Privacy Policy

We from “Chara Castro” EOOD (“Controller”, “We”) value highly your privacy. In the hereby Privacy Policy (“Policy), we describe how we may use your personal data, which we collect for the delivery of our services (“Services”) through the website www.characastro.com (“Website”)

Please read carefully our Policy in order to get a clear understanding of how We may collect, use, protect or otherwise process your personal data in accordance with the applicable data protection legislation, including the General Data Protection Regulation (“GDPR”) and the Consumer Protection Act (“CPA”).

1. Definitions

“Personal data” – all kinds of information that relates to an identified or identifiable subject.

“Cookies” – small files that a site or service provider stores in the memory of your device using the browser you are using (if you have allowed this).

“Data controller” – a natural or legal person, public authority, agency or other entity which alone or jointly with others determines the purposes and means of the processing of personal data.

“Data processor” – a natural or legal person who, on the basis of a contract, processes personal data provided by the Administrator for the agreed purposes.

2. Data controller

The data controller “Chara Castro” EOOD is a legal entity entered into the Commercial Register at the Registry Agency of the Republic of Bulgaria with UIC 206418439, having its seat and registered address at: 8000 Burgas, 74 Probuda Str., floor 2, apartment 6.

3. What data do we process?

We may collect personal data from you when you visit our Website and create a user account, fill out form/forms available on our Website, place a purchase order through the website or otherwise use our Services. 

In the table below you find an overview of the personal data We may collect from you, for which purposes we collect the data, on which legal basis we process your personal data and for how long we retain your personal data:

PurposePersonal dataLegal basisRetention period
Creating a user account with an email address or Facebook accountName and surname;
Email address;
Telephone number;
When you use your Facebook account to create a user account on the Application, We will have access to your name and email address. We will not share your information with or post on social networks without your consent.
Data processing is necessary for the performance of a contractual obligation We have towards you or to take steps at your request before entering into an agreement.The personal data of your user account will be stored until the moment you withdraw your consent by requesting the deletion/erasure of your personal data
Processing a purchase order placed by youName and surname;
Email address;
Physical address;
Telephone number.
Data processing is necessary for the performance of a contractual obligation We have towards you.No longer than it is necessary for fulfilling the purposes the data has been initially collected for.
Providing you with customer support when requestedName and surname;
Email address;
Telephone number.
Data processing is necessary for the performance of a contract with you.
Necessary for our legitimate interest as well.
No longer than it is necessary for fulfilling the purposes the data has been initially collected for.
To personalize your customer experience and to provide content, suggestions and offers that you may be interested in, as well as to improve the quality of our ServicesName and surname;
Email address;
IP address;
Cookie data;
Traffic data;
Geo-location.
Your consentPersonal data collected through cookies and similar technologies will be processed until your preferences for the use of cookies change.
To periodically send you notifications and bulletins regarding our products and Services or any such offered by out partnersName and surname;
Email address.
Your consentThe personal data required to send communication will be processed until you withdraw your consent to receive any such communication.
To contact you, to maintain a followers base on social media and to provide our followers with access to special posts, publications and materials in our social media accounts (e.g. Facebook, Instagram, Youtube)Name and surname;
Email address;
Telephone number;
User name/pseudonym and other data from your social media profiles.
Data processing is necessary to protect our legitimate interest – providing and personalizing our Services.Personal data will be processed until you stop following us on social media.

4. How do we use the stored data?

Any information we collect from you may be used in one of the following ways:

  • To process your order placed on our Site (we need this information in order to provide you with the Services you have requested);  
  • To improve your experience in working with our Site (your information helps us better respond to your individual needs);
  • To improve our Website (we constantly strive to improve our services and functionalities of the Site based on the information and feedback we receive from you);  
  • Improve customer service (your information helps us respond more effectively to your customer service and support requirements);  
  • Sending periodic emails (The email address you provide for order processing can be used to send information and current news/ promotions related to your order or inquiry, if you have agreed to this).

5. Disclosure of personal data to third parties

The collected personal information is not sold, exchanged or in any other way transferred to outsiders. It may be made available to the judiciary if requested and this is necessary to comply with the law, the rules of our Site or to ensure protection of both our and other persons’ rights, property or safety. All information collected that does not qualify as personal data or does not contain classified information may be provided to other parties for marketing, advertising or other use.

6. Compliance with General Data Protection Regulation (GDPR)

The Controller complies with the GDPR requirements related to storing, using and protecting personal data. The Controller shall take all possible technical and organizational measures, recognized by the applicable data protection legislation, in order to protect all data that may be stored and/or processed.

6.1. How do we store and protect your personal data:

Your personal data collected through the use of the Services of “Chara Castro” EOOD may be stored and processed on the territory of the Republic of Bulgaria or in any other state in which it operates. We do not store your personal data outside the European Economic Area (EEA). 

To the extent that We transfer and store personal data to a third country outside the EEA that does not provide an adequate level of protection, We will implement appropriate safeguards to protect the personal data as per Bulgarian legislation or the laws of other EU Member States. In the event of any need to transfer collected personal data outside the EU, We guarantee a high level of data protection through contractual clauses or other instruments recognized by applicable law.

We ensure all required technical and organizational measures in order to protect the data from accidental or illegal destruction or from accidental loss, from unauthorized access, amendment or distribution, as well as other illegal forms of processing. There are policies and procedures designed to protect information from loss, misuse and improper disclosure. Although We work hard to protect your personal information, We cannot guarantee that our actions will prevent any unauthorized attempt to access, use or disclose personal information. However, if you consider that there is a threat to the security of your personal data, please contact us immediately via the contact options specified in section 10 of this Privacy Policy.

We ensure additional information security measures, including access control, strict physical protection and reliable practices for collecting, storing and processing information. Data processing is further ensured by using measures that are consistent with the modern technological achievements as via Secure Socket Layer (SSL) technology upon placing a purchase order through our Website. 

The Controller uses an external credit card processing platform for your online payments when purchasing products through the Website. These companies do not store, share or use personal data for other purposes not communicated to the user and without their explicit consent.

We use the information provided by you (other than customer data) to manage, maintain, improve and provide all the features of the Service you have requested. We process customer data only in accordance with the instructions provided by the customer.

If you wish to access or change any personal data We hold about you, or to request that We delete any information about you that We have obtained through the use of our Services, you may contact us at any time, as stated in the inquiry form on our Website. Upon request, We will block or delete all information We have about you from our database. You can update, correct or delete your account information at any time from your customer section.

Please note that although the changes you make are immediately reflected in active user databases or within a reasonable period of time, We may retain information you provide to prevent fraud, abuse or other legal obligations, or when We consider that there are reasonable grounds thereby. You may refuse to provide us with personal information, in which case We may not be able to provide some of the features of the Website and its Services.

We only store personal data collected from the user while his or her user account is active, or otherwise We store data for a limited period of time while we need it to fulfill the purposes for which we have originally collected it, unless otherwise provided by law. We shall retain and use the information necessary to comply with our legal obligations, to resolve disputes and to enforce our contractual obligations and agreements as follows and with some terms being: (a) Payment information is retained for 11 years in accordance with accounting and tax laws; (b) Information on legal transactions shall be retained for 10 years in accordance with the general limitation period set for civil actions.

7. Terms of Use of the Website

The Terms of Use of the Site are specified in the section “Terms of Use”. They regulate, including but not limited to, the use of resources and functionalities of the Site, refusal to use the Services, liability of the Administrator, rights and obligations of Users.

8. Privacy Policy changes

We may amend this privacy policy from time to time. You can find the most recent version with amendments published on our Website or it may be communicated to the Users when required by law. In case you disagree with the changes you should seize using our services.

9. Your rights

Under the legislation in force, you are entitled to object, at any time and free of charge, to the processing of your personal data, by sending us a written request to legal@characastro.com

You are entitled to receive access upon notification to the personal data we store about you in a structured, commonly used and machine-readable format, by sending us a written request to legal@characastro.com

You are entitled to request the portability of your personal data to another data controller by sending us a written request to legal@characastro.com

If any of the data we have about you is incorrect or inaccurate you may request its correction by sending us a written request to legal@characastro.com

You are also entitled to request the complete erasure of your personal data by sending us a written request to legal@characastro.com

You may also request a restriction on the processing of your personal data with regard to specific actions on collection, processing or transferring by sending us a written request to legal@characastro.com

You are also entitled to request that third parties are notified about the rectification, erasure or restriction on the processing of your data so that these third parties comply with the respective request made by you. 

We shall respond to your request or inform you in writing of the action we take in relation to the request within two months of receiving the request. The period may be extended with additional one month when required due to complexity or the number of requests, of which you will be duly notified.

10. Minimal age

We do not collect or process personal data, which is provided by users under the age of 18 without the consent of their parents or legal guardians. The Controller will delete all information provided by or regarding users who are under the age of 18 and did not receive the consent of their parents or legal guardians for the use of the Platform, its services and content.

11. Contacts

If you have any questions or complaints with respect to the processing of your personal data by us, please contact us by using the information below:

“Chara Castro” Ltd.

8000 Burgas

74 Probuda Str., floor 2, apartment 6

Email: legal@characastro.com

Phone: +359 879 38 33 01

In force of 15 June 2021

Chara Castro EOOD 2021 ©