PRIVACY POLICY

This Privacy Policy is intended to inform you about the way “K and A select” Ltd. (hereinafter referred to as “we” or “K&A select”) collects, uses, stores, and protects your personal data when using our website and services. We take the protection of our users’ personal information with utmost seriousness and responsibility, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) and the applicable Bulgarian legislation.

Through this document, we aim to clearly and transparently inform you about our data processing practices and your rights as a data subject.

We reserve the right to periodically update this policy, and any changes will be published on our website. We recommend checking this document regularly.

1. Who are we?

K&A select is a trademark owned by “K and A select” Ltd., a company established in Bulgaria, registered in the Commercial Register under UIC 208258823, with registered office and management address in Sofia, Mladost 4, bl. 469А, en. 3, fl. 2, ap. 3.

For the purposes of personal data processing, we are the data controller under GDPR. If you have questions regarding your data protection, you may contact our Data Protection Officer by email: office@kaselect.bg, or by post at: Sofia, Mladost 4, bl. 469А, en. 3, fl. 2, ap. 3, addressed to “The Data Protection Officer at K&A select.”

2. What personal data do we collect?

We collect the following categories of personal data depending on your interaction with us:

• When creating an account: first name, last name, email address, password.

• Additional profile information: photo, gender, nickname, phone number, delivery address, additional email, date of birth, and others.

• When placing an order: products, delivery address, billing details, payment method, phone number, bank card data (processed via third-party payment systems).

• Via social media login (e.g., Facebook): personal data provided by the respective platform based on your settings.

• Online behavior information: visit history, interests, viewed products, shopping behavior, etc.

• Information collected via cookies: we use cookies to manage sessions, store preferences, and personalize advertising. More details can be found in our Cookie Policy.

• Data from third parties: Google Analytics, Facebook Pixel, ad networks (e.g., AdRoll), and social media profiles when used for login or engagement with us.

3. Why do we use your data?

We process your personal data for the following purposes and legal bases:

3.1. Contract performance and service provision

• Account management;

• Order processing and delivery;

• Payment processing;

• Communication regarding order or product issues;

• Refunds and product returns;

• Customer support and service.

3.2. Service improvement

Based on our legitimate interest, we analyze user behavior and conduct satisfaction surveys to enhance your user experience.

3.3. Marketing and personalized offers

With your explicit consent (or based on our legitimate interest), we may send you messages about:

• Promotions, discounts, new products;

• Personalized offers based on your activity;

• Products added to your profile or cart.

You may unsubscribe at any time via the link in the message, through your profile, or by contacting us.

3.4. Protection of legitimate interests

We process data for:

• Fraud and abuse prevention;

• Risk management;

• Cybersecurity and platform protection.

4. How long do we store your data?

Your personal data will be stored:

• As long as your account is active;

• Until legal obligations are fulfilled (e.g., accounting);

• Until the expiration of periods for legal claims protection.

5. Sharing personal data with third parties

We share personal data only when necessary and with signed contracts in place with the following partners:

• Courier and logistics companies;

• Banks and payment operators;

• Marketing and advertising platforms;

• IT support and hosting providers;

• Public authorities, where required by law.

6. Transfer of data outside the EU

In certain cases, your data may be transferred to countries outside the European Economic Area. In such cases, we ensure an adequate level of protection through standard contractual clauses or other mechanisms recognized by the European Commission.

7. How we protect your personal data

We apply modern technical and organizational measures to safeguard your data, including:

• SSL encryption;

• Restricted access to databases;

• Regular testing and evaluation of security measures;

• Internal procedures for controlled data processing.

Despite these measures, data transmission over the internet is not entirely secure and we cannot guarantee absolute protection.

8. Your rights

According to the GDPR, you have the following rights:

• Access your personal data;

• Rectification of inaccurate or incomplete data;

• Erasure of data under certain conditions;

• Restriction of processing;

• Data portability to another controller;

• Objection to processing based on legitimate interest;

• Withdrawal of consent, when processing is based on consent;

• Complaint to the Data Protection Commission.

To exercise your rights, you can contact us:

• By email: [insert email];

• By post: [insert address];

• Via your website account.

We may request additional information to verify your identity in order to prevent unauthorized access.

9. Complaints and contact

If you believe your data has been processed unlawfully, you may lodge a complaint with:

Commission for Personal Data Protection
Address: 2 Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Phone: +359 2 915 3580
Email: kzld@cpdp.bg
Website: www.cpdp.bg

We encourage you to contact us first so we can resolve your issue amicably.

Last updated: 09.04.2025