Processing of personal data

Declaration of consent for the processing of personal data in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016

After carefully reading the information provided below, please decide whether to provide your voluntary, informed and explicit consent to BIODOM EOOD to process your personal data.
To complete the contact form and create a registration at biodom.bg with BIODOM EOOD, you need to provide your personal data.

Section I Definitions
“Personal data” is any information related to an identified natural person or an identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing of personal data”: any operation or set of operations which the Company performs upon personal data, whether or not by automatic means (such as collection, recording, organisation, structuring, storage, adaptation, updating or rectification, alteration, retrieval, consultation, use, disclosure by transmission or provision, dissemination or otherwise making available, alignment or combination, blocking, erasure, destruction, etc.).

Section II Personal data controller. Personal data processor.

BIODOM EOOD, registered in the Commercial Register at the Registry Agency with UIC 131140332, with its registered office and registered address in Sofia, Poduyane district, block 89, entrance A, is a personal data controller.
"Personal data processor" - BIODOM EOOD, as a personal data processor on behalf of another administrator, administrator, without only determining the purposes and means of processing.

Section III Grounds and purposes for collecting, processing and storing your personal data
BIODOM EOOD collects and processes the following personal data when filling out a contact form on the biodom.bg website:
Name and surname;
Email;
Address;
Phone number;
Cookie data, preferences, online behavior, location: Mandatory (essential) cookies, Performance and functionality cookies, Advertising cookies;
BIODOM EOOD collects your personal data for the purpose of:
Identifying the author of the message;
Conducting full correspondence and addressing a response to the author of the message;
Accepting and processing orders for the purchase or delivery of goods and services, concluding contracts for the sale and delivery of goods and/or services;
Informing users and clients about upcoming promotions, advertising and marketing campaigns, raffles, games, etc. The Company collects, processes and stores personal data of individuals who wish to contact the Company via the contact form on the Administrator's website on the basis of Art. 6, par. 1, letter "a" of the Regulation, namely: "the data subject has consented to the processing of his or her personal data for one or more specific purposes";
The personal data collected in the register are collected from the person upon receipt of an electronic message from the same and only after the person has provided voluntary and informed consent.

Section IV Principles for collecting and processing your personal data
When processing your personal data, the Company complies with the following principles:
Lawfulness, good faith and transparency;
Limitation of the purposes of processing;
Compatibility with the purposes of processing and minimization of the collected data;
Accuracy and timeliness of data;
Limitation of storage in order to achieve the purposes;
Completeness and confidentiality of processing and ensuring an appropriate level of security of personal data;

Section V Transfer of personal data to third parties
The collected personal data may be transferred to third parties only with the express consent of the personal data subjects and in compliance with the other conditions provided for in the current Bulgarian legislation.
As a personal data processor, the Company concludes contracts or agreements with the administrators on whose behalf it processes personal data under the terms of Art. 28 item 3 of the Regulation. The processing is carried out when it is necessary for the performance of a legal obligation, the processing is necessary for the performance of obligations under a contract to which the natural person to whom the data relate is a party, as well as for actions preceding the conclusion of such a contract or when the natural person has given his/her explicit consent for one or more purposes specifically set by the Administrator.

Section VI Storage period
The personal data of natural persons collected and processed in connection with the electronic messages received by them through the Company's website are stored until the purposes for which they were collected are achieved or until the consent to provide the personal data is withdrawn - whichever of the two circumstances occurs earlier or within 5 years from the expiration of the contract or termination thereof.

Section VII Your rights when collecting, processing and storing your personal data
At any time while we are processing your personal data, you, as the data subject, have the following rights:
Right of access - You have the right to know what personal data of yours is being processed by the Company. The Administrator shall provide you, upon request, with a free copy of the personal data processed concerning you. When you submit a request by electronic means, the Administrator shall provide the information in a commonly used electronic form.
Right to rectification – You have the right to request rectification of your data stored by the Administrator if they are inaccurate or incomplete.
Right to object – With regard to data processed on the basis of “legitimate interest”, you have the right at any time and on grounds relating to your particular situation to object to the processing. In the event of such an objection, the Administrator shall be obliged to cease processing your personal data, unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the data are processed for the establishment, exercise or defence of legal claims.

Right to erasure (“right to be forgotten”) – You have the right to request the erasure of your personal data in the following cases:
if the personal data are no longer necessary for the purposes for which they were collected;
if the data subject exercises his/her right to object and there are no overriding legitimate grounds for the processing;
if the processing was unlawful;
if there is a legal obligation on the controller to erase the data;
However, the right to erasure does not apply in cases where the data are processed:
for the exercise of the right to freedom of expression and the right to information;
for compliance with a legal obligation which requires processing provided for in Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of ??public health;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of Regulation (EU) 2016/679, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the purposes of such processing;
for the establishment, exercise or defence of legal claims.
Right to restriction of processing – In certain circumstances, you may request the Administrator to restrict (stop) the processing of your data. Such cases include the need to verify the accuracy of the data, the basis for the processing or the lawfulness of their processing.
You can exercise the rights under items 1 – 5 by sending a request/objection to the Company at the following e-mail: office@biodom.bg. The request/objection should contain a statement regarding the circumstance which of your rights you wish to exercise and should identify you as the data subject.
Right to complaint – In case you believe that your data is being processed unlawfully by the Administrator, you have the right to complain to the Personal Data Protection Commission, which is the supervisory authority responsible for the implementation of EU Regulation 2016/679 and the Personal Data Protection Act:
Name: Personal Data Protection Commission;
Headquarters and management address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.;
Correspondence address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.;
Telephone: 02 / 915 3 518;
Website: cpdp.bg
Email: kzld@cpdp.bg

Section VIII Information security and personal data protection measures
The company has taken appropriate technical and organizational measures to protect personal data, such as virus protection, recovery copies for the period, determining the registers that will be maintained on an electronic medium, regulating access to the registers, determining storage periods and procedures for destruction of personal data.

Section IX Notification of changes to this policy
The administrator reserves the right to make amendments and additions to this Policy. When changes are made to the Personal Data Protection Policy, they will be promptly reflected in it and made available to all interested parties on the official website - biodom.bg.