This Privacy Policy is prepared and based on the applicable Bulgarian legislation on personal data protection. Any amendments or additions will be applied only after the updated content is published and made available through the website.

The website www.fitnesdobavki.eu is owned by “Versu” Ltd., Kazanlak, entered in the Commercial Register under BG 204456658, with business address in Kazanlak, contact phone: +359 888 121 121.

By using the web pages at www.fitnesdobavki.eu YOU AGREE to the terms regarding the collection and use of your personal data in accordance with our Privacy Policy, as well as the disclosure of your personal data to third parties for the purpose of processing and courier delivery of the order you have placed with us.

Please read the Privacy Policy before using www.fitnesdobavki.eu. If you have any questions, contact us at +359 888 121 121.

If you do not agree with the terms of our Privacy Policy, do not register and do not use www.fitnesdobavki.eu.

“Versu” Ltd., Kazanlak is the Personal Data Controller within the meaning of the Personal Data Protection Act (PDPA) for www.fitnesdobavki.eu.

1. WHAT DATA WE PROCESS, FOR WHAT PURPOSES, AND ON WHAT LEGAL BASIS

1.1. The data you provide—name, address, phone number and email, and your order history—are used for registering your account and processing your order at www.fitnesdobavki.eu.

Data such as name, phone number and delivery address are provided by “Versu” Ltd. to the courier company you have chosen in order to complete and deliver your purchase.

The Controller respects the privacy of natural and legal persons and takes all necessary measures to protect personal data against unlawful processing by applying technical and organizational safeguards that are aligned with current technological developments and provide a level of protection appropriate to the risks of processing and to the nature of the data to be protected.

1.2. Your personal data are processed for distance sales to customers, issuing invoices, and reporting completed purchases.

Customer information may be provided when tax and social security inspections are carried out by the competent authorities.

1.3. Personal data are stored in encrypted form to prevent fraud.

2. CATEGORIES OF THIRD PARTIES THAT RECEIVE ACCESS TO AND PROCESS YOUR PERSONAL DATA

The Controller may disclose processed personal data to the following categories of persons:

2.1. Transport/courier companies for fulfilling the goods you purchased, where such companies have provided sufficient guarantees of appropriate technical and organizational measures so that processing complies with the Regulation and safeguards the rights of natural persons.

2.2. Persons engaged by “Versu” Ltd. to maintain equipment and software used to process your personal data.

2.3. Banks servicing payments made by you.

2.4. The natural or legal persons to whom the data relate.

2.5. Public authorities, where applicable.

2.6. Data processors providing services in support of the Supplier’s business activities, such as the Controller’s accountant.

The Supplier does not sell personal data provided by individuals to third parties.

The Controller uses the services of a telephone service provider located in the Republic of Bulgaria.

The Controller uses the services of an email service provider to store received emails on the provider’s server located in the Republic of Bulgaria.

3. PERSONAL DATA RETENTION PERIODS

3.1. One month for persons who registered at www.fitnesdobavki but did not make a purchase through the website within one month.

3.2. Personal data of customers of www.fitnesdobavki.eu are stored for 10 years by the Controller.

3.3. Personal data may be deleted immediately after you notify the Controller at +359 888 121 121 of your decision and provided you do not owe unpaid amounts for purchases you have made.

4. YOUR RIGHTS IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA

4.1. To obtain access to your personal data and information of the kind included in our Privacy Policy regarding those data. You may request information about the purposes for which we process your data by written statement with the content specified in Article 29 of the PDPA.

4.2. To request deletion or correction of your personal data where they are inaccurate or the processing does not comply with the PDPA.

4.3. To object at any time to the processing of your personal data where there is a legal basis to do so.

4.4. To withdraw your consent to the processing of your personal data where processing is based on your consent, specifically when processed for the direct marketing of third-party products and services.

4.5. Where a personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the data subject shall be notified without undue delay of the breach.

4.6. The data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the provisions of the Regulation.

5. MAY YOU REFUSE TO PROVIDE PERSONAL DATA TO “VERSU” LTD. AND WHAT ARE THE CONSEQUENCES

To complete an online purchase on our website, “Versu” Ltd. requires certain data:

— for a natural person: first and last name, phone number, email, and address for receiving the products you purchased;

— for a legal entity: company name, UIC, responsible person, registered office, phone number, email, and address for receiving the products you purchased.

If these data are not provided, www.fitnesdobavki.eu cannot process and dispatch your order.

6. COOKIES

Individuals can learn more about how the Controller uses cookies by reading the Cookie Policy at www.fitnesdobavki.eu.

7. MANDATORY AND VOLUNTARY NATURE OF PROVIDING PERSONAL DATA

7.1. The personal data requested from individuals are aligned with the services offered by the Controller and are of a mandatory nature. The provision of personal data by individuals is voluntary. If the provision of personal data is refused:

The Controller will not be able to provide the goods requested by the natural or legal person.

8. PERSONAL DATA SECURITY

8.1. The Controller takes the necessary technical and organizational measures to protect personal data against accidental or unlawful destruction, accidental loss, unauthorized access, alteration or disclosure, as well as other unlawful forms of processing, namely:

all personal information provided by a natural or legal person to the Controller is stored on secure and reliable servers and directories;

8.2. Comprehensive information about the technical and organizational measures taken by the Controller is available in the Instruction on the mechanism for processing personal data and their protection in the maintained registers containing personal data at the Controller. If you wish to obtain detailed information about these measures, please contact us at +359 888 121 121.

9. LINKS, TOOLS AND CONTENT FROM OTHER COMPANIES

The website contains buttons, tools or content that connect to services of other companies, such as “Share on Facebook” buttons, as well as links to the Supplier’s social media profile and links to the Controller’s website developer. All websites of such companies that can be accessed through this website are independent, and the Controller assumes no responsibility for damages or losses resulting from the use of those websites. Individuals use such websites at their own risk and are advised to review the relevant company’s Privacy Policy for more information.

10. CHANGES TO THE PRIVACY POLICY

This Privacy Policy may be updated at any time, and changes will be published on this website with a new “Last modified” date at the top of this Privacy Policy and will take effect from the date of publication. Therefore, it is advisable to check this Privacy Policy periodically to ensure you are aware of all changes. Your use of the website after the updated Privacy Policy is published will be deemed acceptance of the changes.

11. CONTACTS

If you have additional questions regarding this Privacy Policy, please contact us at +359 888 121 121.