CONFIDENTIALITY AND PERSONAL DATA PROTECTION POLICY OF "ASHTAR" OOD
Effective from 25.05.2018
I. Beginning
ASHTAR Ltd. ("La Pastaria" restaurants) respects the privacy of its customers and guarantees the maximum protection of their personal data. This Privacy and Personal Data Protection Policy (hereinafter referred to as the "Privacy Policy") has been prepared and is based on the current Bulgarian and European legislation in the field of personal data protection.
This Privacy Policy regulates the processing of personal data of individuals or representatives of legal entities of our customers or potential customers, as well as users of our website: www.lapastaria.net ("Site"), in connection with the services provided by " La Pastaria", including those provided through and accessible on the Site.
This Privacy Policy, together with the General Terms of Use of the Internet Site, the Cookie Policy and any other documents that are mentioned on the Site, determine the rules that "La Pastaria" will follow when processing personal data that we collect from you or for you or that you provide to us. This Privacy Policy does not affect, limit or waive your rights under the Personal Data Protection Act (“PPA”) or other relevant legislation.
If you have any questions or comments about this Privacy Policy, please contact us at e-mail: pr@lapastaria.net
Please read this Policy carefully before using the Site or providing your Personal Data, whether electronically on the Site or on paper, as by providing your Personal Data you agree to its terms. If you do not wish us to process your personal data in the manner described in this Privacy Policy, please do not provide it to us. The provision of personal data by you is voluntary, with a view to the use of certain services provided by us and the use of the Site and/or access to it, as well as with a view to online shopping on the Site. Please note that in some cases we will not be able to provide you with the service and/or sell the goods you have requested if you do not provide us with the necessary information. Please also note that in certain cases your consent to the processing of personal data may not be necessary if "La Pastaria" has another legal basis, e.g. fulfillment of statutory obligations.
II. Who processes and is responsible for your personal data?
ASHTAR OOD ("La Pastaria") is the commercial company registered in the Commercial Register at the Registration Agency under the EIC BG200746906, with headquarters and management address: Razgrad, 56 "April Uprising" Blvd., e-mail: pr@lapastaria .net, which collects, processes and stores your personal data under the terms of this Privacy Policy.
1. Introduction
1.1 We are committed to protecting the personal data of our website visitors. In this statement we explain how we will accept your personal information.
1.2 We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first visit our site. By using our website and agreeing to our policy, you consent to our use of cookies in accordance with the terms of this policy.
2. Collection of Personal Information
2.1 We may collect, store and use the following types of personal information:
(A) Information about your computer and your visits when using this site (including your IP address, geographic location, browser type and version, operating system, length of visit, pages visited);
(B) Information you provide to us when registering on our site (including email address);
(C) Information you provide when completing your profile on our site (including your name, address, telephone);
(D) Information relating to any purchases you make of our (products / services) or any other transactions (including your name, address, telephone number, email address);
(E) Information contained in or related to any communication made/sent through our website (including the content of the communication, metadata associated with the communication);
(F) Any other personal information you choose to submit to us;
2.2 Before you disclose to us the personal information of another person (a third party), you must obtain permission from that person, both for the disclosure and for the processing of their personal information in accordance with this policy.
3. Use of Your Personal Data
3.1 Personal information provided by you to us will be used for the purposes set out in this policy.
3.2 We may use your personal information to:
(A) Administer our site and business;
(B) Customize our site for you;
(C) To enable you to use the services on our website;
(D) So that we can provide a service to you
(F) Any other personal information you choose to submit to us;
2.2 Before you disclose to us the personal information of another person (a third party), you must obtain permission from that person, both for the disclosure and for the processing of their personal information in accordance with this policy.
3. Use of Your Personal Data
3.1 Personal information provided by you to us will be used for the purposes set out in this policy.
3.2 We may use your personal information to:
(A) Administer our site and business;
(B) Customize our site for you;
(C) To enable you to use the services on our website;
(D) To enable us to provide you with the services purchased through our site;
(E) To send statements, invoices and payment reminders to you, and to collect payments from you;
(F) To send non-marketing commercial messages;
(G) To send email notifications that you have requested or expected;
(H) To send marketing communications relating to our business (or the business of carefully selected third parties) which we believe may be of interest to you by post via email or similar technology (you may inform us at any time, if you no longer require marketing communication);
3.3 If you submit personal information to us for publication on our site, we will publish it in accordance with the license you grant to us.
3.4 We will not provide your personal information to third parties for any purpose without your express consent.
4. Disclosure of Personal Information
4.1 We may disclose your personal information to any of our employees, insurers, professional consultants, agents, suppliers and subcontractors as far as is reasonable and necessary for the purposes set out in this policy.
4.2 We may disclose your personal information:
(A) To the extent that we are required to do so by law;
(B) In connection with any current or future legal proceedings;
(C) To enforce or protect our legal rights (including providing information to others for anti-fraud and credit risk mitigation purposes);
(D) To the buyer (or prospective buyer) of any business or asset that we sell (or intend to sell);
4.3 Except as provided in this policy, we will not provide personal information to third parties.
5. International Data Exchange
5.1 The information we collect may be stored, processed and transferred between any of the countries in which we operate to enable us to use the information in accordance with this policy.
5.2 The information we collect may be transferred to the following countries that do not have data protection laws equivalent to those in force in the European Economic Area: United States of America, Russia, Japan, China and India.
5.3 Personal information that you publish on our website or submit for publication on our site may be disseminated, via the Internet, throughout the world. We cannot prevent the use or misuse of such information by others.
5.4 You expressly consent to the transfer of personal information described in this Section 5.
6. Preservation of Personal Information
6.1 This section 6 describes the data retention procedures that are in place to ensure that we comply with legal obligations in relation to the retention and deletion of our users' personal data.
6.2 Personal information that we process for any purpose must not be kept for longer than is necessary for that purpose or those purposes.
6.3 Notwithstanding the other provisions of this Section 6, we will retain documents (including electronic documents) containing personal data:
(A) To the extent that we are required to do so by law;
(B) If we believe the documents may be relevant to any current or future legal proceedings;
(C), To exercise or protect our legal rights (including providing information to others for anti-fraud and credit risk mitigation purposes);
7. Protection of personal information
7.1 We will take reasonable technical and organizational measures to prevent the loss, misuse or deletion of your personal information.
7.2 We will store all personal information you provide on our password protected servers.
7.3 All electronic financial transactions made through our site will be protected by encryption technology.
7.4 You agree that the transmission of information over the Internet is inherently insecure, and we cannot guarantee the security of data sent over the Internet.
7.5 You are responsible for saving the password you use to access our website;
8. Changes
8.1 We have the right to update this policy from time to time by posting a new version on our website.
8.2 You may review this page from time to time to ensure that you are happy with any changes to this policy.
8.3 We may notify you of changes to this policy by e-mail or through a private messaging system on our website.
9. Your Rights
As a registered user, you can access your account at any time to review and update your personal information, i.e. your personal data. You can also contact us to request that we update or delete your personal data, as well as to restrict its processing.
In relation to the processing of personal data, you have the following rights, which you may exercise at any time while we store or process your personal data, by sending a request electronically to the address: pr@lapastaria.net
9.1 You may request that we provide you with any personal information we hold about you. Provision of such information will be subject to:
(A) Payment of fees if the information must be sent by physical medium or by any other means that requires the payment of fees.
(B) We may ask you for appropriate proof of your identity (for this purpose, we usually require a notarized photocopy of your identity card. We may also ask for a copy of invoices showing your physical address such as electricity, water, telephone).
9.2 We may not disclose any personal information that is requested to the extent permitted by law.
9.3 You may inform us at any time not to use your personal data for marketing purposes.
9.4 In effect, by using our services and website, you consent to us using your personal information for marketing purposes. We will provide you with the opportunity to opt out of the use of your personal data for marketing purposes.
You have the right to request from "La Pastaria"
- a copy of your personal data and access to them at any time;
- to correct, without undue delay, your inaccurate personal data, as well as data that is no longer up-to-date;
- your personal data in a form convenient for transfer to another administrator of - personal data, or to request that we do so without being hindered by us (right to portability);
- your personal data to be deleted without undue delay in the presence of any of the legal grounds for this;
- to limit the processing of your personal data, in which case your data will only be stored, but not processed. Our refusal to limit will be expressly only in writing, and we are obliged to motivate it with the lawful reason;
You also have the right to:
- to withdraw your consent to the processing of your personal data at any time with a separate request addressed to "La Pastaria", in the case of processing based on a given consent;
- object to the processing of your personal data;
- to object to automated processing, including profiling;
- not to be subject to a decision based solely on automated processing, including profiling;
9.5 You have the right to appeal to the supervisory authority
You have the right to file a complaint directly with the supervisory authority, the competent authority being the Commission for the Protection of Personal Data, address: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2 (www.cpdp.bg).
In the event that you wish to lodge a complaint regarding the processing of your personal data by "La Pastaria", you can do so at the indicated contact details of the Administrator or directly to the Data Protection Officer (at the contact details indicated above) .
9.6 Automated Processing and Profiling
When you visit our Site, we use automated processing to adapt products and services to your needs in the best possible way.
9.7 Objection to Use for Direct Marketing
You have the right to object to the future processing of your personal data for the purposes of direct marketing and advertising, as well as to their disclosure to third parties and their use on their behalf for the purposes of direct marketing and advertising, by withdrawing your consent under anytime. For this purpose, you can send an electronic message with the corresponding request to stop using your data for direct marketing purposes to the address: pr@lapastaria.net
9.1 You may request that we provide you with any personal information we hold about you. Provision of such information will be subject to:
(A) Payment of fees if the information must be sent by physical medium or by any other means that requires the payment of fees.
(B) We may ask you for appropriate proof of your identity (for this purpose, we usually require a notarized photocopy of your identity card. We may also ask for a copy of invoices showing your physical address such as electricity, water, telephone).
9.2 We may not disclose any personal information that is requested to the extent permitted by law.
9.3 You may inform us at any time not to use your personal data for marketing purposes.
9.4 In effect, by using our services and website, you consent to us using your personal information for marketing purposes. We will provide you with the opportunity to opt out of the use of your personal data for marketing purposes.
You have the right to request from "La Pastaria"
- a copy of your personal data and access to them at any time;
- to correct, without undue delay, your inaccurate personal data, as well as data that is no longer up-to-date;
- your personal data in a form convenient for transfer to another administrator of - personal data, or to request that we do so without being hindered by us (right to portability);
- your personal data to be deleted without undue delay in the presence of any of the legal grounds for this;
- to limit the processing of your personal data, in which case your data will only be stored, but not processed. Our refusal to limit will be expressly only in writing, and we are obliged to motivate it with the lawful reason;
You also have the right to:
- to withdraw your consent to the processing of your personal data at any time with a separate request addressed to "La Pastaria", in case of processing based on given consent;
- object to the processing of your personal data;
- to object to automated processing, including profiling;
- not to be subject to a decision based solely on automated processing, including profiling;
9.5 You have the right to appeal to the supervisory authority
You have the right to file a complaint directly with the supervisory authority, the competent authority being the Commission for the Protection of Personal Data, address: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2 (www.cpdp.bg).
In the event that you wish to lodge a complaint regarding the processing of your personal data by "La Pastaria", you may do so at the indicated contact details of the Administrator or directly to the Data Protection Officer (at the contact details indicated above) .
9.6 Automated Processing and Profiling
When you visit our Site, we use automated processing to adapt products and services to your needs in the best possible way.
9.7 Objection to Use for Direct Marketing
You have the right to object to the future processing of your personal data for the purposes of direct marketing and advertising, as well as to their disclosure to third parties and their use on their behalf for the purposes of direct marketing and advertising, by withdrawing your consent under anytime. For this purpose, you can send an electronic message with the corresponding request to stop using your data for direct marketing purposes to the address: pr@lapastaria.net
9.8 Can you refuse to provide personal data to "La Pastaria" and what are the consequences?
In order to conclude a contract with you and/or to provide you with the requested products and/or services and/or to deliver the ordered goods in accordance with our legal and subsequently contractual obligations, "La Pastaria" needs certain data that identify the party to the contract, its representative, contact details, payment details.
Failure to provide such data prevents us from entering into a contract with you.
In order to make a purchase from our Site and to deliver the goods or services you have ordered, you must have an account on the Site. During the profile creation process, "La Pastaria" needs certain data to identify you, contact data, payment data. Failure to provide such data prevents the possibility of purchase and delivery of goods or services from you.
10. Other Third Party Websites
10.1 Our site contains hyperlinks to and details of third party websites.
10.2 We have no control over, and are not responsible for, the privacy policies and practices of third parties.
11. Updating Information
11.1 Please let us know if the personal information we hold about you needs to be corrected or updated. Send an inquiry to pr@lapastaria.net
12. Cookies - Cookies
12.1 Our site uses cookies.
12.2 A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and stored by the browser. The ID is then sent back to the server every time one of the server's pages is loaded.
12.3 Cookies can be "persistent" cookies or "session" cookies: persistent cookies will be stored by the web browser and will remain valid until the expiration date, unless they are deleted by the user before the expiration date; a session cookie on the other hand will expire at the end of a user session when the web browser is closed.
12.4 Cookies usually do not contain any information that personally identifies a user, but personal information stored about you may be linked to information stored in and obtained from cookies.
12.5 We use both types of cookies on our website.
12.6 Most browsers allow cookies to be blocked. The user is free to block them at any time.
12.7 Blocking all cookies will have a negative impact on the usability of many sites.
12.8 If you block cookies, you will not be able to use all features of our website.
12.9 You can delete cookies already on your computer;
12.10 Deleting cookies will have a negative impact on the usability of many sites.
In order to be able to provide our products and services, we collect and process your personal data. We also process them in order to fulfill legal obligations.
In the event of your refusal to voluntarily provide the requested personal data, "La Pastaria" will not be able to provide its products and services, for example you will not be able to receive food delivery.
Changes to Privacy Policies
In the future, we may need to update this Privacy Policy from time to time in response to changing legal, technical or business processes.
We encourage you to periodically review this page for the latest information about our privacy practices.
In the event that, as a result of changes made to these Privacy Policies, new purposes for the processing of personal data or other circumstances requiring your express consent are envisaged, we declare that we will also notify you by sending a letter by electronic means (e-mail) to the e-mail provided by you, with which we kindly invite you to confirm or decline to provide consent.
This will give you the opportunity to stop using some or all of the services and/or to exercise your rights, some of which are expressly stated above.
This privacy policy has been adopted by "ASHTAR" OOD and is effective from 25.05.2018