This is our privacy policy:
Dear Customers, May 25, 2018 the General Data Protection Regulation (GDPR), which is adopted by the European Union, is being implemented and its objective is to align the EU Member States' policies on the collection and use of personal data.Please take a moment to get acquainted with our Privacy Policy that you can access at any time through the PERSONAL DATA link at the bottom of our page.
Mandatory information on the rights of individuals to protect personal data
Information about the company processing your data
Name: "Jiventa" Ltd
UIC / BULSTAT: 202409446
VAT registration: BG202409446
Headquarters and address of management: Sofia, Simeonovo, Sofia Park №108
Address for correspondence: Sofia, Simeonovo, jk. Sofia Park №108
Phone: +359 899 130 300
E-mail: jpavlova@jiventa.bg
Website: http://jiventa.bg/
Information about the competent supervisory authority on the protection of personal data
Name: Commission for Personal Data Protection
Headquarters and address of management: Sofia 1592, "Prof. 2 Tsvetan Lazarov
Address for correspondence: Sofia 1592, "Prof. 2 Tsvetan Lazarov
Phone: 02 915 3 518
Website: www.cpdp.bg
(Hereinafter referred to as "Administrator" or "the Company") operates in accordance with the Personal Data Protection Act and Regulation (EC) 2016/679 of the European Parliament and of the Council of October 1, 2015 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. This information is intended to inform you of all aspects of the processing of your personal data by the Company and the rights you have in relation to such processing.
Reason for collecting, processing and storing your personal data
Art. 1. The administrator collects and processes your personal data in connection with the use of the website http://jiventa.bg and the online store located at the same address, signing contracts with the company pursuant to Art. 6, para. 1, Regulation (EC) 2016/679 (GDPR), and in particular on the following grounds:
• Explicit consent received from you as a customer;
• Execution of the obligations of the Administrator under contract with you;
• Compliance with a statutory duty applicable to the Administrator;
• For the legitimate interests of the Administrator or a third party.
Objectives and principles of collecting, processing and storing your personal data
Art. 2. (1) We collect and process the personal data you provide to us in connection with the use of the website and the online store http://jiventa.bg and the conclusion of a contract with the company, including for the following purposes:
• creating an account and providing full functionality in using the online store;
• placing orders and purchasing products and services;
• individualisation of a party to the contract;
• accounting purposes;
• statistical objectives;
• protection of information security;
• ensuring the fulfillment of the contract for the provision of the respective service;
• participation in events and training seminars organized by the company;
• participation in games, lotteries, advertising campaigns;
• Sending a newsletter at your request.
(2) We comply with the following principles when processing your personal data:
• legality, good faith and transparency;
• limitation of processing goals;
• relevance to processing goals and minimization of collected data;
• accuracy and timeliness of the data;
• Restriction of storage in order to achieve the objectives;
• integrity and confidentiality of processing and ensuring an adequate level of security of personal data.
(3) When processing and storing personal data, the Administrator may process and store personal data in order to protect the following legitimate interests:
• fulfilling its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.
What kind of personal data collects, processes and stores our company
Art. 3. The Company carries out the following operations with the personal data you provide for the following purposes:
• Conclusion and execution of a commercial transaction or contract with a client - the purpose of this operation is to conclude and implement a contract with a commercial partner or client and its administration. In some cases, the purpose of the transaction may also be to protect the legitimate interests of the company in executing the transaction.
• Registering yourself as a consumer in the e-shop and executing a sales contract - the purpose of this operation is to create an account for using the e-shop to buy goods and to receive bulletins with expressed desire. Providing contact details for delivery of purchased goods
• Exercise of a right of withdrawal or a claim - the purpose of this operation is to administer the process of sending purchased goods to customers
• Registration of a participant in events and sending of information or awards - the purpose of this operation is to administer the process of registration of participants in events and games and to send prizes from games held.
• Request for delivery of a product not in stock - the purpose of this operation is to establish contact with the individual for the purpose of requesting delivery of a product not currently available
Art. 4. (1) The administrator shall process the following categories of personal data and information for the following purposes and on the following grounds:
• Data for registration and receipt of newsletter (names, e-mail)
• Goal for which data is collected:
1 Making a user connection and sending information to it,
2 for the purpose of registering a user in the online store as well
3 to send a newsletter.
• Reason for processing your personal data - By accepting the terms and conditions and registering in the online store or placing an order without registration or upon entering into a written agreement between the Administrator and you, a contractual relationship is created on which we process your personal data - Art. 6, para. 1, b. (b) GDPR. Your data for submitting a newsletter is processed on the basis of your explicit consent - Art. 6, para. 1, b. (s) GDPR.
• Newsletter data (names, e-mail)
• Goal for which data is collected:
1 To send a newsletter.
• Reason for processing your personal data - Your data for submitting a newsletter is processed on the basis of your explicit consent - Art. 6, para. 1, b. (s) GDPR.
• Delivery details (names, phone, e-mail, address)
• Purpose for which the data are collected: Execution of obligations of the controller under a distance-purchase contract and delivery of purchased goods, including the exercise of the right of return and the replacement or refusal of purchased goods.
• Reason for processing your personal data - By accepting the terms and conditions and registering in the online store or placing an order without registration or upon entering into a written agreement between the Administrator and you, a contractual relationship is created on which we process your personal data - Art. 6, para. 1, b. (b) GDPR.
• Data from your social networking accounts (public information from your Google+ accounts, Facebook, Instagram)
• Goal for which data is collected:
1 Making a user connection and sending information to it,
2 for the purposes of registration for participation in a game, lottery, campaign, etc.
• Reason for processing your personal data - Your subscription data in our events, games, campaigns, and more are processed on the basis of your explicit consent - Art. 6, para. 1, b. (s) GDPR
(2) The administrator does not collect or process any personal data related to the following:
• reveal racial or ethnic origin;
• Disclose political, religious or philosophical beliefs, or membership of trade unions;
• genetic and biometric data, health data, or data on sexual life or sexual orientation.
(3) The personal data are collected by the Administrator from the persons to whom they refer.
(4) The Company does not perform automated decision making with data.
(5) The Company does not collect and process data for persons under 16 years of age except with the explicit consent of their parents or legal representatives.
Art. 5. (1) The Administrator shall store your personal data for a period no longer than the existence of your online store account or the withdrawal of the consent for processing. Once your account has been deleted or successfully terminated, the Administrator takes the necessary care to erase and destroy all your data without undue delay or to anonymize them (ie to bring them in a form that does not reveal your personality).
(2) The administrator keeps your personal data provided in connection with online orders for a period of 5 years for the purpose of protecting the legal interests of the Administrator in judicial or administrative disputes with online shop users, and the accounting documents are kept for the relevant statutory period.
(3) The Administrator shall notify you in case the period for storing the data needs to be extended in order to meet a statutory obligation or in view of the legitimate interests of the Administrator or otherwise.
Art. 6. The administrator keeps the personal data of the legal representatives of his trading partners for the term of performance of the contract, for observing the legitimate interests and legal obligations of the Administrator, which may exceed the term of the concluded contract.
Transmission of your personal data for processing
Art. 7. (1) The administrator may, at its own discretion, transmit all or part of your personal data to processor personal data for the fulfillment of the processing purposes with which you have agreed, subject to the requirements of Regulation (EC) 2016/679 (GDPR) .
(2) The Administrator notifies you, in the event of intention, to transfer part or all of your personal data to third countries or international organizations.
Your rights in collecting, processing and storing your personal data
Withdrawal of consent to process your personal data
Art. 8. (1) If you do not wish all or any of your personal data to continue to be processed by the Company for any particular or for any processing purpose, you may at any time withdraw your consent to processing by filling in the form in your account or by request in free text.
(2) The Administrator may ask you to certify your identity and identity with the data subject by asking you to enter an email address and a password to access the site on site at the Company's office before our employee.
(3) By withdrawing the consent to process personal data that is required to create and maintain an online store account, your account will become inactive. Of course, you will be able to browse the online store and offer the products and make orders as a guest or make a new registration.
(4) If there is an order you are currently processing, the earliest point at which you can withdraw your consent to processing is the successful completion of the order.
Right of access
Art. 9. (1) You have the right to request and obtain from the Administrator a confirmation that personal data relating to you are processed, as if you are a registered user, you may at any time see in your profile the personal data you have provided and processed for You.
(2) You have the right to access data relating to you as well as information relating to the collection, processing and storage of your personal data.
(3) The Administrator shall provide you, upon request, a copy of the processed personal data relating to you in electronic or other appropriate form.
(4) The provision of access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of repeatability or excessive demand.
Right of adjustment or replenishment
Art. 10. You may correct or fill in inaccurate or incomplete personal data relating to you directly through your website profile or by requesting to the Administrator.
Right to delete ("to be forgotten")
Art. 11. (1) You have the right to ask the Administrator to delete any or all personal data related to you and the Administrator has the obligation to delete them without undue delay when any of the following reasons exists:
• personal data is no longer needed for the purposes for which it was collected or otherwise processed;
• You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
• You object to the processing of personal data related to you, including for the purposes of direct marketing, and there are no legitimate grounds for processing that have an advantage;
• personal data has been tampered with;
• Personal data must be deleted to comply with a legal obligation under EU law or the law of a Member State that applies to the Administrator;
• personal data have been gathered in connection with the provision of information society services.
(2) The administrator is not obliged to delete the personal data if he / she keeps them and processes them:
• exercising the right to freedom of expression and the right to information;
• complying with a legal obligation that requires treatment provided for under EU law or the law of the Member State that applies to the Administrator or for the performance of a public interest task or the exercise of official authority;
• for reasons of public interest in the field of public health;
• for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
• for the establishment, exercise or protection of legal claims.
(3) In the event that you exercise your right to be forgotten, the Company will delete all your data except for the following information:
• the information that is necessary to verify that your right to be forgotten is fulfilled;
• technical information about the functioning of the online store, which information can not connect in any way with your personality;
• email with which you signed up for the online store.
(4) In order to exercise your right to be forgotten, you must submit a request via your online store account or by sending an email request to the Administrator.
(5) The administrator may ask you to certify your identity and identity with the data subject.
(6) If there is an order you are currently processing, the earliest point at which you can ask to be "forgotten" is when you successfully complete the order.
(7) By deleting your personal information, your account will become inactive. Of course, you will be able to browse the online store and offer the products and make orders as a guest or make a new registration.
(8) The administrator does not erase the data, which he / she has a legal obligation to store, including for protection against claims against him / her or proof of his / her rights.
Right of limitation
Art. 12. You have the right to require the Administrator to restrict the processing of your related data when:
• question the accuracy of personal data for a period that allows the Administrator to verify the accuracy of personal data;
• processing is illegal, but you do not want personal data to be erased, but only to be restricted;
• The administrator no longer requires personal data for the purposes of processing, but you require them to identify, exercise or protect your legal claims;
• You have reproached the processing pending verification that the Administrator's legal grounds have an advantage over your interests.
Right of portability
Art. 13. (1) You may at any time download or receive in a machine-readable format the data that is stored and processed for you in connection with the use of the Services of the Administrator, directly through your account through the Export Data Option or email request.
(2) You may request the Administrator to directly transfer your personal data to an administrator you provide when it is technically feasible.
Right to receive information
Art. 14. You may request the Administrator to inform you of all recipients to whom personal data for which correction, deletion, or limitation of the processing has been requested has been disclosed. The administrator may refuse to provide this information if this would not be possible or would require disproportionate effort.
Right of objection
Art. 15. You may object at any time to the processing of personal data by the Administrator that relates to it, including if it is being processed for profiling or direct marketing purposes.
Your rights in violation of the security of your personal data
Art. 16. (1) If the Administrator detects a breach of security of your personal data that may pose a high risk to your rights and freedoms, he shall notify you without undue delay of the violation as well as of the measures taken or to be taken .
(2) The administrator is not obliged to notify you if:
• has taken appropriate technical and organizational protection measures with respect to the data affected by the security breach;
• has subsequently taken measures to ensure that the violation will not lead to a high risk for your rights;
• notification would require disproportionate efforts.
Individuals to whom your personal information is provided
Art. 17. For the purpose of processing your personal data and providing the service in its full functionality and in view of your interests, the Administrator may provide the data to the following data processors: Speaks (Deliveries for the Country and Abroad), Econt (Deliveries for the country), Rapido (Delivery of the country), Account OOD (Accounting services). These processing personal data comply with all legal and security requirements for the processing and storage of your personal data.
Art. 18. The administrator does not transfer your data to third countries.
Art. 19. In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows:
Name: Commission for Personal Data Protection
Headquarters and address of management: Sofia 1592, "Prof. 2 Tsvetan Lazarov
Address for correspondence: Sofia 1592, "Prof. 2 Tsvetan Lazarov
Phone: 02 915 3 518
Website: www.cpdp.bg
Art. 20. You may exercise all of your rights to the protection of your personal data by making your claims in any form that contains a statement and identifies you as the data holder.
JIVENTA LTD
