Privacy policy

(valid from 25 May 2018)

HOMES LINEN Ltd. online store at www.homeslinen.com processes personal data of visitors and registered customers for the purposes of marketing, selling, and delivery of bed linen and other home products, in addition to any related auxiliary activities.

The excellent and fast delivery service of quality bed linen and other home textile items represents our mission. In order to carry out this activity, we provide information regarding the choice and maintenance of these products, their origin and manner of use, together with similar products or their combinations.

Data Controller (the Controller), where the data is processed by HOMES LINEN Ltd, UIC: 202217887 with seat and management address – 54 Han Omurtag Str., Sredets, Sofia.

The data protection officer of the Controller will answer all your inquires related to the processing and protection of personal data, and will make the process of the exploitation of your rights of use as a personal data subject more user-friendly and easily understandable. To directly contact the officer, use the e-mail address: info@homeslinen.com

Types of personal data processed by the online store

I. On contractual basis, we process the following data categories:

1. Data included in your profile at homeslinen.com, where the profile is created by concluding an informal contract with the Controller, accepting the Terms and Conditions of the website and the online store - www.homeslinen.bg, (Terms and Conditions):

● First and family name;

● E-mail address;

● Password;

2. Data of the online order you have placed at www.homeslinen.com, by concluding an informal distant contract with the Controller in compliance with the Terms and Conditions:

● First and family name of the person entitled to accept the delivery;

● Delivery address – country, city, postal code, address;

● Contact phone number for the delivery;

● Invoice data – names, phone, city, country, postal code, address;

● Delivery method;

● Payment method;

● Order number;

● Amount due;

● Payment status;

● Delivery status;

3. Loyal Customer’s data, obtained by concluding an informal or formal contract with the Controller for the purpose of issuing a “Loyal Customer Card”, which makes the customer eligible for a discount on future orders:

● First and family name;

● E-mail address;

● Contact phone number;

II. We process the following data on the basis of your consent, expressed by deliberate action – independently entering non-obligatory data and/or your free choice of specific options:

1. Your profile data at www.homeslinen.com:

● Name of the legal entity and/or the name of another incorporated or unincorporated entity/organization;

2. Contact data, a sent message or a published comment, provided by filling out a contact form online at www.homeslinen.com, or by sending us an e-mail, postal mail, telegram, fax, SMS, or by a phone call, a published blog comment, and by other communication and/or expression means:

● First and family name;

● E-mail address;

● Contact phone number;

● Fax number;

● Address;

● Website;

● Comment/message content;

3. Data included in an online order placed at www.homeslinen.com:

● History of orders;

You can withdraw any of the above granted consents by using the profile settings or in accordance with the form and method laid down in this Policy. In the case of consent withdrawal, the processing of the relevant type of personal data for the described purposes will be terminated. The consent withdrawal does not affect the lawfulness of the processing, based on granted consent prior to its withdrawal.

III. On legal basis, we process the following data in accordance with the local and EU legislation:

1. Your profile data at www.homeslinen.com:

● First and family name;

● E-mail address;

● Name of а legal entity and/or the name of another incorporated or unincorporated entity/organization;

2. Data included in an online order placed at www.homeslinen.com:

● Delivery address – country, city, postal code, address;

● Contact phone number for the delivery;

● Invoice data – full name, phone, city, country, postal code, address;

● Delivery method;

● Payment method;

● Order number;

● Amount due;

● Payment status and history;

● Delivery status and history;

● History of orders;

3. Loyal Customer’s data:

● First and family name;

● E-mail address;

● Contact phone number;

IV. Based on legitimate interest, we process the following data:

1. Your profile data at www.homeslinen.com:

● First and family name;

● E-mail address;

● Name of а legal entity and/or the name of another incorporated or unincorporated entity/organization;

2. Data included in an online order placed at www.homeslinen.com:

● Delivery address – country, city, postal code, address;

● Contact phone number for the delivery;

● Invoice data – full name, phone, city, country, postal code, address;

● Delivery method;

● Payment method;

● Order number;

● Amount due;

● Payment status and history;

● Delivery status and history;

● History of orders;

3. Loyal Customer’s data:

● First and family name;

● E-mail address;

● Contact phone number;

Purposes for processing of personal data

1. Your personal profile data at www.homeslinen.com are processed for the following purposes:

● To meet the Controller’s reporting obligation by recording of legally relevant certifying data in electronic protocols – technical logs;

● Delivery of ordered items;

● To provide support if technical faults occur, to inform customers via our contact (call) center, or in the case of claims, delivery tracking, payments, etc;

● Verification by sending an e-mail, to guarantee the access security to your profile data and in the case of password change;

● Authentication when entering your profile;

● To send messages by e-mail and/or push notifications for the purposes of direct marketing and advertising in the case of your explicit consent;

● To observe the regulations of legislative decrees, court decisions, law enforcement, and decisions of authorities and supervising bodies. This includes the use of your personal data in relation to collecting and auditing of accounting data and observing the accounting rules;

2. The data included in an online order placed at www.homeslinen.com are processed for the following purposes:

● To deliver the ordered food and products;

● To provide support if technical faults occur, to inform customers via our contact (call) center, or in the case of claims, delivery tracking, payments, etc;

● To prevent and investigate misuse related to online orders and their deliveries, as well as in cases of losses and frauds;

● Analysis of statistical data obtained by anonymisation of your personal data;

4. Contact data and any sent message or published comment is processed for the following purposes:

● Your identification as the sender/author of the message or published comment;

● Communication with you;

5. The loyal customers’ data are processed for the following purposes:

● To carry out our contractual obligations to apply a discounted rate on orders;

● Your authentication and identification as a “Loyal Customer” and the resulting rights;

Third parties with access to personal data in relation to their activity and services offered jointly with www.homeslinen.com

1. We use the following providers of cloud services, hosting, reverse proxy, CDN, servers/clusters, and co-location:

● Telnet Ltd. with a UIC number: 104639509 – provides hosting and cloud services for the needs of www.homeslinen.com. You can find more information about their privacy policy at the following address: https://www.telnet.bg

2. Consultants and suppliers from various business areas for the purposes of securing our legitimate interests related to support and quality improvement of provided services, allowing us to adhere to legislation requirements, protection of rights and interests in court, pre-trial, and administrative proceedings. These, which we regularly use, are:

● www.dualm.com – provides consultancy services in the field of information support and technical maintenance of network and computer systems, together with the provision of data security;

● Courier companies: Econt, Speedy, Rapido, Aramex, DHL, and TNT;

3. State authorities and institutions in relation to the checks carried out by them in accordance with the regulatory requirements and restrictions;

Regarding the private entities, we observe and require from the aforementioned private bodies to implement all technical and organizational measures for the protection of these data.

The data are processed within the following time-limits:

1. Data provided on contractual basis:

● Profile data – upon the expiration of a 5-year period from the date of the last online order or in the case of no order – upon the profile deletion by using the functionality on the online store, or upon the expiration of a 5-year period from the date of your last log-in, whichever occurs earlier. The profile data are related to and determinative of the information pertaining to online orders, which determines the implementation of the designed time-limit in connection with them. In the case of no order on the basis of the informal contract, there is a legitimate expectation related to you as a consumer to use the profile; therefore, we have provided the functionality to delete your profile at any time prior the expiration of the 5-year time-limit.

● Data related to online orders – upon the expiration of a 5-year period from the date of the particular order. The time-limit is determined according to the limitation period of repayment of receivables.

● Loyal Customer’s data – upon the termination of the contract.

2. Data related to the collection and checks of accounting information and compliance with accounting principles – accounting records and financial statements, including documents pertaining to fiscal supervision, audit, and subsequent financial inspections, are retained for a period of 10 years with effect from 1 January of the reported period following the reported period to which they refer; all other accounting information carriers – three years, with effect from 1 January of the reported period following the reported period to which they refer;

3. Data provided on the basis of consent – upon consent withdrawal carried out in the way it was granted, including by the functionality provided on the online store or the blog, or by deleting; and regarding the online store – upon the expiration of 5 years from the date of your last log-in, whichever occurs earlier; your data on the blog site are related to your published comments below articles and videos, and therefore represent the exercise of your constitutional right to free expression by using format and content of your choice. Therefore, there is no specified time-limit, after the expiration of which the processing of these data is terminated, but instead we provide you with the opportunity to remove the published content by exercising your rights as a data subject in accordance with the form and method laid down in this Policy. If a particular comment includes offensive language, shameful, defamatory and/or degrading the Controller’s reputation allegations, the Controller has the right in respect of his or third parties’ legitimate interests to remove the content of the comment from his websites.

Your rights in respect of your personal data

1. Right of access, including the right to obtain a copy of the data being currently processed:

● You have the right at any time to require information about your personal data, which we store. Your personal data will be provided also if you contact us with a written request and identity authentication;

2. Right of rectification of incorrect personal data

● You have the right to require the rectification of your personal data, in cases where they are incorrect, including the right to complement incomplete personal data. You can do this on your profile, by the mobile application, or by sending us a written request after duly justifying your identity;

3. Right of deletion (“Right to be forgotten”) in the following cases:

● The processing is no longer necessary;

● Withdrawal of consent when the processing is based on consent;

● Illegal data processing;

● Legal obligation to delete data;

The “right to be forgotten” does not represent an absolute right and can be respected in the cases covered by law or due to the lack of a duly justified identity.

4. Right to have the processing restricted when:

● the data correctness is contested for the period within which the correctness has to be verified; or

● the data processing does not have a legal basis, but instead of deleting them, you expressed a wish for their restricted processing; or

● the data are necessary to establish, exercise, or protect your legal claims; or

● an objection in respect of data processing was submitted, pending verification whether the Controller has legitimate grounds

In the case of rectification, deletion, or restriction of data processing, we will inform each receiver whose personal data were disclosed, unless this is impossible or requires a disproportionate effort.

5. Right to machine-readable data portability, according to which:

● we directly provide you with the data; or

● in the case of your request and technical capacity the data are provided to another Collector of your choice;

6. Right to object to the processing that is based on legitimate interest:

● You have the right to object to your personal data being processed on the basis of the Collector’s or a third party’s legitimate interest. The Controller will cease to process the data, unless proven and compelling legal grounds exist, which override your interests and rights, or in relation with legal disputes and other procedural and non-procedural activities.

7. Right to object to the direct marketing:

● You have the right to object to receiving of marketing communications, including the profiling and analysis for the purposes of direct marketing.

8. You have the right to lodge a complaint with Supervisory authority in the Member State of your habitual residence, place of employment, or place of alleged infringement, if you believe that the processing of your personal data violates the provisions of Regulation (EU) 2016/679. The Supervisory body in the territory of the Republic of Bulgaria, where the Controller’s legal address and physical outlets www.homeslinen.com are established, is Data Protection Commission.

The rights described above are exercised by writing a request in a form, determined by the Controller, which can be obtained at the Collector’s legal address or by electronic means, after submitting an inquiry to the data protection officer and filling out the electronic form received following the inquiry, and attaching the necessary documents. If you have a registration at www.homeslinen.com, you can use the automatic form intended to exercise your rights as a data subject, which can be found in your profile on the online store.

Your inquiry will be answered within a period of one month from the receipt of your written request.

Methods used for taking of automated individual decisions, including profiling

We do not use automated algorithms and/or profiling.

Use of Cookies

In our Information About Cookies, you can find more information about the data contained in the cookies used by the online store at www.homeslinen.com.