PRIVACY POLICY

1. General Provisions

In connection with providing its Services through the TABARECORDSTORE.COM website ("Website"), "TABA" EOOD ("TABA") processes data regarding Users, as well as other natural persons identified below ("Data Subjects"; "You"), in accordance with this Privacy Policy ("Policy"). Personal data means any information relating to Data Subjects through which they can be identified. This Policy describes the rules and principles that TABA follows when collecting and processing personal data of Data Subjects, as well as other information through which TABA cannot identify the Data Subjects. All terms used in this Policy have the meanings defined in the Terms, unless explicitly provided otherwise.

In collecting and processing personal data, TABA complies with all applicable regulatory acts relating to the protection of personal data, including, but not limited to, Regulation (EU) 2016/679 ("Regulation").

2. Persons for whom TABA processes data

TABA has the right to collect and process information regarding the following Data Subjects:

1. Users of the Services provided through the Website;

2. natural persons who have sent inquiries, requests, signals, complaints or other correspondence to TABA, as well as their representatives;

3. natural persons whose information may be contained in such calls, inquiries, requests, signals, complaints, or other correspondence sent to TABA by third parties.

3. What Data does TABA Process

3.1. Information Provided by Data Subjects to TABA

The use of the Services provided through the Website is voluntary. In the forms through which personal data is provided, TABA clearly indicates the mandatory or voluntary nature of providing the data and the consequences of refusal to provide it. The data required by TABA are those without which the respective Service cannot be provided.

Registration/Creation of a User Profile

To use certain Services, Data Subjects must create their own User profile by registering on the Website and providing personal data such as name, surname, phone number, email address, address, and password. In addition to this data, when registering a User profile, TABA automatically collects information necessary for identifying the User and reproducing their electronic statement upon registration and acceptance of the Terms, this Policy, and the Conditions for Refusal and Complaints under a contract concluded through the TABARECORDSTORE.COM website, such as logs of the time and IP address from which the registration was made.

TABA does not collect special categories (sensitive) of data or data on convictions and offenses

The Services of the Website and the functionalities provided on the Website are not intended for the collection, storage, and processing of special categories of data within the meaning of Article 9 and data on convictions and offenses under Article 10 of the Regulation. TABA recommends that you refrain from including in the opinions, comments, and other similar content you post on the Website, data revealing your or third parties' racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, sexual life, or sexual orientation, or data related to convictions or offenses.

Using the Services does not require you to provide TABA with essential data from identity documents such as passport number/ID card, validity periods, copies of such documents, etc.

TABA is not obliged to and does not monitor the presence of the data mentioned here on the Website. Providing such information is entirely at the risk and responsibility of the providing party.

Correspondence, complaints, and signals

In order to resolve submitted complaints, signals, disputes, inquiries, requests, or other matters sent in communication to TABA through electronic forms on the Website, by calling TABA's telephone hotline, or by sending regular or electronic mail, We store and process this information, as well as the result of such processing.

Other data

TABA may also process other data relating to Data Subjects in cases where Data Subjects voluntarily provide such data by filling in respective electronic forms on the Website, including surveys and questionnaires for the purposes for which the respective electronic forms or surveys and questionnaires are created.

3.2. Data Related to the Use of Services

The Website automatically records visit data in the form of logs and cookies. Data regarding user sessions – IP addresses, duration of the visit, data filled in registration and order forms for the purpose of remembering them in the user's session, are recorded. The purpose of recording this data is to enhance the usability of the site for customers, ensure security, and gather statistics for marketing purposes.

Purchase of Goods/Services through the Website

Part of the Services on the Website are related to the ability to make purchases of goods/services through the Website. In order to use functionalities of the Website such as the electronic "Store," Data Subjects provide their name; surname; email address; phone number; delivery address; postal code; promotional discount code (if applicable); voucher number (if applicable); choose a payment method, and at their discretion, may provide other information related to the Data Subjects – e.g., if voluntarily indicated as a comment to the purchase.

Providing personal identification number (EGN/BULSTAT/VAT number) may be necessary solely for the purpose of issuing a valid invoice to an individual or sole trader (ET) when purchasing goods or services.

For processing the purchase and payment, TABA processes information regarding the due price, payment method, and payment amount (bank account number (IBAN), etc.).

Logs, Automatic Data Collection

TABA collects and stores log files (date, time, and source – IP addresses) in cases where it is required by law, as well as information necessary for reproducing electronic statements made by Data Subjects and for their identification in case of a legal dispute.

In addition, the Website uses technology that records and stores for a limited period of time automatic information about its usage, specifically which pages of the Website visitors (registered or unregistered) view, their IP addresses, and which web browsers visitors to the Website use. The Website also contains links (hyperlinks) to other pages on the Website. TABA may use technology to track how often these links are used and which pages of the Website visitors choose to view.

Cookies and Similar Technologies

TABA may use cookies and other similar technologies on the Website and in providing the Services to process information collected through such technologies.

TABA has the right (but not the obligation) to install cookies – small text files saved by a webpage through an Internet server onto the hard drive of the Data Subject's computer or other end device and enable the recovery of information about the Data Subject, identifying the device and/or browser used by the Data Subject. By accepting this Policy, the Data Subject agrees to the installation of such cookies.

In providing the Services, TABA stores information and gains access to such information stored on the Data Subject's end device and accordingly processes it for the following purposes:

1. Ensuring normal and quality access of the Data Subject to the Services available through the Website, with all their functional capabilities;

2. Tracking and preventing malicious activities.

The Data Subject has the right to:

- at any time refuse the storage and/or access to the information stored on their end device. The prohibition and/or deletion of cookies by the Data Subject may lead to complete or partial inability of the Data Subject to access the Website and/or the Services available through it, to change or remove previously set settings during previous visits to the Website, and/or to a significant deterioration in the quality of the Services, for which TABA is not responsible;

- at any time receive information regarding the data stored by TABA on their end device by sending a corresponding inquiry to TABA at the following email address: [email protected]

TABA uses two types of cookies – "temporary" (which are deleted from the memory of the Data Subject's end device after the latter closes their Internet browser) and "persistent" (which remain on the Data Subject's end device until the latter deletes them). Persistent cookies can be removed by the Data Subject according to the instructions of the Internet browser used by the Data Subject.

4.2. Retention Periods of Personal Data

Personal data is stored by TABA for the period necessary to achieve the purposes for which it was collected, unless otherwise provided or permitted by law to be stored for a longer period.

The retention periods of personal data may vary depending on the specific purpose of the processing and legal requirements. Typically, TABA retains personal data for the period necessary to perform the contract between the data subject and TABA and to fulfill its legal obligations. After this period, TABA may retain personal data based on its legitimate interests or the consent of the data subject.

Upon termination of contractual relationships between the data subject and TABA, personal data may be retained for the period necessary to fulfill TABA's legal obligations, protect its rights, or pursue its legitimate interests, taking into account the legal deadlines for making claims and requesting accounts.

Upon expiration of the retention period for personal data, TABA deletes or anonymizes the information so that it can no longer identify the specific data subject, unless it is necessary and legally permissible to retain this information for the purpose of providing evidence in claims representing subjective rights of TABA or third parties.

4. PURPOSES OF PROCESSING PERSONAL DATA. RETENTION PERIODS OF PERSONAL DATA

4.1. Purposes and Legal Basis for Processing

TABA collects, uses, and processes the information described above for the purposes outlined in this Policy and in the Terms, which may include:

- Purposes necessary for the conclusion and performance of the contract between TABA and the data subject for the provision of Services through the Website;

- Purposes necessary for the legitimate interests of TABA or third parties;

- Purposes for which the data subjects have given their explicit consent for the processing of their data;

- Purposes necessary for the performance of legal obligations of TABA.

The purposes necessary for the steps to conclude and execute the contract between the data subject and TABA include the necessary processing of data when registering and creating a User profile and activities related to the provision of Services available through the Website. In addition, these purposes include:

- conducting necessary communication with the data subject, including by email, necessary in connection with the provision of Services or notifying the data subject of changes in the Services provided;

- processing and collecting payments due from the User for purchased goods/services.

The purposes of the legitimate interests of TABA or third parties (other users of the Website (registered and unregistered users of the Website), employees of TABA and its subcontractors or service providers) for which it may be necessary to process the personal data of the data subjects include:

- Ensuring the normal functioning and use of the Website by the data subjects and other Users, including for the purposes of maintaining and administering the Website and the Services, preventing cyber-attacks and other malicious activities – for these purposes, TABA processes all the categories of data specified above;

- Carrying out necessary communication with the data subjects, including electronically, in connection with notifying them of changes in the Terms, in the Terms of Refusal and Complaints, in this Policy, and other important changes related to the Services or the operation of the Website;

- Activities related to conducting checks in connection with complaints, reports, requests, etc.;

- Exercising and protecting the rights and legitimate interests of TABA, including through legal means, and providing assistance in exercising and protecting the rights and legitimate interests of other visitors to the Website – for these purposes, TABA processes all the categories of data specified above;

- Administration and management of the Services provided through the Website TABARECORDSTORE.COM and servicing the User;

- Management and control of the quality of the Services provided by TABA.

The purposes related to compliance with the legal obligations of TABA include:

- Performance of legal obligations to preserve or provide information upon receipt of an appropriate order from competent state or judicial authorities, providing an opportunity to exercise the control powers of competent state authorities;

- when fulfilling TABA's legal obligations to notify you of various circumstances related to your rights, the Services provided, the protection of your data, etc.

- Acceptance and servicing of refusals of contracts for the sale of goods or for the provision of Services (if applicable), complaints, and commercial warranties, for the performance of TABA's obligations;

- Activities related to accounting and reporting of received payments, in accordance with the applicable legislation (tax and accounting legislation, etc.).

With the explicit consent of the data subjects, their data may be processed for the specific purposes for which consent has been given:

- Activities for the purposes of direct marketing such as conducting surveys, polls, marketing research, etc. – for such purposes, TABA processes only the data explicitly provided by the data subjects or agreed to be processed under the specific consent given by them, as well as the data provided within the framework of the specific survey, inquiry, etc.;

- Other purposes for which they have given their explicit consent – to the extent and scope provided for in the respective consent.

4.2. Retention Periods of Information

Personal data provided to or collected by TABA may be stored in a form that allows the identification of the data subjects for a period no longer than necessary for the purposes for which the personal data are processed.

Regardless of the aforementioned deadlines, it is possible:

1. That a specific legal dispute or proceeding arises, necessitating the retention of data beyond the specified deadlines.

2. Mandatory instructions from a competent state authority for the retention of certain data/content.

In these cases, the data of the data subjects will be stored in accordance with the instructions of the competent authority or until the final resolution of the dispute or proceeding before all instances.

5. SHARING OF INFORMATION BY TABA

The personal data of data subjects may be provided to persons other than TABA only in cases provided for in the Terms and Conditions, the Refund and Complaint Policy, this Policy, or the law.

Data Processors on Behalf of TABA

Personal data of data subjects and other information about them may be disclosed to and processed by third parties to whom TABA has delegated the performance of certain services related to the Website. This data will be disclosed only to the extent necessary for the performance of the delegated work. These third parties will act as data processors on behalf of TABA and will be required to process the data strictly in accordance with TABA's instructions and only for the purposes set forth in the Terms and Conditions, Refund and Complaint Policy, and this Policy.

Third Parties

For the purpose of administering TABA's activities, servicing data subjects, information about data subjects may also be provided to TABA's partners. When processing information for statistical and marketing purposes, conducting tests and trials on the operation of the Website, making payments, and using other services related to the Website, personal data and other information about data subjects may also be disclosed to and processed by third parties to whom TABA has delegated the performance of certain services related to the Website. Such entities may include payment service providers, companies providing transportation or courier services, as well as other entities involved in processing and servicing payments, making deliveries, and other similar activities related to the services provided through the Website.

By accepting this Policy, the data subject declares that they are informed and consent to information about them, or information provided by them regarding other data subjects (e.g., individuals for whom they are legal representatives - minors and juveniles), to be provided by TABA to such other data controllers, particularly to TABA's commercial partners in the above paragraph, and accordingly to be processed by them for the purposes set forth in this Policy.

In addition to the above, TABA may disclose your personal data to third parties when required by law, including if requested by TABA in due manner by a competent state or judicial authority, when TABA has obtained explicit consent from the data subject for this, and when necessary to protect the rights and legitimate interests of TABA or other users of the Website (e.g., lawyers, notaries, etc.).

6. PERSONAL DATA RIGHTS

In connection with the processing of personal data relating to the Data Subjects, they have all the rights under the Personal Data Protection Act and the Regulation, including, but not limited to:

6.1. Right to receive information about the processing of their personal data by TABA. The purpose of this Policy is to inform the Data Subjects in full about all activities related to the processing of their personal data.

6.2. Right of access:

- to receive confirmation whether TABA processes personal data concerning them;

- to access the processed personal data and detailed information regarding the processing and their rights. The right of access may be exercised through a written request to TABA or in real time through the functionalities of the Website via the User profile on it (after the registration of the Data Subject on the Website), except in case of technical malfunction.

6.3. Right to rectification – to request the correction or completion of their personal data if it is inaccurate or incomplete. Data subjects may correct any information they have entered into their User profile at any time through the functionalities within the profile.

6.4. Right to erasure – to request the erasure of their personal data if there are grounds for it as provided for in the applicable data protection legislation.

6.5. Right to restriction of processing of personal data – to request from TABA restriction of the processing of their personal data within the limits provided for in the applicable data protection legislation, if there are grounds for it.

6.6. Notification to third parties – the right to request from TABA to notify third parties to whom their personal data has been disclosed by TABA of any rectification, erasure, or restriction of processing of their personal data, unless this is impossible or requires disproportionate effort from TABA.

6.7. Right to data portability – to receive the personal data concerning them and which they have provided to TABA in a structured, commonly used, and machine-readable format, and to transmit this data to another controller without hindrance from TABA.

The right to data portability applies when the following two conditions are met simultaneously:

- processing is based on consent or on a contract; and

- processing is carried out by automated means.

If technically feasible, data subjects have the right to obtain the direct transfer of personal data from TABA to another controller. The right to data portability can only be exercised in a manner that does not adversely affect the rights and freedoms of others.

6.8. Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning data subjects or similarly significantly affects them, unless there are grounds for this provided in the applicable data protection legislation and suitable safeguards are in place to protect their rights, freedoms, and legitimate interests. For each specific case of automated processing, data subjects have the right and will receive substantial information from TABA about the logic used, the significance, and the envisaged consequences of such processing for them, as well as on how to exercise their rights in this regard.

6.9. Right to withdraw consent – when the processing of personal data is based solely on consent given by the data subject, the data subject may withdraw their consent at any time. Such withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

6.10. Right to object – Data subjects have the right at any time and on grounds relating to their particular situation to object to the processing of personal data concerning them, including profiling to the extent applicable data protection legislation allows, based on public interest, exercise of official authority, or legitimate interests pursued by TABA or a third party. In such cases, TABA ceases processing the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subjects, or for the establishment, exercise, or defense of legal claims.

6.11. Right to lodge a complaint with a supervisory authority – Data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement, if they consider that the processing of personal data concerning them breaches the applicable data protection legislation. The supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection, with address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2.

7. ACCURACY

TABA is not responsible for the accuracy of the information provided by the data subjects, does not conduct any checks in this regard, and does not guarantee the actual identity of the individuals who have provided the data. In all cases of doubt on the part of the data subjects, upon discovering fraud and/or abuse, TABA requests to be notified immediately. Data subjects are obligated to ensure that when providing any information on the Website, they do not infringe upon the rights of other individuals regarding the protection of their personal data or any other rights.

8. EXERCISING RIGHTS. CONTACT DETAILS OF TABA

The registered office and management address of TABA are: Sofia 1632, Ovcha Kupel-1, Block 505, Entrance A, Floor 8, Apartment 31, EIK 202047367, Phone: +359 888 088 178, Email address: [email protected], VAT number: BG205451240.

The correspondence address and the address where TABA conducts its economic activity within the meaning of Article 47, paragraph 1, item 4 of the Commerce Act, is Sofia 1463, Tsar Asen Str. No. 52.

Data subjects may exercise their rights under points 6.1-6.10 of this Policy by sending a written request to TABA at the correspondence address of TABA as indicated above.

Data subjects may exercise rights related to their personal data either personally or through an expressly authorized person (with a notarized power of attorney).

This Policy is drafted by "TABA" Ltd. in order to fulfill its obligations to provide information to data subjects under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

The Policy is approved by the Manager of "TABA" Ltd. and is effective from 18.04.2019.

TERMS AND CONDITIONS FOR CANCELLATION AND COMPLAINTS REGARDING CONTRACTS MADE THROUGH THE WEBSITE TABARECORDSTORE.COM

("Cancellation and Complaints Policy")

Art. 1. (1) These Terms and Conditions for cancellation and complaints regarding contracts made through the website TABARECORDSTORE.COM apply to the relationship between "TABA" Ltd., EIK 205451240 (TABA), and users who place orders for goods/services through TABARECORDSTORE.COM, and who qualify as "consumers" within the meaning of the Consumer Protection Act (CPA), (hereinafter referred to as "the Consumer"), in relation to the services provided.

(2) "Consumer" within the meaning of the CPA is any natural person who acquires goods or uses services that are not intended for commercial or professional purposes, and any natural person who, as a party to a contract under the CPA, acts outside the scope of their commercial or professional activity.

Right of Withdrawal

Art. 2. (1) The Consumer has the right, without owing compensation or penalty and without specifying a reason, to withdraw from the concluded individual contract in connection with a specific order, and TABA must be notified of such withdrawal in writing:

Within a 14-day period, starting from the date of receipt of the goods by the Consumer or by a third party, other than the carrier/courier and indicated by the Consumer, or:

a) When the Consumer has ordered multiple goods in one order that are delivered separately, starting from the date on which the Consumer or a third party, other than the carrier and indicated by the Consumer, accepts the last item.

b) In the case of delivery of goods consisting of multiple batches or parts, starting from the date on which the Consumer or a third party, other than the carrier and indicated by the Consumer, accepts the last batch or part.

c) In the case of contracts for regular delivery of goods over a specified period, starting from the date on which the Consumer or a third party, other than the carrier and indicated by the Consumer, accepts the first item.

In cases of concluding a contract for the provision of services - within a 14-day period from receiving confirmation of the validity of the request for the provision of the respective service under Art. 17.2. of the Terms of Use. The parties agree that the individual contract for the provision of the respective services is considered concluded from the date of this confirmation.

(2) To exercise their right of withdrawal, the Consumer uses the form for exercising the right of withdrawal from the contract (Annex 1 to these Terms and Conditions for Cancellation and Complaints, an integral part thereof), which is available at: https://TABARECORDSTORE.COM/terms-and-conditions, or notifies TABA of their name, address, telephone number, and email address and their decision to withdraw from the contract with an unequivocal statement in the manner specified in Art. 3 of these Terms and Conditions for Cancellation and Complaints.

Art. 3. The statement of withdrawal under Art. 2, para. 3 and 5 must be sent to TABA by email to the address: [email protected].

Art. 4. When exercising the right under Art. 2, the Consumer is obliged to keep the goods received from TABA, to ensure their preservation, and to ensure their safety until they are returned to TABA. The Consumer is obliged to return or send the goods to TABA without undue delay and in any case no later than 14 (fourteen) calendar days from the day on which they informed TABA of their withdrawal. The cost of returning the goods is borne by the Consumer.

Art. 5. When exercising the right under Art. 2, TABA refunds all payments received from the Consumer, including delivery costs (with the exception of additional costs associated with the Consumer's chosen method of delivery other than the cheapest standard delivery method offered by TABA), without undue delay and in any case no later than 14 (fourteen) days from the date of receipt of the withdrawal. TABA may withhold reimbursement until it receives the goods or until the Consumer provides proof that they have sent the goods back, depending on which event occurs first.

Art. 6. TABA makes refunds using the same payment method used by the Consumer in the initial transaction.

Art. 7. The Consumer is responsible for the diminished value of the goods caused by their testing, which goes beyond what is necessary to establish their nature, characteristics, and proper functioning.

Art. 8. The Consumer does not have the right of withdrawal regarding goods that, due to their nature, may deteriorate or have a short shelf life, as well as for sealed goods that are unsealed after receipt and cannot be returned due to reasons related to hygiene or health protection.

Right to Claim

Art. 9. The Consumer has the right to claim for any non-compliance of the goods or services delivered by TABA with the agreed upon, when such non-compliance is discovered after delivery or upon initial inspection, or during storage, installation, testing, or use, as per the concluded individual sales contract.

Art. 10. The Consumer's right to claim exists regardless of whether TABA has provided a commercial warranty for the same goods or services.

Art. 11. When presenting a claim for goods, the Consumer may claim reimbursement of the purchase price, replacement of the goods with others corresponding to the agreed upon, a price reduction, or free repair under the conditions and procedure of Art. 112-114 of the Consumer Protection Act (where applicable).

Art. 12. The Consumer may submit a claim orally or in writing to TABA.

Art. 13. When submitting a claim, the Consumer must specify the subject of the claim, their preferred method of satisfaction, the amount of the claimed sum, and a contact address, and must attach/present the documents on which their claim is based - a receipt and/or invoice; protocols, acts, or other documents establishing the non-compliance of the goods or services with the agreed upon; and other documents establishing the claim on the grounds and amount.

Art. 14. A claim for consumer goods may be made by the Consumer up to 2 (two) years from the delivery of the goods, but no later than 2 (two) months from the establishment of the non-compliance. A claim for services may be made up to 14 (fourteen) days from the discovery of the non-compliance of the service with the agreed upon.

Art. 15. The period under Art. 14 stops running during the time necessary for the repair of the consumer goods or for reaching an agreement between TABA and the Consumer to resolve the dispute.

Art. 16. If TABA has provided a commercial warranty for the respective goods or services, the term of which is longer than the periods for submitting a claim under Art. 14, the claim may be made until the expiration of the term of the commercial warranty.

Art. 17. Acceptance of claims is carried out during TABA's working hours at its store located at Sofia 1463, ul. "Tsar Asen" No. 52.

These Conditions for withdrawal and claim were approved by the manager of "TABA" EOOD and are in force from 01.04.2019.

These Conditions for withdrawal and claim are an integral part of the GENERAL TERMS OF USE OF THE SERVICES AVAILABLE THROUGH THE WEBSITE TABARECORDSTORE.COM, available at https://TABARECORDSTORE.COM/terms-and-conditions.

APPENDIX 1

STANDARD FORM FOR EXERCISING THE RIGHT OF WITHDRAWAL FROM THE CONTRACT

(fill in and submit this form only if you wish to withdraw from the contract)

(Appendix No. 6 to Art. 47, para. 1, item 8 and Art. 52, para. 2 and 4 of the Consumer Protection Act)

**- To "TABA" EOOD, address: Sofia 1632, Ovcha Kupel-1, bl. 505, entrance A, floor 8, apartment 31, registered in the Commercial Register at the Registry Agency with EIK 205451240, tel .: +359 888 088 178, email address [email protected], correspondence address Sofia 1463, Tsar Asen Str. № 52.:

I/we hereby notify that I/we* withdraw from the contract concluded by me/us* for the purchase of the following goods*/for the provision of the following service*

Ordered on*/received on* _____________________________

Name of the consumer/s ______________________________

Address of the consumer/s ___________________________

Signature of the consumer/s (only if this form is on paper): _______________

Date ___________________________

*Delete as appropriate.

Note: Please fill in and submit this form only if you wish to withdraw from the contract.