PRIVACY POLICY OF www.buba.bg
Information about the Company that processes your personal data:
Name: NEWVIVA Ltd. (“НЮВИВА” ООД);
UIC (ЕИК): 201884970
Registered office and address of management:
BULGARIA, Sofia, Mladost district
bl. 460A, entr. 2, Prof. Aleksandar Tanev St.
Correspondence address: 16 Aleksandar Malinov Blvd., floor 3, office 2, Sofia, Bulgaria
Telephone: +359 2 426 54 32
Information about the competent supervisory authority for personal data protection:
Name: Commission for Personal Data Protection (КЗЛД):
Registered office and address of management: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Correspondence address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Telephone: 02 915 3 518
Website: www.cpdp.bg
NEWVIVA LTD. (HEREINAFTER REFERRED TO FOR SHORT AS “THE COMPANY” OR “THE CONTROLLER”) CARRIES OUT ITS ACTIVITIES IN ACCORDANCE WITH REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016 ON THE PROTECTION OF NATURAL PERSONS WITH REGARD TO THE PROCESSING OF PERSONAL DATA AND ON THE FREE MOVEMENT OF SUCH DATA
The purpose of this information is to inform you of all aspects of the processing of your personal data by the Company and of the rights you have in connection with that processing.
LEGAL BASIS FOR COLLECTING, PROCESSING AND STORING YOUR PERSONAL DATA:
The Company collects, stores and processes your personal data for the purpose of providing a service and in connection with the use of the online shop www.buba.bg on the basis of Art. 6(1) of Regulation (EU) 2016/679, and more specifically on the basis of the following:
Art. 6. (1) Customer data are collected on the basis of:
1) a contract
2) the customer’s explicit consent, and
3) legitimate interests, or
4) the Company’s legal obligations.
Our customers’ data are collected when they place an order in our online shop and/or register a user account, following explicit acceptance of the general terms and conditions, which contain the Mandatory information on individuals’ rights regarding personal data protection, which customers should read. The data processed by the Controller are as follows:
- Customer’s names
- Delivery address
- Current telephone number
- Bank account information (in cases where the customer requests the return of the purchased product and a refund of the amount paid)
- User data related to the use of our website
Data from your identity card and any other information related to a job application (if you are applying for a job with us). We may provide our customers’ data to third parties (for example couriers or an accountant) – only in fulfilment of a statutory obligation or to protect the legitimate interests of the Controller.
As a customer, you must give explicit consent for your data to be processed for marketing purposes, including for sending newsletters, advertising messages, etc.; if you do not consent to this processing, your data are not used for these purposes.
Personal data of the Company’s partners
Art. 3. (1) The Company collects, stores and processes personal data of its partners who are natural persons and of the legal representatives or proxies of its partners who are legal entities, on the basis of the performance of a contract. (2) Partners’ data are collected when a contract is concluded with the Company or during preparation for drawing up such a contract. (3) Data of the legal representatives of partners that are legal entities are collected from them, as well as from the Commercial Register at the Registry Agency or the relevant register of public information. (4) Partners’ data may be provided to processors solely for the purposes of performing the contract and to third parties – only in fulfilment of a statutory obligation or to protect the legitimate interests of We at NEWVIVA Ltd. observe the following principles when processing your personal data:
- Lawfulness, fairness and transparency
- Purpose limitation
- Relevance to the purposes of processing and data minimisation;
- Accuracy and up-to-dateness of data;
- Storage limitation in view of achieving the purposes;
- Integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.
(1) The Company carries out the following operations with personal data for the following purposes:
- Registration of a user in the company’s online shop www.buba.bg and performance of a contract for the sale of products, services, etc. – the purpose of this operation is to create an account linked to the online shop through which products offered by the Company can be purchased, delivered and, where necessary, returned and withdrawn from. The account also serves for using a bonus scheme for loyal customers.
- Conclusion and performance of a commercial transaction with a customer or partner – the purpose of this operation is to conclude and perform a contract with a commercial partner or customer and to administer it
- Sending information messages – the purpose of this activity is to administer the process of sending messages to customers concerning improvements or changes to the services, to administer the process of dispatching and delivering products purchased by the customer, and to optimise and keep a history of parameters and orders, in accordance with the contract for the provision of services.
- Sending a newsletter – the purpose of this operation is to administer the process of sending newsletters to customers who have stated that they wish to receive them
(2) The Controller processes the following categories of personal data and information for the following purposes and on the following grounds:
- Data: your identifying data (first name and surname, e-mail, telephone)
- Purpose for which the data are collected: 1) User registration; 2) Communicating with the user and sending information to them, including, where requested, sending newsletters and advertising messages; 3) delivering orders placed through our online shop www.buba.bg
- Legal basis for processing your personal data – By accepting the general terms and conditions, registering on the website and purchasing a service, a contractual relationship is created between NEWVIVA Ltd. and you, on the basis of which we process your personal data – Art. 6(1)(b) GDPR.
- Delivery and/or return of purchased products;
- Other data processed by the Company – When you access our website or your account, the controller collects data about the IP address used.
- Purpose for which the data are collected: Improving the security of the service and localisation of the interface, statistical and marketing research.
- Grounds for processing the data: Processing is necessary for the performance of a contract to which the data subject is party – Art. 6(1)(b) GDPR. Until the user creates an account, the IP address is collected on the basis of the legitimate interests pursued by the controller – Art. 6(1)(f) GDPR;
- Your data for issuing an invoice to a natural person – If you wish to receive an invoice as a natural person, you must provide your personal identification number.
- Purpose for which the data are collected: Issuing an invoice for payments under a concluded contract for the provision of services for the use of the platform for creating online shops.
- Legal basis for processing your personal data – By accepting the general terms and conditions and registering on the website, or when a written contract is concluded, a contractual relationship is created between NEWVIVA Ltd. and you, on the basis of which we process your personal data – Art. 6(1)(b) GDPR.
(3) We do not collect or process sensitive personal data which:
- reveal racial or ethnic origin;
- reveal political, religious or philosophical beliefs, or trade union membership;
- genetic and biometric data, data concerning health or data concerning sex life or sexual orientation
(4) The personal data have been collected by the Company from the persons to whom they relate. (5) The Company does not carry out automated decision-making using the data.
Retention period of your personal data:Art. 4 (1) The Company stores your personal data for a period not longer than the existence of your account on the website. After these periods expire, the Controller takes the necessary care to erase and destroy all your data without undue delay.
(2) The Company will notify you if the data retention period needs to be extended in view of fulfilling the purposes, performing the contract, the legitimate interests of the Company, accounting purposes or otherwise. The Company stores the personal data it is required to keep under applicable legislation for the relevant prescribed period, which may exceed the period of existence of your registration. Transfer of your personal data for processing
Art. 5. (1) The Company may, at its own discretion, transfer some or all of your personal data to processors for the fulfilment of the purposes of processing, in compliance with the requirements of Regulation (EU) 2016/679.
(2) The Company will notify you of any intention to transfer some or all of your personal data to third countries or international organisations.
Your rights in the collection, processing and storage of your personal data – under the personal data protection legislation you have the right to:Withdraw your consent to the processing of your personal data; Access information on whether and for what purpose your personal data are used; Rectification or completion; Right to erasure (“right to be forgotten”)
- Restriction and portability of personal data
- Right to object to direct marketing
- Right to be informed to whom your personal data have been disclosed
If you wish to exercise any of the above rights, please contact us at: office@buba.bg