We are concerned about your privacy and we are required to protect your personal data. This Privacy Statement tells you how we manage your personal information, your privacy rights, and how the law protects you. Please read this privacy statement carefully before using our services.
In the Privacy Policy:
"Services" means all products, services, content, features, technologies or features and all related websites, applications and services offered by us.
"Platform" means websites, mobile apps, mobile sites, or other online properties through which we offer our services.
"Personal data" means any data that contains identifying information (eg name, address, telephone number, email, etc.).
"Data administrator" means a person or company that determines the purposes or means of processing personal data.
1. Who are we?
Name: "ХИКС ЗОНА 14" ЕООД ИМЕЙ: admin@xzona.bg ЕИК/ПИК:204528068
2. What data do we collect for you?
2.1.1. Data provided through direct interactions.
Registration and other user profile information
When you sign up to use our Services we can collect the following information for you:
If you sign up using your Google Account: your name, surname and email;
If you sign up using your Facebook profile: We collect your name and surname as they are visible on your Facebook account. If you have granted Facebook permission via the privacy policy option (which appears just before signing up on our Platform), we can collect information about your gender, years, email address, depending on the permissions you have provided ; and
If you sign up using your phone number: We collect information about your phone number.
Depending on the choice you make when entering our Services or during the process of participating in our Services, you may choose to provide some of the following additional personal information:
Your Name
E-mail address
Mobile phone
2.1.2. Information we collect automatically when you use our Services
When you access our Platform or use our Services we automatically collect the following information for you:
Device information
We collect specific device information such as operating system, version, unique identifiers. For example, the name of the mobile network you are using. We connect unique identifiers with your XZONA.BG profile.
Location information
Depending on your device permissions, if you post an item on our Platform, we automatically collect and process information about your actual location. We use different technologies to determine your location, including IP address, GPS, Wi-Fi access points and mobile points. Location data allows you to see items from other users available near you and helps you post articles in your location.
User data and entry data
Technical details, including the IP address of your device, time zone, and operating system. We will also keep your login information on the Platform (registration date, last password change date, last login date), type and version of your browser.
Data generated by users when viewing webpages
We collect information about your activity on our Platform that includes the sites from which you access our Platform, the date and time of each visit you made, searches, ads, or banners you clicked, your interaction with such ads, or ads on the time of your visit, and the order in which you visit the content of our Platform.
Cookies and similar technologies
We use "cookies" to manage user sessions, store the selection of your preferred language preferences, and provide you with relevant ads. Cookies are small text files transferred from a web server to your device's hard drive. Cookies can be used to collect the date and time of website visits, web browsing history, your preferences, and your username. You can set your browser to deny all or some cookies, or to alert you when the websites you visit set or have access to cookies. Please note that if you disable or disable cookies, some of our services / Platforms may become inaccessible or may not function properly. For more information about the cookies we use, please see our Cookies Policy and related technologies.
2.1.3. Data from third parties or from publicly available sources
We receive your personal data from different third parties [and public sources] as outlined below:
i. Specific technical data and information on the use of the Services by analytics providers such as Google;
ii. from ad networks like;
iii. by providers of search information such as;
2.1.4. We do not collect personal data that:
reveal racial or ethnic origin;
reveal political, religious or philosophical beliefs;
reveal membership of political parties or organizations, associations with religious, philosophical, political or trade union goals;
refer to health, sexual life or the human genome;
3. Do we collect information from children?
Our Services are not intended for children under the age of 16 and do not consciously collect personal data from persons under 16 years of age. If we know that a person under the age of 16 has provided us with personal data we will delete them immediately.
4. Why do we process your personal information?
We will use your information and personal data only when the law permits us. We will most often use your personal information in the following circumstances:
When we have to fulfill the contract that we have concluded or is about to conclude with you.
When it is necessary to protect your legitimate interests to improve our services and provide you with a safe and secure Platform.
When we are obliged to comply with a legal or regulatory obligation.
Under certain circumstances, we may process your personal data based on your consent. If we do, we will notify you of the purpose and the category of personal data that will be processed at the time you request your consent. Below is a description of how we use your personal information [and which are the grounds we invoke to do it. We also identify what our legitimate interests are].
4.1 To provide user access and provision of Services through our Platform.
If you use your mobile number or email address to access, we use your name, surname, mobile number and / or email address to identify you as a user and provide access to our Platform.
If you use your Facebook account to access, we use your name and surname from your Facebook account and the email address you used on Facebook to identify you as a user of our Platform and give you access to it.
The above registration data is used by us to provide our Services in accordance with the Terms of Service.
We use your email address and mobile number (via SMS) to make suggestions and recommendations for our Services that you may be interested in.
We process the above information for accurate performance of our agreement with you and based on our legal interest in marketing activities to offer you services that may be of your own interest.
4.2. To improve your user experience in the Platform.
A) We use data generated by users when browsing webpages to:
we offer compliant content, such as giving you more relevant search results when you use our Services.
determine how much time you spend in a Platform, and how you manage the Platform to understand your interests and improve our Services based on this data. For example, we may offer you content to visit based on the content you clicked on.
monitor and report on the performance of our business partners' campaigns and on internal business analyzes.
B) We use your location data for the following purposes:
to compile anonymous and aggregated information on the characteristics and behavior of Platform users, including for business analysis purposes, segmentation and disclosure of anonymous profiles.
improve the performance of our Services, and customize the content we target to you. For example, using your location data, we show you a list of ads that are close to you to improve your buying experience.
evaluate and monitor your access to third-party ad banners that are visible on the Platform.
C) Using the login information of the Platform you provide, including an email address and a phone number, we reflect the various devices (such as desktops, mobile devices, tablets) that you use to access the Platform. This allows us to connect your platform activity across different devices and helps us provide you with a seamless user experience no matter what device you use to access.
We process the above information based on our legitimate interest to improve your experience in the Platform and fully implement our joint venture.
4.3. To provide you with a safe and secure Platform.
A) We use your mobile number, access form data, and unique device identifiers to administer and protect the Platform (including troubleshooting, data analysis, testing, fraud prevention, system support, support, reporting, and acceptance of data).
B) We analyze your communications through our chat feature to prevent fraud and to promote safety by blocking spam or offensive messages that may have been sent to you by any other user.
We process the above information for the full and accurate execution of our joint venture, to improve our Services and our legitimate interest in preventing fraud.
5. How will we inform you about changes to the Privacy Policy?
We may update this Privacy Policy from time to time. We will post the changes to this page and will inform you by email or through the Platform. If you do not agree with the changes you have made, you have the right to delete your account by selecting "account settings", the "delete profile" function.
6. Your rights
In certain circumstances, you have the rights under the applicable privacy laws and your personal data.
If you wish to exercise any of the following rights, please select your profile settings / privacy settings or contact us via the contact form:
Right to request access to your personal data (commonly referred to as "data subject request"). This enables you to obtain a copy of your personal information that we store and to verify that it is legally processed.
Right to ask for a correction of your personal information we have for you. This allows you to correct any incomplete or inaccurate data we have for you. However, we may need to check the accuracy of the new data you provide us with.
Right to request limitation of the processing of your personal data. This allows you to contact us with a request to suspend the processing of your personal data in the following hypotheses: a) if you want to prove the accuracy of the data; b) when you believe that the use of our data is illegal; c) when you require us to store the data, even if you no longer need it, as you need to identify yourself in order to exercise or prove your claims; or (d) when you oppose the use of your data, but we need to verify if we have legitimate reasons to use it.
Right to request the deletion of your personal information. This right allows you to contact us with a request to delete or remove your personal information when there is no good reason to continue processing it. In addition, you have the right to request to delete or remove your personal data when you have successfully exercised your right to object to processing (see below) when you have doubts that we may have processed your information not in accordance with the law or when required to erase your personal information to comply with legal requirements. Please note that for certain purposes we may be legally obliged to store your personal data (see Section 10).
Right to object to the processing of your personal data when it is based on a legitimate interest (or that of a third party) and has reason for your specific interests, which makes you oppose the processing of your personal data on this basis, that processing violates your fundamental rights and freedoms. You have a right to object when processing your personal data for the purposes of direct marketing. In certain cases, we can prove that we have compelling legitimate reasons to process the information about you that waives your right of objection.
You may request the transfer of your personal data to you or a third party. We will provide you with either a specified third party that you have chosen, your personal data in a structured, commonly used, machine-readable format. Please note that this right applies only to automated information for which you have originally consented to use or which we have used to conclude a contract with you.
You have the right to withdraw your consent to the processing of your personal data at any time. This is without prejudice to the lawfulness of the processing we have already done on the basis of your prior consent.
No fee is normally required: You have no obligation to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your application is clearly unfounded, repetitive or excessive. We may refuse to fulfill your request under these circumstances.
Response Time: We will do our best to respond to any legitimate request within one month of filing. It may take us more than a month if your request is particularly complicated or you have made several requests. In this case, we will notify you and keep you up-to-date. In addition, you have the right to file a complaint at any time with the Privacy Commission as set out in section 13. Before submitting a complaint to the Privacy Commission, we would like to know your complaints and complaints and do our best to resolve them. Please refer to our privacy policy using the contact form.
7. Communications and marketing
We will contact you via email, SMS, or notice in connection with our Services / Platform to verify your registration to inform you in case your ad has become active / expired, as well as other announcements about connection to our Services. Since it is imperative to provide you with such messages, you may not be able to opt-out of receiving them.
You may want to stop sending marketing communication at any time by clicking the opt-out link in the email or the SMS you send to you, or by changing the communication settings in your account. If you have a problem with changing the settings, please contact us via the contact form.
You may receive marketing communications from us in the event that:
you have requested such information from us;
use the Platform or Services;
You provided your data when you participated in a contest organized by the Platform; or
you are registered for promotion.
8. With whom do we share your data?
We may share your personal data with the countries listed below for the purposes listed in Section 4 above.
Third Party Service Providers: We use third-party service providers to provide certain parts of our Services, such as cloud storage devices such as SuperHosting.BG Ltd.
or Microsoft Azure. Service providers may be located inside or outside the EEA.
We conduct inspections of our third-party service providers and require them to respect the security of your personal data and target them in accordance with legal requirements. We do not allow third-party service providers to use your personal data for our own purposes and only allow them to process your personal data for specific purposes only and in accordance with our instructions.
Ad Servers and Analysts: In order to improve our Services, we will occasionally share the non-identifiable information with analytics providers that help us analyze how users use the Platform / Services. We share our information with them in a non-identifiable form for monitoring and reporting on the performance of our business partners' campaigns and business analysis. For more details on our advertisers and analytics vendors, please see our Cookies Policy and related technologies.
Regulators, regulators, and others: We may disclose your personal data to law enforcement, governmental or public authorities and others like third parties to comply with all legal or regulatory requirements. We may disclose your personal data when such disclosure is necessary for the creation, exercise or protection of legal claims, whether in court proceedings or in an administrative or extrajudicial procedure. In these cases, we are not obliged to inform users about the disclosure of their personal data to public authorities.
We can sell, transfer or merge parts of our business or our assets. We are likely to acquire or merge with other companies. If these changes occur in our activity, new owners may use your personal information in the same way as described in this privacy statement.
Publicly available information: When you post a product for sale through our Services, you may choose to make certain personal information visible to other Platform users. This may include your name, surname, email address, location, and contact number. Please keep in mind that any information you provide to other users may always be shared with third parties, so please do so at your own discretion and at your own risk.
9. International transfers
Every time we transfer your personal data outside of the EEA, we ensure that a similar level of protection is provided, ensuring that at least one of the following safeguards is applied:
We transfer your personal data only to countries that are accepted by the European Commission to ensure an adequate level of protection of personal data. For more details, see the European Commission: Adequacy of personal data protection in non-EU countries
When we use the services of certain service providers, we can conclude with them specific contracts approved by the European Commission that provide personal data with the same protection they have in Europe. For further details, see the European Commission: Example of Third-Party Transfers of Personal Data
When using service providers based in the US, we may transfer data to them if they are part of an EU-US Privacy Shield, which requires them to provide similar protection to personal data shared between Europe