This Privacy Policy aims to inform you and inform you of how we use the information we collect, as well as the methods by which you may modify and adjust the information we collect in connection with websites and applications owned or controlled by ” Magnefiks Ltd. and your rights under the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

Magnefiks Ltd. is the administrator of your personal data within the meaning of the applicable legislation in the field of personal data protection.

I. Subject

This privacy policy aims to indicate what personal data we process in the course of our activities in connection with the Site, for what purposes and on what grounds we perform such processing, and to provide additional information and assistance in this connection.

Should you have any questions regarding the protection of your personal data with us, you may use the contact information provided at the end of this Privacy Policy.

Please read this Policy carefully before using our services. It is important to know that:

By registering on our Site, you agree to the Terms of Use and this Policy and you acknowledge that you accept them.
The provision of mandatory personal data is voluntary in order to use or access the services of our Site. Any refusal to provide the personal data you require to use the Services on our Site would mean refusing to use the Services or accessing the Site.
II. Definitions

1. Personal data – any information that is related to a specific individual (individual) that is identified or identifiable;

2. Processing of personal data – any activity that is carried out with respect to personal data, including storage, use, recording, organizing, adapting, transmitting, disclosing, combining, deleting, etc .;

3. Data controller – the person who determines the purposes and means for the processing of personal data;

4. Website – (including cover page and subpages);

5. Ground for processing personal data (ground) – a condition that must be fulfilled in order to have lawful processing of personal data.

6. Visitor: Any person who uploads the Site to their web browser.

III. Types of Data Subjects, Categories of data processed, Purpose of processing, Shelf life. Ground for processing. Users.

Our users visit and use the Site and the services we provide in different ways, which is why we have different categories of users. For each of them we have determined an appropriate amount of data that we collect and process, goals and reasons, storage periods and more. The same user can fall into more than one category.

1. Data that can be automatically collected for all users: With respect to all our users (registered and unregistered), in certain cases we collect and process automatically the following categories of personal data:

IP Address: When you visit the Site, our web server automatically recognizes and collects your IP address, which is assigned by your ISP and does not personally identify you.

Summary: Log files providing a set of system information for the user, namely:

IP address;
ISP (Internet Service Provider);
the browser you use when you visit our Site (e.g., Google Chrome, Internet Explorer, and Mozilla Firefox, etc.)
the time you spent on the Site and which pages on the Site you visited.
The information contained in these files includes:

Cookies: We use cookies to provide you with the information you need and a better and more personalized service when you visit our websites, enabling you to find what you are looking for more easily. The cookies used by our websites allow us to store information about you that does not show personally identifiable information. More information about this can be found in our Cookie Policy.
Web beacons: These are files that allow a website to collect information about the number of users who have visited it and to access their cookies.
2. Data that can be collected by user category:

Online IDs stored in local cookies in the visitor’s device / browser;

Location details provided by the visitor;

Country / city data based on the IP address of the user device, an integral part of the information received from each web site; Information about actions taken by the subject on the Site;

Subject’s preferences regarding specific aspects and settings for platform functionality; Information about the type of browser / device used.

3. Processing objectives:

Provision of basic and ancillary functions necessary for the proper and full functioning of the Site; Site traffic census;

Providing the necessary conditions for implementing services on marketing platforms.

4. Shelf life: Until the expiration of each cookie (up to 1 year from the moment of its recording), the media of the relevant information, or until its deletion by the subject in whose device / browser is stored.

5. Legal basis for processing: Agree to the Cookie Policy.

6. Consumers

6.1. Registered users

Registered user is any Visitor who has registered on the Site, which creates his so-called profile or account. Registering an account on our Site allows you to use a wider range of services. Users who have registered a site account / account have the opportunity to write comments under articles and to publish and manage listings.

6.1.1. Categories of data for registered users that can be processed:

Required information – marked with an asterisk next to the relevant field in the registration form: Username; E-mail; Password

Optional data – provided at your request:

Name; gender; date of birth; interests; occupation / profession.
Invoice Details: For Individual: First and Last Name, Address. For legal entity: Full name, address, UIC, VAT registration, VAT No, MOL.
6.1.2. Purpose of processing:

a) Enabling the user to register his / her account allowing the use of services of the Site, maintaining a profile, interacting with other users, etc.

(b) Processing objectives related to and / or necessary for the performance of a contract with the data subject:

Providing information services accessible through the Site, including for providing various functionalities;
Communication with registered users, including by electronic means, regarding the services provided through the Site.
The storage of certain log files is necessary for the provision of the services themselves.
c) Purposes for the processing of personal data necessary for the purposes of the legitimate interests of the Company or of third parties:

Demonstration of wills and other actions taken by the user in creating and managing a profile and using the services on (including by collecting and storing log files).
Ensuring the proper functioning and use of the Site;
Protection of the rights and legitimate interests of the Company and its trading partners / other 3rd parties against claims.
6.1.3. Term of storage: pending the receipt of a request for deletion of the registered profile, sent by the User to e-mail:

6.1.4. Legal basis for the processing of the mandatory data: Consent to the Terms of Use of the Services at (performance of a contract with the data subject) and in view of the legitimate interests of the Company or of third parties (in accordance with the above processing purposes ).

6.1.5. Legal basis for the processing of optional data: Consent of the user (provided at his request).

6.2. Visitors using Facebook in Log In with Facebook

When a User uses his or her Facebook account for registration, he / she authorizes the Administrator to obtain partial data from his / her account in the respective external service, which is allowed by the User to provide through his settings in the respective external service, whereby:

a) The Administrator may receive User data such as Names, Gender, Age, Residence, Photo / Avatar, which data is added to the created User account on the Site.

b) The Administrator may have the opportunity through the relevant external service to send notices to the User sent within the respective external service for communication purposes (for example: private notifications on Facebook).

The information which, through automatic technical means, the Administrator can receive and process in the described manner is entirely determined by the user – through his settings within the relevant external service (Facebook), in which he has an account and which account he decided to link to the account you are on the Site. User input with this external service is deemed to be consent to the processing of data provided through them.

IV. Publish, modify and delete User Content on the Site.

The site publishes user content from registered users. Personal data may be contained in the consumer content and the respective user is fully responsible for the lawful processing of the data contained in the content uploaded by him and will be obliged to compensate the Company in case of damage suffered by him (property sanctions or damages). in connection with personal data contained in the User Content.

In this regard, the categories of data that can be processed are:

a) Identification data:

e-mail address, password, profile avatar and other optional data specified by the User in his profile;
b) Other:

any other information contained in the posted user content (including names, videos, photos, etc.);
IP address and activity (resources visited by the Site), activity history (behavioral interests) – which addresses were visited, how much time was spent on them.
Processing objectives required to fulfill legal obligations:

Take measures to prevent / remove illegal consumer content (child pornography, hate speech, copyright infringement, etc.);
Fulfillment of requests from public authorities to provide information (eg commenting IPs);
Fulfillment of other legal obligations.
Purpose of processing

We use this data:

for the purposes of registering and maintaining your account
for providing specific services that are only available after registration, including: posting comments and posting material on our contact page
your participation in games organized by us in which you have participated, including awarding prizes;
resolving disputes and resolving problems; to communicate with you.
We process the information you provide to us at the time of your registration and whose submission is not mandatory for the purposes of registration, upon your consent.

Your data may be used for the direct marketing of our services and the services of our partners, as well as for the provision of other additional services, only with your consent.

We process the data we collect from log files, cookies, and web directories for the following purposes:

to give you access to our Site;
to personalize ads for our products and our partners’ products;
to measure and track statistical dependencies with a view to enhancing the quality of our services and hence the interest in them.
IP address recognition and collection is accomplished for the following purposes:

disclosure of the identity of users of the Site, in compliance with law and regulations, to protect our rights and legitimate interests;
to analyze traffic to our Site and to prevent malicious attacks;
display of ads and information related to your location, service information.
We carry out these actions on the basis of our legitimate interests to grow our business and to protect our rights and our legitimate interests in the event of disputes, as well as in certain cases on the basis of mandatory prescriptions of the law.

In certain circumstances, we may use your personal information to protect our rights and legitimate interests, as well as the rights and legitimate interests of third parties, for example in the case of a court or out-of-court dispute.

NB! An important requirement for consenting to the processing of personal data of persons under 16 years of age is the consent to be given by the parent, respectively the guardian or guardian of the person.

VI. Who has access to your personal information and how we protect your personal information

Maintaining the privacy and security of your personal information is of the utmost importance to us. In this connection, access to your personal data is provided only insofar as it is necessary for the fulfillment of the above purposes for which we process your personal data, to the following categories of persons:

Our employees and persons engaged in a non-work contract – to perform certain work.
Persons providing hosting services (servers) for our sites and other technical services for the maintenance of our systems (including their employees and subcontractors), for this purpose we have concluded the contract with the data processor, as required by the applicable legislation;
Professional consultants (lawyers, accountants, etc.), insofar as is necessary for the exercise and protection of our rights and legitimate interests.
Government bodies, upon request of them in connection with the exercise of their public powers conferred on them by Bulgarian law, as well as in taking action to protect our rights and legitimate interests.
To ensure the security of our Site, the personal information you provide to us is protected by SSL (Secure Socket Layer) technology, a method of encrypting personal data. The password you provide to us when you register with our Site is encrypted to protect against unauthorized access to your personal information.

We do our best to protect your personal information, but you should still keep in mind that transmitting information over the internet can never be completely secure.

VIII. Terms within which we store your personal information

We store your personal data for as long as is necessary to ensure the effective functioning of our Site, the performance of our contracts and the fulfillment of our legitimate interests. The specific time limits for storing certain categories of data are indicated in the appropriate places in this Policy.

In the general case of processing personal data of registered users, we store the personal data for as long as your account exists on the Site or until you explicitly wish your personal data to be deleted.

It is important to know that you may at any time opt out of using our services and withdraw the express consent to use your personal data – where consent is the reason for processing it. In such cases, we will discontinue using your data and providing our services to you as far as possible.

In certain cases, even if your personal information is terminated due to deletion of the account due to inactivity or due to the explicit withdrawal of the consent provided by you, we may keep an archive of your personal data as far as necessary for protection of our rights and legitimate interests, for the period up to the statute of limitations provided for in the applicable law. Generally, these periods are 5 years, but in certain circumstances they may be shorter or longer.

You should be informed that your IP address is collected automatically every time you visit our Site, whether or not you have abandoned our services. In these cases, if you do not want us to have access to your IP address, you should not visit our Site.

VIII. Your rights regarding your personal data

As a person whose personal data we process, the applicable data protection legislation gives you certain rights that you can effectively exercise in the cases provided for by law.

In short, your rights are:

Right of access. You have the right to ask us to confirm whether we are processing your personal data and, if so, to obtain such data as well as additional information;

Right of correction. If you find that your personal information we process is incomplete or inaccurate, you may request that it be corrected or supplemented.

Right to be deleted (right to “be forgotten”). In certain circumstances – such as if your personal information was processed illegally, you may want to delete all personal data about you. In certain cases, this right is also related to your right to withdraw our consent (if the processing of personal data is based on consent) and there is no reason to continue processing it, to process your personal data.

Right to restrict processing. In certain circumstances – such as if you have doubts about the accuracy of your personal data or have objected to our legitimate purpose for processing your personal data, you may want to restrict the processing of your personal data, which should stop the active use of your personal data. however, without permanently deleting / destroying the data.

Data portability right. When we process your personal data on the basis of your consent or on a contractual basis and the processing of your personal data is carried out in an automated manner, you have the right to receive the personal data you have provided to us in a structured, widely used and machine-readable format , as well as transferring them to another administrator or requesting us to transfer them to another administrator.