Privacy and Personal Data Protection Policy - DPP
Privacy and Personal Data Protection Policy - DPP
The new European Union law on personal data protection GDPR (“General Data Protection Regulation”) entered into force on May 25, 2016, but will start to apply from May 25, 2018. This law represents the biggest change in the field of personal data protection in the last 20 years and has goals that go beyond the simple protection of privacy.
The protection of your personal data is important to us, therefore we pay particular attention to protecting the privacy of visitors who enter the website www.famousroses.bg, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR").
Please pay special attention to reading the following Policy (hereinafter referred to as “DPP”) to understand how your information (“personal data”) will be treated.
The DPP explains Famous Roses' online practices with respect to the application of the GDPR, as well as your rights with respect to how your information is used through the Famous Roses website.
The processing of personal data carried out by Famous Roses will always be carried out in accordance with the provisions of the GDPR, as well as with the personal data protection regulations specific to each country in which Famous Roses operates.
Through the DPP, Famous Roses wishes to inform visitors about the nature of the personal data we collect and process, as well as the purposes of the processing. Furthermore, website visitors are also informed through the DPP about their rights.
WHO ARE WE?
We are SC FAMOUS ROSES SRL, Bucharest, Str. Bulevardul BANU MANTA No. 18, post code: 011224, with serial number in the Commercial Register J40/5704/2002 and UIC RO14742549, working place in the settlement: Sannicolau Roman 477, county: BIHOR. Our legal representative is the manager Buchna Vyacheslav.
WHAT IS PERSONAL DATA?
"Personal data" means any information or data that can identify you directly (for example, your name) or indirectly (for example, through pseudonymous data such as a unique identification number). This means that personal data includes things like your email address, home address, mobile phone number, username, profile pictures, personal preferences and shopping habits, user-generated content, financial information and financial status information. This may also include unique digital identifiers such as your computer's IP address or mobile device's MAC address, as well as cookies.
WHAT DOES PERSONAL DATA PROCESSING MEAN?
“Processing” means any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
PERSONAL DATA OPERATOR
The personal data operator (hereinafter referred to as the “operator”) is FAMOUS ROSES SRL (Famous Roses).
DATA PROTECTION OFFICER (DPO)
Famous Roses, as the operator, has appointed Mr. Vyacheslav BUKHNA as Data Protection Officer (hereinafter referred to as the “DPO”), responsible for verifying compliance with the GDPR provisions in data processing operations carried out by the operator and representing the operator in relations with data subjects and with the Supervisory Authority.
Data subjects have the opportunity to contact the DPO directly at any time regarding any issues related to this DPP using the contact details below:
DPO name: Vyacheslav BUKHNA
E-mail DPO: info@famousroses.eu
Phone: 0751 269 077
DPO correspondence address: SC FAMOUS ROSES SRL, Bucharest, 18 Boulevard BANU MANTA, post code: 011224
WHAT DATA DO WE PROCESS?
www.famousroses.bg. will collect information or data that allows the identification of natural persons (name, address, telephone number, email address). They are necessary so that we can collect the value of orders from processors and deliver the ordered products to you. In addition, www.famousroses.bg will also collect the IP address as traffic data.
PRINCIPLES REGARDING DATA PROCESSING
Famous Roses is committed to complying with the principles for the protection of personal data (hereinafter referred to as the "Principles") provided by the GDPR to ensure that all data:
Are processed fairly, lawfully and transparently;
Are collected for specified, explicit and legitimate purposes;
Are adequate, relevant and limited in relation to the purposes for which they are processed;
Are correct and up-to-date;
Are stored in a form which does not permit identification of data subjects for longer than is necessary for the purpose of the processing;
Are processed in accordance with the rights of the data subject, in a manner that ensures adequate security of the processing, so that the data is intact, confidential and accessible.
BASIS AND PURPOSES OF PROCESSING PERSONAL DATA
For the conclusion and performance of contracts - According to Art. 6 para. 1 letter b) of the GDPR personal data may be processed for the purposes of concluding or performing the contract. In order to be able to offer you our products, we need to process your personal data.
To comply with certain legal obligations - According to Art. 6 para. 1 letter c) of the GDPR, personal data may be processed for the purpose of compliance with legal obligations. We request a set of personal data, including, in certain situations, your personal identification number, in order to comply with our obligations imposed by the tax authorities in relation to invoicing and reporting to the tax authorities.
For marketing purposes - According to Art. 6 para. 1 letter a) of the GDPR, personal data may be processed if the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
BULLETIN
If you have subscribed to the Famous Roses newsletter section, your personal data will be used for the exclusive purpose of sending you information with marketing content regarding Famous Roses products and services, offers and/or promotions, news, future campaigns, invitations to various events held by Famous Roses during a certain period.
Your personal data will be deleted immediately when you unsubscribe from the Famous Roses Newsletter section.
You can unsubscribe at any time via the link attached to the newsletter you receive, or by written request addressed to the Data Protection Officer of Famous Roses.
Famous Roses reserves the right to select the people to whom it will send newsletters and/or alerts, as well as the right to remove from its database any member or client who has previously expressed their consent to receive newsletters and/or alerts, without additional commitments from Famous Roses or any prior notice thereof.
CONTACT FORM PROCESSING
Famous Roses will use the information you provide in the relevant contact section of the website solely for the purpose of processing your request.
By providing personal data through www.famousroses.bg, you understand and agree that your data will be processed in accordance with the DPP of Famous Roses.
Please note that in order to process your requests sent in the contact section of the website, we may, under certain circumstances, be obliged to disclose your data to the partners with whom Famous Roses collaborates and/or other third party service providers of Famous Roses.
However, Famous Roses has adopted appropriate technical and organizational measures to ensure the security of data transfer, as well as the processing in accordance with the requirements of the GDPR of your data by the aforementioned persons.
Your personal data may be transferred to other third parties only based on your explicit consent, except where there is a legal obligation for Famous Roses to do so.
Famous Roses undertakes not to process the personal data provided for a purpose other than that for which they were transmitted, except in situations where there is your explicit consent to use them for other purposes.
DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
Personal data processed through the website www.famousroses.bg may be disclosed and/or transferred to third parties only if there is your explicit consent to do so, except in situations where there is a legal/contractual obligation for Famous Roses to do so.
Please note that in certain circumstances we may need to disclose your personal data to Famous Roses partners and/or other third-party service providers to Famous Roses.
Third parties that have access to the data are: delivery companies, payment processing companies, email marketing services, online marketing companies, Google, Facebook, Yahoo.
DATA PROCESSING BY THIRD PARTIES, OTHER SITES AND SPONSORS
The website www.famousroses.bg may from time to time contain links to access other websites whose data processing policies may differ from those of Famous Roses.
Please review and consult the privacy policies of other sites, Famous Roses assumes no responsibility for the information provided or collected by these third parties.
AUTOMATIC DATA PROCESSING. COOKIES
The website www.famousroses.bg uses cookie identifiers. The cookies used by Famous Roses.eu (own or from third parties) include: Google, Google Analytics, Facebook, Facebook Login, Remarketing, zopim, trusted, globessl, pinterest, clicktale, profitshare, facebook, plusone, google experiments, twitter, adwords, redirection. In this sense, you can familiarize yourself with our Cookie Policy, available on the website, and you can exercise your right to disable cookies, as indicated below.
DATA STORAGE PERIOD
Famous Roses may store the processed data for various periods of time, deemed reasonable, in accordance with the purposes stated above. We store your data only for the period necessary to achieve the purpose for which we store the data, to meet your needs or to comply with our obligations imposed by law.
To know how long your data can be stored, we use the following criteria:
When you purchase products and services, we retain your personal data for the duration of our contractual relationship;
If you participate in a promotional offer, we store your personal data for the duration of the promotional offer;
If you contact us with a question, we store your personal data for the time necessary to process your questions, but no longer than 5 years after the last correspondence sent;
If you create an account, we store your personal data until you request us to delete it or after a period of inactivity (no active interaction with our brands) determined in accordance with local regulations and guidelines. In this regard, we mention that the data processed for this purpose will be deleted 5 years after the last interaction with the account user (such as logging into your account);
Where you have provided your consent for marketing, we retain your personal data until you unsubscribe or request that we delete it, or after a period of inactivity (no active interaction with our brands) determined in accordance with local regulations and guidelines. In this regard, we note that data stored in our databases for the purposes of direct marketing communications is deleted from the records of these databases 5 years after the last interaction with you;
If cookies are stored on your computer, we store them for as long as necessary to achieve their purposes (for example, for the duration of a shopping cart cookie session or a user ID cookie session) and for a certain period in accordance with local regulations and guidelines. In this regard, we note that the data processed by the cookie modules used to provide online behavioral advertising, to personalize our services for you and to enable the distribution of our content on social media sites (sharing buttons intended to be displayed on the site) will be stored for a maximum period of 5 years from their collection, based on your consent.
THE RIGHTS OF INTERESTED PERSONS
In accordance with the GDPR, you have a number of rights with respect to the personal data that Famous Roses processes:
Right of access to processed data – You have the right to access the personal data we hold. The first provision of information will be free of charge. If you require additional copies of information already provided, we may charge a reasonable fee, taking into account the administrative costs of providing the information. Manifestly unfounded, excessive or repetitive requests may not be responded to.
Right to rectification of data – you have the right to request that your data be corrected if it is inaccurate or outdated and/or completed if it is incomplete. If you have an account, it may be easier to correct your own data through the "My Account" feature.
Right to erasure of data (“right to be forgotten”) – In some cases, you have the right to have your data erased or destroyed. This is not an absolute right, as we may sometimes be forced to retain your data for legal or regulatory reasons.
Right to restriction of processing – You have the right to request restriction of processing of your data. This means that the processing of your data is restricted, so that we can store the Data but not use or process it. This right applies in specific circumstances provided for in the General Data Protection Regulation, namely:
- the accuracy of the Data is contested by the data subject (i.e. you) for a period that allows the operator (i.e. Famous Roses) to verify the correctness of the Data;
- the processing is unlawful and the data subject (i.e. you) opposes the deletion of the Data and requests the restriction of its use;
- the operator (e.g. Famous Roses) no longer needs the Data for processing, but they are requested by the data subject (i.e. you) for the establishment, exercise or defense of legal claims;
- the data subject (i.e. you) has objected to the processing based on legitimate grounds by the controller (in this case Famous Roses) on the basis of the verification that the legitimate grounds of the operator (Famous Roses) override those of the data subject (i.e. you).
Right to data portability – you have the right to move, copy or transfer the data you are interested in from our database to another. This only applies to data you have provided when the processing is based on your consent or on the basis of a contract and is carried out by automated means.
Right to object – you can object at any time to the processing of your data where such processing is based on legitimate interest.
Right to withdraw consent at any time - you may withdraw your consent to the processing of your data where such processing is based on consent. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with the competent supervisory authority - You have the right to lodge a complaint with the data protection authority in your country of residence or domicile to challenge the data protection practices offered by Famous Roses.
Right to object to the processing of your data for direct marketing purposes – you can unsubscribe or opt out of our direct marketing communications at any time. The easiest way to do this is by clicking on the “unsubscribe” link in any email or message we send you.
Right to object to our processing of your data when we are carrying out actions in the public interest or in our own or a third party's legitimate interests - You may object at any time to the processing of your data when such processing is based on a legitimate interest.
Right to refuse cookies – you have the right to refuse cookies. Internet browser settings are usually programmed by default to accept cookies, but you can easily adjust this by changing your browser settings. Many cookies are used to improve the usability or functionality of websites/applications; therefore, disabling cookies may prevent you from using certain parts of our websites or applications, as detailed in the relevant cookie table. If you wish to restrict or block all cookies set by our websites/applications (which may prevent you from using certain parts of the website) or other websites/applications, you can do so through your browser settings. The Help function in your browser will tell you how. For more information, see the following links: http://www.aboutcookies.org/;
You can exercise any of these rights in relation to the personal data that Famous Roses processes by making a simple request to the Famous Roses DPO. In such a situation, we may very well ask for proof of your identity.
LEGAL REQUESTS
We access, store and provide your information to regulators, law enforcement authorities or other entities:
In response to a legal request when we believe in good faith that the law requires us to do so. We may also respond to requests of a legal nature when we believe, in good faith, that the response required by the laws of that jurisdiction affects users in that jurisdiction and is consistent with internationally recognized standards.
When we believe, in good faith, that it is necessary to: detect, prevent and respond to acts of fraud, unauthorized use of material that belongs to us, violations of our terms or policies, or other harmful or illegal activity; to protect us (including our rights, property or materials), you and others, including in the context of investigations or inquiries by regulatory authorities or to prevent imminent death or personal injury. For example, if appropriate, we provide information to and receive information from third parties regarding the reliability of your account to prevent fraud, abuse and other harmful activity on and off our Materials.
The information we receive about you may be accessed and retained for a longer period of time when it is subject to a legal request or legal obligation, a government investigation or investigations into possible violations of our terms or policies, or in other cases to prevent harm.
RELATIONS WITH OTHER OPERATORS
Depending on the context, we may find ourselves in a situation of absolute necessity to provide information at a higher level, both globally and internally or externally, to our partners and those with whom we transfer data in accordance with the above-mentioned Regulation, by virtue of ensuring the most professional provision of services possible. Information controlled by Famous Roses may be transferred, transmitted or stored and processed in the EU or in countries other than your country of residence for the purposes described in this policy. These data transfers are necessary to be able to provide services at the highest level, as well as to continue to provide you with our materials at the best professional level. We use standard contractual clauses approved by the European Commission and rely on country-specific adequacy decisions issued by the European Commission, as applicable, with respect to the transfer of data from the EEA to the United States and other countries.
SECURITY OF PROCESSING
Famous Roses has adopted technical and organizational data processing measures, updated in accordance with the requirements of the GDPR, in order to protect your personal data against any acts of unauthorized access, misuse or disclosure, unauthorized modification, destruction or accidental loss. All employees and collaborators of Famous Roses, as well as all third parties acting on behalf of and on behalf of Famous Roses, are obliged to respect the confidentiality of your information and the requirements of the GDPR, in accordance with the provisions of this Policy.
DISCLAIMER
The website www.famousroses.bg may contain links to other sites and/or web pages that are not owned by Famous Roses. Famous Roses assumes no responsibility for the content of these sites and therefore cannot be held liable for the content, advertising, goods, services, software, information or other materials available on or through these sites - hate. Famous Roses will not be liable for loss of personal data, any negative effects on the personal data of visitors or other moral and/or material damages caused by access to these sites.
UPDATE OF THE POLICY FOR PROTECTION AND PROCESSING OF PERSONAL DATA
Please note that this Policy may be subject to periodic changes in content by updating the website www.famousroses.bg.
How will we notify you of changes to this Policy?
We will notify you before we make any changes to this Policy and will give you an opportunity to review the revised DPP before you choose to continue using our materials.
Please do not continue to use www.famousroses.bg if you do not agree to these changes. We also recommend that you check this page for updates.
The terms of the DPP shall be interpreted in accordance with applicable law.
DATA PROTECTION
Your bank or credit card information is the most sensitive information you provide. To protect your privacy, we do not store or retain card information on our site. Credit card processing is done on a highly secure server owned by Stripe.com
Payment for online transactions is carried out on a highly secure server using the most advanced Secure Socket Layer (SSL) encryption technology.
CONTACT
If you have any questions or concerns about the way we process and use your personal data, or would like to exercise any of your rights, please contact us by accessing the contact details of our DPO.