Privacy Policy

The protection of personal data is of great importance to Photosynthesis Ltd., and we want the processing of your personal data to be completely open and transparent for you. That is why we have a policy that defines how your data will be handled and protected.

Who is responsible for your personal data?

Photosynthesis Ltd. is the data controller for the personal information you provide on all company websites and is responsible for it in accordance with applicable data protection law.

Address:
Photosynthesis Ltd.
40 Bratya Bukston Blvd., Floor 8
Sofia, Bulgaria
VAT No: BG175131566

Where do we store your data?

The data we collect from you is stored within the European Economic Area (EEA).

Who has access to your data?

Your data may be shared only within Photosynthesis Ltd. and its owned websites. We never transfer, sell, or exchange your data for marketing purposes to third parties outside Photosynthesis Ltd. Data transferred to third parties is used only to provide our services.

To ensure our websites function properly and to continuously improve the quality of our products and services, we use programs and web solutions that may access your IP address and analyze your behavior on the websites without identifying you as an individual: various Google, Facebook/Meta, and Microsoft tools.

If you do not agree with these terms, you may not be able to use our website effectively. How your data is processed by these service providers can be reviewed here:

• Google: https://business.safety.google/privacy/
• Facebook / Meta: https://www.facebook.com/privacy/policy/
• Microsoft: https://www.microsoft.com/en-us/privacy/privacystatement

What is the legal basis for processing your data?

For each specific case of personal data processing, we will inform you whether the provision of your data is required by law or necessary for the conclusion of a contract, whether you are obligated to provide personal data, and the possible consequences if you choose not to do so.

Your Rights

Right of access

You have the right at any time to request information about your personal data that we store. You can contact Photosynthesis Ltd., after which your data will be provided to you via email.

Right to data portability

When Photosynthesis Ltd. processes your personal data automatically based on your consent or an agreement, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format, transferred to you or another party. This includes only the data you have provided to us.

Right to rectification

You have the right to request the correction of your personal data if it is inaccurate, including the right to have incomplete data completed. If you have an account on a Photosynthesis Ltd. website, you can edit your data directly in your profile page.

Right to erasure

You have the right to delete all personal data processed by Photosynthesis Ltd. at any time, except in the following cases:

• You have an open order that has not yet been shipped or is partially shipped.
• You have an outstanding debt to Photosynthesis Ltd., regardless of the payment method.
• If you have made a purchase, we must retain your data in connection with your transaction according to accounting regulations.

Right to object to processing based on legitimate interest

You have the right to object to the processing of your personal data based on the legitimate interest of Photosynthesis Ltd. We will not continue to process your data unless there are compelling legal grounds that override your interests, rights, or due to legal claims.

Right to object to direct marketing

You have the right to object to receiving marketing messages, including profiling and analysis for direct marketing purposes.

You can opt out of direct marketing by:

• Following the instructions in each marketing message sent to you.
• Editing your settings in your account.

Right to restriction

You have the right to request that Photosynthesis Ltd. restricts the processing of your personal data in the following cases:

• If you object to processing based on legitimate interest, pending verification of legal grounds.
• If you claim that your data is inaccurate, pending verification of its accuracy.
• If processing is unlawful, you may object to erasure and instead request restriction of use.
• If Photosynthesis Ltd. no longer needs your data but you require it to exercise or defend legal claims.

How can you exercise your rights?

We take personal data protection very seriously. Our customer service team handles requests related to your rights. You can always contact them at privacy@photosynthesis.bg.

Data Protection Officer

We have appointed data protection officers to ensure that your personal data is always processed in an open, fair, and lawful manner. You can contact our data protection officer at privacy@photosynthesis.bg and write “DPO” in the subject line of your email.