Last Updated: 27 April 2025

Welcome to https://digial.pics. This Privacy Notice outlines how we collect, use, disclose, and safeguard your personal information when you access or interact with our Website and related services.

By using our Platform, you acknowledge that you have read and understood this Privacy Notice and agree to the practices described herein. If you do not agree with any part of this Notice, please refrain from using our services.

Data Controller Information

Digital Ai LTD, registered under number 208277909, with its legal address at Vitosha Boulevard 48, Sofia, 1000, Republic of Bulgaria (referred to as the “Company,” “we,” or “us”), is the data controller responsible for the processing of your personal data.

As the data controller, we determine the purposes and means of processing the personal information collected through our Platform. We are committed to ensuring that your data is handled lawfully, fairly, and transparently in accordance with applicable data protection laws.

If you have any questions or concerns regarding how we process your personal data, you may contact us at:
📧 [email protected]

Information We Collect

We may collect, use, and process the following categories of personal data when you interact with our Platform:

(a) Account Information
Details such as your profile ID, login credentials, account settings, activity logs, photos, avatars, and any content you voluntarily share through your account.

(b) Contact Information
Includes your email address, phone number, and physical address.

(c) Identity Data
Your full name, identification details (e.g., passport number or government-issued ID), and other verification-related information.

(d) Shared Content
Any content, files, or data you upload, submit, or generate through the use of our services.

(e) Transaction Information
Details related to your orders, purchase history, transaction records, and current account balance.

(f) Payment Details
Information relating to your payments, such as bank account numbers, credit/debit card information, payment method used, and transaction status.

(g) Legal Compliance Data
Data required to fulfill legal obligations, including those related to Anti-Money Laundering (AML), Counter-Terrorist Financing (CFT), and Know Your Customer (KYC) regulations.

(h) Technical Data
Device-related information such as IP address, browser type and version, operating system, device identifiers, and configuration settings.

(i) Communication Records
Logs of interactions including email exchanges, chat transcripts, and call recordings.

(j) Marketing Information
Your preferences regarding marketing communications, participation in loyalty or promotional programs, and engagement metrics.

(k) Customer Support Data
Information provided when you contact support, including the nature of your inquiry, resolution status, and support communications.

(l) Visitor and Video Surveillance Data
Closed-circuit television (CCTV) recordings and related footage from visits to our physical premises, collected for facility and personnel security purposes.

Purpose of Using Collected Information

We process your personal data for a variety of clearly defined purposes, each supported by an appropriate legal basis in accordance with applicable data protection laws:

(a) Service Delivery
To provide the services you request and ensure they are delivered efficiently and to your satisfaction.
Legal Basis: Performance of a contract

(b) Legal Compliance
To meet our obligations under applicable laws and regulations, including those related to anti-money laundering (AML), financial reporting, data protection, and other statutory requirements.
Legal Basis: Legal obligation, public interest

(c) Account Management
To establish, maintain, and manage your user account and ensure seamless access to our services.
Legal Basis: Performance of a contract

(d) Identity Verification
To verify your identity and protect your account from unauthorized access or fraudulent activity.
Legal Basis: Legal obligation, legitimate interests

(e) Order Processing
To process and fulfill your orders, including payment handling and delivery coordination.
Legal Basis: Performance of a contract

(f) Transaction Management
To facilitate accurate and secure financial transactions through our Platform.
Legal Basis: Performance of a contract, legitimate interests

(g) Customer Communication
To communicate with you, provide support, and address any inquiries, concerns, or complaints.
Legal Basis: Performance of a contract, legitimate interests

(h) Service Enhancement
To analyze usage data and improve the quality, functionality, and effectiveness of our services.
Legal Basis: Legitimate interests

(i) Risk Management
To monitor and manage potential operational, legal, or financial risks to our business.
Legal Basis: Performance of a contract, legal obligation, legitimate interests

(j) Marketing
To send marketing communications, promotional content, and personalized recommendations, where you have provided consent.
Legal Basis: Consent, legitimate interests

(k) Technical Support
To identify, diagnose, and resolve technical issues affecting the delivery and operation of our services.
Legal Basis: Performance of a contract

(l) Security
To protect our systems, infrastructure, and data against unauthorized access, breaches, or other threats.
Legal Basis: Performance of a contract, legal obligation, legitimate interests

(m) Fraud Prevention
To detect, prevent, and respond to suspected fraud, misuse, or unlawful activities.
Legal Basis: Legal obligation, legitimate interests

(n) Dispute Resolution
To manage and resolve disputes, enforce contractual rights, and comply with legal obligations.
Legal Basis: Performance of a contract, legal obligation, legitimate interests

If you have any questions regarding the purposes for which we process your personal data, please contact us at [email protected]. We are committed to transparency and will be happy to assist you.

Methods of Information Collection

We collect personal data using a combination of direct, automated, and third-party methods:

(a) Direct Interaction
We collect information directly from you when you register for an account, make a purchase, use our services, communicate with us, or otherwise engage with the Platform.

(b) Automated Technologies
We use cookies and similar technologies to automatically collect certain technical and usage data as you navigate our Website. For more details, please refer to our Cookie Notice available on the Website.

(c) Third-Party Sources
We may also receive personal data from trusted third-party sources, including business partners, payment service providers, public databases, and governmental authorities, where legally permissible.

Information Provision Necessity

Some personal information is required in order for us to provide you with access to our services or to fulfill specific requests. If you choose not to provide this mandatory information, it may restrict your ability to access certain features or functionalities of the Platform.

Other types of information are optional, and you have control over what you choose to share with us. You can manage your preferences for optional data at any time through your account settings or by contacting our support team at [email protected].

Information Sharing and Disclosure

We may share your personal data with trusted third parties where necessary to deliver our services or where required by law. All data sharing is performed responsibly and in full compliance with applicable data protection regulations.

We may disclose your information to:

• Service providers and business partners who support our operations, such as payment processors, hosting providers, and analytics tools;
• Affiliates and subsidiaries involved in the development or administration of our services;
• Regulatory and law enforcement authorities, where such disclosure is required to comply with legal obligations, respond to lawful requests, or protect our rights and the rights of others.

We take appropriate measures to ensure that all parties with whom we share your data maintain the same level of privacy and security that we apply internally.

If you have any questions or concerns about how your personal data is shared, please contact us at [email protected].

International Data Transfers

While our data processing activities are primarily carried out within the European Economic Area (EEA), there may be occasions when your personal data is transferred to and processed in countries outside the EEA.

In such cases, we implement appropriate safeguards to ensure that your information continues to receive a level of protection equivalent to that provided under EEA data protection laws. These safeguards include:

(a) Standard Contractual Clauses (SCCs)
We may use Standard Contractual Clauses approved by the European Commission, which require our non-EEA partners to apply data protection standards that are consistent with those within the EEA.

(b) Adequacy Decisions
Where available, we may rely on adequacy decisions issued by the European Commission that confirm an adequate level of protection in the recipient country.

These measures are taken to ensure that your personal data remains secure, confidential, and processed in compliance with applicable regulations, regardless of where it is transferred.

If you have any questions or concerns about how your data is protected during international transfers, please contact us at [email protected].

Your Rights

As a data subject, you have a range of rights under applicable data protection laws regarding the personal data we hold about you. These include:

(a) Right of Access
You have the right to request access to your personal data and receive information about how it is being processed.

(b) Right to Rectification
You may request the correction or updating of any personal data that is inaccurate or incomplete.

(c) Right to Erasure
In certain circumstances, you may request the deletion of your personal data (also known as the “right to be forgotten”).

(d) Right to Restrict Processing
You can request the limitation of processing of your personal data in specific situations—for example, when accuracy is contested or processing is unlawful.

(e) Right to Object
You have the right to object to the processing of your personal data for certain purposes, including direct marketing.

(f) Right to Data Portability
You may request that your personal data be provided in a structured, commonly used, and machine-readable format, or that it be transmitted directly to another data controller.

(g) Right to Withdraw Consent
If your personal data is being processed based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the contact information provided in this Privacy Notice. We may request verification of your identity before fulfilling your request to ensure the protection and integrity of your data.

Please note that these rights may be subject to limitations under applicable laws. Upon receiving your request, we will inform you of any such limitations and provide guidance on your options. Our goal is to be fully transparent and support you in exercising your rights in accordance with the law.

Security Measures

We take the protection of your personal data seriously and implement a range of technical and organizational measures to ensure its security. These measures include:

• Encryption of data during transmission to prevent unauthorized access;
• Access controls to limit access to personal information only to authorized personnel;
• Regular security audits and system updates to maintain the integrity and resilience of our systems.

In addition, we partner with trusted third-party service providers who are contractually obligated to adhere to industry-standard security practices when processing data on our behalf.

While we employ robust measures to safeguard your data, your active participation in maintaining security is also essential. We strongly recommend that you follow these best practices to further protect your personal information:

(a) Use Strong Passwords
Choose complex and unique passwords for your accounts. Avoid common words, names, or easily guessable personal information.

(b) Enable Two-Factor Authentication (2FA)
Where available, activate 2FA to add an additional layer of security, ensuring your account remains protected even if your password is compromised.

(c) Regularly Update Your Passwords
Change your passwords periodically and avoid reusing them across different platforms or services.

(d) Be Cautious of Phishing Attempts
Exercise caution with emails or messages requesting personal information. Verify the sender’s authenticity and avoid clicking on unknown links or downloading suspicious attachments.

(e) Keep Your Software Updated
Ensure your devices, browsers, and applications are regularly updated, as updates often contain vital security patches.

By adhering to these recommendations, you can play a key role in maintaining the confidentiality and security of your personal data. If you have any concerns or require assistance in securing your account, please contact us at [email protected].

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required to comply with applicable legal, regulatory, or contractual obligations.

Retention periods vary depending on the type and purpose of the data:

• Data required for legal and regulatory compliance (e.g., financial records, KYC documentation) is typically retained for five (5) years, with possible extensions where required by law.
• Data relevant to potential legal claims or disputes may be retained until the expiration of the applicable statutory limitation period, which generally does not exceed ten (10) years.
• Operational data used for account management or service delivery is retained for the duration of your relationship with us and for a reasonable period thereafter to manage continuity, support inquiries, and enforce our rights.

Once the relevant retention period has expired, we take appropriate steps to securely delete or anonymize your personal data to protect your privacy.

If you have any questions or would like more information about our data retention practices, please contact us at [email protected]. We are committed to transparency and the responsible management of your personal information.

Automated Decision-Making and Profiling

(a) Automated Decisions
We do not engage in automated decision-making processes that produce legal effects or similarly significant consequences for you.

(b) Profiling for Personalization
We may use limited forms of profiling to enhance your experience on our Platform—for example, by tailoring content, recommendations, and services to better match your interests and preferences. This profiling is based on your interactions with our services and does not result in any legal or similarly significant effects.

Complaints and Dispute Resolution

If you have any questions, concerns, or complaints regarding our data handling practices, we encourage you to contact us directly at [email protected]. We are committed to resolving any issues in a timely and transparent manner.

If you believe that your data protection rights have been infringed, you also have the right to file a complaint with a supervisory authority. In the Republic of Bulgaria, the relevant authority is:

Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Republic of Bulgaria
Website: www.cpdp.bg

We strongly value your privacy and will make every effort to resolve your concerns efficiently and in accordance with applicable data protection laws.

Updates to This Notice

We may update this Privacy Notice periodically to reflect changes in our data processing practices, legal obligations, or operational requirements. All changes will become effective immediately upon being published on our Website.

We encourage you to review this Privacy Notice regularly to stay informed about how we protect your personal data. Your continued use of our Website or services after any updates constitutes your acceptance of the revised terms.

Where changes are material or may significantly impact your rights or how we process your personal data, we will provide additional notice—such as by email or through a prominent message on our Website—to ensure you are fully informed.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Notice or the way we handle your personal data, please contact us at:

Email: [email protected]

Digital Ai LTD
Registration No.: 208277909
Registered Address: Vitosha Boulevard 48, Sofia, 1000, Republic of Bulgaria

We are committed to addressing your inquiries promptly and ensuring that your privacy is protected at all times.