The controller of your personal data is "CARNIVORE LTD", with e-mail email@example.com, (Hereinafter referred to as “Controller”, “the Company” or “we”). The company collects and processes your personal data which you give us when you use our service, visit our website or send us an inquiry from the form on the website.
You may ask questions and exercise your rights by contacting on this e-mail: firstname.lastname@example.org
Art. 1 The Company collects and processes your personal data under the following grounds:
a. For compliance with a legal obligation to which the controller is subject;
b. Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;
c. Your explicit consent for processing some categories of personal data;
d. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Art. 2 The principles to which we adhere when we process your personal data are the following:
a. lawfulness, fairness and transparency;
b. purpose limitation of the processing of personal data;
c. data minimization;
d. accuracy of the data;
e. storage limitation;
f. integrity and confidentiality.
Art. 3. (1) We collect and process your personal data which is necessary in order to provide you with our service. Such data may include individualization information such as your name, contact information such as your e-mail, your bank account, and transaction details, also we process the information which you provide in our questionnaires which is necessary for us in order to prepare your individual diet (such may include sensitive personal data, related to your health, in case such data is necessary to provide the relevant service).
(2) The information collected and processed under art. 3 (1) by us for providing you with the service is processed for the following purposes:
a. your individualization as a service user;
b. contacting you in relation to the service;
c. administrating the payment information;
d. gathering the necessary information for the preparation of your individual diet;
e. providing the service and administration of the contract;
(3) The legal basis for the processing of the personal data under Art, 3 (1) is that the processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract. The legal basis for processing your health data is your explicit consent.
(4) The collection of personal data under Art. 3 (1) is necessary for providing the service.
Art. 4. (1) We collect and process your personal data which is necessary for responding to your inquiries send from the form on the website. Such personal data may include your name, contact details (e-mail), and any other data which you may include in the massage.
(2) The information collected and processed under Art. 4 (1) by us is processed for the following purposes:
(a) individualization of the person who is sending the inquiry;
(b) provision of feedback;
(3) The legal basis for the processing of the personal data under Art, 4 (1) is your explicit consent. In other cases when the inquiry is not sent by the form on our website and you are not a user of the service the legal basis is for this processing is our legitimate interests, namely the proper administration of our website and the business, ensuring uniform and high-quality consultation practice.
Art. 5. (1) We collect and process your personal data which for sending newsletters and marketing messages. Such personal data may include your name and e-mail.
(2) The information collected and processed under art. 5 (1) by us is processed for the following purposes:
(a) individualization of the person who receives newsletters and marketing messages;
(b) sending newsletters and marketing messages;
(3) The legal basis for the processing of the personal data under art, 5 (1) is your explicit consent. Also, if we have already provided services for you via our website, and you do not object, we may also process messaging data on the basis of our legitimate interest, namely seeking to maintain and improve customer relations.
Art. 7. All the personal data which we process maybe use for establishment, exercise or defense of legal claims or performance of the Controller’s obligations before State authorities.
(2) The legal basis for the processing of the personal data under art, 7 (1) is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights, and the legal rights of others or performing legal obligations.
Art. 8. The personal data are collected by the Controller from the persons, whom it concerns.
Art. 9. The Controller does not process personal data of persons under the age of 18 years.
Art. 10. (1) The Controller may provide in compliance with the requirements of Regulation (EU) 2016/679 (GDPR) your personal data for the purpose of providing the Service or the other purposes stated in this Privacy notice to processors which are GDPR compliant.
Art. 11. We may disclose your personal data to our payment service providers. We will share service data with our payment services providers only to the extent necessary for the purposes of processing your payments, transferring funds, and dealing with complaints and queries relating to such payments and transfers.
Art. 12. We may disclose your personal data to other service providers insofar as it is reasonably necessary to provide specific services (including, providers of servers and maintenance thereof, email service providers, service providers used for data analysis, customer satisfaction surveys, or market research, accounting companies). We take all the necessary measures to ensure that such subcontractors would implement proper organizational and technical measures to ensure the security and privacy of your personal data.
Art. 13. We may provide your personal data to State authorities on the grounds, laid down in the legislation, and for carrying out statutory duties.
Art. 14 The personal data processed for providing the service will be stored for a period no longer than 5 (five) years following the end of the provision of services.
Art. 15. The personal data processed for sending newsletters and marketing messages will be stored until you withdraw your consent.
Art. 16. The personal data of the data subjects who have sent inquiries will be stored for a period no longer than 6 months from the last communication.
Art. 17. Notwithstanding the other provisions of this Section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Art. 18. You have the following right under the GDPR: right of access, right of rectification, Right to erasure (“Right to be forgotten”), right to restrict processing of your personal data, right to object to the processing of your personal data, right of data portability right to complain to a supervisory authority and the right to withdraw consent.
Art. 19. The right to access data. You have the right to confirmation as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned, and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply you a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.
Art. 20. The right to rectification. You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.
Art. 21. In some circumstances you have the right to the erasure of your personal data. Those circumstances include when: (a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (b) you withdraw consent to consent-based processing and there is no other legal basis to process data; (c) you object to the processing under certain rules of applicable data protection laws; (iv) the processing is for direct marketing purposes or (d) the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. Such exclusions include when processing is necessary: (e) for exercising the right of freedom of expression and information; (ii) for compliance with our legal obligation; or (f) for the establishment, exercise or defense of legal claims.
Art. 22. In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are when: (a) you contest the accuracy of the personal data; (b) processing is unlawful but you oppose erasure; (c) we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defense of legal claims; and (d) you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data, however, we will only further process such data in any other way: (e) with your consent; (f) for the establishment, exercise or defense of legal claims; (g) for the protection of the rights of another person; or (h) for reasons of important public interest.
Art. 23. You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
Art. 24. You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.
Art. 25. You have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Art. 26. The right to data portability. To the extent that the legal basis for our processing of your personal data is:
(a) consent; or
(b) performance of a contract or steps to be taken at your request prior to entering into a contract, necessary to enter into such, you have the right to receive your personal data from us in a structured, commonly used, and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
Art. 27. To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
Art. 28. You may exercise your rights by sending your claim to us at the following e-mail: email@example.com.
Art. 29. In case you consider that your rights regarding the processing of your personal data under the data protection laws, you have the right to lodge a complaint with a supervisory authority responsible for data protection. You may lodge a complaint before supervisory authority responsible for data protection in EU members. You have the right to lodge a complaint to the Bulgarian Commission for Personal Data Protection which supervises our data processing. Contact information about the Commission for Personal Data Protection of Republic of Bulgaria: registered office at 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, website: https://www.cpdp.bg/