Privacy Policy

Mandatory information on the rights of individuals to protect personal data

Information about the company processing your data:

Name: "Mega Group 2002" OOD
EIK/BULSTAT: 130885615
Headquarters and address of management: 50 Sinchets street, Bistritsa, 1444, Sofia, Bulgaria
Mailing address: 50 Sinchets street, Bistritsa, 1444, Sofia, Bulgaria
Phone: +(359) 877 209 615
Email: support@monumentatelier.com
Website: www.monumentatelier.com

Information on the competence of a supervisory authority for the protection of personal data

Name: Personal Data Protection Commission
Headquarters and management address: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Address for correspondence: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg

"Mega Group 2002" OOD (Hereinafter referred to as the "Administrator" or the "Company") carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/ 679 of the Parliament and the Council of April 27, 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data. This information is intended to inform you about all aspects of the processing of your personal data by the Company and the rights you have in relation to this processing.


Basis for collecting, processing and storing your personal data

Art. 1. The administrator collects and processes your personal data in connection with the service of the electronic store www.monumentatelier.com and concluding contracts with the company on the basis of Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), and more specifically on the following grounds:
Express consent received from you as a customer;
Fulfillment of the Administrator's obligations under a contract with you;
Compliance with a legal obligation that applies to the Administrator;
For the purposes of the legitimate interests of the Administrator or the third party;

Purposes and principles of the collection, processing and storage of your personal data

Art. 2. (1) We collect and process the following personal data that you do not provide in connection with the e-shop page and include a contract with the company, including for the whole:
of a profile and provision of creation of full functionality when using an online store;
inclusion and performance of a distance contract;
individualization of a party to the contract;
accounting purposes;
statistical purposes;
protection of information security;
ensuring the performance of the contract for the provision of service costs.
sending an information bulletin upon your request;
(2) We observe the following principles when processing your personal data:
legality, good faith and transparency;
limitation of processing purposes;
relevance to the purposes of the processing and minimization of the data collected;
accuracy and timeliness of the data;
limitation of storage in order to achieve the objectives;
integrity and confidentiality of processing and ensuring an appropriate level of personal data security.
(3) When processing and storing the following personal data, the Administrator may process and store personal data for the purpose of protecting legitimate interests:
fulfillment of obligations to the National Revenue Agency, the Ministry of Internal Affairs and other state and municipal bodies.

What types of personal data does our company collect, process and store

Art. 3. (1) The company carries out the following operations, indicated by your personal data, for the following purposes:
Registration of a user in an e-store and execution of a remote sales contract - this entire operation is created on a profile for using the e-store to purchase goods and provide contact details for delivery of purchased goods. Registration and creation of an account to use the online store is not a mandatory stage of the provision of the service and it is available to a significant extent without creating an account.

Exclusion from the evaluation of the action: Based on the evaluation of the action, the operation "Registration of a user in an electronic store and execution of a contract of purchase and sale at a distance" is permissible to perform and provide sufficient guarantees to protect the rights and legitimate interests of the data subject in accordance with GDPR requirements.

Conclusion and execution of a commercial transaction with a client or partner - the purpose of this operation is the conclusion and execution of a contract with a commercial or partner client and their administration. Before the limited scope of the collection of personal data and the fact that some of them are collected from publicly available sources, conducting the impact assessment is not necessary to conduct the impact assessment of the operation.

Sending a newsletter - the purpose of this operation is to administer the process of sending newsletters to customers who have indicated that they wish to receive