We take your privacy very seriously, and we ask that – if you’re interested in privacy – please read this privacy policy carefully as it contains important information on who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information and how to contact us in the event you have a question.
Legal basis and purpose limitation
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
It is generally possible to use our website without providing personal data. If personal data (e.g. name, address or e-mail addresses) is collected on our website, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.
Hipstor uses users’ personal data insofar as this is necessary for the establishment, execution and termination of the storage contract and for the provision of any ancillary and additional services associated with it. This data is processed using electronic data processing systems. Hipstor uses the following data of the members: surname and first name, gender, national ID number, date of birth, address, telephone number, e-mail address, credit card or bank details, and/or other personal data that the members provide to Hipstor upon registration or during the continued existence of the custody agreement. The member’s consent to the use of data is given in the course of registration on the Hipstor website. Members can revoke their consent at any time.
The data provided by you is required to fulfil the contract or to carry out pre-contractual measures. We cannot conclude the contract with you without this data. Data will not be transferred to third parties, with the exception of the transfer of credit card/bank details/account data to the processing bank/payment service provider for the purpose of debiting the booking fee, to the transport company/shipping company commissioned by us for the possible transport of the items, to our tax advisor for the fulfilment of our tax obligations and to the data processors listed below on the basis of overriding legitimate interest or in the course of contract fulfilment.
Data processing is carried out on the basis of the legal provisions of EU GDPR legislation of § 96 paragraph 3 and Art. 6 paragraph 1 lit a (consent), lit b (fulfilment of contract), lit c (fulfilment of a legal obligation) and lit f (safeguarding the legitimate interests of the controller or a third party) of the GDPR.
Your rights
In principle, you have the rights to information, rectification, erasure, restriction, data portability, cancellation and objection. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you have the right to lodge a complaint with the Bulgarian Data Protection Authority (Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592) The list of data protection officers and their contact details can be found here https://cpdp.bg/en/.
Order processing
In the course of operating our website, we commission processors who may gain access to your personal data in the course of their activities if they require the data to fulfil their respective services. These processors ensure compliance with the applicable data protection regulations and are obliged to do so. For this purpose, we have concluded order processing contracts in accordance with Art. 28 GDPR. You can request further information on the processors commissioned by us at data@hipstor.bg
Data security
At Hipstor, we use technical and organisational security measures to protect the stored personal data against accidental or intentional manipulation, loss or destruction and against access by unauthorised persons. We continuously improve our security measures in line with technical progress.
SSL encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
TLS encryption
By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognise the use of this data transmission security by the small lock symbol at the top left of the browser and the use of the https scheme as part of our Internet address.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are
This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
Data storage
We would like to point out that the following data is also stored by us for the purpose of processing the contract: Name, gender, address, national ID, date of birth, telephone number, title and bank and/or credit card details of customers. The data provided by you is required to fulfil the contract or to carry out pre-contractual measures. We cannot conclude the contract with you without this data. Data will not be transferred to third parties, with the exception of the transfer of credit card data to the processing banking institutions / payment service providers for the purpose of debiting the booking fee, to the transport company / shipping company commissioned by us for the possible transport of the items and to our tax advisor to fulfil our tax obligations.
If a contract is concluded, all data from the contractual relationship will be stored until the expiry of the tax retention period (10 years in Bulgaria).
Data processing is carried out on the basis of the legal provisions of § 96 para. 3 TKG and Art. 6 para. 1 lit a (consent) and/or lit b (necessary for contract fulfilment) of the GDPR.
MailChimp
We send our newsletters with the mailing service provider “MailChimp”. This is a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The privacy policy and terms and conditions of the mailing service provider can be viewed here. MailChimp guarantees the European level of data protection and is also certified under the Privacy Shield Agreement. MailChimp is used as a mailing service provider on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR and an order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR.
MailChimp does not write to the newsletter recipients itself or pass the data on to third parties. However, the mailing service provider can use the data to optimise or improve its own services without being able to establish an assignment to a user.
Further information on the data protection provisions can be found in MailChimp’s privacy policy at https://www.intuit.com/privacy/statement.
MailChimp’s general terms of use can be found here https://mailchimp.com/legal/terms/.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Universal Analytics
We use Google Analytics in the form of “Universal Analytics”. “Universal Analytics” describes a Google Analytics process in which user analyses are carried out on the basis of a pseudonymous user ID. This creates a pseudonymised profile of the user with information from the use of various devices (so-called “cross-device tracking”).
Google Browser plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout
Objection to Google data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: DEACTIVATE GOOGLE ANALYTICS
You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245
Demographic characteristics in Google Analytics
This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”. You can find out more about these advertising functions here: https://support.google.com/analytics/answer/3450482?hl=en&sjid=7200414165083373032-EU.
You can deactivate the use of your personal activities and information from your Google account under “Settings for advertising” here: https://adssettings.google.com/authenticated.
Google AdWords
We sometimes use Google AdWords to place adverts in the Google search network and in the Google display network (e.g. in search results, in videos, on websites, etc.). This means that these adverts are displayed to users who are likely to be interested in them. This allows us to target adverts for and within our online offering more specifically to users. If, for example, a user is shown adverts for products for which they have previously shown interest on other online offers, this is referred to as remarketing. For these purposes, when our and other websites on which Google’s advertising networks are activated are accessed, a code is executed directly by Google and the Google remarketing tag is also integrated into the website. This is used to create an individual cookie on the user’s device. This file records which websites are visited by the user, which content the user is interested in and which offers the user has clicked on. In addition, technical information about the browser and operating system, referring websites, time of visit and other information about the use of the online offer is collected.
Facebook plugins (Social Share Like button)
Plugins of the social network Facebook, provider Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on some of our pages. You can recognise the Facebook plugins by the Facebook logo or the “Like” button on our site. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.
When you visit our website, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook’s privacy policy at https://de-de.facebook.com/policy.php.
If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
Functions of the X (Twitter) service are integrated on our sites. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using X (Twitter) and the “Re-Tweet” function, the websites you visit are linked to your X (Twitter) account and made known to other users. This data is also transmitted to X (Twitter). We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by X (Twitter). Further information can be found in Twitter’s privacy policy at https://twitter.com/privacy.
You can change your privacy settings on Twitter in the account settings at: https://twitter.com/account/settings.
Stripe
We use the services of the payment service provider Stripe Payments Europe Limited (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland) for payment processing. Which payment service provider processes your payments and therefore processes your data will be displayed when you make your booking. Details on data processing can be found on Stripe’s data protection page: https://stripe.com/en-bg/privacy.
Objection to advertising mails
We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
Contact us
If you have any further questions regarding this privacy policy or would like information about the data we process, please contact us by email at data@hipstor.bg
units
of space for you
from St. Alexander Nevsky Cathedral
