Privacy policy

“Mayastra OOD”, hereinafter referred to as “Administrator” or “the Company” for short, carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data.

Please read this Privacy Policy carefully, as it is intended to inform you of all aspects of our practices regarding any personal information that you provide to us or that we otherwise collect in the context of the Website (“personal data”). and the rights you have in relation to their processing.

The Company may amend the Privacy Policy by posting a notice to that effect on its Site.

Information about the company that processes your data:

“Mayastra OOD” is a company entered in the commercial register and the register of the National Center for Economic and Social Affairs under EIK 206407347, with registered office and management address: Montana 3400, Treti Mart 95, entrance. A, fl. 5, apartment 36, contact phone: +359 877 901 301, electronic address (email): contact@linkmy.cards, website: https://linkmy.cards.

Information about the competent supervisory authority for the protection of personal data:

Commission for the Protection of Personal Data (PCPD), Address: Sofia, “Prof. Tsvetan Lazarov” No. 2, phone: 02/91-53-519, e-mail: kzld@cpdp.bg, Website: www.cpdp.bg.

Basis for collecting, processing and storing your personal data

The administrator collects and processes your personal data in connection with the use of the website https://linkmy.cards,to answer your questions and/or to conclude contracts with the company on the basis of Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), and more specifically on the following grounds:

Express consent received from you as a customer;

To take steps at your request before concluding a contract with the Administrator;
Compliance with a legal obligation that applies to the Administrator;
For the purposes of the legitimate interests of the Administrator or a third party.

In the event that a contract is concluded with the company, the Administrator collects and processes your personal data in connection with the concluded contract on the following grounds:

Fulfillment of the Administrator’s obligations under a contract with you;
Compliance with a legal obligation that applies to the Administrator;
For the purposes of the legitimate interests of the Administrator or a third party.

Purposes and principles in the collection, processing and storage of your personal data

We collect and process the personal data that you provide to us in connection with the use of website https://linkmy.cards and concluding a contract with the company, including for the following purposes:

establishing contact with the Client and sending information to him;
processing requests for the provision of services, including acceptance, validation and conclusion of a contract on the basis of a submitted and accepted request
sending a newsletter and e-mails with special offers upon your request;
sending responses to your inquiries regarding the services of https://linkmy.cards;
statistical purposes.
advertising, promotion and presentation of the functionality of the products and services provided by the Administrator.

Types of personal data collected, processed and stored by the Administrator

The administrator processes the following categories of personal data and information for the following purposes and on the following grounds:

Your personalizing data (email, name, phone, etc.)

Purpose for which the data is collected: 1) To contact the user and send information to him, 2) to send a newsletter, e-mails with special offers, promotions, promo codes, news and new functionalities and 3) to send a response of inquiry and/or request through the form on our website 4) advertising, promotion and presentation of the functionalities of the provided products and services of the Administrator.

Basis for processing your personal data:

Your data for sending a newsletter and e-mails, for sending a response to an inquiry through the form on our website, as well as for advertising, promotion and presentation of the functionality of the products and services provided by the Administrator, are processed with your express consent – art. . 6, para. 1, b. (a) GDPR.

Your data for receiving e-mails, as well as for sending a response to an inquiry through the form on our website, are processed with your express consent – Art. 6, para. 1, b. (a) GDPR and to take steps at your request to enter into a contract – Art. 6, para. 1, b. (b) GDPR.

In case of concluding a written contract, a contractual relationship is created between the Administrator and you, on the basis of which we process your personal data – Art. 6, para. 1, b. (b) GDPR.

As visitors to this site, the Administrator processes your personal data in the following sense:

Data: log files containing your IP address; the browser you use (Mozilla Firefox, IE, Microsoft Edge, Google Chrome and others); the operating system (Windows, Linux, IOS); the time you visited the Administrator’s site
Data: log files containing your IP address; the browser you use (Mozilla Firefox, IE, Microsoft Edge, Google Chrome and others); the operating system (Windows, Linux, IOS); the time you visited the Administrator’s site https://linkmy.cards and ensuring trouble-free and continuous operation of the same;
Reason: protection of the Administrator’s legitimate interests;

The personal data are collected by the Administrator from the persons to whom they relate. The administrator does not perform automated decision-making with data. The company does not collect data for persons under 18 years of age. When processing and storing personal data, the Administrator may process and store personal data in order to fulfill its obligations to the National Revenue Agency, the Ministry of the Interior and other state and municipal bodies.

Period of storage of your personal data:

The administrator stores your personal data for a period not longer than necessary for the purposes for which your personal data is processed. In the case of an inquiry, without creating a contract afterwards, the Administrator stores the collected data for up to 6 months after its collection. They are deleted after a request from you or after the period specified in the previous sentence.

The Administrator stores the personal data of the legal representatives of its business partners for the duration of the contract and 5 years after that, to comply with the legitimate interests and legal obligations of the Administrator.

The administrator stores your personal data in the event of a concluded contract, for the period of the contract and 5 years after, in order to fulfill obligations provided for by law – e.g. accounting documents are kept for the relevant statutory period; to protect the legal interests of the Administrator in legal or administrative disputes with customers; we may need your personal data to prove compliance with legal requirements to the relevant control authorities, etc.

Log files are stored for up to 10 days from their creation.

Your data, which are processed for the purpose of advertising, promoting and presenting the functionalities of the products and services provided by the Administrator, are stored until you withdraw your consent.

The Administrator notifies you in the event that the data storage period needs to be extended in order to fulfill a legal obligation or in view of the legitimate interests of the Administrator or otherwise.

Transmission of your personal data for processing:

The administrator may transfer part or all of your personal data to personal data processors for the fulfillment of the processing purposes to which you have agreed, subject to the requirements of Regulation (EU) 2016/679 (GDPR).

The administrator does not transfer your data to third countries. The administrator notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations.

Your rights in the collection, processing and storage of your personal data

Withdrawal of consent to the processing of your personal data

If you do not wish all or part of your personal data to continue to be processed by the Company for specific or all processing purposes, you can withdraw your consent to processing at any time by completing a Form for withdrawal of consent for the purposes of processing and sending of this request to the Company’s email.

The administrator may request that you verify your identity and identity with the data subject.

You can withdraw your consent to the processing of your personal data for direct marketing purposes at any time.

The withdrawal of consent does not affect the lawfulness of the processing of personal data that the Administrator has carried out up to that point.

Right of access

You can correct or complete inaccurate or incomplete personal data related to you by making a request to the Administrator by completing a Request to correct data and sending it to the Company’s email.

You have the right to access the data relating to you, as well as the information relating to the collection, processing and storage of your personal data. Upon request, the administrator provides you with a copy of the processed personal data related to you in electronic or other appropriate form. Providing access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of repetitive or excessive requests.

Right to rectification or completion

Right to erasure (“to be forgotten”)

You have the right to ask the Administrator to delete part or all of your personal data, and the Administrator has the obligation to delete them without undue delay, when any of the following grounds are present:

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
You object to the processing of your personal data, including for direct marketing purposes, and there are no overriding legal grounds for the processing;
the personal data were processed unlawfully;
the personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to the Administrator;
personal data were collected in connection with the provision of information society services.

The administrator is not obliged to delete the personal data if it stores and processes them:

to exercise the right to freedom of expression and the right to information;
to comply with a legal obligation that requires processing provided for in EU or Member State law applicable to the Administrator or for the performance of a task in the public interest or in the exercise of official powers conferred on him;
for reasons of public interest in the field of public health;
for the establishment, exercise or defense of legal claims.

The right to deletion is exercised by filling out a Request to be forgotten and sending it to the Company’s e-mail address. After verifying the identity of the person who submitted the request, the Administrator deletes all the data it processes about the Customer, except for his email and address and the technical information about the functioning of the contact form on the site, which cannot be connected in any way to the person of The client.

If there is a request made by you that is being processed, the earliest you can request to be “forgotten” is upon successful completion of the request.

The administrator does not delete the data that he has a legal obligation to store, including for defense in connection with legal claims made against him or to prove his rights.

Right to limitation

You have the right to request the Administrator to limit the processing of your data when:

dispute the accuracy of the personal data, for a period that allows the Administrator to verify the accuracy of the personal data;
the processing is illegal, but you do not want the personal data to be deleted, but only to have its use restricted;
The administrator no longer needs the personal data for the purposes of processing, but you require them to establish, exercise or defend your legal claims;
You have objected to the processing pending verification of whether the legal grounds of the Administrator take precedence over your interests.

In case of exercising your right to restriction, the Company will stop processing your data, but will not remove the posts you have made on the website.

Right of portability

If you have consented to the processing of your personal data or the processing is necessary for the performance of the contract with the Administrator, or if your data is processed in an automated manner, you may, after identifying yourself to the Administrator:

to ask the Administrator to provide you with your personal data in a readable format and to transfer them to another Administrator;
to ask the Administrator to directly transfer your personal data to an administrator specified by you, when this is technically feasible.
For this purpose, you should fill out a Request for portability of personal data

Right to receive information

You can ask the Administrator to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested has been disclosed. The administrator may refuse to provide this information if it would be impossible or would require a disproportionate effort.

Right to object

You can object at any time to the processing of personal data by the Administrator.

How to exercise your rights in relation to the collection, processing and storage of your personal data
Exercising your rights: of access; of limitation; of receiving information; a right to object can be exercised by submitting a free-text request that makes clear which specific right you wish to exercise. The request can be sent to email: contact@linkmy.cards or to the Administrator’s address – Montana 3400, Treti March 95, entrance A, fl. 5, apartment 36.
Your Right to Withdraw consent to the processing of your personal data, Right to rectification or completion, Right to deletion (“to be forgotten”) and Right to portability are exercised in the manner indicated above.
The Administrator will respond to your request without undue delay and at the latest within one month of receiving your request, in case there is a reason not to honor your request, the Administrator will notify you of the reasons.

Your rights in the event of a breach of the security of your personal data

If the Administrator detects a violation of the security of your personal data, which may create a high risk for your rights and freedoms, he notifies you without undue delay about the violation, as well as about the measures that have been taken or are about to be taken.

The administrator is not obliged to notify you if:

has taken appropriate technical and organizational measures to protect the data affected by the security breach;
has subsequently taken measures to ensure that the breach will not result in a high risk to your rights;
notification would require a disproportionate effort.

Persons to whom your personal data is provided

The Administrator does not provide your personal data to third parties, except when this is necessary for the fulfillment of a legal obligation or for the performance of a concluded contract, as well as to competent authorities who, by virtue of a legal act, have the authority to require the Administrator to provide information, including containing personal data.. We may need to provide access to your personal data in a limited volume to a third party – the team that provides us with software support for the website, for the purposes of its functioning and Adimistraotra’s accounting – in the case of an included contract with You. In these cases, we ensure that the third parties engaged by us apply the same high standards for the protection of your personal data.

In the event of a violation of your rights under the above or applicable data protection legislation, you have the right to lodge a complaint with the Commission for the Protection of Personal Data.

You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are not mandatory and you can make your requests in any form that contains a statement to that effect and identifies you as the data owner.

The privacy policy was last amended on 25.09.2023.

Form for withdrawal of consent for processing purposes

Request to be forgotten

Request for portability of personal data

Request to correct data