Privacy Policy
This Privacy Policy is an integral part of the General Terms and Conditions of ETEL Ltd. and covers matters related to personal data, including what information we collect as a Personal Data Controller, how we use it, and what rights users have in this regard.
ETEL Ltd. acts as a personal data controller pursuant to Regulation (EU) 2016/679 (hereinafter referred to as the “Regulation”).
Controller identification: ETEL Ltd.
Registered office and management address: Sofia, 79D Alexander Malinov Blvd.
UIC: 130583976
VAT number: BG130583976
Legal representative: Nayden Iliev
ETEL Ltd. considers as personal data any information that identifies a specific natural person or relates to a natural person through which they can be identified. The processing of personal data means any operation or set of operations performed on personal data, whether by automated or other means.
I. How do we collect information about you?
1.
We collect personal data only with the explicit consent of the data subject. When you register on our website or use any of the available forms, you voluntarily provide certain information which we process and store. This information includes: first name, middle name, last name, email address, telephone number, date of birth, PINs, comments, and any other information you choose to provide. You may also choose to share location data or photos. We may limit the scope of stored and processed data in accordance with the purposes of processing.
In contractual relationships, for the purpose of contract performance, we obligatorily collect the following personal data: first name, middle name, last name, email address, physical address, telephone number, and gender.
2.
If you choose to purchase a product or order a service via www.etel.bg, we collect payment information, contact details (address and telephone number), and details of the ordered product or service.
3.
We also collect technical information when you use our website. Each time you use the website, mobile application, or other online services, certain information is automatically created and recorded by the system. Categories of collected information include:
a) Log data
When you use the website, our servers automatically record information (“log data”), including information sent automatically by your browser or mobile application. This may include IP address, visited website addresses and activity, searches, browser type and settings, date and time of requests, site usage, cookie data, and device data. For further details, you may contact us via the contact form.
b) Cookies
We use cookies (small text files sent to your device when visiting our website) or similar technologies. We use both session cookies (deleted when you close your browser) and persistent cookies (stored until deleted). Cookies help store language preferences or other settings so they do not need to be reconfigured on each visit. Some cookies are linked to your profile (including information such as your email address), while others are not. More information is available in our Cookie Policy.
c) Device information
In addition to log data, we collect information about the device used to access our website, including device type, operating system, settings, unique device identifiers, and crash data. The scope of collected data depends on the device type and its settings. For more information, please review the policies of your device manufacturer or software provider.
II. Purposes and duration of processing
ETEL Ltd. processes and stores personal data solely for the performance of contractual obligations, processing user requests, delivery execution, and for the following purposes:
a) Pursuant to Art. 6(1)(b) of the Regulation – pre-contractual relations;
b) Pursuant to Art. 6(1)(b) – performance of contractual obligations;
c) Pursuant to Art. 6(1)(a) and Art. 7 – non-personalized advertising;
d) Pursuant to Art. 6(1)(a) and Art. 7 – personalized advertising;
e) Pursuant to Art. 22(2)(c), Art. 6(1)(a), and Art. 7 – personalized data evaluation;
f) Pursuant to Art. 6(1)(e) – marketing purposes;
g) Pursuant to Art. 6(1)(e) – retargeting related to marketing, remarketing, or optimization.
Retention period
Data is stored while the user account is active and for 1 year after its deactivation or deletion, or as long as necessary for service provision. Upon request, data is deleted immediately.
For delivery purposes, ETEL Ltd. may provide personal data to courier or postal service providers, including Econt, Speedy, and Europat. Users may receive SMS notifications or calls from these providers.
III. Your rights regarding personal data
All requests related to personal data rights may be submitted via the Personal Data Contact Form
(https://www.etel.bg/contacts/) or via email at wdd@etel.bg, or by post to the registered address. Requests must allow identification of the requester. The controller will respond within one month.
Under GDPR, you have the right to:
- Information about the processing of your data and notification in case of data breaches.
- Access to your personal data and the right to withdraw consent at any time.
- Rectification of inaccurate or outdated data.
- Erasure (“right to be forgotten”), subject to GDPR conditions and exceptions.
- Restriction of processing under legally defined circumstances.
- Data portability, including direct transfer where technically feasible.
- Objection to processing, including for direct marketing purposes.
- Not to be subject to automated decision-making, including profiling, with significant legal effects.
You also have the right to judicial or administrative protection, including filing a complaint with the Commission for Personal Data Protection, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. (www.cpdp.bg), and to seek compensation for damages.
IV. Security
We implement technical, legal, and organizational measures to protect personal data, including encryption and SSL protocols. Data is not shared with third parties except where required for delivery or legal compliance.
We may use third-party processors acting on our behalf, strictly under GDPR obligations. If processors are located outside the EU, appropriate legal safeguards are applied.
V. Advertising
By registering an account or placing an order, the user explicitly consents to personal data processing for:
a) Participation in marketing surveys via email or messaging platforms;
b) Receiving promotional messages on owned devices;
c) Personalized advertising based on user preferences;
d) Personalized commercial offers via email, mail, or messaging services;
e) Non-personalized advertising and informational messages.
VI. Declaration
In processing personal data, ETEL Ltd. complies with European and national data protection legislation. Through organizational, technical, and legal measures, we aim to ensure a high level of data security and protection against unauthorized processing, destruction, or damage.