This policy aims to protect your personal data. If you have any questions or concerns regarding the use of your personal data, please contact us and we will assist you.
By using this site and/or our services, you consent to the processing of your personal data as described in this Privacy Policy.
Table of Contents
Definitions used in this Policy:
Data protection principles we adhere to
What are your rights regarding your personal data
What personal data do we collect about you
How we use your personal data
Who else has access to your personal data
How we store your data
Supervisory authority
Definitions
Personal data – any information relating to the identification of an individual.
Processing – any operation or set of operations that is performed on personal data or a set of personal data.
Data subject – an individual whose personal data are processed.
Child – an individual under the age of 16.
We/us – Prime Health Bulgaria Ltd.
Principles of Personal Data Protection
We promise to comply with the following principles of personal data protection:
Principle of lawfulness, good faith and transparency. Our data processing activities are lawful. We always take your rights into account before processing your personal data. If you request, we will provide you with information about the processing of your data.
Principle of purpose limitation. Our personal data processing activities are consistent with the purpose for which we collect this data.
Principle of data minimization. We collect and process only the minimum personal data necessary for the relevant purpose.
Principle of storage limitation. We will not store your personal data for longer than is necessary.
Principle of data integrity. We will do everything in our power to ensure the accuracy of the data.
Principle of data confidentiality. We will do everything in our power to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction or damage.
Data subject rights
The data subject has the following rights:
Right to information – this means that you have the right to know whether your personal data is being processed, what data is being collected, where it is obtained from and why, and who processes it.
Right to access – this means that you have the right to receive the data that we have collected from and about you. This includes your right to request and receive a copy of the personal data we have collected about you.
Right to rectification – this means that you have the right to request the correction or erasure of your personal data that is inaccurate or incomplete.
Right to erasure – this means that in certain circumstances you can request that your personal data be erased from our records.
Right to restriction of processing – this means that under certain conditions you have the right to restrict the processing of your personal data.
Right to object – this means that in certain cases you have the right to object to the processing of your personal data, for example in the case of direct marketing.
Right not to be subject to automated processing – this means that you have the right to object to automated processing, including profiling, so that you are not subject to decisions based solely on automated processing. You can exercise this right when there is a result of profiling that produces legal effects concerning you or significantly affects you.
Right to portability – you have the right to receive your personal data in a machine-readable format or, where possible, to have it directly transmitted from one processor to another.
Right to lodge a complaint – in the event that we refuse your request under your Right of Access, we will provide you with the reasons for this refusal. If you are not satisfied with the way in which we have handled your request, please contact us.
Right to assistance from relevant supervisory authorities – this means that you have the right to receive assistance from supervisory authorities and the right to other legal remedies, such as claims for damages.
Right to withdraw consent – you have the right to withdraw any consent you have given to the processing of your personal data.
What personal data do we collect about you
Information that is automatically collected about you
This could be your email address, name, postal or home address, etc. Basically, this is the information that we need to provide you with a relevant product/service.
Information that is automatically collected about you
This includes information that is automatically stored by Google Analytics to track some general data about the site’s audience, such as gender, country, age range, in order to improve the quality, variety and availability of the services we offer/provide
Publicly available information
We may collect information about you that is publicly available.
How we use your personal data
We use your personal data to:
provide you with our services.
This includes, for example, providing you with promotional products at your request and communicating with you about those products and services; communicating with you; notifying you of changes to services;
improving your customer experience;
complying with a legal or contractual obligation.
We use your personal data on a lawful basis and/or with your consent.
In connection with the conclusion of a contract or the performance of contractual obligations, we process your personal data for the following purposes:
to identify you;
to provide you with a service;
to contact you to make a sale or to issue an invoice;
Based on a legitimate interest, we process your personal data for the following purposes:
to send you personalized offers;
to administer and analyze our customer database (shopping behavior and history) in order to improve the quality, variety and availability of the products/services we offer/provide;
to compile customer satisfaction questionnaires;
Unless you inform us otherwise, we consider it part of our legitimate interest to offer you services that are similar or identical to your purchase/visit history.
With your consent, we process your personal data for the following purposes:
to send you newsletters and campaign offers;
We process your personal data to comply with legal obligations and/or use your personal data for opportunities provided by law. We reserve the right to anonymize the personal data we collect and to use it in this way. We will only use data outside the scope of this Policy when it is anonymized. We retain payment/billing information and other information collected from you for as long as necessary for accounting purposes or other legal obligations, but no longer than required by law.
We may process your personal data for additional purposes not mentioned here, but which are consistent with the original purpose for which the data was collected.
To do so, we have taken the following steps:
to ensure that the relationship between the purposes, context and nature of the personal data is appropriate for further processing;
that further processing does not harm your interests, and to provide appropriate safeguards for the processing.
We will inform you of any further processing and its purposes.
Who else has access to your personal data
We make every effort to protect your personal data. We use security protocols for communication and data transfer. We use anonymization and pseudonymization where appropriate. We monitor our systems for possible vulnerabilities and attacks.
How we protect your personal data
Полагаме всички усилия, за да защитим вашите лични данни. Използваме протоколи за безопасност при комуникиране и прехвърляне на данни.. Използваме анонимизиране и псевдонимизиране, когато това е подходящо. Наблюдаваме нашите системи за възможни слабости и атаки.
Although we do our best, we cannot guarantee the security of information. However, we promise to notify the relevant authorities of any data leaks. We will also notify you if there is a threat to your rights or interests. We will do everything we can reasonably do to prevent a security breach and to assist the authorities if such a breach does occur.
Children
We do not intend to collect or knowingly collect information from children. Our services are not directed at children and they are not our target customers.
We use Google Analytics to measure traffic on our website. Google has its own privacy policy, which you can review on their website or here. If you wish to be excluded from Google Analytics, visit the Google Analytics opt-out page.
Supervisory authority
Personal Data Protection Commission
The entire website can be used without registration.
Some information about you may be stored, for example, if you communicate with the site administrators. The provision of this information is solely on a voluntary basis.
This site contains a contact form through which any correspondence (questions regarding any nature related to the company's business) is carried out between you and an administrator/authorized person, a representative of the company. For this purpose, we collect and process certain elements of personal information provided by you through the contact form. This information consists of the following:
Your name.
Your telephone number.
Your e-mail address.
Your IP address.
The purpose of collecting this data is solely and exclusively to carry out possible correspondence (questions of any nature related to the subject of the company's activity) between you and an administrator/authorized person, representative of the company.
Your name, phone number, e-mail address and IP address are never visible to other users. We will not disclose this data to third parties and/or provide them with it in any other way.
Changes to this Personal Data Protection Policy
We reserve the right to make changes to this Personal Data Protection Policy.
The last amendment to the Policy was made on 28.05.2018