PRIVACY POLICY OF WWW.NEWVIVA.BG
Information about the Company processing your personal data:
Name: Newviva Ltd;
UIC: 201884970
Registered office and address of management:
BULGARIA, Sofia, Mladost district
"Prof. Aleksandar Tanev" St., bl. 460A, entr. 2
Correspondence address: 1 "Bruxelles" Blvd. / RHENUS Warehouse Base
1540 Sofia
Telephone: +359895795241
Information about the competent supervisory authority for personal data protection:
Name: Commission for Personal Data Protection:
Registered office and address of management: Sofia 1592, 2 "Prof. Tsvetan Lazarov" Blvd.
Correspondence address: Sofia 1592, 2 "Prof. Tsvetan Lazarov" Blvd.
Telephone: +359 2 915 3 518
Website: www.cpdp.bg
NEWVIVA LTD (HEREINAFTER REFERRED TO AS "THE COMPANY" OR "THE CONTROLLER") CARRIES OUT ITS ACTIVITIES IN ACCORDANCE WITH REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016 ON THE PROTECTION OF NATURAL PERSONS WITH REGARD TO THE PROCESSING OF PERSONAL DATA AND ON THE FREE MOVEMENT OF SUCH DATA
The purpose of this information is to inform you about all aspects of the processing of your personal data by the Company and the rights you have in connection with this processing.
GROUNDS FOR COLLECTING, PROCESSING AND STORING YOUR PERSONAL DATA:
The Company collects, stores and processes your personal data in order to provide a service and in connection with the use of the online store www.newviva.bg on the basis of Art. 6(1) of Regulation (EU) 2016/679, and more specifically on the basis of the following:
Art. 6. (1) Customer data are collected on the basis of:
1) a contract
2) their explicit consent and
3) legitimate interests or
4) the legal obligations of the Company.
Our customers' data are collected when they place an order in our online store and/or register a user account after explicitly agreeing to the terms and conditions, which contain the mandatory information on data subjects' rights regarding personal data protection that customers should read. The data processed by the Controller are as follows:
- Customer's names
- Delivery address
- Current telephone number
- Bank account information (in cases where the customer wants to return a purchased product and be refunded the amount paid)
- User data related to the use of our website
-
Data from your identity card and any other information related to a job application (if you are applying for a job with us). We may provide our customers' data to third parties (e.g. couriers or an accountant) – only in fulfilment of a statutory obligation or to protect the legitimate interests of the Controller.
As a customer, you must explicitly agree to your data being processed for marketing purposes, including for sending advertising messages, etc.; if you do not consent to this processing, your data will not be used for these purposes.
Personal data of the Company's partners
Art. 3. (1) The Company collects, stores and processes personal data of its partners who are natural persons and of the legal representatives or proxies of its partners who are legal entities, on the basis of the performance of a contract. (2) Partners' data are collected when a contract is concluded with the Company or in preparation for drawing up such a contract. (3) Data of the legal representatives of partners who are legal entities are collected from them, as well as from the Commercial Register at the Registry Agency or the relevant public register. (4) Partners' data may be provided to data processors solely for the purposes of performing the contract, and to third parties – only in fulfilment of a statutory obligation or to protect the legitimate interests of the Controller. We at NEWVIVA LTD observe the following principles when processing your personal data:
- Lawfulness, fairness and transparency
- Purpose limitation
- Relevance to the purposes of processing and data minimisation;
- Accuracy and up-to-dateness of data;
- Storage limitation in view of achieving the purposes;
- Integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.
What types of personal data does NEWVIVA LTD (the Controller) collect, process and store?
(1) The Company performs the following operations with personal data for the following purposes:
- Registration of a user in the company's online store www.newviva.bg and performance of a contract for the sale of products, services, etc. – the purpose of this operation is to create an account linked to the online store, through which products offered by the Company are purchased, delivered and, if necessary, returned and cancelled. The account is also used for a loyalty bonus scheme.
- Conclusion and performance of a commercial transaction with a customer or partner – the purpose of this operation is to conclude and perform a contract with a business partner or customer and to administer it
- Sending information messages – the purpose of this activity is to administer the process of sending messages to customers concerning improvements or changes to the services, to administer the process of dispatching and delivering products purchased by the customer, and to optimise and keep a history of settings and orders, in accordance with the service contract.
(2) The Controller processes the following categories of personal data and information for the following purposes and on the following grounds:
- Data: your identifying data (first and last name, email, telephone)
- Purpose for which the data are collected: 1) User registration; 2) Contacting the user and sending information to them, including, if they so wish, advertising messages; 3) Delivering orders placed through our online store www.newviva.bg
- Legal basis for processing your personal data – by accepting the terms and conditions, registering on the website and purchasing a service, a contractual relationship is created between NEWVIVA LTD and you, on the basis of which we process your personal data – Art. 6(1)(b) GDPR.
- Delivery and/or return of purchased products;
- Other data processed by the Company – when you visit our website or log in to your account, the Controller collects data about the IP address used.
- Purpose for which the data are collected: improving the security of the service and localising the interface, statistical and marketing research.
- Grounds for processing the data: the processing is necessary for the performance of a contract to which the data subject is a party – Art. 6(1)(b) GDPR. Until a user account is created, the IP address is collected on the basis of the legitimate interests of the controller – Art. 6(1)(f) GDPR;
- Your data for issuing an invoice to a natural person – if you wish to be issued an invoice as a natural person, you must provide your personal identification number.
- Purpose for which the data are collected: issuing an invoice for payments under a concluded contract for the provision of services.
- Legal basis for processing your personal data – by accepting the terms and conditions and registering on the website, or by concluding a written contract, a contractual relationship is created between NEWVIVA LTD and you, on the basis of which we process your personal data – Art. 6(1)(b) GDPR.
(3) We do not collect or process sensitive personal data that:
- reveal racial or ethnic origin;
- reveal political, religious or philosophical beliefs, or trade union membership;
- genetic and biometric data, data concerning health or data concerning sex life or sexual orientation
(4) Personal data are collected by the Company from the persons to whom they relate. (5) The Company does not carry out automated decision-making with data.
Retention period of your personal data:
Art. 4 (1) The Company stores your personal data for a period no longer than the existence of your account on the website. After these periods expire, the Controller takes the necessary care to delete and destroy all your data without undue delay.
(2) The Company will notify you if the data retention period needs to be extended for the purposes of processing, performance of the contract, the legitimate interests of the Company, accounting purposes or otherwise. The Company stores the personal data it is required to keep under applicable legislation for the relevant prescribed period, which may exceed the existence of your registration. Transfer of your personal data for processing
Art. 5. (1) The Company may, at its own discretion, transfer some or all of your personal data to data processors for the purposes of processing, in compliance with the requirements of Regulation (EU) 2016/679.
(2) The Company will notify you if it intends to transfer some or all of your personal data to third countries or international organisations.
Your rights regarding the collection, processing and storage of your personal data: under data protection law you have the right to:
Withdraw consent to the processing of your personal data; Access information on whether and for what your personal data are used; Rectification or completion; Right to erasure ("right to be forgotten")
- Restriction and portability of personal data
- Right to object to direct marketing
- Right to be informed to whom your personal data have been disclosed
Right to object to the use of your personal data
If you wish to exercise any of the above rights, please contact us by email: office@newviva.bg