As an online merchant M&G TRADE SLLC, Sofia, Bulgaria, European Union, PIC 201165380 processes personal data of identifiable individuals ("data subjects") in strict accordance with the requirements of Regulation (EU) 2016/679, the Personal Data Protection Act, the current legal acts, and the internal policy of the company for personal data protection.

The provision of the services of M&G TRADE SLLC through the website www.creagifts.art and its mobile versions and applications (“Website"), are subject to the rules for processing the personal data of identifiable individuals, regulated in this Policy.

M&G TRADE SLLC has the right at any time, without notice, to change, update, amend this Personal Data Protection Policy to reflect all changes in the way personal data is processed. It is upon your responsibility to visit this page periodically to get acquainted with our latest privacy policy updates.

I. GENERAL DEFINITIONS

Regulation (EU) 2016/679 introduces the following general definitions in the processing of personal data:
- "personal data" means any information or data (ex. names, addresses, IP addresses) relating to an identifiable individual ("data subject");
- " data subject" means the person whom the personal data is about;
- "processing" means any operation or set of operations performed on personal data or a set of personal data by automatic or other means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, distribution or other way in which data is made available, arranged or combined, restricted, deleted or destroyed;
- "administrator/ data controller" means an entity (individual or legal person, public authority, agency or other structure) that alone or jointly with others determines the purposes and means of processing personal data; when the purposes and means of such processing are determined by European Union law or the law of the EU country (EU member), the controller or the special criteria for its determination may be laid down in EU law or in the law of an EU country.
- "processor of personal data" means an individual or legal person, public authority, agency or other structure that processes personal data from on behalf of the administrator/ data collector;
– "recipient" means an individual or legal person, public authority, agency or other structure to which the personal data is disclosed, regardless of whether it is a third party or not.
– "consent" means a clear, affirmative action by the data subject, giving permission to process their data.

II. ADMINISTRATOR OF YOUR PERSONAL DATA

The administrator of your personal data is M&G TRADE SLLC, PIC 201165380 with headquarters and management address: Sofia 1233, Banishora district, building 37, Bulgaria, European Union.

III. GROUPS OF PERSONS WHOSE DATA ARE PROCESSED

In connection with the Services provided, M&G TRADE SLLC processes information about the following Data Subjects:
1. Identifiable individuals, users of the Website, such as Customers;
2. Identifiable individuals, users of the Website as learners;
3. Identifiable individuals, users of the Website without registration when placing an order;
4. Identifiable individuals who sent inquiries, requests, or other correspondence to M&G TRADE SLLC;
5. Identifiable individuals and their related data which is present in inquiries, requests, or other correspondence to M&G TRADE SLLC.

IV. POSSIBLE CATEGORIES OF PERSONAL DATA PROCESSED BY M&G TRADE SLLC

1. INFORMATION YOU PROVIDE
You decide whether and how to use the Services provided through the Website.
When Customers enter their personal data on the Website, the nature of their provision is clearly indicated - mandatory or voluntary. The following data are mandatory to be fulfilled in order to provide the relevant Service and/or part of it:
- name and surname;
- email;
- current/permanent address;
- contact phone number.
Information about the above data and agreement to the Terms and conditions of the Website is stored (date, time and IP address).
You decide for yourself whether to keep this data on the website servers or to delete it. The provision of such information is entirely at the request of the user and upon his responsibility.
1.1. Other data
M&G TRADE SLLC can also process other personal data when you voluntarily provide such data by filling in relevant electronic forms on the Website, adding preferences, settings, etc.
2. DATA RELATED TO THE PROCESS OF USING THE SERVICES:
2.1. To use the services provided on the website www.creagift.art, logs related to security, technical support, development, etc. are used. The site uses logs aiming the following actions:
- To ensure reliable functioning of the Services and to identify technical issues;
- To ensure high security of the Services and detect malicious actions;
- To develop and improve the Services on the Website;
- To measure the attendance and usability of the Website;
- Logs used to comply with legal requirements;
2.2. The Website uses server logs, security device logs, other devices related to this category.
The storage of these logs is necessary to identify technical issues, detect malicious actions and others of the above-mentioned actions.
2.3. Logs may contain the following information: date and time, IP address, URL, browser, and device information.

V. YOUR PERSONAL DATA IS PROCESSED FOR ONE OR MORE OF THE FOLLOWING PURPOSES IN ACCORDANCE WITH REGULATORY ACTS

1. Provision of services - electronic store, trainings, etc.;
2. Guaranteeing the security of customers;
3. Fulfillment of the requirements of labor and social legislation regarding employees;
4. Other legitimate purposes such as accounting services, maintenance, improvement and security of the company's website and software systems, protection of the company's legal interests, including by court, etc.
5. Personal data, other than those mentioned above, are processed on any of the following legal acts:
5.1. Art. 6, par. 1, b. c) from Regulation (EU) 2016/679 – compliance with the company's legal obligations;
5.2. Art. 6, par. 1, b. b) from Regulation (EU) 2016/679 – conclusion, performance of a contract, as well as pre-contractual relations;
5.3. Art. 6, par. 1, b. f) from Regulation (EU) 2016/679 – the legitimate interests of the company, insofar as they take precedence over the interests or fundamental rights and freedoms of the data subjects;
5.4. Art. 6, par. 1, b. a) of Regulation (EU) 2016/679 – freely expressed, specific, informed, and unambiguous consent of the data subject.
Consent already given can be withdrawn by the person at any time in the same way as it was given, in cases where consent is the only reason for data processing and there is no other legal reason for processing. Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to its withdrawal.

VI. POSSIBLE RECIPIENTS OF YOUR PERSONAL DATA

1. Legal public authorities to respond to legal process or government requests;
2. Subcontractors providing information maintenance and security of the company's software systems;
3. Shipping service providers; payment/banking service providers; marketing service providers; providers of market research services; insurance companies. We share your personal information with these third parties, but only to the extent necessary to perform these services.
4. Other persons, in case it is required by the current regulations and laws.

VII. PERSONAL DATA STORAGE AND RETENTION

1. Personal data of website users is stored for the period of the service itself, and for five years from the service to comply with legal and regulatory obligations, to resolve disputes, and to enforce agreements. You may always request to delete certain information or close your account, and we will respond to this request by retaining certain information, even after the account is closed, when applicable law or legitimate interests require us to do so.
2. Personal data contained in accounting documentation shall be stored within the legally defined terms pursuant to Art. 12 of the Accounting Act;
3. Personal data of employees are stored according to the requirements of the current labor and insurance legislation;
4. The personal data of the trainees are stored for the period until the course and completion of the training;
5. The specified data may be processed outside the specified terms, in case there is a pending judicial, administrative, or other extrajudicial procedure for establishing, exercising and defending legal claims;
6. When there is no legally defined storage period, personal data will be stored for the period necessary to establish, exercise and defend legal claims, including in court.

VIII. SECURITY OF PERSONAL DATA

M&G TRADE SLLC, after assessing the risks to the rights and freedoms of the identifiable individuals whose data it processes, has introduced all appropriate technical and organizational measures to guarantee the protection of personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data transferred, stored or otherwise processed.
M&G TRADE SLLC follows high security standard to protect personal data by implementing appropriate technical and organizational measures in compliance with commercial standards, keeps your data on secure servers using the latest encryption algorithms and guarantees the storage of backup copies.

IX. DATA SUBJECTS HAVE THE FOLLOWING RIGHTS

Your Rights
If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases.
1. Right of access to their personal data being processed, as well as any available information about their source;
2. Right to be get information about whether data concerning you is processed, information about the purposes of this processing, about the categories of data and about the recipients or categories of recipients to whom the data is disclosed;
3. Right to correct inaccurate or update incomplete personal data;
4. Right to block personal data, the processing of which does not meet the requirements of the law;
5. Right to deletion of personal data if there is any of the conditions under Art. 17 of Regulation (EU) 2016/679;
6. Right to restriction of processing if there is any of the conditions specified in Art. 18 of Regulation (EU) 2016/679;
7. Right to personal data portability that concern the data subject and that the data subject has provided to the Company, in a structured, widely used and machine-readable format, in cases where: a) the processing is based on consent or a contractual obligation and b) the processing is carried out in an automated manner.
8. Right to object - when the processing is based on Art. 6, par. 1, b. e) or b. f) of Regulation (EU) 2016/679 – at any time and based on the specific situation of the person in case there are no compelling legal reasons for the processing that take precedence over the interests, rights and freedoms of the data subject, or when there are no reasons for the establishment, exercise or protection of legal claims.
9. Right to object to the processing of your personal data for direct marketing purposes.
10. Right to complain - any person who believes that during the processing of his data there has been a violation of Regulation (EU) 2016/679 or the Personal Data Protection Act, he has the right to submit a complaint within the local data protection authority (Personal Data Protection Commission). Requests for access to information or for correction are submitted in person or by a person expressly authorized by you, through a notarized power of attorney.

X. USE OF COOKIES

1. The proper functioning of the website www.creagifts.art requires the use of cookies, which are aimed to collect certain information from all users, including unregistered visitors to the website who do not use the services provided by the Administrator.
Cookies are used to facilitate the usability of the website and improve its functioning, to analyze the behavior of website visitors as well as for advertising.
"Cookies" are small text files consisting of letters and numbers that will be saved on your computer, mobile phone or other terminal device that has been used to accesses the Internet. The cookie is installed by a request made by the user's terminal to the server of www.creagifts.art or to the server of a third party.

2. Below you can find more about cookies and their purpose for the website:

2.1. Session or so-called temporary cookies
They facilitate the use of the site, as they store information temporarily, only within the session of the used browser. Typically, the information stored through them is what items or services you have added to the cart, which pages of the site you have visited and how you reached some particular information. These cookies do not collect information from your terminal device and are automatically deleted when you leave the Website or terminate your browser session.

2.2. Persistent cookies
Persistent cookies remain on your hard drive or device until you delete them or until their lifetime expires. These cookies are used to ensure security, to facilitate navigation, to present information more efficiently on the screen and to provide you with better service through a more personalized approach. The storage period of this type of cookies varies according to their specific purpose.

2.3. Strictly necessary cookies
These cookies are necessary for the website to function properly and cannot be switched off in our systems. Your consent to these cookies is not required under applicable law, but you should be informed of their use.

2.4. Functional cookies:
These cookies allow the provision of enhanced functionality and personalization in order to provide website visitors with all available services and functionalities. Functional cookies are used to identify visitors and save their preferences and settings. These cookies improve the functionality and customization of the website. They may be created by us or by third parties whose services we have added to our site.

2.5. Audience measurement cookies
They include analytics technologies and help improve the performance and design of our website. This feature allows us to measure how many times a page is visited, to know which pages and features are the most or least popular in order to improve your experience and your customer journey on the website.

2.6. Referral and third-party cookies
These are the so-called "Advertising" cookies installed through our website by us and our advertising partners to show you ads that are relevant to you and better reflect your interests instead of generic ads that you may not be interested in. These cookies may include social network cookies that allow you to share content on social networks and improve the user experience of the website thanks to the sharing options.
The website uses functionalities and services provided by third parties. In order for them to work successfully, cookies are used. The website may contain links to other sites or embedded content from other sites, for example from Facebook, Instagram, YouTube, etc., partner websites. It is possible that when visiting these sites or opening their content, cookies from these websites to be stored on your terminal device. These cookies are defined as "third-party cookies”, and we have no control over their generation and management. We therefore advise you to seek information about them and how they are managed on the respective third-party websites.

2.7. Google
Google products such as Google Analytics 4 and Google Tag Manager are used to improve content management and website traffic statistics as well as for marketing purposes.

3. Cookies or other similar technologies are harmless to use. This data is encrypted in a way that makes unauthorized access to it impossible.

4. In case you do not agree to receive cookies while browsing the website, you could refuse them by adjusting your browser. You could block the receipt of cookies, delete all or part of them or set your preferences regarding the use of cookies before initiating a visit to the website. Cookies and/or other strictly necessary similar technologies are essential for the proper functioning of the website, being set on your device when you enter the website or because of actions performed on it. Deleting or blocking cookies may adversely affect the functions of the website and decrease the quality of your user experience.

5. Consents may be withdrawn at any time. Withdrawal of consent does not affect the fulfillment of contractual obligations.
If you withdraw your consent to the processing of personal data for some or all of the ways described above, the Administrator will not use your personal data and information for the purposes specified above. Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to its withdrawal. To withdraw the given consent, it is only necessary to use the provided option through the indicated contact email on the website.

XI. PROTECTION OF THE RIGHTS OF DATA SUBJECTS

In any case, individuals whose personal data is processed by M&G TRADE SLLC as data administrator can contact the Administrator via e-mail: info@creagifts.art

XII. ADDITIONAL PROVISIONS

1. Privacy policy of M&G TRADE SLLC has been approved by the manager of the company.
2. M&G TRADE SLLC has the right at any time, without notice, to change, update, amend its Privacy Policy to specify all changes in the way personal data has been processed. It is your responsibility as a customer to visit this page periodically and to get acquainted with the latest updates.

Last change: 01.03.2024