„ВСИЧКО ЗА ЗДРАВЕТО“ ЕООД (hereinafter also referred to as “Happy Pet Net”, “the Platform”, “we” or “us”) takes seriously its responsibility to safeguard your personal space and to protect all personal data which you provide to us when using our services as a user or as a professional. Personal data is any specific information relating personally to you by means of which your identity may be established. Such information is, for example, your real name, address, telephone number, payment details, your passwords for access to our website and other similar data. Data which cannot, either directly or in combination with other data, be linked to your real identity is not regarded as personal data — such is, for example, the data about your pet, save where, by reason of its species or the particular regime under which it is kept, that data is capable of identifying you in full. Where you provide services as a professional, the volume of personal data provided by you is extended to the degree required by law in order for you to offer the services you practise.
The purpose of this privacy policy is to set out for you, in the clearest and most comprehensible manner possible:
- What personal data we collect and process about you as a user of our services or when you use our website;
- How we use your personal data;
- How and for how long we store your personal data;
- To whom we disclose your personal data;
- What your rights are as a data subject and how you may exercise them;
This Personal Data Protection Policy applies to your personal data when you visit www.happypetnet.com or use our services, but it does not apply when you use other sites or services which we do not own or control.
DATA CONTROLLER
The controller of the personal data is „ВСИЧКО ЗА ЗДРАВЕТО“ ООД (“we”, “the Platform”), EIK 206447992, with its registered seat and address of management at гр. София, п.к. 1421, ул. „Червена стена“ №8. The company is represented by its manager Глория Димитрова, with contact email address contact@happypetnet.com.
The collection and processing of your personal data is carried out in accordance with the personal data protection laws, the GDPR, applicable in Bulgaria and the European Union.
WHAT PERSONAL DATA DO WE COLLECT AND PROCESS AND FOR WHAT PURPOSE DO WE DO SO?
- Each time you visit our website in order to use our services, we must collect and process your personal data, working in good faith to keep the data processed to a minimum and to protect it to the fullest extent. We collect and process the following personal data:
- When you visit our website, our web servers record and store temporarily, for security purposes, the connection data of the mobile device or computer that connects to our site; the pages you visit on our site, the date and duration of the visit; the data identifying the type of browser and operating system used, as well as the website through which you connected to our site.
- When you contact us by telephone, calls may be recorded and stored temporarily, for security purposes and in order to improve the quality of our service.
- When you request services which we provide, we collect and process the following personal data: full name (three names), email address and telephone number.
- In the process of requesting services, we use an external payment operator which also collects and processes the details of the bank card you use for payment.
- The use of certain services, as well as where you so wish, requires the registration of an account and an access password, and it will be necessary for you to provide your names, address, telephone number, as well as data about your pet — species, age, weight, behavioural profile and passport, if applicable.
- Your personal data will be provided to the relevant professional when you request a service. In performing the service, and where particular requirements of the law apply, the professional you have chosen may request further personal data from you for the purposes of the service being provided.
- If you are a professional — a provider of services for pets — you will have to be identified unambiguously as such by means of your certificates, diplomas and entries in a Register for carrying out the relevant activity, if applicable. The personal data provided by you will be used freely by visitors to the website for the purpose of reviewing and choosing a professional who is needed to provide a service which a pet requires.
- We collect and process the history of your requests and of the services performed for you for the purposes of statistical and marketing analysis, systems testing, maintenance and development, as well as in order to apply procedures in the event of complaints, disputes and claims.
- A certain part of the data you provide to us may be used in order for us to respond to requests for the provision of information from national regulators (КЗП, КЗК, КЗЛД, the Commission for Protection against Discrimination and others) in connection with complaints or other proceedings brought before those bodies, as well as in order to provide it to other state bodies or law enforcement services for the purposes of administrative control, safety control, and the prevention and detection of infringements or criminal offences.
- We would like to use your email address and your telephone number in order to send you information about our current services, promotions and discounts, as well as updates to our functionalities and the need to install them. We will do this only if you give us your consent to send you this information periodically. Your consent is voluntary and we will not refuse you our services should you not agree.
- We will not use your contact details in order to advertise the products or services of a third party.
- You may withdraw your consent to receiving marketing information from us at any time by writing to the data protection officer at the email indicated in these rules.
PERSONAL DATA OF THIRD PARTIES
We process and use only data which you have provided to us voluntarily, and we rely on the fact that this data is held and provided by you lawfully.
This means that every user bears responsibility not to provide THE PLATFORM with data of third parties in breach of their personal data protection rights, since THE PLATFORM has no access to those persons and no practical possibility of monitoring whether the provision of the personal data of third parties is made with their knowledge or consent given in accordance with the requirements of the law.
For that reason, every person bears unlimited personal responsibility if they provide us with the data of a third party without that party’s knowledge or consent, regardless of the type of data or the reasons for which it is provided.
MINORS AND PERSONS UNDER THE AGE OF MAJORITY
We do not provide services to minors or to persons under the age of majority, nor do we allow persons under 18 years of age to register on our website or to use its functionalities. If you are under 18 years of age, please seek the assistance of an adult in order to use our services.
If we receive information that we have collected personal data from or about a person under 18 years of age, we will delete it immediately, unless we are legally obliged to store that data.
Please contact us if you believe that we have mistakenly or unknowingly collected information from or about a person under 18 years of age.
SHARING OF YOUR PERSONAL DATA AND SUBCONTRACTORS
In the process of providing services we may provide your personal data to third parties engaged solely and directly with the functions of THE PLATFORM — such as, for example, the administrators of our website, the providers of cloud services or the payment services provider, which are external subcontractors. Separately, your personal data may be provided to our lawyers and accountants in connection with compliance with the statutory requirements for accounting activity or in the course of legal proceedings concerning the services which we provide.
PERIOD FOR STORAGE AND ERASURE OF PERSONAL DATA
We will not store your data for a period longer than is necessary to achieve the purposes for which we process it. In order to determine an appropriate storage period, we take into account the nature and sensitivity of the personal data, the purposes for which we process it and whether we can achieve those purposes by other means.
In determining the period for storing your personal data, we also take into account the periods during which there may be a need to store personal data in order to comply with legal obligations (for example, in the event of a complaint and legal proceedings initiated by you or against you concerning our services; the storage of financial information and other similar cases). Where your personal data is contained in accounting documents (for example, receipts) which may be required from us on a statutory basis, the storage period for that personal data will be 5 years.
Your personal data provided upon registration of an account on our website is stored and processed for the duration of the registration.
Your personal data provided in connection with services used through the platform is stored for the period during which you may bring complaints or other claims concerning the services used.
Where you have given consent for us to use your personal data for marketing purposes, we store and process that personal data until your consent is withdrawn.
If the ground on which we store your personal data ceases to apply (for example, you have withdrawn your consent for us to store your personal data; upon the expiry of a statutory period, and so on), we will delete your data in a secure manner.
YOUR RIGHTS
In certain circumstances, you have the right by law to:
- Request information as to whether we hold personal data about you and, if so, what that data is and why we hold/use it;
- Request access to your personal data (also known as a “data access request”). This allows you to receive a copy of the personal data about you which we hold and to check whether we are processing it in the manner established by law;
- Request the rectification of the personal data held about you. This gives you the opportunity to correct any incomplete, inaccurate or changed information which we hold about you.
- Request the erasure of personal data. This allows you to ask us to delete or remove personal data where there is no legitimate reason for us to continue processing it. You also have the right to ask us to delete or remove your personal data if you have exercised your right to object to its processing;
- Object to the processing of your personal data where we rely on a legitimate interest (or the interests of a third party) and something in your particular situation causes you to object to the processing on that ground. You also have the right to object if we process your personal data for direct marketing purposes;
- Object to automated decision-making, including profiling, that is, not to be subject to any automated decision by us by means of your personal data or profiling;
- Request the restriction of the processing of your personal data. This allows you to ask us to suspend the processing of your personal information if, for example, you wish us to establish its accuracy or the reason for processing it;
- Withdraw consent. In cases where you may have given consent to the collection and processing of your personal data for a particular purpose, you have the right at any time to withdraw your consent in respect of that specific type of processing. Once we receive notification that you have withdrawn your consent, we will cease to process your information for the purpose or purposes to which you originally agreed, unless there is another legitimate reason for us to do so under the law;
- If you wish to exercise any of these rights, you may do so by addressing your request to the data protection officer. In order for us to be able to give you full assistance, please provide us with accurate information about yourself and set out your request in specific terms.
- You will not need to pay a fee for access to your personal data (or to exercise any of the other rights). Please note, however, that where requests are manifestly unfounded and/or excessive, in particular because of their repetitive character, we may impose a fee, taking into account the administrative costs of processing your requests, or refuse to act on your request.
- We will make reasonable efforts to comply with your request within 30 days of receiving your application. Where necessary, this period may be extended by a further two months, taking into account the complexity and the number of the requests.
- We may ask you for other specific information to help us establish your identity and comply with your right of access to information (or any of your other rights). This is an appropriate additional security measure ensuring that your personal data will not be disclosed to persons who have no right to receive it.
CHANGES TO THE PERSONAL DATA RULES
We reserve the right to change our Privacy Policy from time to time, and you will be notified of every change by means of a notice on our website.
SUPERVISORY AUTHORITY
If you believe that we have infringed your rights in connection with your personal data, you may lodge a complaint with the supervisory authority of Bulgaria, which is the Commission for Personal Data Protection. You can find more information at www.cpdp.bg.
DATA PROTECTION OFFICER
The data protection officer: адв. Димитър Димитров, with an address at гр.София 1202, ул. „Св.св.Кирил и Методий“ 84 ет.4, email: dimitrov@legapractica.com.