regulation (GDPR). The data protection statement must be understandable to the general public as well as to our customers and business partners. To ensure this, we would first like to explain the terminology used.


In this data protection statement we use the following terms:


1.1. Personal data

Personal data - any information that can be used to identify an individual ("user"). An individual who can be identified directly or indirectly, in particular by providing information such as name, location data, online identifier and others.


1.2. Data Subject / User

The data subject ("user") is any identified or identifiable natural person whose personal data are processed by us under the terms of the Regulation.


1.3. Processing

Processing, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmitting, distributing or otherwise providing or combining, restricting, deleting or destroying personal data.


1.4. Limit processing

Restriction of processing is the marking of stored personal data in order to limit their processing in the future.


1.5. Profiling

Profiling - any form of automated processing of personal data.


1.6. Control body / administrator

The controlling body or the controller responsible for the processing is a natural or legal person, public body, agency or other body, which independently or jointly with others determines the purposes and means of personal data processing; where the purposes and means of such processing are determined by the EU legal framework.


1.7. Recipient

The recipient is a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. Public authorities that may receive personal data in the framework of a specific investigation in accordance with EU law are not considered a third party; the processing of this data is in accordance with the applicable data protection rules in accordance with the purposes of the processing.


1.8. Third person

The third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct right of the controller or processor, have the right to process personal data.


1.9. Consent

The consent of the user is any freely, specifically, informed and unambiguously stated, through a statement or through clear positive actions and gives consent to the processing of his personal data.


2. Name and address


"Baron" Ltd. and "Baron Attractions" Ltd.

Bulgaria, Haskovo, 2 Balkan Str

Phone: + 359 876 66 99 66

Email: baronsales2@gmail.com

Website: https://palmibg.com


Supervisor:

Commission for Personal Data Protection with address: Sofia, ul. "Ivan Evstatiev Geshov" 15, tel .: 02 940 20 46 fax: 02 940 36 40; e-mail: kzld@government.bg, kzld@cpdp.bg: Website: www.cpdp.bg.


3. Cookies

The website does not use cookies. Cookies are text files that are stored on the user's device.


By using cookies, Baron Ltd. and Baron Attractions Ltd. may provide users of this site with easier-to-use services that would not be possible without setting cookies.


With the help of cookies, the information on our site can be optimized according to the behavior and desire of the user. Cookies allow us to recognize our users. The purpose of this recognition is to make it easier for users to use our site.


The user can ban at any timethe use of cookies through the appropriate setting of the Internet browser used. Already saved cookies can be deleted at any time via an Internet browser or other software applications used to visit our site. This is possible with all browsers and applications. If the data subject disables the setting of usage and recording of cookies in the browser used, not all functions of our website may be fully usable.


4. Collection of general data and information


The site of "Baron" Ltd. and "Baron Attractions" Ltd. collects general data and information during his visit. This general data and information is stored in the log files of the server owned by SiteGround Spain S.L., which strictly comply with the Privacy Policy. Information on this can be found at https://www.siteground.com/privacy.htm. Collected can be (1) the types and versions of the browser used, (2) the operating system used by the access system, (3) the site from which it reaches our website (so-called referents), (4) 5) the date and time of access to the website, (6) IP address, (7) the Internet service provider, (8) any other information that may be used in the event of a cyber attack on our site.


When using this general data and information, Baron OOD and Baron Attractions OOD do not draw any conclusions about the data subject. Rather, this information is needed to: (1) create the right content for our site, (2) optimize the content of our site, (3) provide quality access to information, (4) provide law enforcement with the necessary information. for prosecuting in the event of a cyber attack.


Therefore, Baron OOD and Baron Attractions OOD analyze statistically anonymously collected data and information in order to increase the protection of data and their security, and to ensure an optimal level of protection of personal data processed. Anonymous data in the server's log files is stored separately from all personal data provided by the user.


5. Opportunity for contact through the site


The site of "Baron" Ltd. and "Baron Attractions" Ltd. contains information that allows quick electronic contact with us, as well as direct communication, which includes the submission of direct information by e-mail through a form on the site. If a user contacts Baron OOD and Baron Attractions OOD directly via e-mail or the contact form, the personal data transmitted by the data subject are stored automatically. Such personal data, transmitted on a voluntary basis by the user, are processed and stored for the purpose of communication with him. This personal data is not provided to third parties.


6. Deletion and blocking of personal data

 "Baron" Ltd. and "Baron Attractions" Ltd. processes and stores personal data of the user only for the period necessary to achieve the goal, or for a period provided for in the Regulation.


If the purpose of storage is not applicable or if the retention period set by the European legislator or other competent legislator has expired, personal data are routinely blocked or deleted in accordance with legal requirements.


7. Consumer rights

7.1. Right of confirmation

Every user has the right to receive confirmation of whether personal data relating to him are processed. If a data subject wishes to exercise this right of confirmation, he or she may contact us at any time.

7.2. Right of access


Each user has the right to receive information about their personal data stored at any time, as well as a copy of this information. In addition, according to the Regulation, the consumer has the right to request access and information on:


- the purposes of the processing;

- the categories of relevant personal data;

- the recipients or categories of recipients to whom personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

- where possible, the intended period for which personal data will be stored;

- the right to request the correction or deletion of personal data or the restriction of the processing of personal data;

- the right to lodge a complaint with a supervisory authority;

- the existence of automated decision-making, including profiling, specified in Art. 22 (1) and (4) of the Regulation, as well as the intended consequences of such processing.


The user has the right to receive information on whether his personal data is transferred to a third country or to an international organization. Where this is the case, the consumer has the right to be informed of the precautionary measures taken in connection with the transfer.


If a user wishes to exercise this right of access, he or she may contact us at any time.


7.3. Right of correction

Every user has the right to request, without undue delay, the correction of inaccuracies in his personal data. Taking into account the purposes of processing, consumption Elia has the right to have incomplete personal data filled in by providing an additional statement to that effect.


If the user wishes to exercise this right of correction, he or she may contact us at any time.


7.4. Right to delete

Every user has the right to request the deletion of his personal data without delay and we are obliged to delete them without undue delay when there is one of the following reasons:


- personal data are no longer needed for the purposes for which they were collected or processed;

- the user withdraws the consent on which the processing of his personal data is based, according to art. 6, paragraph 1a or art. 9 (2a) of the Regulation, and where there is no other legal reason to continue processing them;

- the consumer objects to the processing, according to art. 21, paragraph 1 of the Regulation and there are no legal grounds for their processing or the consumer objects to their processing, according to Art. 21 (2) of the Regulation;

- personal data have been illegally processed;

- personal data are collected in connection with the provision of services referred to in Art. 8 (1) of the Regulation;


If one of the above reasons applies and the user wishes to request the deletion of personal data stored by "Baron" Ltd. and "Baron Attractions" Ltd., he or she may at any time contact us. An employee of Baron OOD and Baron Attractions OOD will immediately make sure that the deletion request is complied with immediately.


When the controller has made the personal data public, he is obliged, according to art. 17 (1) to delete personal data provided to third parties, taking into account available technology and implementation costs, take reasonable steps, including technical measures, to inform other controllers of personal data that the user has requested to be deleted. The employees of "Baron" Ltd. and "Baron Attractions" Ltd. will organize the necessary actions for each case.


7.5. Right to limit the processing of personal data

Each user has the right to request a restriction on the processing of his personal data when one of the following applies:


- the accuracy of personal data is disputed by the user, allowing the controller to verify their accuracy;

- the processing is illegal and the user's data is against the rules for deleting it and instead seeks to restrict their use;

- personal data no longer need to be processed, but are required for the establishment, exercise or defense of legal claims;

- the user objects to the processing of his personal data, according to Art. 21 (1) of the Regulation.


If one of the above conditions is met and the user requests a restriction on the processing of personal data stored by "Baron" Ltd. and "Baron Attractions" Ltd., he or she may at any time contact us. The employee of "Baron" Ltd. and "Baron Attractions" Ltd. will limit their processing.


7.6. Right to data portability

Every user has the right to receive their personal data provided to us in a structured electronic format. The user has the right to provide this data to another administrator, provided that the processing is based on Art. 6, paragraph 1a, art. 9, paragraph 2a of the Regulation or of a contract, according to art. 6 (1b) of the Regulation.


In addition, when exercising the right to data portability according to Art. 20 (1) of the Regulation, the user has the right to provide personal data directly from one controller to another, where this is technically feasible in accordance with the Regulation.


In order to establish the right to data portability, the User may be with us at any time.


7.7. Right to object

Every user has the right to object at any time to the processing of personal data relating to him on the basis of Article 6 (1) of the Regulation.


"Baron" Ltd. and "Baron Attractions" Ltd. will not process personal data in case of objection, unless we have good reasons for their processing that exceed the interests, rights and freedoms of the user or to establish, exercise or protect legal actions.


If Baron Ltd. and Baron Attractions Ltd. process personal data for the purposes of direct marketing, the user has the right to object at any time to their processing for this purpose. This refers to profiling related to direct marketing. If the user does not wish to have his data processed for direct marketing purposes, we are obliged to comply with this application.


7.8. Automated decision making, profiling

Every user has the right to refuse automated processing, including profiling, which produces legal consequences for him or similar significant impact on him, insofar as the decision is not necessary for the conclusion or performance of a contract between us and the user.


7.9. Right of withdrawal

Each user has the right to withdraw his consent to the processing of his personal data at any time.

If you need If he wishes to withdraw his consent, he or she may contact us at any time.


8. Method of payment: Cash on delivery and delivery

In order to fulfill the consumer order and the so-called distance contract, which arises when ordering and / or paying online, we use the services of the courier company Econt Express.


We transfer the personal data of the courier company: Name, Surname, Phone and Address so that we can fulfill the user order and / or collect payments with it, if the payment method "cash on delivery" is chosen, which is also collected by the courier upon transfer of the ordered product / products. The company strictly observes the provisions for personal data protection. More information can be found at http://www.econt.com.


9. Data protection provisions regarding the use of Google Analytics on our site

We've integrated a Google Analytics script into our site. The purpose of this tool is to collect and analyze data on the behavior of website visitors: which pages were visited, how often and for how long a subpage was viewed. Web analytics is mainly used to optimize the website and possibly to analyze the costs and benefits of Internet advertising.


Google Analytics is owned by Google Inc., 1600 Pkwy, Mountain View, CA 94043-1351, USA.


For web analytics via Google Analytics, we use _gat. _anonymizeIp “. With this application, the IP address of the user's ISP is shortened by Google and anonymized.


The purpose of Google Analytics is to analyze the traffic to our website. Google uses the collected data and information to evaluate the use of our site and to provide online reports.


Google Analytics places a cookie on the device of the user who visited our website. The definition of cookies is explained above. With the help of the cookie Google can analyze the use of our site. Each time you visit each of the pages on our site where the Google Analytics tracking code is integrated, the user's Internet browser will send data to Google Analytics. During this process, Google receives personal information about the user, such as IP address and location.


The cookie is used to store information, such as the time of access, the location from which the access was made, as well as the frequency of visits to our site. Each time you visit our website, such personal information, including IP address, will be provided to Google. This personal data is stored by Google in the United States and the company may transfer this personal data to third parties.


The user can disable the use of cookies from our site at any time, by setting the browser used and thus refuse to permanently store information from cookies. This setting of each browser will prevent Google Analytics from storing a cookie on the user's device. In addition, cookies already used by Google Analytics may be deleted at any time from the settings of the web browser and / or application of the user who visited our site.


The user has the right to object to the collection of data generated by Google Analytics related to the use of this site, as well as the processing of this data by Google. To do this, the user must download the browser add-on from https://tools.google.com/dlpage/gaoptout and install it. Through JavaScript, this add-on will prohibit Google Analytics from providing data and information about Google visits and behavior. Installing the add-on in the browser is considered an objection to the processing of personal data. If the user's device is reinstalled, you will need to reinstall this add-on to prevent information from being sent to Google Analytics. If the browser add-on is uninstalled by the user, it may be necessary to reinstall and activate the browser add-on.


Further information and applicable Google data protection policies can be found at https://www.google.com/intl/en/policies/privacy. The information collected by Google Analytics, its processing and storage is described in detail at https://www.google.com/analytics.


10. Data protection provisions regarding the use of Facebook

On our site we have links to the social network Facebook.


The social network is a place for online meetings on the Internet, an online community where users are allowed to communicate with each other and interact in cyberspace. The social network can serve as a platform for exchanging opinions and experiences, or enable users to provide personal or business information. Facebook allows users to create profiles, upload photos and make contacts with each other.


Facebook is owned by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the user lives outside the United States or Canada, admin The data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.


It is possible that on each page of our site there is a link to our Facebook account and / or installed Facebook plugins. It is possible that the device from which the user visits our site will invite him to install additional settings and / or the mobile application on Facebook. An overview of all possible Facebook plugins can be found at https://developers.facebook.com/docs/plugins. During this procedure, Facebook is informed which subpage of our site is visited by the user.


If the user has logged in to Facebook at the same time, then Facebook detects this and collects information that is associated with the user's user profile on the social network. If the user clicks on any of the Facebook links / buttons integrated into our site, the social network saves this information, which is associated with the personal profile there.


Facebook always receives information about the visit to our site when the user is logged in to the social network system, regardless of whether the user will click on any of the links from Facebook on our site or not. If he does not want such a transfer of information to Facebook, it is desirable that the user log out of his account on the social network before visiting our site.


Facebook's data protection guide is published at https://facebook.com/about/privacy, which provides information on the collection, processing and use of personal data from the social network. It also explains the possible settings that Facebook offers to protect the privacy of the user's personal data. Various configuration options are described that prohibit the transmission of data to Facebook.


11. Data protection provisions regarding the application and use of Google+

We've integrated a Google+ social network button on our site. The social network is a meeting place on the Internet - an online community that usually allows users to communicate with each other and interact in cyberspace. The social network can serve as a platform for exchanging opinions and experiences, or provide an opportunity to provide personal or business information. Google+ allows users to create profiles, upload photos, and connect with each other.


Google+ is owned by Google Inc., 1600 Mountain View, CA 94043-1351, USA.


When you visit our site, the integrated Google+ button is automatically downloaded and displayed from the user's device. During this process, Google is notified of which specific subpage of our site has been visited by the user. Detailed Google+ information can be found at https://developers.google.com/+/.


If the user signed in to Google+ while visiting our site, Google recognizes the user's account and receives information about the duration and which specific pages the user has visited. This information is collected via the Google+ button and Google associates it with the relevant Google+ profile.


If the user clicks on the button integrated into our website and thus recommends Google+ 1, Google associates this information with the personal Google+ user account and stores personal data. Google stores the recommendation of the person who has tagged Google+ 1 on one or more pages of our site, making this recommendation publicly available in accordance with the terms and conditions accepted by the user when registering on the social network. Subsequently, Google+ 1 recommendations, along with other personal data (Google+ account name and profile picture), are stored and processed in other Google services: by search engine, Google search results, user's Google account. Google may also associate visits to this site with other personal information stored by Google and record this personal information in order to improve or optimize Google's various services.


If a user does not wish to provide this information to Google, they may prevent this by logging out of their Google+ account before visiting our site.


Additional information and Google's data protection policies can be found at https://www.google.com/intl/en/policies/privacy/. More references from Google for the Google+ button 1 can be found at https://developers.google.com/+/web/buttons-policy.


12. Data protection provisions regarding the application and use of Twitter

On our website we have links and buttons to and from Twitter. Twitter is a multilingual, publicly available and microblogging service where users can publish and distribute so-called "tweets", e.g. short messages that are limited to 280 characters. These short messages are available to everyone, including those who have not logged in to Twitter. The posts are also displayed to the so-called followers of the respective user. Followers are others Twitter users who follow users' tweets. In addition, Twitter allows the use of hashtags, links or retweets.


Twitter is owned by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.


There is an integrated Twitter button on every page of our site. Additional information about them can be found at https://about.twitter.com/de/resources/buttons. When using the buttons, Twitter receives information on which subpage of our site it is used. The purpose of the buttons is to quickly share information on the social network and increase the number of our visitors by sharing content.


If the user has logged in to Twitter at the same time, then Twitter records the duration and visits to each page of our site and associates this behavior with the user's social network account. This information is collected regardless of whether the user has clicked on one of the buttons on the social network on our site or not.


The applicable data protection provisions on Twitter are published at https://twitter.com/privacy?lang=en.


13. Data protection provisions regarding the application and use of YouTube

On our website, we have links and / or videos that are downloaded directly from the content of one or more sub-pages of our site, directly from YouTube. YouTube is an internet video portal that allows you to post and watch videos for free. YouTube allows you to publish all kinds of videos, as well as access entire movies, TV shows, music videos, and user-created videos through the web portal.


YouTube is owned by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA and is a subsidiary of Google Inc.


It is possible that when visiting one or more pages of our site, pre-set videos from the portal will be automatically downloaded and previewed. More information about YouTube can be found at https://www.youtube.com/yt/about/en/. While downloading video content, YouTube and Google receive information about which specific subpage of our website has been visited by the user.


If the user has logged in to YouTube, then YouTube recognizes the user's account and receives information about the duration and which specific pages the user has visited. This information is collected by YouTube and associated by Google with the relevant YouTube profile.


YouTube and Google will only receive information that a user has visited our site if they are logged into YouTube; this happens regardless of whether the user clicks on a link to or a YouTube video or not. If such transmission of information to YouTube and Google is not desired by the user, this can be prevented after the user logs out of his account in the video portal before visiting our site.


YouTube's data protection policies can be found at https://www.google.com/intl/en/policies/privacy/.


14. Data protection provisions regarding the application and use of Instagram

We have integrated components and links to the Instagram service. Instagram is a service that can be qualified as an audiovisual platform that allows users to share photos and videos, as well as share them on other social networks.


Instagram is owned by Instagram LLC, 1 Hacker Way 14, Menlo Park, California, USA.


When you visit any of the pages of our website, the website has an integrated Instagram component, which can send information to the social network about user behavior on any of the pages of our site and / or receive an invitation to install a component or mobile social network application.


If the user has logged in to Instagram at the same time, then Instagram records the duration and visits to each page of our site and associates this behavior with the user's social network account. This information is collected regardless of whether the user has clicked on one of the buttons on the social network on our site or not.


Additional information and applicable data protection regulations on Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy.


15. Data protection provisions regarding the application and use of Pinterest

This site has integrated components from Pinterest Inc. Pinterest is a social network - a meeting place, an online community that allows users to communicate and interact with each other in cyberspace. The social network can serve as a platform for exchanging opinions and experiences or allow the Internet community to provide personal or company information. Pinterest allows users of the social network to publish collections of pictures and individual photos, as well as descriptions on virtual pinboards (so-called pins), which can be shared by other users (so-called comments).


Pinterest is owned by Pinter est Inc., 808 Brann Street, San Francisco, CA 94103, USA.


When visiting our site, each subpage of which is integrated Pinterest component (Pinterest plug-in), the Internet browser of the user's device, may send an explicit invitation to install a component or mobile application on the social network. Additional information about Pinterest can be found at https://pinterest.com. Pinterest receives information about which specific subpage was visited by the user.


If the user is logged in to Pinterest, then Pinterest tracks the browsing of each subpage of our site and associates this information with the user profile on the social network.


The Pinterest Data Protection Guide, available at https://about.pinterest.com/privacy-policy, provides information on the collection, processing and use of personal data by Pinterest.


16. Data protection provisions regarding the application and use of LinkedIn

In our site we have settings and links to and from LinkedIn. LinkedIn is a web-based social network that allows users with existing business contacts to connect and create new business contacts. More than 400 million registered in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.


LinkedIn is owned by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. He is responsible for data protection issues for European Union citizens with Wilton Plaza, Wilton Place, Dublin 2, Ireland.


Following a hyperlink to a page that has a link to LinkedIn, the user's device browser can automatically download the appropriate settings and add-ons on LinkedIn and / or an invitation to install the mobile application on the social network. Additional information on all possible LinkedIn add-ons can be found at https://developer.linkedin.com/plugins. During this / these processes LinkedIn obtains information on exactly from which subpage the respective add-on was downloaded, in the presence of such a setting on the visited page of our site.


If the user is logged in to their LinkedIn user account, LinkedIn tracks the user's behavior as the duration of the visit and exactly which pages of our site are visited. This information is collected through LinkedIn add-ons and associated with the corresponding LinkedIn profile of the user. If the user clicks on one of the LinkedIn buttons integrated on our site, LinkedIn saves this information in the user's profile.


LinkedIn receives information about the visits and duration of our site, regardless of whether the user will follow the links to the social network on our site or not, if he is logged into the social network system. If the user does not want to pass this type of information to the social network, he must log out of his account there before visiting our site.


LinkedIn allows you to manage notifications.