Mandatory information on the rights of persons on personal data protection
Information about the company that processes you data:
Name: Yovini 21 Ltd
EIK/BULSTAT: 203386559
Headquarters and management address: Bulgaria, 4004 Plovdiv, Nikola Vaptsatov Blvd. 23,G,1
Address for correspondence: Bulgaria, 4004 Plovdiv, Nikola Vaptsarov Blvd. 23,G,1
Phone: +359 878196058
E-mail: atelier.yovini@gmail.com
Website: www.atelier-yovini.com
Information about the competent supervisory authority for the protection of personal data
Name: Personal Data Protection Commission
Hesdquarter and management address: Sofia 1592, "Prof. Tsvetan Lazarov" 2
Address for correspondence: Sofia 1592, "Prof. Tsvetan Lazarov" 2
Pfone: 02 9153518
Website: www.cpdp.bg
Yovini 21 Ltd ( hereinafter referred to as the "Administrator" or the "Company") carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of Apriol 27,2016 regarding the protection of natural persons in relation to the processing of personal data and on the movement of such data. This information is intended to inform you about all aspects of the processing of your personal data by the Company and the right you have in relation to this processing.
Basis for collecting, processing and storing your personal data
Art.1. The administrator collects and processes your personal data in connection with the use of the YOVINI electronic store and the conclusion of contracts with the company on the basis of Art.6, para.1, Regulation (EU0 2016/679 (GDPR)
Perposes and principles in the collection, processing and storage of your personal data
Art.2. (1) We collect and process the personal data that you provide us in connection with the use of the electronic store and the conclusion of a contract with the company,including for the following purposes:
(2) We observe the following principles when processing your personal data:
(3) When processing and storing personal data, the Administrator may process and store personal data in order to protect the following legitimate interests:
What types of personal data does our company collect, process and store
Art.3. (1) The company performs the following operations with the personal data provided by you:
Exercising the right of refusal or making a complaint
(2) The administrator processes the following categories of personal data and information for the following purposes and on the following grounds:
1.Your personalizing data (e-mail, name, etc.)
2. Delivery data (names, phone, address, etc.)
3. Additional data provided by you - If you wish to complete your profile, you can fill in your name, surname, phone number.
Grounds for data processing: You have provided express consent for the processing of his personal data for one or more specific purposes-6, para.1,b. (a) of the GDPR at the time of registration in the online store. The provision of these data is not mandatory for registration in the online store.
(3) The administrator does not collect or process personal data related to the following:
(4) The personal data are collected by the Administrator from the persons to whom they relate.
(5) the company does not perform automated decision-making with data.
Art.4. (1) The company performs the following operations with the personal data provided by you, as legal representatives or proxies of legal entities-trading partners, for the following purposes:
Conclusions and execution of a commercial transaction: For the conclusion and execution of a commercial transaction with a commercial company, we process only the three manes of the legal representative or the person authorized by the company.
(2) The personal data are collected by the Administrator from the persons to whom they relate and from the Commercial Register at the Registration Agency.
(3) The company does not perform automated decision-making with data.
Art.5. The administrator can use the so-called "cookies" for the purposes of providing ful functionality of the website, improving the user experience, statistical purposes, ease of access, etc., to which you agree by using our website.
Duration of storage of your personal data
Art.6. (1) The administrator stores your personal data for a period not longer than the existence of your profile in an online store. After deleting your account, the Administrator takes the necessary care to delete and destroy all your data.
(2) The administrator processes your personal data,which you provided when placing an order without registration in the electronic store, until the order is completed.
(3) The Administrator stores your personal data provided in connection with online orders for a period of 5 years for the purpose of protecting the Administrator's legal interests in legal or administrative disputes with users of the online store.
(4) The Administrator notifies you in the event that the data storage period needs to be extended in order to fulfill a legal obligation or in view of legitimate interests of the Administrator or otherwise.
(5) The administrator stores the personal data, which it is necessary to keep according to the applicable legislation, for the relevant stipulated period.
Art.7. The administrator stores the personal data of the legal representatives of its business partners for the duration of the contract.
Transmission of your personal data for processing
Art.8. (1) The administrator may, at its own discretion, transfer part or all of your personal data to processors of personal data for the fulfillmentof the purposes of processing to which you have agreed, subject to compliance with the reguirements of Regulation (EU)2016/679 (GDPR).
(2) The administrator notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations.
You rights in the collection, processing and storage of your personal data
Withdrawal of consent to the processing of your personal data
Art.9 (1) If you do not want the personal data provided by you to be processed for marketing purposes and receiving a newsletter, you can withdraw your consent to processing at any time by filling out the consent withdrawal form in Appendix №1.
(2) After we receive your request, we will send you an e-mail.
(3) The withdrawal of consent does not affect the legality of the processing of personal data, which the Administrator has carried out up to this point.
Right of access
Art.10 You have the right to request and receive confirmation from the Administrator as to whether personal data related to you are being processed by sending a request in free text by e-mail.
Right to rectification or completion
Art. 11. (1) You can correct personal data at any time through the "Edit profile" option.
(2) You can correct personal data through your profile on the website or by using the form in Appendix №4.
Right to erasure ("tobe forgotten")
Art.12. (1) You have the right to ask the Administrator to delete your personal data, and the Administrator has the obligation to delete them when:
the personal data are no longer needed;
You withdraw your consent to the processing;
You object to the processing of your personal data;
the personal data were processed unlawfully;
the personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to the Administrator;
personal data were collected in connection with the provision of information society srvices.
(2) The administrator is not obliged to delete the personal data if it stores and processes them:
to exercise the right to freedom of expression and the right to information;
to comply with a legal obligation that reguires processing provided for in EU law
for reasons of public interest in the field of public health;
for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
for the establishment, exercise or defense of legal claims.
(3) In order to exercise your right to be forgotten, it is necessary to send by email, filling out the form in Appendix №2 - a request for deletion.
(4) After we have verified the identity of the person who made the request and the person to whom the data relates in accordance with the instructions sent to you, we will delete all data that we process about you in accordance with para.3.
(5) If there is an order placed by you that is being processed, the earliest you can request to be "forgotten" is upon successful completion of the order.
Art.13. You have the right to request the Administrator to resyrict the processing of data related to you by sending us a reguest in free text by email.
Right of portabiliry
Art.14. (1) If you have consented to the processing of your personal data or the processing is necessary for the performance of the contract with the Administrator, or if your data is processed in an automated manner.
Right to receive information
Art.15. You mayrequest the Administrator to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested has been disclosed. The administrator may refuse to provide this information if it would be impossible or would require a disproportionate effort.
Right toobject
Art.16. You can object at any time to the processing of personal data by the Administrator.
Your rights in the event of a breach of the security of your personal data
Art.17. If the Administrator detects a violation of the security of your personal data, which may create a high risk for your rights and freedoms, he notifies you without undue delay about the violation.
Art.18. For the purposes of processing your personal data and providing the service in its full functionality and in view of your interest.
Art.19. The administrator does not transfer your data to third countries.
Art.20. In the event of a violation of your rights under the above or applicable personal data protection legislation, you have the right to file a complaint with the Personal Data Protection Commission as follows:
Name: Personal Data Protection Commission
Headquarters and management address: Sofia 1592, "Prof. Tsvetan Lazarov"№.2
Address for correspondence: Sofia 1592, "Prof. Tsvetan Lazarov" №2
Phone: 029153518
Website: www.cpdp.bg
Art.21. You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are not mandatory and you can make your requests in any form that contains a statement to that effect and identifies you as the data owner.
Art.22. If the consent refers to a transfer, the Administrator describes the possible risks for the transfer of the data to third countries in the absence of a decision for adequate protection and suitable means of protection.
Appendix №1
Form for withdrawal of consent for processing purposes
Your Name..........................................................
Your email you used in the e-shop
.........................................................................
Feedback data (e-mail).........................................
Until
Name: Yovini 21 Ltd
EIK/BULSTAT: 203386559
Headquarters and management address: Bulgaria, 4004 Plovdiv, Nikola Vaptsarov Bvrd.23,G,1
Address for correspondence: Bulgaria, 4004 Plovdiv, Nikola Vaptsarov Blvd.23,G,1
Phone: +359 878196058
E-mail: atelier.yovini@gmail.com
Website: www.atelier-yovini.com
I hereby withdraw my consent to the processing of the personal data provided by me for the purposes of receiving a newsletter, advertising messages or other marketing materials, being aware of the conditions for withdrawing consent in accordance with the Mandatory Information on the Rights of Data Protection Persons of the personal data of the electronic store.
In the event of a breach of your rights under the above or applicable data protection legislation, you have the right to lodge a complaint with the Commission for Personal Data Protection as follows:
Name: Personal Data Protection Commission.
Headquarters and management address: Sofia 1592, "Prof. Tsvetan Lazarov"№2
Phone: 02 9153518
Website: www.cpdp.bg
