In the following data protection information, we would like to inform you about the processing of personal data carried out by the company Target finance EOOD, UIC: 201660837, Golash 14 str., 1111 Sofia, Republic of Bulgaria, (hereinafter referred to as „Target finance “ and/or “we” and/or “Data Controller”) according to the general data protection regulation („GDPR“). Our data protection information applies to all websites, applications and other services and benefits (ihereinafter jointly referred to as „Services“), offered by Target finance .
Please read our data protection information carefully. If you have any questions or comments about our data protection information, please contact us by writing to firstname.lastname@example.org
1. Name and Contact Details of the Controller
The present data protection information applies to any data processing carried out by the company
2. Purposes of the Data Processing, Legal Bases and Legitimate Interests pursued by the Controller or by a Third Party, and Categories of Recipients
2.1. Access to our Website
2.1.1. Log Files
At every single access to the Services, an information is sent to the server of our service by the respective internet browser of your respective terminal device and is temporarily stored in log files. The data records stored during this process contain the following data stored until their automatic deletion: access date and time, name of the page accessed, IP address of the requesting device, referrer URL (URL from which our service has been accessed by you), amount of transferred data, loading time, as well as product and version information of the browser which has been used in each case and the name of your access provider. The legal basis for the processing of the IP address is Article 6 para. 1(f) GDPR. Our legitimate interest results from
Ensuring a smooth connection,
Guaranteeing a comfortable use of our Services,
A direct conclusion on your identity is not possible on the basis of the information and will not be drawn by us. The information will be stored and automatically deleted after the achievement of the aforementioned purposes. The standard deletion periods depend on the criterion related to necessity.
2.1.2. Cookies, Tracking, Social Media Plug-Ins
Necessary Cookies and Technologies
This category of cookies or similar technologies are necessary for the functioning of our Services. This concerns, for example, cookies or similar technologies storing log-in information after the registration in our online store so that the user remains logged in to our online store even after switching to another page, or to cookies ensuring that a user-specific configuration of service features (selected language, etc.) will be maintained over sessions. Furthermore, this kind of cookies or similar technologies contribute to a safe and proper use of our Services. The legal basis for the use of these technologies is Article 6 para. 1 point f) GDPR.
Analysis & Functional Cookies and Technologies
These cookies facilitate extended functionalities and personalization. They can be set by us or by third parties whose services are used by us in our Services. If you do not allow these cookies, a part or the totality of these services may not work correctly. In addition, this kind of cookies enables us to count visits and traffic sources to measure and improve the performance of our Services. They help us answer questions about which pages are the most or least used, and in which manner visitors navigate our Services. All information collected by these cookies is aggregated and, as a consequence, it is anonymous. If you do not allow these cookies, we will not be able to know when you use / visited our Services. The legal basis for the use of these technologies is Article 6 para. 1 point a) GDPR.
We or our partners may set this kind of cookies or similar technologies through our website to show you a relevant content / advertising on both our and third-party websites. This way, the so-called profiles based on your interests can be created. A direct identification of a person is usually impossible with this kind of information, as there is an exclusive use of a pseudonymous browser and/or device information. If you do not allow these cookies or similar technologies, you will experience less relevant content/advertising tailored to your interests. The legal basis for the use of these technologies is Article 6 para. 1 point a) GDPR.
Note on Right of Withdrawal
You can entirely or partially revoke your consent at any time with effect for the future by changing your settings.
Of course, you can set up your browser to avoid the storing of cookies on your end device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser inform you when you receive a new cookie or how to delete all cookies already received and block them for all others. Please proceed as follows:
2.2. Creation, Execution and/or Termination of a Contract
2.2.1. Data Processing on Conclusion of the Contract
If you register for one of our Services (e.g. by purchasing a product), we will process the data required for the conclusion, execution or termination of the contract, including the following:
First and last name
Invoice and delivery address
Billing and payment data
The legal basis for this operation is Article 6 para. 1 a) and b) GDPR, i.e. you provide us with the information on the basis of the respective contractual relationship (e.g. management of the customer / user account, processing of a sales contract) between you and us. In addition, we are legally obliged to process your email address in the event of a purchase via our websites / applications to send you our electronic order confirmation (according to Article 6 para. 1 c) GDPR).
We store the data collected for the contractual processing – unless we use it for our own marketing purposes – for the respective contractual duration and until the expiry of the respective statutory or possible contractual warranty and guarantee rights. After the expiry of the said period, we will retain the information required under commercial and tax law regarding the contractual relationship for the legally specified periods. For this period, the data will be reprocessed only in case of a review by the tax authorities.
For the processing of a sales contract via our Services, the following additional data processing is required:
The payment data will be transferred to the payment service providers commissioned by us for the payment(s) processing. We transfer information on the delivery address to logistics companies and shipping partners commissioned by us for the purpose of the order delivery. To ensure the delivery of goods according to your wishes, we may transfer your email address and, if applicable, your phone number to the logistics company and/or shipping partner commissioned by us to take care of delivery. They may contact you before the delivery to coordinate the delivery details. The respective data will be transmitted solely for the respective purpose. After delivery, they will not be used for other purposes and will be deleted after the expiry of the existing commercial and tax law obligations to keep records.
2.2.3. Data Use for Fraud Prevention Purposes
The information provided by us during your order placement can be used to check whether there is a so-called atypical ordering process (e.g. simultaneous ordering of many goods to the same address by using different customer accounts). In principle, we have a legitimate interest in carrying out such a check. The legal basis of processing is Article 6 para. 1 point f) GDPR.
2.2.4. Transmission of Information to Transport Service Providers / Dispatch Partners
For the purpose of delivering ordered goods we cooperate with logistics service providers / transport companies and/or shipping partners: The following data may be transmitted to them for the purpose of delivering the ordered goods or announcing the shipment: first name, surname, postal address and, if applicable, email address and, if applicable, phone number. The legal basis of processing is Article 6 para. 1 point b) GDPR.
2.3. Online Presence and Service Optimization
For the purpose of designing our pages to meet your needs and for their continuous optimization, we use Google Analytics, a web analysis service of Google Inc. (hereinafter referred to as “Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and enable an analysis of your website use. In this context, pseudonymized user profiles are created, and cookies are used. The information generated by the cookie about your use of this website such as
Browser type / version,
Used operating system,
Referrer URL (the previously visited page),
HHost name of the accessing computer (IP address),
Time of the server request
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie is set to prevent future collection of your information during your visit of this website. The opt-out cookie is valid only in this browser and only for our website and will be stored on your device. If you delete the cookies in this browser, you will need to reset the opt-out cookie. On the Google Analytics website you can find further information on data protection in connection with Google Analytics.
2.4. Online Marketing
On our pages, we use various information for marketing purposes. Our objective is to exclusively show you advertising oriented to your actual or supposed interests so that you do not have to deal with advertisements which are not of your interest. For this purpose, we use various forms of advertising (e.g. retargeting) and technologies of third companies (third parties), some of which process data as processors for us, but also some of which process data as responsible parties. A processor is a natural or legal person, authority, institution, or other body processing personal data on behalf of the data controller. Processors do not use the data for their own purposes but carry out data processing exclusively on the data controller’s behalf. This enables us to target users with online advertising not only on our websites but also on the websites of our partners, who have already shown interest in our shop and our products. As a result of studies, we know that the insertion of personalised, interest-based advertising is more attractive for the internet user than advertising without such personal reference.
Processing of your Data by Facebook/Instagram
Insofar as you have consented to the creation of Page-Insights vis-à-vis Facebook/Instagram as described above, the legal basis will be Article 6 para. 1 point a) GDPR. Otherwise, the legal basis will be Article 6 para. 1 point f) GDPR, whereby our legitimate interest results from the aforementioned purposes.
To increase the acquaintance level of our company, we can use social plug-ins of the social networks Facebook and Instagram in our Services according to Article 6 para. 1 point a) GDPR. The respective providers must guarantee their responsibility for data protection-compliant operation.
The purpose and scope of the data collection and the further processing and use of the data by the respective provider as well as your rights in this regard and setting options for your privacy protection can be found in the respective data protection notices.
2.6. Customer / User Account
To provide you with the greatest possible convenience, we offer you the permanent storage of your personal data in a password-protected customer/user account.
The creation of the customer account is basically voluntary. If you create a customer account, the processing of your data collected here will be based on Article 6 para. 1 point b) GDPR. After the creation of a customer account, no new data entry will be required. In addition, you can view and change the data stored about you in your customer account at any time.
Only if you want to place orders through our website, the opening of a customer account will be mandatory for contract processing.
In addition to the data requested during the order placement, you must enter a password of your own choice to create a customer account. Together with your email address, this password will be used to access your customer account. Please treat your personal access data confidentially and do not make them available to unauthorised third parties. Please note that even after leaving our website you will remain logged in automatically unless you actively log out.
You can delete your customer account at any time. However, please note that this does not mean that the data visible in the customer account will be deleted after your order placement with us. The deletion of your data is carried out automatically after the expiry of the commercial and tax retention obligations applicable to us. The legal basis for this further data processing is Article 6 para. 1 point c) and point f) GDPR.
You can get in touch with us in several ways: by email, phone, chat, or mail. If you contact us, we will use the personal data you voluntarily provide us with in this context solely for the purpose of contacting you and processing your request.
We process your payment information for the purpose of payment processing, e.g. if you purchase or use a product and/or service through our website. Depending on the payment method, we may forward your payment information to third parties (e.g. in the case of credit card payments to your credit card provider).
The legal basis for this data processing is Article 6 para. 1 points a), b), and f) GDPR.
During the processing your data, in some areas, we use so-called processors. A processor is a natural or legal person, authority, institution, or other body processing personal data on our behalf, whereby we remain responsible for data processing. Processors do not use the data for their own purposes but carry out the data processing exclusively for the Data Controller.
4. Storage Duration and Data Deletion
If you close your customer / user account, we will delete all stored personal information. If a complete deletion is not possible or not needed for legal reasons, we will block this information. Even if there is no legal obligation to retain information, we may refrain from immediate deletion in certain legally permitted cases. This applies, for example, if the information in question may still be required for further contract processing, legal prosecution or defence (e.g. in the event of complaints). The decisive criterion for the blocking duration, are the respective legal limitation periods, after which we delete the information.
5. Recipients outside the EU
With the exception of the processing described above, we do not transfer your data to recipients based outside the European Union or the European Economic Area. The aforementioned processing involves a data transfer to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. The data transfer is carried out on the basis of so-called standard contractual clauses of the EU Commission.
6. Your Rights
In addition to the right to revoke your consent granted, you are entitled to the following additional rights if the respective legal requirements are met:
the right to obtain information about your personal data stored by us (according to Article 15 GDPR), in particular you can request information about the processing purposes, the category of personal data, the categories of recipients your data has been or will be disclosed to, the planned storage period, the origin of your data, if it has not been collected directly from you;
the right to rectify incorrect or to complete correct data (according to Article 16 GDPR),
the right to erase your data stored with us (according to Article 17 GDPR), as long as we have not to comply with legal or contractual retention periods or other legal obligations or rights for further storage,
the right to restrict the processing of your data (according to Article 18 GDPR) if you dispute data accuracy, the processing is unlawful but you refuse the deletion; if the Data Controller no longer needs the data but you need it to assert, exercise or defend legal claims or if you have lodged an objection to the processing according to Article 21 GDPR,
the right to data portability according to Article 20 GDPR, i.e. the right to have selected data stored by us about you transferred in a structured, machine-readable format, or to demand its transmission to another data controller
the right to appeal to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.
6.2. Right of Objection
Under the conditions of Article 21 para. 1 GDPR, data processing may be objected to for reasons arising from the specific situation of the data subject.
6.3. Right of Withdrawal
Insofar as we process data based on your consent, you are entitled to revoke the consent given at any time. The consent revocation does not result in the ineffectiveness of the consent-based data processing carried out up to the time of revocation.
7. Supervisory Authority
Bulgarian Data Protection Commission contact details: