Source: http://jiventa.bg/en/page/4/privacy-policy.html
Timestamp: 2019-04-23 20:50:58+00:00

Document:
Dear Customers, May 25, 2018 the General Data Protection Regulation (GDPR), which is adopted by the European Union, is being implemented and its objective is to align the EU Member States' policies on the collection and use of personal data.
(Hereinafter referred to as "Administrator" or "the Company") operates in accordance with the Personal Data Protection Act and Regulation (EC) 2016/679 of the European Parliament and of the Council of October 1, 2015 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. This information is intended to inform you of all aspects of the processing of your personal data by the Company and the rights you have in relation to such processing.
• For the legitimate interests of the Administrator or a third party.
• Sending a newsletter at your request.
• integrity and confidentiality of processing and ensuring an adequate level of security of personal data.
• Conclusion and execution of a commercial transaction or contract with a client - the purpose of this operation is to conclude and implement a contract with a commercial partner or client and its administration. In some cases, the purpose of the transaction may also be to protect the legitimate interests of the company in executing the transaction.
Send a newsletter (newsletter) - the purpose of this operation is to administer the bulletin sending process to customers who have declared they wish to receive.
• Registration of a participant in events and sending of information or awards - the purpose of this operation is to administer the process of registration of participants in events and games and to send prizes from games held.
3 to send a newsletter.
• Reason for processing your personal data - By accepting the terms and conditions and registering in the online store or placing an order without registration or upon entering into a written agreement between the Administrator and you, a contractual relationship is created on which we process your personal data - Art. 6, para. 1, b. (b) GDPR. Your data for submitting a newsletter is processed on the basis of your explicit consent - Art. 6, para. 1, b. (s) GDPR.
1 To send a newsletter.
• Reason for processing your personal data - Your data for submitting a newsletter is processed on the basis of your explicit consent - Art. 6, para. 1, b. (s) GDPR.
• Purpose for which the data are collected: Execution of obligations of the controller under a distance-purchase contract and delivery of purchased goods, including the exercise of the right of return and the replacement or refusal of purchased goods.
• Reason for processing your personal data - By accepting the terms and conditions and registering in the online store or placing an order without registration or upon entering into a written agreement between the Administrator and you, a contractual relationship is created on which we process your personal data - Art. 6, para. 1, b. (b) GDPR.
2 for the purposes of registration for participation in a game, lottery, campaign, etc.
(4) The Company does not perform automated decision making with data.
(5) The Company does not collect and process data for persons under 16 years of age except with the explicit consent of their parents or legal representatives.
Art. 5. (1) The Administrator shall store your personal data for a period no longer than the existence of your online store account or the withdrawal of the consent for processing. Once your account has been deleted or successfully terminated, the Administrator takes the necessary care to erase and destroy all your data without undue delay or to anonymize them (ie to bring them in a form that does not reveal your personality).
(2) The administrator keeps your personal data provided in connection with online orders for a period of 5 years for the purpose of protecting the legal interests of the Administrator in judicial or administrative disputes with online shop users, and the accounting documents are kept for the relevant statutory period.
(3) The Administrator shall notify you in case the period for storing the data needs to be extended in order to meet a statutory obligation or in view of the legitimate interests of the Administrator or otherwise.
Art. 6. The administrator keeps the personal data of the legal representatives of his trading partners for the term of performance of the contract, for observing the legitimate interests and legal obligations of the Administrator, which may exceed the term of the concluded contract.
(2) The Administrator may ask you to certify your identity and identity with the data subject by asking you to enter an email address and a password to access the site on site at the Company's office before our employee.
(4) If there is an order you are currently processing, the earliest point at which you can withdraw your consent to processing is the successful completion of the order.
Art. 9. (1) You have the right to request and obtain from the Administrator a confirmation that personal data relating to you are processed, as if you are a registered user, you may at any time see in your profile the personal data you have provided and processed for You.
(3) The Administrator shall provide you, upon request, a copy of the processed personal data relating to you in electronic or other appropriate form.
Art. 10. You may correct or fill in inaccurate or incomplete personal data relating to you directly through your website profile or by requesting to the Administrator.
• email with which you signed up for the online store.
(7) By deleting your personal information, your account will become inactive. Of course, you will be able to browse the online store and offer the products and make orders as a guest or make a new registration.
(8) The administrator does not erase the data, which he / she has a legal obligation to store, including for protection against claims against him / her or proof of his / her rights.
• You have reproached the processing pending verification that the Administrator's legal grounds have an advantage over your interests.
Art. 13. (1) You may at any time download or receive in a machine-readable format the data that is stored and processed for you in connection with the use of the Services of the Administrator, directly through your account through the Export Data Option or email request.
Art. 14. You may request the Administrator to inform you of all recipients to whom personal data for which correction, deletion, or limitation of the processing has been requested has been disclosed. The administrator may refuse to provide this information if this would not be possible or would require disproportionate effort.
Art. 15. You may object at any time to the processing of personal data by the Administrator that relates to it, including if it is being processed for profiling or direct marketing purposes.
Art. 17. For the purpose of processing your personal data and providing the service in its full functionality and in view of your interests, the Administrator may provide the data to the following data processors: Speaks (Deliveries for the Country and Abroad), Econt (Deliveries for the country), Rapido (Delivery of the country), Account OOD (Accounting services). These processing personal data comply with all legal and security requirements for the processing and storage of your personal data.
Art. 20. You may exercise all of your rights to the protection of your personal data by making your claims in any form that contains a statement and identifies you as the data holder.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 5

Art. 6

Art. 9

Art. 10

Art. 13

Art. 14

Art. 15

Art. 17

Art. 20