4a7 EOOD operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

This document describes the policies and procedures governing the collection and processing of information that identifies an individual user and can be used to contact him ("Personal Data", "Personal Information") and aims to provide information about the processing of your personal data. by the Company and the rights, you have in connection with this processing.

The administrator of personal data ("Administrator") is "4a7" Ltd., UIC according to Bulstat 202527829, with registered office and address of management: Sofia, zh.k. LYULIN 10, bl. 106A, fl. 1, apt. 2

Phone for information and contacts: +359 87 652 5795

Email: office@cncmaster.shop

Website: www.cncmaster.shop

The Personal Data Protection Officer of the Administrator is responsible for the collection, processing, and protection of personal data. To contact the official, click here.

Information on the competent data protection supervisory authority. The Commission for Personal Data Protection (CPDP) exercises control over the activity related to the collection, processing, and provision of personal data.

Address: Sofia 1592, Prof. Tsvetan Lazarov ”№ 2

Information and Contact Center - tel. 02 / 91-53-518

E-mail: kzld@cpdp.bg

Website: www.cpdp.bg.

Why do we collect, process, and store your personal data

The administrator collects and processes your personal data in connection with the use of the website www.cncmaster.shop and the conclusion of contracts with the company pursuant to Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), based on the express consent of you as a customer, for the performance of obligations under a distance contract with you, for compliance with a legal obligation, or for the purposes of the legal interests of "4a7" Ltd. or a third party.

What types of personal data do we collect and process:

4a7 EOOD collects personal information in order to respond to the requests of the users, which may include: provision of customer service and marketing activities.

Data for online inquiry through the website www.cncmaster.shop, made by you, concluding an informal contract at a distance with the Administrator in the application of the General Terms and Conditions:

- Name of the person;

- E-mail address;

- Contact phone;

For what purpose do we collect, process, and store your personal data:

The data you provide to us in connection with the use of the website www.cncmaster.shop and the conclusion of a contract with the company, we collect and process for the following purposes:

- statistical objectives;

- protection of information security;

- ensuring the implementation of the contract for the provision of the respective service;

The user also declares that he has been informed about the type of personal data that is collected and processed, the purposes for which they will be used, as well as his rights to access, correct, modify or delete personal data.

By using the website, the User expressly agrees that his personal data will be collected and processed by the company while ensuring their accuracy and reliability.

The user also declares that he has been informed about the type of personal data that is collected and processed, the purposes for which they will be used, as well as his rights to access, correct, modify or delete personal data.

Your data for sending a newsletter and emails are processed with your explicit consent - Art. 6, para. 1, p. (a) GDPR.

The user has the right to refuse his personal data to be used for commercial, advertising, or marketing purposes. If the user does not want the data to be used for commercial, advertising, or marketing purposes, he can contact the Administrator.

Contact details and sent messages are processed to identify and communicate with you.

When processing and storing personal data, the Administrator may process and store personal data in order to fulfill its obligations to the National Revenue Agency, the Ministry of Interior, and other state and municipal authorities.

What data we do not collect:

"4a7" Ltd. does not collect or process data that reveal racial or ethnic origin, political, religious or philosophical beliefs, membership in political parties or organizations, associations for religious, philosophical, political, or trade union purposes, as well as genetic and biometric data, health data or data on sexual life or sexual orientation.

We do not perform automated data decision-making.

We do not collect data on persons under the age of 16, except with the express consent of their parent or legal representative.

For how long do we store your data

Data provided on a contractual basis:

Data is provided through the contact form.

What are your rights in relation to the personal data you have provided to us?

Right of access - you have the right to request information about your personal data, including a copy of the information we store, at any time. You need to click the "Download data" button located on this page (only for registered users) or fill in the contact form (unregistered users). After verifying your identity, the data will be provided to you.

Right of correction - you have the right to request correction and addition of personal data through the contact form on this page and after verification of your identity.

The right to erasure (The right to be forgotten) arises when the need for data processing ceases to exist when consent is withdrawn, in cases where the processing is based on consent, when data is processed unlawfully, or when a legal obligation to erase arises.

You need to send an email to office@cncmaster.shop. After verifying your identity, your data will be cleared.

This right may not be respected in the cases provided by law or in the absence of proof of your identity.

Right to limit the processing - when disputing the accuracy of the data, for the period in which the accuracy must be verified, or when the processing of the data is without legal grounds, but instead of deleting them, you want their limited processing; if necessary, the data for the establishment, exercise or protection of your legal claims; or an objection has been lodged for the processing of the data, pending verification that the controller's grounds are lawful.

Right to machine-readable data portability - you can request that we provide your data directly to you or another administrator of your choice, upon a written request from you and if technically possible.

Right to receive information - you can ask the Administrator to provide information about all recipients to whom personal data have been disclosed. The administrator may refuse this information in the event that this would be impossible or would require a disproportionate effort.

Right to object - you can object to the processing of personal data by the controller, including if it is processed for profiling or direct marketing purposes.

The above rights are exercised by a written request in a form specified by the Administrator, which you can receive at the seat of the Administrator or electronically upon request to the Data Protection Officer and fill in an electronic form received in response with the necessary documents. You will receive an answer to your inquiry within one month of receiving your written request.

Who do we share your personal information with?

4a7 EOOD provides the personal data at its disposal to third parties (registered in Bulgaria or in another Member State) only for the purposes of concluding and executing distance sales contracts, including the supply of the goods to the address specified by the user. The data is initially provided by a user who enters it during an order and is subsequently provided to third parties, including an accounting firm and a licensed postal operator (courier company), in compliance with all confidentiality procedures.

The Administrator uses third-party services to maintain the website online, to improve the operation of the store, and to better manage the provided Service. It is possible for one of these services to store data on a server located outside the territory of the Republic of Bulgaria.


The website, including all data collected through it, is located (hosted) on a server of Superhosting.bg

Google Analytics

We use Google Analytics to collect statistical information about the users of the website, such as the website you come from, the country you are in, your language, online behavior, the browser you use, the network, etc. This information does not include personal data and you cannot be identified through it. We collect this data to analyze what type of users use the website and how they use it, which helps us to personalize the service.

"4a7" Ltd. compiles statistics on the use of the website, using data collected through cookies. These statistics do not contain personal information and may be published and made available to third parties.

More information about cookies can be found here.

Technical and organizational measures for personal data protection.

The activity of "4a7" Ltd. provides the necessary technical and organizational measures to protect personal data from accidental or illegal destruction or accidental loss, from unauthorized access, alteration, or distribution, as well as from other illegal forms of processing.

We have provided technical and organizational protection measures such as controlled access, maintenance, and proper operation of information systems and cryptographic protection measures. The employees of the Administrator process personal data in accordance with the regulations in the field of personal data protection.

What happens in case of breach of security of my personal data

If the Administrator finds a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, he shall notify you without undue delay of the breach, as well as of the measures that have been taken or are to be taken.

The administrator is not obliged to notify you if:

has taken appropriate technical and organizational protection measures with regard to the data affected by the security breach;

has subsequently taken steps to ensure that the breach does not pose a high risk to your rights;

a notification would require a disproportionate effort.

You can lodge a complaint with the supervisory authority if you consider that the processing of your personal data infringes the provisions of Regulation (EU) 2016/679. On the territory of the Republic of Bulgaria, where the seat of the Administrator is located, the supervisory body is the Commission for Personal Data Protection.

Amendments to the Privacy Policy

"4a7" Ltd. may change the current rules for personal data protection at any time by publishing a new version on the same or on a replacement page. The new version should take effect from the date on which it is published, and the new date of entry into force should be indicated at the bottom of the page.

Date of entry into force: 25.05.2018

Last change: 30.10.2021

Please fill in the form below and we will contact you.

Your name




Please enter the code

The message is sent

We will contact you shortly!