Privacy Policy
At TEN-K Ltd. we care about the security of your personal data and have taken the necessary measures to align our activities with best practices and legal requirements for the protection of information and its confidentiality.
When collecting our customers’ personal data we follow the principles of minimisation, lawfulness, transparency and security.
As we respect your right to privacy and to know when someone is processing your personal data, with this Privacy Policy we would like to explain what information we collect on the website “www.kex.bg “and how we use it. This privacy policy only applies to information that is collected through our website.
What personal data do we collect and why do we process your personal data?
“TEN-K Ltd. processes those personal data that are necessary and related to its activities, and in doing so we act as a personal data controller. We collect only the personal data necessary to respond to your request or to fulfil our obligation to you.
We only collect more personal data if we have obtained your consent or there is another lawful basis for doing so.
The cases in which we collect and process your personal data and the purposes for which we do so are as follows:
- Newsletter with promotions and special offers: if you wish to receive our newsletter, you need to provide us with your email address.
- Reason:
- Explicit prior consent;
- Reason:
- Display of personalised advertising content and remarketing: We process your personal data (e.g. the number of times you have visited our website and our social media accounts, age and gender data, interests, etc.) on the basis of your prior consent. Information on how to disable this feature is available in our cookie policy. If you have been a customer of ours before, we carry out direct marketing on the basis of legitimate interest by sending you useful information about similar goods to those you have purchased.
- Reason:
- Explicit prior consent;
- Legitimate interest in the light of the rule of Article 261(2) of the ECA;
- Reason:
- Using the contact form on our webite: When you write to us via our website, it is necessary to provide a contact name and email so that we can contact you. If you share other personal information with us in the text of your enquiry, we will process this information as necessary to answer the questions you have asked us.
- Reason:
- Explicit prior consent;
- Legitimate interest in improving the quality of our services;
- Reason:
- Create a personal profile on the website: When you wish to register as a customer in our online shop, we collect your two names, email address, telephone number and contact and delivery address.
- Reason:
- Explicit prior consent;
- Legitimate interest in improving the quality of our services;
- Steps to conclude a contract;
- Reason:
- You purchase goods in our online store: We further process the following categories of personal data:
- Contact information such as name, shipping address and phone number;
- Purchase history and items marked as “favourites”
- Profile settings;
- Bank information: When paying by credit or debit card, the www.kex.bg website redirects the process to Borica’s bank card payment module, from which we only receive information whether the payment was successful or not. We do not store or process your payment card information.
- Reason:
- Legitimate interest in improving the quality of our services;
- Steps for conclusion and execution of a contract;
- Reason:
- When you exercise your right to claim for goods: Under the Consumer Protection Act, we are obliged to process the following information: names, address, details of goods and products purchased; telephone and other contact details; contract number (as applicable). We will also process any references you wish to share with us.
- Reason:
- Legitimate interest in improving the quality of our services;
- Execution of contract;
- Legal obligation;
- Reason:
- Cookies and social plug-ins: For the information that is processed in relation to cookies and social plugins, please read our Cookie Management Policy.
- Reason:
- Explicit prior consent;
- Legitimate interest in improving the quality of our services and in carrying out direct marketing;
- Reason:
And every time you use your customer profile in our online shop, you will be able to check your order history and all details going back 5 years.
We will also provide you with easy ways to keep your information accurate and up to date, such as contact details, delivery address and payment information. We will only retain these details if you specifically request it.
If you wish, you have the option to save the items in your shopping basket and order them at a later time and when you visit your account again.
In order to provide you with these options and to improve the way our online shop works, we use cookies.
Regardless of the reason why you share your personal data with us, we recommend that you do not disclose sensitive personal information: such as data regarding racial or ethnic origin, religion, trade union membership, sexual orientation, health status, etc.
How long do we keep your personal data?
TEN-K Ltd. will store your personal data only for the purposes stated above and only for the period necessary for them.
If you decide that you no longer wish to receive our newsletter or that you wish to delete your account, we will delete all of your personal data (unless there is another reason/legal obligation for us to retain some of it). Additionally, in any email you receive from us there will be an easy way to opt-out of receiving said information.
In connection with purchases and payments made, invoices issued, financial statements prepared, we store data in accordance with the Accountancy Act for a period of 5 years respectively 10 years.
We store data on claims made and documents issued in this connection containing personal data for a period of 3 years following the year of processing of the claim.
With whom do we share your personal data with?
We will not share or distribute your data for marketing or other purposes to third parties.
The above data is only provided to our trusted partners (IT support, courier service providers) who we have ensured adhere to the highest standards of information security and confidentiality. Providing data to our partners is necessary to enable us to deliver the services you have requested and to improve the operation of our
To deliver the goods you have ordered, we use the services of Speedy. You can find out how these companies process your personal data in their capacity as independent data controllers respectively at: speedy.bg/bg/gdpr. To be able to send you relevant content according to your preferences, as well as our latest offers and promotions, we use the services of Sendinblue. You can read the privacy policy of this service provider here.
We will never sell your information to third parties or use it for purposes for which we have not notified you and you have not given us prior consent.
How do we protect your rights?
“TEN-K Ltd. processes your personal data only in accordance with the above purposes and terms.
When we collect personal data, we do so in a minimal amount and only for predetermined and clearly defined purposes and storage periods. We only provide access to the data to a limited number of persons who are trained and instructed in advance on how to handle the data.
In connection with the entry into force of new European data protection rules, TEN-K Ltd. undertook a detailed analysis and audit of all our processes related to the processing of personal data. As part of this analysis, we are vetting our partners, revising our procedures and policies, training our employees, and using experienced information security consultants to ensure we meet the highest standards of privacy and security for your information.
At all times that we have your data, we implement a set of appropriate organisational and technical measures to ensure a level of security that is appropriate to the risks. Whether registering on the Website under the Terms of Use or subsequently using the Service through a customer domain, the connection between your browser and us will be made using the Secure Sockets Layer (SSL) cryptographic protocol. The databases in which your data resides are also organized and securely protected from unauthorized access. We use colocation services (Data Centre), entrusting the storage of our servers to a provider that is duly certified regarding its quality management system and regarding its information security management system. Our employees are trained and perform their duties in relation to data processing in an office(s) with a high level of access security.
What are your rights?
As the data subject, you have the right to obtain confirmation and/or detailed information, including a copy of the personal data processed about you (right of access).
In addition, you may object to the collection and further processing of your personal data and request that it be corrected (updated) or deleted (where there is no valid legal basis for us to continue processing it).
It is important to know that you can withdraw your consent to the processing of personal data at any time by deleting your account on the website (log in to your account and click on the “Delete Account” button).
If you believe that your data protection rights have been violated, you have the right to file a complaint with the Personal Data Protection Commission. 1595 Prof. Tsvetan Lazarov 2, tel. 02/91-53-518, e-mail kzld@cpdp.bg and/or other supervisory/regulatory authority where you believe there has been a breach in relation to the processing of your personal data by the Company.
To ask questions regarding your rights or if you wish to exercise any of them, please contact us at: info (at) kex.bg
Changes to the current policy
Any changes to this policy will be posted on the Company’s website and at each of our offices. In the event of a material change to the information, we will further notify you by sending an email or SMS message. Users of our online store will also be notified when they log in to their account.
Contact details of the data controller
“TEN-K” Ltd, UIC: 206910401,
with registered office and management address in Varna District, Varna Municipality, s. Zvezditsa, p.k. No. 9103, ul. Kasiopeia 10
Phone number:+359 893 913 029
Email: info (at) kex.bg
Contact details of the Data Protection Officer
Contact details. Varna, Municipality., 9103, St. Kasiopeia NO. 10
Phone number: +359 893 913 029
Email: info (at) kex.bg
