Mandatory information on the rights of data protection persons

(Privacy notice)

This Agreement was last amended on January 25, 2021.

 

General information

From May 25, 2018. A new General Data Protection Regulation, adopted by the European Union, has entered into force. The regulation aims to ensure the protection of data of individuals from all EU Member States and to harmonize the regulations for their processing.

As a controller of personal data in connection with the delivery of food to homes and trade in ready-made food and food products "Maviana" Ltd. meets all the requirements of the new legislation, collecting only personal data to the extent necessary for providing the service, and keep them responsibly and lawfully, covering one of the basic principles of the Personal Data Protection Act, namely minimizing the processing of personal data to the extent that we need to perform our service.

Information about the Personal Data Administrator

1. Name: "MAVIYANA" EOOD
2. UIC / BULSTAT: 203297320
3. Headquarters and address of management: Burgas, Bulgaria, 8016 Sarafovo Blvd. Burevestnik Street № 4.
4. Address for exercising the activity: Kamanite Brewery, Burgas, Bulgaria, 8016 Sarafovo, 4 Burevestnik Str.
5. Correspondence data: Burgas, Bulgaria, 8016 Sarafovo, 4 Burevestnik Str.
6. Email: info@restaurant-burgas.com
7. Phone: (+359) 896739207

Information on the personal data protection officer

1. Name: "MAVIYANA" EOOD
2. UIC / BULSTAT: 203297320
3. Headquarters and address of management: Burgas, Bulgaria, 8016 Sarafovo, 4 Burevestnik Str.
4. Correspondence data: Burgas, Bulgaria, 8016 Sarafovo, 4 Burevestnik Str.
5. Phone: (+359) 896739207
6. Email: info@restaurant-burgas.com

Information on the competent supervisory authority

1. Name: Commission for Personal Data Protection
2. Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
3. Data for correspondence: Sofia 1592, Prof. Tsvetan Lazarov ”№ 2
4. Phone: 02 915 3 518
5. Email: kzld@government.bg, kzld@cpdp.bg
6. Website: www.cpdp.bg.

MAVIYANA EOOD operates in accordance with the Personal Data Protection Act Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on free movement of such data.

Grounds for collecting, processing and storing your personal data

Art. 1. MAVIYANA EOOD collects and processes your personal data in connection with food delivery to homes and concluding contracts with the company on the basis of Article 6, paragraph 1, Regulation (EU) 2016/679 , and in particular on the basis of the following:

• Explicit consent received from you as a client;
• Fulfillment of the obligations of MAVIYANA EOOD under a contract with you;
• Compliance with a legal obligation that applies to MAVIANA EOOD
• For the purposes of the legitimate interest of MAVIYANA EOOD.

 

Goals and principles in the collection, processing and storage of your personal data

Art. 2. (1) MAVIANA EOOD collects and processes the personal data that you provide to us in connection with the use of our services and / or for concluding a contract with the company, as well as for registration for participation in our events, including for the following purposes. :

• creating a profile and providing full functionality in the provision of our services
• individualization of a party to the contract;
• registration of a participant in an event organized by MAVIYANA EOOD for accounting purposes;
• statistical objectives;
• protection of information security;
• ensuring the implementation of the contract for the provision of the respective service;
• sending information messages, messages about changes in the service, recommendations for improving the use of the platform, etc.
• improving and individualizing the service by offering suitable offers for products and services that may be of interest to you;

 (2) MAVIANA EOOD observes the following principles in the processing of your personal data:

• legality, good faith and transparency;
• restriction of processing purposes;
• relevance to the purposes of processing and minimizing the data collected;
• accuracy and timeliness of the data;
• limitation of storage in order to achieve the objectives;
• integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.

(3) In the processing and storage of personal data, MAVIYANA EOOD may process and store personal data in order to protect its following legitimate interests:

• fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal bodies.

What types of personal data does MAVIYANA EOOD collect, process and store?

Art. 3. (1) MAVIANA EOOD performs the following operations with personal data for the following purposes:

• Registration of a user on the website and fulfillment of a contract for home delivery of food - the purpose of this operation is to create a profile to be used to track and document your orders. Conclusion of the impact assessment: Based on the above impact assessment, the Data Protection Officer considers that the operation "Concluding a contract for the supply of food to the home" is admissible and provides sufficient guarantees to protect the rights and legal interests of data subjects in accordance with the requirements of the GDPR.
• Concluding and executing a trade transaction with a client or partner - the purpose of this operation is concluding and executing a contract with a trade partner or client and its administration;
• Sending information messages - the purpose of this activity is to administer the process of sending messages to customers that relate to improvements or changes in services, according to the contract for the provision of the service.
• Sending a newsletter - the purpose of this operation is to administer the process of sending newsletters to customers who have stated that they wish to receive;

 (2) MAVIYANA EOOD processes the following categories of personal data and information for the following purposes and on the following grounds:

• Data: Your personal data (name and surname, e-mail, address, telephone)

o Purpose for which the data is collected: 1) User registration; 2) Delivery of food to the home; 3) Making contact with the user and sending information to him, including if desired - to send newsletters and advertising messages;

o Grounds for processing your personal data - By registering on the website and purchasing a service, a contractual relationship is created between MAVIYANA EOOD and you, on the basis of which we process your personal data - Art. 6, para. 1, p. (b) GDPR.

• Other data that MAVIANA EOOD processes - When you log in to our website or in your account, MAVIYANA EOOD collects data about the IP address used.

o Purpose for which the data is collected: Improving the security of the service and localization of the interface, statistical and marketing research.

o Grounds for data processing: The processing is necessary for the performance of a contract to which the data subject is a party - Article 6, paragraph 1, b. (b) of the GDPR. Until the creation of a user profile, the IP address is collected on the basis of realization of the legitimate interests of the administrator - art. 6, para 1, b. (f) the GDPR;

• Your invoice details for an individual - If you want to be issued an invoice as an individual, you must provide your unique civil number.

o Purpose for which the data is collected: Issuance of an invoice for making payments under a concluded contract for the provision of services.

o Grounds for processing your personal data - By registering on the website, or when concluding a written contract, a contractual relationship is created between MAVIYANA EOOD and you, on which basis we process your personal data - Article 6, paragraph 1, b . (b) GDPR.

• Your data for making direct payments through the interface of our website - If you wish to make a direct payment through our website you must provide personal data related to your bank account and bank card, namely: you must provide your bank card number, date card validity, unique card code and issuer and card type

o Purpose for which the data is collected: Making payments under a concluded contract for the provision of services.

o Grounds for processing your personal data - By registering on the website, or when concluding a written contract, a contractual relationship is created between MAVIYANA EOOD and you, on which basis we process your personal data - Article 6, paragraph 1, b . (b) GDPR.

 (3) MAVIANA EOOD does not collect or process personal data, which refer to the following:

• reveal racial or ethnic origin;
• disclose political, religious or philosophical beliefs, or trade union membership;
• genetic and biometric data, health data or data on sexual life or sexual orientation.

(4) The personal data have been collected by MAVIYANA EOOD from the persons to whom they refer.

(5) The company shall not perform automated decision-making with data.

(6) The company does not process data for persons under 16 years of age, except with the explicit consent of their parents or representatives.

Term of storage of your personal data

Art. 4. (1) "MAVIANA" Ltd. stores your personal data for a period not longer than the existence of your account on the website. After the expiration of this period, "MAVIYANA" Ltd. takes the necessary care to delete and destroy all your data without undue delay.

(2) MAVIYANA EOOD notifies you in case the term for data storage needs to be extended in view of fulfillment of the objectives, fulfillment of the contract, in view of legitimate interests of MAVIYANA EOOD or other.

(3) MAVIYANA EOOD stores your data, given on the basis of consent, until its explicit withdrawal, and this does not affect the publications and comments made in order to preserve the semantic integrity of the comments.

(4) MAVIANA EOOD stores the personal data that it is necessary to keep by virtue of the applicable legislation for the respective envisaged term, which may exceed the term of existence of your registration.

Transfer your personal data for processing

Art. 5. (1) MAVIYANA EOOD may, at its own discretion, transfer part or all of your personal data to personal data processors for the fulfillment of the processing purposes in compliance with the requirements of Regulation (EU) 2016/679.

(2) MAVIYANA EOOD notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations.

Withdrawal of consent for the processing of your personal data

Art. 6. (1) If you do not want all or part of your personal data to continue to be processed by "MAVIANA" Ltd. for specific or all purposes of processing, you can at any time withdraw your consent to processing by filling out the form published on our website or by request in free text.

(2) MAVIYANA EOOD may request that you verify your identity and identity with the person to whom the data relates.

(3) With the withdrawal of the consent for processing of personal data, which are obligatory for the creation and maintenance of your registration for the use of the services, your account will become inactive.

Your rights in the collection, processing and storage of your personal data

Right of access

Art. 7. (1) You have the right to request and receive from "MAVIYANA" EOOD confirmation whether personal data related to you are processed.

(2) You have the right to access the data related to it, as well as the information related to the collection, processing and storage of your personal data.

(3) MAVIYANA EOOD provides you, upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.

(4) The provision of access to the data is free of charge, but MAVIYANA EOOD reserves the right to impose an administrative fee in case of repetitive or excessive requests.

Right of correction or completion

Art. 8. You can correct or fill in the inaccurate or incomplete personal data related to you directly through your profile on the website or by making a request to "MAVIANA" Ltd.

Right to delete ("to be forgotten")

Art. 9. (1) You have the right to request from "MAVIYANA" EOOD deletion of the personal data related to you, and "MAVIYANA" EOOD has the obligation to delete them without unnecessary delay, when there is any of the following reasons:

• personal data are no longer needed for the purposes for which they were collected or otherwise processed;
• You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
• You object to the processing of your personal data, including for direct marketing purposes, and there are no legal grounds for processing to take precedence;
• personal data have been processed illegally;
• personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to MAVIANA EOOD;
• personal data have been collected in connection with the provision of information society services.

(2) MAVIANA EOOD shall not be obliged to delete the personal data if it stores and processes them:

• to exercise the right to freedom of expression and the right to information;
• to comply with a legal obligation requiring processing provided for in EU law or the law of the Member State applicable to the Administrator or for the performance of a task in the public interest or in the exercise of official powers conferred on him;
• for reasons of public interest in the field of public health;
• for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
• to establish, exercise or defend legal claims.

(3) In order to exercise your right to "forget", you should submit a written request sent to "MAVIYANA" EOOD, as well as to prove your identity and identity with the person to whom the data relates before "MAVIYANA" EOOD, as present your ID card on the spot for identification purposes to an employee of MAVIYANA EOOD.

(4) MAVIYANA EOOD shall not delete the data, which it has a legal obligation to store, including for protection on the occasion of court claims against it or proof of its rights.

Right of restriction

Art. 10. You have the right to request from MAVIYANA EOOD to limit the processing of the data related to you when:

• challenge the accuracy of the personal data for a period that allows MAVIYANA EOOD to check the accuracy of the personal data;
• the processing is illegal, but you do not want your personal data to be deleted, only their use to be restricted;
• MAVIYANA EOOD no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or protection of your legal claims;
• You have objected to the processing pending verification of whether the legal grounds of MAVIYANA EOOD take precedence over your interests.

Right of portability

Art. 11. (1) You can at any time download the data that are stored and processed for you in connection with the use of the services of "MAVIANA" Ltd. with a request by email.

(2) You can ask MAVIYANA EOOD to directly transfer your personal data to an administrator specified by you, when this is technically feasible.

Right to receive information

Art. 12. You can ask MAVIYANA EOOD to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested have been disclosed. MAVIANA EOOD may refuse to provide this information if this would be impossible or would require a disproportionate effort.

Right to object

Art. 13. You can object at any time against the processing of personal data by MAVIYANA EOOD, which relates to you, including if they are processed for the purposes of profiling or direct marketing.

Your rights in the event of a breach of the security of your personal data

Art. 14. (1) If MAVIYANA EOOD establishes a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, we shall notify you without undue delay of the breach, as well as of the measures taken or forthcoming. to be taken.

(2) MAVIYANA EOOD is not obliged to notify you if:

• has taken appropriate technical and organizational protection measures with regard to data affected by the security breach;
• has subsequently taken steps to ensure that the breach does not pose a high risk to your rights;
• notification would require a disproportionate effort.

Persons to whom your personal data is provided

Art. 15. In order to make a home delivery and after a request has been submitted by you, MAVIYANA EOOD transmits the necessary information to its respective courier employee or to another joint administrator who performs the home delivery service, which processes your data as an administrator for home delivery purposes.

Art. 16. The administrator does not transfer your data to third countries.

Other provisions

Art. 17. In the event of a breach of your rights under the above or applicable data protection legislation, you have the right to lodge a complaint with the Data Protection Commission as follows:

1. Name: Commission for Personal Data Protection
2. Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№2
3. Data for correspondence: Sofia 1592, Prof. Tsvetan Lazarov ”№2
4. Phone: 02 915 3 518
5. Email: kzld@government.bg, kzld@cpdp.bg
6. Website: www.cpdp.bg.

Art. 18. You may exercise all your rights to the protection of your personal data in any form that contains a statement to that effect and identifies you as the data owner.

Art. 19. If the consent relates to a transfer, the controller shall describe the possible risks for the transfer of data to third countries in the absence of a decision on adequate protection and appropriate means of protection.

Art. 20 (1). When you assign MAVIANA EOOD to process personal data of a third party for the purposes of using the service, MAVIYANA EOOD acts as a processor of personal data.

(2). In the cases under par. 1, "MAVIYANA" Ltd. acts only on your instructions as a user of the service and only to the extent that there can be control over the personal data that you process. MAVIANA Ltd. has no control over the content and data that you as a user of the service choose to upload to the service (including if this data includes or does not include personal data). In this case "MAVIYANA" Ltd. has no role in the process of deciding whether the user uses the service for personal data processing, for what purposes and whether they are protected. Accordingly, the liability of MAVIYANA EOOD in this case is limited to 1) compliance with the instructions of the user of the service according to the contract and the general conditions and 2) the provision of information about the service and functionalities through its interface.