Information about the Website Owner

The administration of the website vikinuts.net is carried out by **”Victoria 1006″ EOOD**, whose address is: BULGARIA, Varna, p.c. 9000, Devnya St. 8, office 112, UIC: 200771069. We approach the management of personal data very seriously, in accordance with current legislation, including **Regulation 2016/679 of the European Union (GDPR)**.

The site administration uses the data and personal information voluntarily provided by visitors and users for purposes such as: order management, delivery of products and services, payment processing, communication with users regarding orders, products, services and promotional offers, as well as recommendations for products and services.

This data and information are also used for the purpose of improving the online store and e-commerce platform, preventing fraud or abuse to the detriment of the site, and also to enable third parties to perform logistics, technical support, and other services on behalf of the site.

Personal data is any information that serves to identify a natural person or their equivalent. An identifiable person is one who can be recognized, directly or indirectly, especially through an identification number or one or more parameters of their physical, psychological, mental, economic, cultural, or social identity.

The processing of personal data is any operation or set of operations performed with personal data, whether by automatic or non-automatic means, such as: collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure to third parties by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure, or destruction.

All our employees have undergone specialized training to comply with the Personal Data Protection Regulation.

In case of questions regarding the improvement of the company’s personal data protection policy, please use the provided phone numbers on the site for contact.

Where is Personal Information Stored?

Personal data is stored on the site’s servers, which are located within the European Union. No data is stored outside the European Union.

How is Personal Information Protected?

“Victoria 1006” EOOD protects personal information using state-of-the-art technologies and measures. The information exchanged between the user and the server is protected using **SSL/TLS encryption (secure sockets layer / transport layer security)**.

Personal data is centrally stored in information infrastructures with limited access, intended only for specific employees of the company.

Secure storage on physical media, including security alarms, video surveillance, metal safes, and others.

Creation of data backups on a remote server.

Implementation of high-tech solutions in the field of information, its storage, and processing, such as password protection, modern anti-virus software, encrypted access channels, and other measures.

Development of procedures for notifying supervisory bodies within the statutory deadlines in case of potential loss, theft, or unauthorized access by third parties, as well as notifying data subjects when there is a high risk to their rights and freedoms.

What Personal Information is Collected?

1. Personal Information of an Unregistered User

Information shared by the user on a voluntary basis:

– when sending a message through the contact page: name, email address.

– when subscribing to receive the newsletter: name, email address.

2. Personal Information of a Registered User

Information shared by the user on a voluntary basis:

– upon registration: name, address, telephone, email, IP address.

– upon ordering: delivery address, billing address.

– when subscribing to the newsletter: name, email.

3. Technical Data

Information processed when using the site:

– browser data, cookies, IP address, referrer page (referrer).

4. Profile Creation and Management

Every user registering a profile enters the above information and is responsible for its authenticity. An email address is entered upon registration, and all subsequent communication related to personal data is carried out solely and exclusively through the registered email.

The user is responsible for storing their access data (email and password) and must notify the administration of unauthorized access to their user account.

On their profile page, the user has the opportunity to change their personal information. The administration bears no responsibility for the accuracy of the entered information.

How is Users’ Personal Information Used?

1. Order Processing:

Part of the personal information is shared with companies with whom we have confidentiality agreements, in order to carry out the processing, financial and accounting activities, delivery, and payment of orders. These providers only have access to the personal data they need to fulfill their obligations.

2. Statistics and Analysis

Statistical data collected by third parties such as Google Analytics, Facebook and others are used to improve the site’s operation and commercial management.

3. Technical Support and Security

To ensure the proper functioning of the site, information security, and the prevention of abuse, authorized technical companies may have access to personal data.

4. Sending the Newsletter

Our newsletter is sent only to those users who have subscribed to it. Data is not shared within the site’s internal system or with third parties.

Every user can unsubscribe from receiving it at any time.

Registered users can do this from their profile page, which will stop sending automatically.

Unregistered users should contact the site administration, and after email confirmation, they will be unsubscribed.

5. Games, Initiatives, and Communication on Social Networks

Data received from these activities will be used solely and exclusively for the purposes of the respective activity.

6. Contacting Us, Calling by Phone, Notifying of Product Availability

Data received during communication with site employees is used only for the purposes for which it was provided.

We do not knowingly collect personal information from individuals under the age of 14. Should we find that we have collected such information, we will take immediate steps to delete it as quickly as possible.

We do not collect or process sensitive and biometric data, or any other data not related to our core business, nor data provided by third parties or public registers.

All the aforementioned contractors are in contractual relationships with us and have an obligation not to disclose our information. They are also registered as personal data administrators and processors and are responsible for its protection.

Disclosure of personal information is possible solely and exclusively in cases where it is requested by government bodies or officials who are authorized by law to request and collect such information, in compliance with the legally established procedure.

Rights of Data Subjects

We respect your right to access and control your information and will respond to your requests, where applicable, by correcting, modifying, or deleting your personal data.

1. Right of access and the right to transparent information.

2. Right to rectification of personal data.

3. Right to erasure of personal data.

4. Right to restriction of processing.

5. Right to data portability.

6. Right to object.

7. Right to contest automated processing.

8. Withdrawal of consent.

9. Right to be notified of a breach affecting the data subject.

Period for Storing Personal Data

We will store the personal information you provide for the period necessary to fulfill the purposes set out in our current personal data protection policy, unless the law requires it to be retained for a longer period.

How Do We Use “Cookie” Files?

So-called “cookies” are small files stored on your device through your browser when you visit websites on the internet. The main function of cookies is to make the user recognizable. We use this technology on the site to facilitate visitors and improve the convenience of the site. No personal data is stored in these processes, and it is practically impossible for a specific visitor to be personally identified through cookies. Therefore, the Personal Data Protection Act does not apply to the collection of this information. The collected information from cookies is usually used in aggregate form for the purpose of analyzing user behavior on the site, which allows us to improve its functionality, user paths, and used content.

Partially, we use embedded content from other websites on our site, such as from Facebook, YouTube, Google, etc., with which we have concluded contracts. In connection with this, it is possible for “third-party cookies” to be stored on your device from these external sites, over which we have no control and could not use in any way.

All browsers have functionality for managing cookies. In the settings of the respective browser, you can usually find tools for complete or partial deletion of cookies, for prohibiting their reception, or for setting a special operating mode. Please note that if you block the reception of cookies or delete them, this will negatively affect the operation of the site, and it may become partially unusable for you.

Other Technologies

– Web beacons (single-pixel gifs): used to evaluate site performance, analyze promotional campaigns, and other purposes. They may be included in the newsletter for statistical needs.

– Web server logs: Our server automatically collects data related to the site’s operation, such as IP address, browser type, certain technical characteristics of the device, pages visited, data on preferred language, selected products in the cart, search terms on the site, clicks, previous and subsequent pages.

– Connecting with social networks: Some of our pages offer the possibility of sharing on social networks, and information about your visit to the site may be shared with third parties such as Facebook, Google and others. These third parties may receive information about your visit to the site, as well as add cookies to your device. We have no control over this information and recommend that you inform yourself directly about their policies. If you do not wish to share information about your visit to our site, please do not share content and log out of your social network profile before visiting the site.

Changes to This Privacy Policy

These Personal Data Protection Rules come into effect on **23.02.2025**.

If you have questions, comments, or inquiries regarding these Principles, please do not hesitate to contact us.