Declaration of Consent to the Privacy Policy
OF CLOUDCART AD

Protecting the privacy and security of our customers' personal and financial information is our highest priority. We therefore process your information exclusively on the basis of applicable legislation, specifically General Regulation 2016/670 (commonly known as GDPR), the Personal Data Protection Act (PDPA) and the Electronic Commerce Act (CETA). Please review this statement, which informs you of the most important aspects of the processing of your data by CloudCart plc (subsequently CloudCart, We or the Company). By submitting this statement you consent to CloudCart collecting, processing, storing, using, destroying and protecting your personal information , as explained below:

Collection of Personal Information

CloudCart operates a technical platform in which a number of reputable e-commerce sites participate (the full list can be accessed here) and processes the necessary information required to carry out advertising and marketing services on behalf of and on behalf of its customers. We care about the protection of your personal data and the provision of the services you request. For this purpose, we obtain information from you and your suppliers from whom you have ordered/acquired or wish to order/acquire goods and/or services. Your suppliers, with whom you have a pre-contractual or contractual relationship and to whom you have already provided your personal data for processing, actively help us to profile your requirements and preferences and to provide you with a better customer experience as well as higher quality and more secure services.

The information CloudCart collects may include:

1. Information about your name, address, SSN, age, gender, email address, ID card details, telephone number, contract number, customer account, information about credit or leasing you have requested to purchase goods or order services. This information is provided to us either directly by you or by CloudCart customer(s) to whom you have already voluntarily provided your personal information. We inform you that once you have provided your data to the relevant supplier, we also have access to your data. The reason for this is that we maintain the platform used by your suppliers, who are our customers, and are therefore bound to them by a data processing contract. Outside of fulfilling our obligations under this contract, we use your data solely for the purposes of communicating, advertising or marketing with or to you, and to enable you to more easily and conveniently shop or order from our customers and your suppliers.
2. Transaction Information: information about your completed or uncompleted orders from CloudCart customer(s). These orders are already known to you because you have visited the e-stores of the respective customers and have received notifications of the order status from your respective supplier. Through our system, we cater to your greater convenience for your awareness in subsequent visits, orders or purchases from any of our customers and your suppliers.
3. Information collected via cookies

When you visit websites on the Internet, they may store or retrieve information from your browser through so-called "cookies". These are small text files that are harmless. The information stored or retrieved may relate to you, your preferences or your device and may be used by our site to work as you expect. This information usually does not directly identify you, but may be useful in order to provide you with a more personalized experience on the relevant site. You have full control over your choices of which cookies you allow and which you do not.

Please note that CloudCart's platform and the service we provide are also built around the use of cookies. Click on the different category headings to learn more and change your default settings. Please also note that some cookies are "strictly necessary". This means that by loading our site in your browser, you have already accepted them because they are necessary for the functionality of our platform and cannot be turned off in our system. But don't worry - they do not contain personal or other sensitive information, which we suggest you check for yourself:

The "strictly necessary cookies" we use are

• a) CSRF Token - obliges your browser to process cookies;
• b) PHPSESSID - keeps you "logged in" to the site once you have entered your login details;
• c) CloudCart Session - used to track your internet sessions.

Insofar as the loading of our cookies on your device is not covered by your explicit consent, we want you to know that we do this on the basis of Article 4a of the E-Commerce Act (CET) and Article 6 para. 1 (f) of the GDPR.

If you do not agree to this, you can at any time refuse their storage by deleting them in your browser. However, please note that doing so will limit the functionality of our platform and with it your convenience when visiting the e-shops linked to the platform.

The other cookies we use are

• d) Google Analytics, Landing page, source, Analytics Client ID - these are performance cookies that are used to collect and analyse statistics about the use of our site and platform - we use them to count your visits and where you come to us from or in what direction you leave us. In this way, we gain valuable information on how to improve the performance of our site. We also know which of our services are the most popular. All these cookies are aggregated and therefore anonymous;
• e) Intercom - this is a functionality cookie that allows us to provide enhanced functionality and personalisation, for example through video content and live chats. These can be set by us or by third parties whose services we have added to our platform.
• f) Mautic - this is a targeting cookie that is set by our advertising partners. It is used to create a profile of your interests so that you only see commercial information relevant to you on other sites. It works by identifying not you personally, but your browser or your device.

Using the opt-out option ("Opt-out")

If for any reason you wish to opt-out of the services we provide through the cookies listed above, you must visit the "Exercise Your Rights" section of our site and follow the steps outlined there.

Protection of personal information

Any personal information you or your suppliers provide to us will be treated as confidential and will not be disclosed to third parties. It is stored on our secure servers in the European Union, which we use as part of our Google Cloud service, which is fully compliant with the requirements of the General Data Protection Regulation 2016/679 (GDPR) and for which we have a data processing agreement with Google. We inform you that only our designated and authorised employees have access to our secure servers and therefore to your data. We also inform you that we encrypt all personal information as transmitted to us by you or by your suppliers.

The personal information you provide to us as a result of your registration on our website is protected in the same way. You can access your registration information using a password of your choice. This password is encrypted, known only to you and will not be disclosed to anyone else.

We warrant to you that the information we maintain about you is current, accurate and complete to the extent such information is submitted to us by you or your suppliers of goods and services. In this regard, we invite you to contact us and them immediately if any of your personal details have changed in due course.

Your rights

You have the right of access to your data that we process, as well as the right to rectification, erasure (right to be forgotten), restriction of processing, data portability, withdrawal of consent and objection.

If you believe that our processing of your data violates the data protection provisions or if you believe that your rights under these provisions have been violated in any way, you may contact the competent administrative authority. In Bulgaria, this is the Commission for Personal Data Protection.

Contact us in one of the following ways:

CloudCart AD, with registered office in 1766 Sofia, 5 Panorama Sofia str., 3rd floor;UIC 206004146, contact details: Phone: +359 886 77 18 77; email: [email protected], name of specific person: Nikolay Iliev

Limitation of liability

Please note that we are not responsible for the privacy policies or the content of the websites of our clients or partners to which links placed by them on the platform refer. We are also not responsible for the use or protection of the information provided by a customer or partner, respectively collected and processed by them. Whenever you choose to follow a link to a partner website, its operator may invite you to provide registration details or other information about yourself. Please note that any such information is collected by the relevant third party and follows its privacy policy.

Updates to the Privacy Statement

We may change or update portions of this Privacy Policy Statement to reflect changes in our practices and/or applicable law. Once you have read it and voluntarily given your informed consent, please review it from time to time to be aware of any changes or updates. We will notify you promptly if we materially change the Privacy Policy Statement, including the manner in which we collect, process, use, protect and destroy your personal information. The revised Privacy Policy Statement will be made available to you in a timely manner, both on our official website and will be sent to you by one of the methods you specify. When you confirm that you accept the revised Privacy Policy Statement by clicking the "I Agree" button, you are giving your freely given, informed, unambiguous and explicit consent.

Consent

I have read, understood and accept the terms of this CloudCart plc Privacy Policy Statement and confirm my willingness to be bound by the terms of the Privacy Policy Statement by giving my freely expressed, informed, unambiguous and explicit consent to the collection, processing, storage, destruction and protection of personal data provided by me and by service providers with whom I have a pre-contractual or contractual relationship, by CloudCart plc.

I give my freely given, informed, unambiguous and explicit consent for the personal data provided by me and by the service providers with whom I have pre-contractual or contractual relationships to be collected, processed, stored, destroyed and protected by CloudCart plc in accordance with the CloudCart plc Privacy Policy Statement, which I have read, understood and the terms of which I accept.