SITE POLICY & GDPR

SITE USE POLICY, PERSONAL DATA PROTECTION POLICY, COOKIES POLICY

I. Data about personal data controller:

The controller of users’ personal data of the website http://yotovstone.com/ is YotovStone EOOD, address: 8 Rakovski Street, town of Mezdra, value-added tax identification number: BG106509076.

II. Users’ personal data collected and processed by the website administrator:

● When sending an inquiry via the contact form on the website the user enters data regarding: name, telephone and e-mail address

● The website also collects and stores information by means of cookies and other similar technology as per the Cookies Policy.

III. Purposes of collection and processing of users’ data:

● To provide assistance, including to answer your questions in relation to inquiries made

● to improve user experience

IV. Protection of our legitimate interests

There might be cases where we use or transfer information to protect our rights and our business operations. This might include:

● measures to protect the website and the users of yotovstone.com against cyber attacks;

● measures to prevent and detect attempted fraud, including transfer of information to competent public authorities;

● measures to manage various other risks.

The main reason for these kinds of processing is our legitimate interests related to the protection of our business operations with the reservation that we ensure that all measures taken by us guarantee a balance of our interests and your fundamental rights and freedoms.

Moreover, in some cases our processing is based on statutory provisions such as the obligation to protect the goods and values stipulated by the applicable legislation in this regard.

V. Duration of the period of storage of users personal data

The duration of the storage of personal data is determined by the relevant retention period (e.g. commercial and tax periods). After the expiration of that period the relevant data will be deleted provided that they are no longer necessary for the performance or identification of the contract and/or we no longer have legitimate interests in their further storage.

VI. User’s Rights

Users have the following rights related to the processing of their personal data made available to yotovstone.com:

● to demand confirmation that we process their personal data;

● to be given a copy of such data;

● to given information concerning personal data such as, for instance, the data we have, how we use them, whom we disclose them to, whether we transmit them abroad and how we safeguard them, how long we keep them, what rights you have, how you can lodge a complaint, where we have obtained data, etc.

● rectification: the user may request that we rectify or supplement user’s inaccurate or incomplete personal data;

● data erasure: the user may request that his/her personal data be erased only in the following cases:

○ the data are no longer necessary for the purposes for which they were collected; or

○ the user has withdrawn his/her consent (if data processing is based on consent)’ or

○ the user exercises a lawful right to object; or

○ the data have been unlawfully processed; or

○ there is a legal obligation in this regard.

We are not obliged to grant user’s request to have his/her personal data erased if the processing of such data is required:

○ for compliance with a legal obligation; or

○ for the establishment, exercise or defense of a legal claim;

In order to exercise his/her rights the user may contact yotovstone.com by using the contact data stated above. All valid requests made to yotovstone.com will be answered within 30 days unless the request is particularly complex, or unless you have made more requests in which case we will answer within a maximum period of two months.

● Data portability: the user may request that his/her personal data be made available in a structured, commonly used and machine-readable format and may request that such data be directly “transmitted” to another data operator but only if:

○ the processing is based on consent or on a contract concluded with the user;

and

○ the processing is carried out by automated means.

● Right to object: the user may object to the processing of his/her personal data;

The user may object at any time to processing of his/her data for the purposes of direct marketing without stating any reason as in such case the processing will be terminated at our earliest opportunity.

● Complaints: the user has the right to lodge a complaint with the local supervisory authority regarding the processing of his/her personal data. In Bulgaria such supervisory authority is:

Personal Data Protection Commission, address: 2 Prof. Tsvetan Lazarov Blvd., city of Sofia, postal code 1592 (www.cpdp.bg).

If you want to lodge a complaint regarding the processing of your personal data c/o us you can do so by using the contact data first above specified.

VII. Other data about the user collected when visiting our website:

When you visit your website for information purposes only, e.g. without having a registration, we collect information solely from your browser. When you visit our website we collect the following information which we need so that we can technically show you our website:

● date and time of visit;

● quantity of data sent in bytes;

● source of visit;

● browser used;

● operating system;

● IP address.

VIII. Cookies

In order to make your user experience when visiting out website better and to enable the use of certain functions we use the so-called “cookies” on different pages. These are small text files stored at your end-user device. Some cookies we use are deleted after the session of the browser, i.e. after your browser closes (the so-called “session” cookies). Other cookies remain on your device and allow yotovstone.com or our partner companies (third-party cookies) to recognize your browser upon your next visit (permanent cookies). If the cookies are allowed they collect and process some specific user information such as, for instance, data on browser and location as well as IP address values as per the individual requirements. Permanent cookies are automatically deleted after a certain period which may vary depending on the cookie.

In some cases the cookies are used to simplify the ordering process by keeping the settings (e.g. saving the content of a virtual shopping basket upon a later visit of the website).

We work together with advertising partners who help us make our website more interesting for you. To that end the cookies of the partner companies are also stored on your hard drive when you visit our website (third-party cookies). In the following sections you will be informed separately and on a case-by-case basis of the use of such cookies and of the scope of the information collected.

Please take into consideration that you can set your browser so as to be kept informed of the cookies settings and to decide, on a case-by-case basis, whether to accept them or to turn them off for certain cases or as a whole. Different browsers manage differently the cookies settings. This is described in the help menu of each browser which explains how you can change the cookies settings. You can find more detained information about that at the following links:

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://www.mozilla.org/en-US/privacy/websites/#cookies

Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en

Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Opera: http://help.opera.com/Windows/10.20/en/cookies.html

Please be advised that the functionality of our website might be limited if certain cookies are not accepted.

IX. Use of Social Networks

1. Facebook

Our website uses the so-called “plug-ins” of the social network Facebook run by Facebook Inc. of 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). The add-ons are designated by a Facebook logo or the add-on “Social Plug-in for Facebook” or “Social Add-on for Facebook.” You can find a general overview of Facebook’s add-ons and their appearance at: https://developers.facebook.com/docs/plugins

If you do not want Facebook to link the information collected via our website directly to your Facebook account you must log out of Facebook before visiting our website. You can also prevent the plug-ins from loading in Facebook, and thus the data processing procedures described above, by using add-ons for your browser for the future, e.g. with the script blocker “NoScript” (http://noscript.net/)

US-based Facebook Inc. is certified for the EU-US Privacy Shield, the agreement on personal data protection that ensures compliance with the level of data protection applicable in the EU.

You can find the purpose and the scope of Facebook’s data collection and further processing and use of data as well as your rights and settings options for protection of your personal information in the information about Facebook personal data protection at: http://www.facebook.com/policy.php

2. Google

Our website uses the so-called “plug-ins” of the social network Google+ run by Google LLC of 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). The add-ons can be identified, for instance, by “+1” buttons on white or color background. You can find a general overview of Google add-ons and their appearance at: https://developers.google.com/+/plugins

If you do not want Google to directly bring the information collected via our website together with your Google+ account you must log out of Google+ before visiting our website.

You can also prevent the Google+ plug-ins from loading, and thus the data processing procedures described above, by using add-ons for your browser for the future, e.g. with the script blocker “NoScript” (http://noscript.net/)

US-based Google LLC is certified for the EU-US Privacy Shield, the agreement on personal data protection that ensures compliance with the level of data protection applicable in the EU.

You can find the purpose and the scope of Google’s data collection and further processing and use of data as well as your rights and settings options for protection of your privacy in the information about Google data protection at: www.google.com/policies/privacy

3. Linkedin

Our website uses the so-called “plug-ins” of the social network Linkedin run by LinkedIn Corp., 2029 Stierlin Court Mountain View, CA, USA (“Linkedin”). The add-ons can be identified, for instance, by the letters “in”. You can find a general overview of Google add-ons and their appearance at: https://developer.linkedin.com/plugins#

If you do not want Linkedin to directly bring the information collected via our website together with your Linkedin account you must log out of Linkedin before visiting our website.

You can also prevent the Linkedin plug-ins from loading, and thus the data processing procedures described above, by using add-ons for your browser for the future, e.g. with the script blocker “NoScript” (http://noscript.net/)

US-based LinkedIn Corp. is certified for the EU-US Privacy Shield, the agreement on personal data protection that ensures compliance with the level of data protection applicable in the EU.

You can find the purpose and the scope of Linkedin’s data collection and further processing and use of data as well as your rights and settings options for protection of your privacy in the information about Linkedin data protection at: https://www.linkedin.com/legal/privacy-policy

4. Twitter

Our website uses the so-called “plug-ins” of the microblogging service Twitter run by Twitter Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). The add-ons are designated by Twitter’s logo, e.g. in the form of a blue “Twitter bird.” You can find a general overview of add-ons for Twitter and their appearance at: https://about.twitter.com/de/resources/buttons

You can also prevent the plug-ins in Twitter from loading, and thus the data processing procedures described above, by using add-ons for your browser for the future, e.g. with the script blocker “NoScript” (http://noscript.net/)

US-domiciled Twitter Inc. is certified for the EU-US Privacy Shield, the agreement on personal data protection that ensures compliance with the level of data protection applicable in the EU.

You can find the purpose and the scope of Twitter’s data collection and further processing and use of data as well as your rights and settings options for protection of your privacy in the information about Twitter data protection at: https://twitter.com/privacy.

XIII. Online Marketing

Google AdWords implementation tracking

This website uses the online advertising program “Google AdWords” and implementation tracking within Google AdWords, Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). We use the Google Adwords program to attract attention to our attractive offers by using advertising materials (the so-called “Google Adwords”) on external websites. We can determined in relation to the data about advertising campaigns how successful the individual advertising measures are. We are interested in showing you ads that are of interest to you. We want to make our website more interesting for you and achieve a just calculation of advertising costs.

The cookie to track the implementation is set in user’s browser if (s)he click on an advertisement from AdWords delivered by Google. The cookies are small text files stored at your computer system. Usually, these cookies become invalid in 30 days and are not used for personal identification. If the user visits certain page from this website and if the cookie has not yet expired Google and we can tell that the user has clocked on the ad and has been redirected to that page. Every client of Google AdWords receives a cookie. By doing so the cookies cannot be tracked via the website of AdWords clients. The information collected by the cookies is used to provide summarized statistics of the implementation of AdWords which have turned on to track the implementation. We obtain information about the total number of visitors who have clicked on the ad and have been redirected to a page with implementation tracking markers. No information allowing us to personally identify the users is received. If you do not want to participate in the tracking program, you can decline the use of that program by deactivating the implementation tracking cookie in Google via the user settings in your browser. In such case you will not be included in the statistical data for implementation tracking. We use Google Adwords in compliance with article 6, paragraph 1 of GDPR.

US-based Google LLC is certified for the EU-US Privacy Shield, the agreement on personal data protection that ensures compliance with the level of data protection applicable in the EU.

For more information about Google’s privacy rules please visit: https://privacy.google.com/intl/bg/take-control.html?categories_activeEl=sign-in

You can permanently deactivate the “cookies” for the advertising preferences by blocking them via the respective setting of your browser’s software or by downloading and installing the add-on for the browser which is available at the following link: https://support.google.com/ads/answer/7395996

Please pay attention that certain functions of this website may not be used or may be used to a limited extent if you have deactivated the use of “cookies.”

XIV. Web Analysis Services

Google (Universal) Analytics

This website uses Google Analytics, a web analysis service by Google LLC of 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses the so-called “cookies” which are text files stored at your computer to help the website analyze the way users use the website. The information generated by the “cookies” regarding the use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and is stored there.

This website uses Google Analytics with an extension “_anonymizeIp ()” which ensures anonymity of the IP address by shortening it and excluding direct personal connection. Only in exceptional cases will the full IP address sent to a Google server in the USA and stored there. In such exceptional cases the processing shall be made in compliance with article 6, paragraph 1, item “e” of GDPR on the basis of our legal interest in statistical analysis of users’ behavior for optimization and marketing purposes.  

Google will use that information on our behalf to assess the use of the website, prepare reports on website’s activity and provide us with other services related to the use of websites and the internet. The IP address transmitted from your browser in the context of Google Analytics is not integrated with other Google data.

You can decline the use of cookies by selecting the appropriate settings in your browser. However, we should note that in such case you might not be able to use the full functionality of this website. You can ultimately refuse Google to collect data generated by cookies regarding the use of the website (including your IP address) and to process them. You can download and install the add-on for the browser which is available at the following link: https://tools.google.com/dlpage/gaoptout?hl=bg

For an alternative refusal please click on the following link to turn off the cookies which will deactivate Google Analytics’s ability to collect information about this website in the future.

Disable Google Analytics

For more information about how Google Analytics manages the user data please visit the following page: https://support.google.com/analytics/answer/6004245?hl=en

XV. Retargeting and Remarketing

1. Google AdWords Remarketing

Our website uses the remarketing functions in Google AdWords which allow us to advertise the website in Google search results and in the websites of third parties. The provider is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). To do so Google places a cookie in the browser of your device which automatically uses cookie’s pseudonymous ID to enable interests-based advertising. He processing is based on our legitimate interest in optimal marketing activity of our website in compliance with article 6, paragraph 1, item “f” of GDPR.

You can permanently deactivate the cookies settings for ad preferences. You can download and install the browser add-on at the following link: https://www.google.com/settings/ads/onweb/

Another option is to contact Digital Advertising Alliance at www.aboutads.info in order to learn how to set the cookies and do the corresponding settings. And, finally, you can set your browser so as to be kept informed of the cookies settings and to decide, on a case-by-case basis, whether to accept them or to turn them off for certain cases or as a whole. If no cookies are accepted the functionality of our website might be limited.

You can see additional information and Google’s rules on advertising data protection at: http://www.google.com/policies/technologies/ads/

XVII. Other Tools

1. Google reCAPTCHA

On this website we also use the reCAPTCHA function by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). This function is used mainly to determine whether a record is made by a natural person or for irregularly used automatic and automated processing. The service includes sending of IP address and, possibly, other data required by Google for the reCAPTCHA service by Google, and is carried out in compliance with article 6, paragraph 1, item “e” of GDPR on the ground of our legitimately stated interest in avoiding abuse and spam.

You can find additional information about Google reCAPTCHA and Google Privacy Statement at: https://policies.google.com/privacy?hl=en-GB

2. Google Maps

Our website uses Google Maps (AP’I) by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive (national) maps in order to visualize geographic information. The use of this service will show you our location and make it easier for you to find us.

If you do not agree to the future transfer of your data to Google for the use of Google Maps you can fully deactivate the Google Maps web service by disabling the JavaScript application in your browser. In such case you will be unable to use Google Maps and this website will not be displayed on the map.

You can find Google’s General Terms and Conditions at: https://policies.google.com/terms?hl=bg

You can find the additional terms and conditions for use at: https://www.google.com/intl/bg-US/US/help/terms_maps.html

You can find detailed information about data protection in relation to the use of Google Maps on Google’s website (“Google Privacy Statement”) at: https://policies.google.com/privacy?hl=bg

3. Google Web Fonts

This website uses web fonts made available by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). When you send for a webpage your browser loads the necessary web fonts in the cash memory of the browser so that the texts and the fonts can be correctly displayed for you.

In order that you can do so the browser you use must have connection to Google servers. Thus, Google will be informed that our website has been accessed via your IP address. Google Web Fonts are used for uniform and attractive presentation of our online offers and their use is our legitimate interest under article 6, paragraph 1, letter “e” of GDPR. If your browser does not support web fonts you computer uses a default font.

You can find additional information about Google Web Fonts at: https://developers.google.com/fonts/faq and in Google Privacy Statement at: https://policies.google.com/privacy?hl=bg