PRIVACY POLICY

of the website www.magicartdigital.com

In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation / GDPR).

Information regarding the company processing your data:

Name of the Provider: "Verdina Ltd."
Registered office and address of management: Debelets 5030, 48A Ivan Vazov Str., Bulgaria
Address for business operations and address for submitting consumer complaints: Debelets 5030, 48A Ivan Vazov Str., Bulgaria
Correspondence details: sales@magicartdigital.com, Phone: +359 877 537 235
Registration in public registers: UIC 205120226
Email: sales@magicartdigital.com
WEB: magicartdigital.com

1. Introduction

The security and proper use of personal data are of utmost importance to us. Our Privacy Policy does not regulate rights and obligations, but aims to explain to users what personal data we process in connection with the provision of goods and services, why and how we process it, including when it is necessary to disclose personal data to third parties. It also provides information about the rights users have regarding the processing of personal data by "Verdina Ltd.".

For greater clarity and convenience of users, throughout this Privacy Policy, examples are provided to illustrate why and/or how "Verdina Ltd." processes users' personal data. These examples are not part of this Privacy Policy and are not exhaustive.

2. Core Principles of Personal Data Processing

We process personal data lawfully, fairly, and in a transparent manner;
We process personal data collected for specified, explicit, and legitimate purposes, and not further processed in a manner that is incompatible with those purposes;
The personal data processed is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed ("data minimization");
The personal data processed can be kept up to date at all times, as we take all reasonable steps to ensure that inaccurate personal data is erased or rectified without delay, having regard to the purposes for which it is processed ("accuracy");
Personal data processed by us is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed ("storage limitation");
Personal data processed by us is kept in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures ("integrity and confidentiality").

3. Data Controller

The Personal Data Controller is:

"Verdina Ltd."

UIC: 205120226

Registered office and management address: Debelets 5030, 48A Ivan Vazov Str., Bulgaria

If you have questions regarding privacy at "Verdina Ltd." or wish to contact us regarding an issue related to personal data protection, you can reach us at the following email: sales@magicartdigital.com or phone: +359 877 537 235.

This Privacy Policy may be modified in accordance with national and European legislation. Any changes take effect from the moment of their publication on this page. We advise you to check our website frequently to view the latest updates.

Our Privacy Policy will not be changed in a way that provides less protection of the personal data of our customers and users without their explicit written consent.

4. What Personal Data We Process

We collect your personal data in order to provide our goods and services and to continuously improve them. Here are the types of information we collect:

Information you provide to us:

We receive and store any information you provide in connection with the services and products of "Verdina Ltd.", such as:

information relating to searches on the platform;
orders placed by you;
details from your user account login (if applicable);
email address necessary for communication with you;
phone number necessary for communication with you;
physical address necessary for communication/delivery;
completed fields in contact forms or sent email messages for inquiry purposes;
requests for access to personal information, etc.

Automatic Information:

We automatically receive and store certain types of information when you use the website www.magicartdigital.com, such as: information about your usage, including your interaction with content and services available through the website.

Like many websites, we use "cookies" and other unique identifiers, obtaining certain types of information when your web browser or device accesses the site, such as:

the Internet Protocol (IP) address used to connect your computer or other device to the internet;
email address and encrypted password; information about computer, device, and connection such as device type, application version or browser type, browser plug-in types and versions, operating system, or time zone settings;
location (village, town, or regional city) of your device or computer accessing the website;
content interaction metrics, such as content downloads, streams, and playback details, including duration and number of simultaneous streams and downloads, network data for streaming and download quality, including information about your internet service provider;
device metrics, such as when a device is in use, application usage, connectivity data, and any errors or event failures;
website performance metrics (e.g., technical errors, your interactions with service features and content, settings preferences, backup information, device location with application, information about uploaded images and files (e.g., file name, dates, and image location)), etc.

We may also use device identifiers, cookies, and other technologies on devices, apps, and web pages to collect browsing, usage, or other technical information for fraud prevention purposes.

Information from Other Sources:

We may receive information about you from other sources, such as: updated delivery information for services or products purchased through the site (where such functionality is available), page view count information.

What are "Cookies"?

In order to provide our services and successfully deliver any offered products, informational pages, or other content provided by "Verdina Ltd.", we use "cookies". For more information about cookies and how we use them, please read our Cookie Policy.

5. Legal Basis for Collecting and Processing Your Personal Data

We collect and process your personal data lawfully and in accordance with this Privacy Policy.

We process data only when you have given your explicit consent to the processing of personal data, or when processing is necessary for the performance of a contract to which you are party, or in order to take steps at your request prior to entering into a contract (navigation and browsing on the site without placing an order is considered such a step).

Data processing is also necessary for the purposes of our legitimate interest, namely: where without processing certain types of data we would be unable to provide our services, conclude purchase contracts for products/services on the site, improve the site and customer service, and deliver value to our users. For example, collecting search data on the site is in our legitimate interest as it serves as a primary method for determining service quality and demand for our products.

Due to the existence of the above legal grounds, should you choose not to provide "Verdina Ltd." with the required personal data, "Verdina Ltd." will be technically and practically unable to supply its goods and services to you.

6. Purposes of Personal Data Processing

We process your personal data to provide and improve the goods and services on the website. These purposes include:

Purchase and delivery of products and services: we use your personal information to take and handle orders, deliver products and services, process payments, and communicate with you about orders, products, services, and promotional offers.
Providing, troubleshooting, and improving "Verdina Ltd." services: we use your personal data to provide functionality, analyze performance, fix errors, and improve the usability and effectiveness of the site.
Recommendations and personalization: we use your personal data to recommend features, products, and services that might interest you, identify your preferences, and personalize your experience on the site.
Compliance with legal obligations: In certain cases, we have a legal obligation to collect and process your personal data. For example, we process personal data to comply with statutory accounting and tax legislation obligations. Furthermore, under consumer protection laws, when a consumer purchases a product or service from "Verdina Ltd.", "Verdina Ltd." is required to provide a legal warranty. To fulfill this obligation, "Verdina Ltd." must process basic consumer details (establishing the right to submit a warranty claim) and contract details (verifying whether the product remains under warranty).
Written or verbal communication: we use your personal data to communicate with you regarding goods and services via various channels (e.g., phone, email, chat, or other communication media).
Fraud prevention and credit risks: we process personal information to prevent and detect fraud and abuse in order to protect the security of our customers.

Purposes for which we seek your consent:

We may also ask for your consent to process your personal information for a specific purpose that we communicate to you. When you consent to our processing of your personal information for a specified purpose, you may withdraw your consent at any time and we will cease processing your data for that purpose. However, if processing is required under another lawful basis, we may continue processing it accordingly.

7. Categories of Recipients to Whom We Disclose Personal Data

Information about our customers is an important part of our business, and we do not sell or disclose it to third parties for their own independent purposes. "Verdina Ltd." may share customer personal information (or parts thereof) only as described below and with third parties that follow practices at least as protective as those described in this Privacy Policy.

"Verdina Ltd." may share customer personal information with third parties acting as data processors. Data processors are entities processing personal data on behalf of and per instructions from "Verdina Ltd." under a written contract. They are not entitled to process the personal data provided to them for any purpose other than performing the tasks assigned by "Verdina Ltd." Processors are strictly obliged to follow all instructions issued by "Verdina Ltd."

"Verdina Ltd." takes all necessary steps to ensure that engaged processors strictly adhere to data protection legislation and "Verdina Ltd."'s instructions, having implemented appropriate technical and organizational measures to safeguard personal data.

Examples of data processors include:

Courier and logistics service providers;
IT system deployment and/or maintenance service providers who may occasionally need access to personal data processed in relevant systems to provide service support;
Law firms, accounting agencies, or other professional advisory service providers;
Hosting service providers.

"Verdina Ltd." may share personal information with banks and payment service providers. In connection with handling user payments made via bank transfer or through payment institutions, data exchange between "Verdina Ltd." and the relevant financial/payment institution is necessary.

Third parties in connection with business restructuring or transfer: In the event of a corporate reorganization of "Verdina Ltd." (e.g., merger or acquisition) or asset transfer under applicable law, user personal data managed by "Verdina Ltd." may be transferred to a third-party legal successor.

Competent public authorities: Bulgarian law requires "Verdina Ltd." to store certain personal data regarding users for specified statutory periods. Under statutory prerequisites, such data processed by "Verdina Ltd." must be disclosed to competent state authorities.

8. Methods Applied to Protect Your Personal Information

We work diligently to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you input.

In addition, we maintain physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of your personal data. Our security procedures mean that we may occasionally request proof of identity before disclosing personal information to you.

Devices storing your personal data offer security features to guard against unauthorized access and data loss. It is important for you to protect against unauthorized access to your password and to your computers and devices. Be sure to sign out when finished using a shared computer.

9. Retention Period for Personal Data

"Verdina Ltd." retains users' personal data for as long as necessary to fulfill the purposes set out in this Privacy Policy or to comply with statutory legal requirements.

To comply with our obligations arising under tax and accounting laws, data for a given user is stored for a period of 11 years, starting from the termination of their last contract, provided the user has no outstanding debts owed to "Verdina Ltd."

Upon expiry of the processing retention periods, personal data is either anonymized or deleted/destroyed, unless:

it is required for pending judicial, arbitration, administrative, or enforcement proceedings, or in the event of a consumer complaint requiring review by "Verdina Ltd."; or
the relevant data subject has exercised their right to request restriction of processing.

"Verdina Ltd." makes reasonable efforts to ensure that processed personal data is kept up to date (and rectified where necessary) and that unnecessary data is not retained beyond the defined purposes.

10. General Information on Data Subject Rights

"Verdina Ltd." acts upon a natural person's request to exercise rights under this section only if it is in a position to identify the person concerned. Only individuals who can be identified by "Verdina Ltd." may exercise their rights. If the purposes for which "Verdina Ltd." processes personal data do not or no longer require identification of an individual, "Verdina Ltd." is under no obligation to maintain, acquire, or process additional information to identify the data subject solely for complying with such a request.

"Verdina Ltd." notifies individuals of action taken within one month of receiving the request, which may be extended by up to two further months where necessary.

"Verdina Ltd." provides individuals with information on actions taken regarding their requests without undue delay and in any event within one month of receipt. If necessary, this period may be extended by two further months, taking into account the complexity and number of requests. "Verdina Ltd." informs the data subject of any such extension within one month of receipt, stating the reasons for delay.

In case of refusal to fulfill a request, "Verdina Ltd." informs the individual of their rights. If "Verdina Ltd." does not take action on the request, it notifies the person without delay and at the latest within one month of receipt of the reasons for not taking action, as well as the possibility of lodging a complaint with the Commission for Personal Data Protection and seeking a judicial remedy.

Additional Information for Identity Verification:

Where "Verdina Ltd." has reasonable doubts concerning the identity of the physical person making a request under this section, "Verdina Ltd." may request the provision of additional information necessary to confirm identity.

Actions taken by "Verdina Ltd." regarding requests to exercise rights are free of charge, unless requests are manifestly unfounded or excessive. Where a request is manifestly unfounded or excessive (for instance due to its repetitive character), "Verdina Ltd." may either:

a) refuse to act on the request; or

b) charge a reasonable fee based on administrative costs incurred in providing the information or taking the requested action.

11. Specific Rights of Users

Right of Access:

Users have the right to obtain confirmation from "Verdina Ltd." as to whether personal data concerning them is being processed, and where that is the case, access to the personal data.

Rectification of Inaccurate or Outdated Data:

If personal data processed by "Verdina Ltd." is inaccurate or outdated, users have the right to request "Verdina Ltd." to rectify it without undue delay.

Erasure of Personal Data ("Right to be Forgotten"):

Users have the right to request "Verdina Ltd." to erase personal data concerning them in the following cases:

the personal data is no longer necessary in relation to the purposes for which it was collected or processed;
the user withdraws consent on which processing is based and there is no other legal ground for processing;
the user objects to processing based on legitimate interests of "Verdina Ltd.", and there are no overriding legitimate grounds for processing, or the processing is required for the establishment, exercise, or defense of legal claims;
the user objects to processing for direct marketing purposes;
personal data has been unlawfully processed;
personal data must be erased for compliance with a legal obligation under Bulgarian law or European Union law to which "Verdina Ltd." is subject.

Restriction of Processing:

Users have the right to obtain from "Verdina Ltd." restriction of processing where:

the accuracy of the personal data is contested by the user, for a period enabling "Verdina Ltd." to verify its accuracy;
the processing is unlawful and the user opposes erasure, requesting restriction instead;
"Verdina Ltd." no longer needs the personal data for processing purposes, but it is required by the user for the establishment, exercise, or defense of legal claims;
the user has objected to processing pending verification whether legitimate grounds of "Verdina Ltd." override those of the user.

Data Portability:

Users have the right to receive personal data concerning them provided to "Verdina Ltd." in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller without hindrance, where:

processing is based on consent or performance of a contract; and
processing is carried out by automated means.

Users have the right to have personal data transmitted directly from "Verdina Ltd." to another controller where technically feasible.

Right to Object:

Users have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them based on legitimate interests. In certain cases, this right is absolute and "Verdina Ltd." will always cease processing upon objection—such as where data is processed for direct marketing purposes.

In other cases, depending on the nature of the objection and circumstances presented, "Verdina Ltd." will review the request and decide whether to:

a) notify the user that processing will cease; or

b) state reasons refusing to cease processing where compelling legitimate grounds exist.

How to Exercise Your Rights:

You may exercise your rights of access, rectification, erasure, restriction, and data portability by sending a written communication to the controller via email at: sales@magicartdigital.com.

12. Right to Lodge a Complaint with a Supervisory Authority

Users have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) if they consider that "Verdina Ltd." infringes applicable data protection legislation.

Supervisory Authority: Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Tel.: +359 2 915 3518 / +359 2 915 3519
Email: kzld@cpdp.bg
Website: https://www.cpdp.bg

Users may also lodge complaints with other supervisory authorities within the European Union, as provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation).