Privacy Policy

Information about the administrator who processes your data:

Information about the data processing officer:

Information about the competent data protection supervisory authority:

Kamen Genadiev Kamenov (Hereinafter referred as « Administrator » or « Author ») carries out his activity in accordance with the Personal Data Protection Act. This information is intended to inform you about all aspects of the processing of your personal data by the Administrator and about the rights you have in connection with this processing.

Reason for collecting, processing, and storing of your personal data

Article 1. The Administrator collects and processes your personal data in connection with the usage on the online store www.neurologyinclinicalcases.com and with the conclusion of contracts with the Author based on the Personal Data Protection Act and GDPR, and particularly, on the following grounds:

- Explicit consent on your part as client.

- Fulfilment of the Administrator’s obligations under the contract with you.

- Compliance with the legal obligation that applies to the Administrator.

- For the purposes of the Administrator’s or a third party’s legitimate interest.

Aims and principles concerning the collection, the processing, and the storage of your personal data

Article 2. (1) We collect and process your personal data that you provide to us in connection with the use of the online store www.neurologyinclinicalcases.com and the conclusion of contract with the Author, including for the following reasons:

- Creation of a profile and presenting a full functionality when using the online store.

- Individualization of a party to the contract.

- Accounting purposes.

- Statistic purposes.

- Information security protection.

- Ensuring the implementation of the contract for the provision of the respective service.

- Sending newsletters and e-mails with special offers if you wish.

- Sending answers to questions sent by the feedback e-mail books@neurologyinclinicalcases.com.

(2) We respect the following principles during the processing of your personal data:

- Legality, good faith, and transparency.

- Restriction of the processing purposes.

- Correlation with the purposes of the processing and minimization of the collected data.

- Accuracy and relevance of the data.

- Restriction of the storage to achieve the goals.

- Integrity and confidentiality of the processing and ensuring an appropriate level of security of the personal data.

(3) When processing and storing the personal data, the Administrator can process and store the personal data with the objective being protection of the following legitimate interests:

- Fulfilment of his obligation to the National Revenue Agency, the Ministry of Interior and other state and municipal bodies.

What types of personal data are being collected, processed, and stored by the Administrator?

Article 3. (1) The Administrator carries out the following operations with data submitted by you as client, for the following purposes:

Client’s registration in the online store and execution of a distant sales contract.

The objective of this operation is the creation of a profile for the use of the online store for buying goods and for the provision of contact data for the delivery of the purchased goods. The registration and the creation of a profile for the use of the online store is not a mandatory step for the provision of the service and the service is accessible to a large extent also without the creation of a profile through the option « Shopping as a guest ». Conclusion from the impact assessment: Based on the impact assessment that has been carried out the data protection officer concludes that the operation « Customer’s registration in an online store and execution of a distance sales contract » is admissible and provides sufficient guarantees to protect the rights and legitimate interests of the subjects of the data in accordance with the requirements of GDPR.

Sending a newsletter

The objective of this operation is the administration of the process of sending newsletters, e-mails with special offers, promotions, promotion codes, news and new functionalities to the clients who have declared that they like to get them. Having in mind the limited scope of the collected personal data, the data protection officer considers that there is no need to carry out an impact assessment of the operation.

Exercising the right to withdraw or to make a complaint

The objective of this operation is the administration of the process of exercising the client’s right to withdraw or to make a complaint about the goods for which this right is applicable. Having in mind the limited scope of the collected personal data the data protection officer considers that there is no need to carry out an impact assessment of the operation.

Making inquiries sent via an e-mail for feedback at books@neurologyinclinicalcases.com

The objective of this operation is the answer to a question. Having in mind the limited scope of the collected personal data the data protection officer considers that there is no need to carry out an impact assessment of the operation.

(2) The administrator does not collect and does not process personal data related to:

- The racial or ethnic origin.

- The political, religious, or philosophical beliefs as well as membership in trade unions.

- Genetic or biometric data, data about the health status or data concerning the sexual life or the sexual orientation.

(3) The personal data are collected by the Administrator from the persons they relate to.

(4) The Administrator does not carry out automated decision-making concerning data.

Article 4 (1) The Administrator processes the following categories of personal data and information for the following objectives and on the following grounds:

Your personal data (e-mail address, name etc.)

Data collection objectives: 1) Making connection to the user and sending information to him, 2) a user’s registration in the online store as well as 3) sending informational newsletter, e-mails with special offers, promotions, promotion codes, news, and new functionalities and 4) sending the answer to a question.

Grounds for processing your personal data – By accepting the general conditions and terms and the registration in the online store or by placing an order without registration (Shopping as a guest), or by concluding a written contract, a contractual relationship is being created between the Administrator and you and this is the ground for processing your personal data. Your data for sending an informational newsletter and e-mails, as well as for sending an answer to a question are being processed in case you have given an explicit consent.

Data for making the delivery (name, telephone, address etc)

Data collection objective 1) Fulfilment of the Administrator’s obligations concerning the contract for sales and delivery of the purchased goods.

Ground for processing your personal data – By accepting the general conditions and terms and the registration in the online store or by placing an order without registration, or by concluding a written contract, a contractual relationship is being created between the Administrator and you and this is the ground for processing your personal data.

Your data for sending advertisement materials and product samples are being processed on the ground of the explicit consent on your part.

Data collection objective: 1) Making a connection with the user and sending information to him and 2) for the objectives of customer’s registration in the online store.

The ground for the processing of your personal data – By accepting the general terms and conditions and by the registration in the online store, a contractual relationship is being created between the Administrator and you and this is the ground for processing your personal data.

Term of storage of your personal data

Article 5 (1) The Administrator stores your personal data for a term that is not longer than the existence of your profile in the online store or the execution of the order « Shopping as a guest ». After the deletion of your profile or the termination of the order, the Administrator takes the necessary care to delete and to destroy all your data without undue delay, or to anonymize them (i.e., to bring them to a form that does not reveal your identity).

(2) The Administrator stores your personal data that have been submitted in connection to the online ordered for a term of five years with the aim to protect the Administrator’s legal interests in case of judicial or administrative disputes with users of the online store; the accounting documents are kept for the respective statutory term.

(3) The Administrator informs you in case there is a need to extend the data storage term to fulfil a regulatory obligation or in view of Administrator’s legitimate interests.

(4) The Administrator stores the personal data that he needs to keep by the virtue of the applicable legislation for the respective envisaged term. This term can be longer than the term of existence of your profile in the online store or until the completion of the order.

Article 6 (1) The Administrator stores the personal data of the legal representatives of his trade partners for the term of completion of the contract to comply with the Administrator’s legitimate interests and legal obligations and this term can be longer than the term of the contract.

Transfer of your personal data for processing

Article 7. (1) The Administrator may, on his discretion, transfer some or all your personal data to personal data processors for the purposes of processing with which you agreed, in compliance with the requirements of the Personal Data Protection Act and GDPR.

(2) The Administrator informs you in case he intends to transfer some or all your personal data to third countries or international organizations.

Your rights during the collection, the processing, and the storage of your personal data.

Withdrawal of your agreement for processing of your personal data.

Article 8. (1) If you do not wish that all or some of your personal data to continue to be processed by the Administrator for a specific or for all processing objectives, you may withdraw your agreement for processing at any time using a free text request.

(2) The Administrator may ask you to verify your identity and the identity with the person to whom the data relate.

(3) With the withdrawal of the consent for the treatment of personal data that are mandatory for the creation and the keeping of a profile in the online store, your account will become inactive. Of course, you will be able to browse the online store and the products offered and to place orders as a guest or to make a new registration.

(4) If there is an order that has been placed by you and that is being processed, the earliest moment when you can withdraw your agreement for processing of your data is the successful completion of the order.

(5) You may withdraw your agreement for processing of your personal date for the purposes of the direct marketing at any time.

(6) The withdrawal of the consent does not influence the lawfulness of the processing of the personal data that the Administrator has carried out up to this moment.

Right of access

Article 9. (1) You have the right to ask and to get from the Administrator a confirmation if there is a processing of personal data that are related to you and, if you are a registered user, you can see at any time in your profile the data related to you that we process.

(2) You have the right to get access to the data related to you and to the information related to the collection, the processing, and the storage of your personal data.

(3) The Administrator delivers on demand a copy in electronic or other appropriate form of the related to your personal data that are being processed.

(4) The provision of access to the data is free of charge but the Administrator reserves himself the right to impose an administrative fee in case of repetitive or excessive requests.

Right to correct or to complete

Article 10. You can correct or complete the incorrect or the incomplete personal data that are related to you directly through your profile on the website or by sending a request to the Administrator.

The right of deletion (« to be forgotten »)

Article 11. (1) You have the right to ask the Administrator to delete some of or all your personal data and the Administration has the obligation to delete them without undue delay when any of the following reasons exists:

- The personal data are no more needed for the objectives for which they have been collected or processed in another way.

- You withdraw your consent on which is grounded the processing of data and there is no other legitimate ground for the processing.

- You object to the processing of your personal data, including for direct marketing purposes and there are no legitimate grounds for the processing to take precedence.

- The personal data have been processed illegally.

- The personal data must be deleted to comply with the legal obligation under the EU law or under the Law of a member country that is applied to the Administrator.

- The personal data have been collected in connection with the provision of information society services.

(2) The Administrator is not obliged to delete personal data if he stores and processes them:

- To exercise the right of freedom of expression and the right of information.

- In order to comply with a legal obligation requiring processing provided for in the EU or in a Member State law, which applies to the Administrator or for the fulfilment of a task of public interest, or in the exercise of official powers conferred on him.

- For reasons of public interest in the field of public health.

- For archiving purposes in the public interest, for scientific or historic studies, or for statistical purposes.

For the establishment, the exercise, or the defence of legal claims.

(3) In case of exercising of your right to be forgotten the Administrator will delete all your data except for the following ones:

- Information, that is needed to prove that your right to be forgotten has been carried out: e-mail address, IP address.

- Technical information for the functioning of the online store, which information cannot be linked in any way to your identity.

- E-mail address with which you have registered in the online store.

(4) In order to exercise your right to be forgotten it is necessary to undertake to following steps:

- To apply by e-mail.

- To provide a unique identification code to perform the action that will be sent to you via e-mail to the e-mail address that is linked to the registration in the online store.

- To identify yourself as an account holder.

(5) Once we have proved the identity of the person who has sent the application and of the identity of the person to whom relate the data in the steps above, we will delete all the data about you that we process in accordance with paragraph 3.

(6) If there is an order made by you that is being processed, then the earliest moment when you can ask to be « forgotten » is at the successful completion of the order.

(7) By the deletion of your personal data your account will become inactive. Of course, you can browse the online store and the products that are offered, and you can place orders as a guest, or you can make a new registration.

(8) The Administrator does not delete the data which he is legally obliged to store, including for protection in case of court claims against him or for proof of his rights.

Right of limitation

Article 12. You have the right to ask the Administrator to limit the processing of the data which are related to you, when:

- Challenge the accuracy of the personal date, for a time lapse that allow to the Administrator to verify the accuracy of the personal data.

- The processing is illegal, but you do not want your personal data to be deleted and you only want their use to be limited.

- The Administrator does not need the personal data for the processing purposes anymore, but you require them for the proof, the exercise, or the defence of your legal claims.

- You have objected to the processing pending verification if the Administrator legal grounds take precedence over your interests.

(2) In case of exercise of your right to limitation, the Administrator will stop processing your data, but will not remove the posts you have made in the online store.

Right of transfer

Article 13. (1) If you have given your consent for processing your personal data or if the processing is necessary for the execution of the contract with the Administrator, or if your data are processed in an automated manner, you may, once you have identified yourself to the Administrator:

- To ask the Administrator to give you your personal data in a readable form and to transfer them to another Administrator.

- To ask the Administrator to directly transfer your personal data to an Administrator specified by you when this is technically feasible.

(2) You can download or receive the machine-readable data that are stored and processed for you in connection with the use of the services of the Administrator with a request by e-mail.

Right to receive information

Article 14. You may ask the Administrator to inform you about all recipients who have asked correction, deletion or limitation of the data processing and whose personal data have been revealed. The Administrator may refuse to provide this information if this is impossible or if this requires disproportionate efforts.

Right to objection

Article 15. You may object at any time to the processing of the personal data by the Administrator, including if they are processed for profiling or direct marketing purposes.

Your right in the event of breach of the security of your personal data

Article 16. (1) If the Administrator finds a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, he informs you without undue delay about the breach and about the measures that have been undertaken or that are about to be taken.

(2) The Administrator is not obliged to inform you, if:

- He has undertaken appropriate technical and organizational protection measures about the data that have been affected by the breach of security.

- Afterwards he has undertaken measures that guarantee that the breach will not lead to a high risk for your rights.

- The notification would require disproportionate efforts.

Persons to whom your personal data is provided.

Article 17. For the purposes of processing your personal data and providing the service in its full functionality and in view of your interests, the Administrator may provide your data to a supplier / courier to make a delivery to an address.

The specified processors of personal data comply with all requirements for legality and security in the processing and the storing of your personal data.

Article 18. The Administrator does not transfer your data to third countries.

Article 19. In the event of a breach of your rights under the above or applicable data protection law, you have the right to make a complaint to the Commission for Personal Data Protection as it follows:

Article 20. You may exercise all your rights for the protection of your personal data through the forms attached to this information. Of course, these forms are not mandatory, and you may send your requirements in any form that contains a statement about this and that identifies you as the holder of the data.

Article 21. If the consent concerns a transfer, the Administrator describes the possible risks for the transfer of the data to third countries in the absence of appropriate protection and appropriate means of protection.

Article 22.  The Administrator may change the Privacy Policy by publishing a message about it on his site.

The Privacy Policy has been changed for the last time on the 01 of March 2022.

Withdrawal form of consent for processing purposes - Annex № 1

Request « to be forgotten » - to delete personal data related to me - Annex № 2

Request for transfer of personal data - Annex № 3

Request for correction of data - Annex № 4