Privacy Policy www.pivovarnata.bg
PROTECTION OF PERSONAL DATA
Privacy and data protection policy
Mandatory information on the rights of individuals to the protection of personal data
Information about the company administrator that processes the data:
Administrator: Burgas Brewery Ltd., UIC 203178569,
with registered office and address of management: Burgas, 37 Transportna Str
The administrator company is established in the Republic of Bulgaria and you can contact us as follows:
Address: Burgas, 37 Transportna Street
Contact phone: +359 87 667 0333
E-mail: info@pivovarnata.bg
Information concerning the competent supervisory authority for the protection of personal data
Title: Commission for the Protection of Personal Data
Seat and address of the administration: Sofia 1592, bldg. “Prof. Tsvetan Lazapov ”№ 2
Address for concordance: Sofia 1592, bldg. “Prof. Tsvetan Lazapov ”№ 2
Phone: +359 2 915 3 518
“Burgas Brewery” Ltd. through the website www.pivovarnata.bg (hereinafter referred to as the “Administrator”) implements its activities in accordance with the Law on the Protection of Personal Data of the Republic of Bulgaria and the Republic of Bulgaria. 2016 regarding the protection of individuals in connection with the processing of personal data and the free movement of such data. The current information is intended to inform you about all aspects of the processing of your personal data from the Company and the rights that you have in connection with this.
Basis for collecting, processing and storing your personal data
- The Administrator collects and processes personal data of the Users in connection with the use of the site www.pivovarnata.bg and concluding agreements with the company on the basis of Art. 6, para. 1, Regulation (EC) 2016/679 (GDPR), and in particular on the basis of the following:
- Explicitly received agreement from consumers;
- Fulfillment of the obligations of the Administrator under the contract;
- Compliance with the legal obligation imposed on the Administer;
- For the purposes of the legitimate interests of the Administrator or of the third party;
- Objectives and principles for the collection, processing and collection of personal data of users
- The administrator collects and processes the personal data provided by the Users in connection with the use of the site and concluding a contract with the company, including for the following purposes:
- creation of registration and provision of full functionality when using the site;
- concluding and executing a contract of compliance with and without registration;
- individualization of the contracting party;
- accounting objectives;
- statistical purposes;
- protection of information security;
Ensuring the fulfillment of the contract for the provision of the relevant service.
- sending an information bulletin upon request;
- conducting a survey on user satisfaction with the use of the site;
- fulfillment of a normative obligation;
- detection and resolution of technical or problems with the functionality, development and improvement of the site;
- The controller shall observe the following principles in the processing of personal data:
- legality, goodwill and transparency;
- restriction on the purpose of processing;
- Correlation with the goals of the processing and minimization of the collected data;
- accuracy and timeliness of data;
- restriction on the purpose of achieving the goal;
- Integrity and confidentiality of the processing and guarantee of an appropriate level of personal data security.
- When processing and collecting personal data, the Administrator may process and collect personal data in order to protect the following legitimate persons:
- Types of personal data that the Administrator collects, processes and stores:
- Name and surname;
- Email;
- Gender;
- Address;
- Phone number;
- Other contact details
- The administrator shall perform the following operations with the personal data provided by the users for the following purposes:
- Registration of a user on the site and fulfillment of a contract for purchase and sale from a standstill – the purpose of this operation is to create a registration for the use of the site for the purchase of goods and goods. The registration and creation of a profile for use on the site is not a mandatory step of providing the service and it is available in a significant way.
- Conclusion from the impact assessment: Based on the performed impact assessment, the operation “Registration of a user on the site and execution of a contract for purchase and sale of a condition” is acceptable for implementation and implementation. Data in accordance with the requirements of the GDPR.
- Concluding and executing a commercial transaction with a client or partner – the purpose of this operation is concluding and executing a contract with a commercial partner or client and client and client. Given the limited scope of the collected personal data and the fact that some of them are collected from publicly available sources, the impact assessment is based on the impact.
- Dispatch of a newsletter (newsletter) – the purpose of this operation is to administer the process of sending newsletters to consumers who have stated that they have stated that they have stated. Given the limitations of the collection of personal data, the conduct of an impact assessment is not necessary to carry out an impact assessment.
- Exercise of the right of cancellation or execution of a complaint – the purpose of this operation is to administer the procedure for exercising the right of cancellation or cancellation. Given the limitations of the collection of personal data, the conduct of an impact assessment is not necessary to carry out an impact assessment.
- When processing personal data, the Administrator shall not carry out profiling that would cause legal consequences for users or otherwise affect them significantly, except for those specified in item 13.
- The Administrator provides the Personal Data of the users to partners in order to deliver the ordered goods, in order to carry out the accounting service of user requests, the realization of legal claims and / or the receipt of other services or consultations.
- The controller does not envisage the personal data of the users to be provided outside the territory of the European Union, except for the one indicated in item 13.
- When registering on the site, using the option to register through the accounts of users in social networks, the Administrator will receive information about the profiles of users in these networks. The administrator is not responsible for the information available on these networks.
- The site of the Administrator uses the so-called Cookies for the purpose of providing full functionality to the website, improving the consumer experience, statistical goals and objectives. except as indicated in item 13. Users may at any time control and / or delete the “cookies” through the settings of their use. The cookies do not represent personal data and are not used to identify visitors and users of the site.
- The Administrator shall keep personal data of the users for a period not longer than the existence of the profile on the site, except for the one indicated in item 13. After deleting the profile, the Administrator shall make the necessary payments anonymises (i.e. to bring them in a form that does not reveal the identity of consumers). The Administrator collects personal data provided in connection with made online instructions for a period of 5 years for the purpose of protecting the legal interests of the Admin Admins. The time limit for data collection must be extended in view of the fulfillment of a regulatory obligation or in view of the legitimate interests of the Administrator or the Director. The administrator stores personal data, which it is necessary to keep in force under the applicable legislation for the respective provided period, which may be on or on the site.
- Withdrawal of the personal data processing agreement
If the user does not wish the personal data provided by him to be processed for marketing purposes and to receive a newsletter, he may at any time withdraw the processing agreement by completing the application form or the application form. and send it by email to the Administrator. The withdrawal of the agreement does not reflect the lawfulness of the processing of personal data, which the Administrator has done so far.
- Right of access
The user has the right to request and receive from the Administrator confirmation whether they process personal data related to him, by sending a request in a free text. The user has the right to have access to the data related to him, as well as to the information related to the collection, processing and collection of data. Upon request, the administrator will provide, upon request, a copy of the processed personal data related to the user, in electronic or other appropriate form.
- Right of copying or filling
The user may at any time correct or complete inaccurate or incomplete personal data related to him, directly by registering on the site or by sending a request to the Administrator by email, such as .
- The right to die (“to be forgotten”)
The User has the right to request from the Administrator the deletion of part or all personal data related to him, and the Administer has the obligation to delete them without hindrance.
- personal data are no longer necessary for the purposes for which they were collected or processed in any other way;
- the user withdraws his agreement, on the basis of which he bases the processing of the data and there is no other legal assessment for the processing;
- the user objects to the processing of personal data related to him, including for the purposes of direct marketing, and there are no legal grounds for the processing of which;
- personal data have been processed illegally;
- personal data must be deleted for the purpose of complying with a legal obligation under the law of the EC or the law of the Member State to which the application is made;
- personal data were collected in connection with the provision of services to the information society.
In order to exercise the right to be forgotten, it is necessary for the user to send by e-mail a request for the erasure of his personal data, which the Administrator handles or prepares. The administrator will delete all data that he processes for the user upon request.
- Right to Restriction
The user has the right to request from the Administrator to restrict the processing of data related to him by sending a request in free text by e-mail when:
- the accuracy of the personal data, for a period which allows the Administrator to verify the accuracy of the personal data;
- The processing is illegal, but the user does not want the personal data to be deleted, but only the use of it to be limited;
- The administrator does not need more than personal data for the purposes of processing, but the user requires them for the establishment, exercise or protection of the public;
- the user has objected to the pending processing in anticipation of verifying whether the legal grounds of the Administrator have precedence over the interests of the user.
The administrator will resume the processing of personal data upon request from the user.
- Right of portability
In case the user has provided an agreement for the processing of personal data or the processing is necessary for the fulfillment of the contract with the Administrator, or if the data is subject to data processing.
- to request from the Administrator to provide personal data in a readable format and to transfer them to another Administer;
- to request from the Administrator directly to transfer personal data to a user-designated administrator, when this is technically feasible.
The user has the right to exercise the right of portability by sending by email the completed form in accordance with Appendix № 3 or requesting it in a free text, after which the Administrator is the administrator.
- Right to receive information
The user may request from the Administrator to inform him / her about all the recipients whose personal data, for which the copying or deletion has been requested, has been requested. The Administrator may refuse to provide this information if this would be impossible or would require unduly great effort.
- Right to appeal
The User may at any time object to the processing of personal data by the Administrator, which relates to him, including if they are processing for the purpose of pursuit or purpose.
- Deadline for response
The administrator is obliged to submit a response to the user without undue delay and in any case within one month of receiving the request. If necessary, this period may be extended by another two months, taking into account the complexity and number of requests. The administrator shall inform the consumer of any such extension within one month of receipt of the request, stating the reasons for the delay. 21. In the event of a breach of consumer rights in accordance with the generally applicable or applicable legislation for the protection of personal data, consumers shall have the right to
Name: Commission for the Protection of Personal Data.
Seat and address of the administration: Sofia 1592, bldg. “Prof. Tsvetan Lazapov ”№ 2
Address for concordance: Sofia 1592, bldg. “Prof. Tsvetan Lazapov ”№ 2
Phone: +359 2 915 3 518
Website: www.cpdp.bg
Appendix № 1
Withdrawal form for the purpose of processing
Name *: …………………….
Your e-mail address used on the site *: …………………….
Feedback data (e-mail) *: …………………….
To
Burgas Brewery EOOD,
UIC 203178569,
with registered office and address of management:
Burgas, 37 Transportna Str
I hereby withdraw my consent to the processing of personal data provided by me for the purpose of receiving a newsletter, advertising messages or other marketing materials, as I am aware of the conditions for withdrawal of the agreement in accordance with the agreement. the personal data of the site.
Appendix № 2
Request “to be forgotten” – to delete personal data related to the user
Name *: …………………….
Your e-mail address used on the site *: …………………….
Feedback data (e-mail) *: …………………….
To
Burgas Brewery EOOD,
UIC 203178569,
with registered office and address of management:
Burgas, 37 Transportna Str
Please collect all personal data that you collect, process and collect, provided by me or by third parties who are related to me, in any case, to others.
I declare that I am aware that some or all of my personal data may continue to be processed and managed by the Administrator for the purposes of fulfilling the objectives.
Appendix № 3
Request for privacy of personal data
Name *: …………………….
Your e-mail address used on the site *: …………………….
Feedback data (e-mail) *: …………………….
To
Burgas Brewery EOOD,
UIC 203178569,
with registered office and address of management:
Burgas, 37 Transportna Str
I ask all personal data related to me, which are collected, processed and stored in your databases, to be sent in XML format to:
e-mail: …………………….
Admin – receiving data: …………………….
Name: …………………….
Identification number (UIC, BULCTAT, registration number in the CPDP): …………………….
E-mail: …………………….
Appendix № 4
Request for data correction
Name *: …………………….
Your e-mail address used on the site *: …………………….
Feedback data (e-mail) *: …………………….
To
Burgas Brewery EOOD,
UIC 203178569,
with registered office and address of management:
Burgas, 37 Transportna Str
Please collect and process the following personal data that you collect, process and store, provided by me or by third parties who are related to me, to copy:
Data to be collected: …………………………………………..
Please be corrected as follows: …………………………………………..
