Data protection information

Data protection information

We take the protection of your personal data seriously and adhere to the rules of the applicable data protection laws, in particular the EU General Data Protection Regulation (EU-GDPR) and the Federal Data Protection Act (BDSG), as well as this data protection information. We only process personal data of our users to the
extent that it is necessary to provide a functional website and our content, services, offers, etc.

Personal data is any information relating to an identified or identifiable
natural person.

The data protection information gives you an overview of what type of
personal data is processed and for what purpose. This data protection notice also states how we ensure the protection of your personal data.

1. Name and contact details of the data controller

This data protection information applies to data processing by the
following person responsible:

Kriliya Ltd

Stara Planina 17

6140 Kran


Tel: 00359886315588

e-mail: [email protected]


2. Collection and storage of personal data as well as the type and
purpose of their use

a)When you visit our website You can visit our website without having to provide us with any information about yourself (who you are). If you use our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information about yourself, we only collect the personal data that your browser transmits to our server. When you access our website,  the browser used on your device automatically sends information to our website server. This information is temporarily stored in aso-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

  • IP address of the requesting computer,

  • Date and time of access,

  • Name and URL of the retrieved file,

  • Website from which access is made (referrer URL),

  • browser used and, if applicable, the operating system of your computer as well as the name of your access provider, language and version of the browser software

The data mentioned will be processed by us for the following purposes:

  • Ensuring a smooth connection to the website,

  • Ensuring comfortable use of our website,

  • Evaluation of system security and stability as well

  • for further administrative purposes.

The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f) EU GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about
you personally.

We also use cookies when you visit our website. Cookies do not
cause any damage to your computer and do not contain viruses. Further explanations can be found in section 5 of this data protection information.

b) When using our webshop When
you use our web shop, e.g. by submitting your offers, accepting our offers, registering or other communication, we process the personal data you provide exclusively for the purpose of initiating or fulfilling a contract.

The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter b) EU GDPR. According to this, data processing is necessary to conclude or fulfill a contract to which the data subject is a party, or to carry out pre-contractual measures at the request
of the data subject.

When you use our web shop, we process the following personal data provided
by you:

  • First and last name (for companies: company)

  • Address

  • Telephone
    number (landline number and/or mobile phone number)

  • E-mail address

This data is processed for the purpose of fulfilling contractual obligations, in particular to ship the goods, to process payment including invoicing, to process any warranty claims and for any related correspondence with you.

You can also voluntarily create a customer account in which we can store your personal data for future purchases. When you create an account under “Registration”, the data you provide there will be stored revocably. You can always delete all other data, including your user account, in the customer area.

c) When using our contact form

So that you can send us your questions, remarks, comments, etc., we have
provided a contact form on the website. To use it, it is mandatory to provide your email address and name so that we know who to respond to; You can provide further information voluntarily.

The legal basis for data processing is your voluntarily given consent (Art. 6 Para. 1 Sentence 1 Letter a) EU GDPR).

The personal data we collect when using the contact form will be deleted
after the request you have submitted has been completed.

d) Processing based on legitimate interests

To the extent that this is necessary for our business purposes, we process your data – apart from the initiation or fulfillment of the contract and your express consent – to protect the legitimate interests of our company, unless a consideration in the individual case shows that your legitimate fundamental rights and Fundamental freedoms that require the protection of personal data prevail (cf. Art. 6 Para. 1 lit. f) EU GDPR). The legitimate interests of our
company include:

  • Direct advertising, unless you have objected to the use of your personal

3. Disclosure of data to third parties Your personal data will not be transferred to third parties for purposes other than those listed below. In particular, your data will not be passed on to third parties, for example for advertising purposes, without your express consent.

We will only share your personal information with third parties if:

  • you have given your express consent to this in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) EU GDPR;

  • this is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter b) EU GDPR for the processing of contractual relationships with you, e.g. to credit institutions to process the contractually agreed payments, to shipping and transport companies for the purposes of transporting goods incl Tracking shipments in the event of non-fulfillment of contractually agreed payments for legal enforcement purposes to lawyers and legal service companies;

  • in the event that there is a legal obligation for the transfer in accordance with Article 6 Paragraph 1 Sentence 1 Letter c) EU GDPR; or

  • the disclosure in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) EU GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.

4. Cookies

We use cookies on our site. These are small text files that are automatically created by your internet browser and stored on your device (e.g. PC, laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. The cookie stores information that arises in connection with the specific end device used. However, this does not mean that we receive direct
knowledge of your identity.

The use of cookies serves, among other things, to make the use of our offer more pleasant for you. We use cookies to recognize whether you have already visited individual pages on our website. These are automatically deleted after you leave our site. In addition, to optimize user-friendliness, we use cookies that are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize whether you have already been with us and what entries and settings you have made so that you do not have to enter them again.

A distinction must be made between cookies that are strictly necessary to provide the services on this website (necessary cookies) and those that are not strictly necessary for this purpose (non-essential cookies).

Without the use of necessary cookies, this website will not function properly. Such cookies are used exclusively by us (so-called first party cookies) and all information stored in these cookies is only sent to this website.

Necessary cookies are used regardless of whether you have given your consent. The legal basis for data processing in this case is our legitimate interests, i.e. our interest in the analysis, optimization and economic operation of our website and our services (Art. 6 Para. 1 Sentence 1 Letter f) EU GDPR).

Non-essential cookies we use can be divided into the categories of preference, statistics and marketing. Marketing cookies are used by external companies (so-called third-party cookies) to collect information about the websites you visit, for example. B. to create target group-oriented advertising.

Non-essential cookies will only be used after you have given your consent. By giving your consent to the use of the cookies listed there and selected by you in a so-called consent tool we provide on this website, you agree to the use of these cookies. The legal basis
for data processing in this case is your consent (Art. 6 Para. 1 Sentence 1 Letter a) EU GDPR).

You can adjust your cookie settings individually at any time by activating or deactivating individual cookies – with the exception of the necessary cookies – in the consent tool.

You can set your web browser so that the storage of cookies on your device is generally prevented or you are asked each time whether you agree to the setting of cookies. Once cookies have been set, you can delete them at any time. How this works is described in the
help function of the respective web browser.

A general deactivation of cookies may lead to functional restrictions
on this website.

5. Storage period and data deletion

In particular, your personal data will be deleted as soon as they are no longer necessary for the purposes for which they were collected or otherwise processed (Art. 17 Para. 1 lit. a) EU GDPR). The data will then be deleted, unless, for example, the storage is necessary
to fulfill a legal obligation that requires the processing under the law of the Union or the Member States to which the controller is subject (Art. 17 Para. 3 lit. b) EU GDPR ), or is necessary to assert, exercise or defend legal claims (Art. 17 Para. 3 lit. e) EU
GDPR). The statutory retention obligations represent a legal obligation, for example, according to Section 147 Paragraph 1 No. 4, Paragraph 3 Sentence 1 AO, there is a retention period of 10 years for accounting data including order and payment data as well as according to Section 257 Paragraph 1 No. 2, 3, Paragraph 4 HGB requires a retention period of 6 years for commercial correspondence, e.g. email messages. The data will be blocked for the duration of the retention period and will be deleted after this period has expired.

6. Rights of those affected

You have the right,

  • In accordance with Article 7 Paragraph 3 of the EU GDPR, you can revoke your consent to us at any time. This means that we are no longer allowed to continue data processing based on this consent in the future. The lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation;

  • in accordance with Art. 15 EU-GDPR to request information about your personal data processed by us. Here you can obtain information about the processing purposes, the category of personal data, the  categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if it was not collected by us, as well as the existence of automated
    decision-making including profiling and, if necessary, meaningful information about its details;

  • in accordance with Art. 16 EU GDPR, to immediately request the correction of incorrect or complete personal data stored by us;

  • in accordance with Art. 17 EU GDPR, to request the deletion of your personal data stored by us, unless the processing is carried out to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend is required by legal claims;

  • in  accordance with Art. 18 EU GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its deletion and we no longer need the data but you use it to assert it , exercise or
    defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

  • in accordance with Art. 20 EU GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;

  • to complain to a supervisory authority in accordance with Art. 77 EU GDPR. The responsible supervisory authority is the state data protection officer of the federal state in which our company is based. An overview of the state data protection officers and
    their contact details is available at BFDI – state data protection authorities .

7. Right to object If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) EU GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, if necessary There are reasons that arise from your particular situation. In the event
of your justified objection, we will examine the situation and will either stop or adjust data processing or show you our compelling legitimate reasons on the basis of which we continue processing.

8. Data Security We use appropriate technical and organizational security measures to
protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

We also use TLS encryption during your website visit. You can recognize the corresponding encrypted connection by the prefix “https://” in the address line of the browser and by the lock
symbol in front of the browser line.

9. Status and possible changes to this data protection information This data protection notice is valid as of June 2020.

Due to technical developments and/or changes in legal or official requirements, it may become necessary to change this data protection information. You can tell whether changes have been made if the “status” of the document has been updated in the first paragraph
of this section 10.

 You can access and print out the current data protection information at any time on our website at