GRDR

Privacy Policy under the European Data Protection Regulation (GDPR)

И. Mandatory information on the rights of individuals under the European Data Protection Regulation (GDPR)

General information on the regulation

From May 25, 2018. A new General Data Protection Regulation ((EU) 2016/679), adopted by the European Union, enters into force. The regulation aims to establish a single framework for regulating the collection, processing and administration of data on individuals from the European Union.

AST Popcorn Ltd., as an administrator of personal data for the provision of hosting services, meets all the requirements of the regulation, collecting the minimum necessary data for individuals who are needed to provide the service. This data is processed and stored in accordance with the guidelines established by the Regulation - responsibly, technically and procedurally and legally.

Information about the Data Controller

Information under the E-Commerce Act and the Consumer Protection Act:

1. Name of the Provider: AST Popcorn Ltd.
2. Headquarters and address of management: Haskovo, 13 RAHILA DUSHANOVA Str.
3. Correspondence data: office @ techmag.bg, tel: +359877859717
4. The company AST Popcorn Ltd. is entered in the Commercial Register at the Registry Agency, UIC: 201678148 VAT number: BG201678148
5. AST Popcorn Ltd. is a registered administrator of personal data.
6. Supervisory authorities:

1) Commission for Personal Data Protection

Address: Sofia, 15 Ivan Evstatiev Geshov Str.,

tel .: (02) 940 20 46 fax: (02) 940 36 40

Email: [email protected], [email protected]

Website: www.cpdp.bg

Information on the Data Protection Officer

Title: Shaban Suleymanov Yumerov.
Manager of management contract at AST Popcorn 11 Ltd.
Headquarters and address: Haskovo, 13 RAHILA DUSHANOVA Str.

Information on the competent supervisory authority

Title: Commission for Personal Data Protection
Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
Correspondence data: Sofia 1592, Prof. Tsvetan Lazarov ”№ 2
Phone: 02 915 3 518
Email: [email protected], [email protected]
Website: www.cpdp.bg

AST Popcorn Ltd. operates in accordance with the Law of the Republic of Bulgaria and Regulation (EU) 2016/679 of the European Parliament on the protection of personal data that personalize and / or identify citizens of the European Union.

Grounds for collecting, processing and storing your personal data in accordance with the GDPR

AST Popcorn Ltd. collects and processes personal data in connection with the provision of the following basic services: sale of equipment and conclusion of contracts with the company on the basis of Regulation (EU) 2016/679, and in particular on the basis of the following:

1. Explicit consent received from you as a client.
2. Fulfillment of the obligations of AST Popcorn Ltd. under a contract with you.
3. Compliance with a legal obligation that applies to AST Popcorn Ltd..
4. For the purposes of the legitimate interest of AST Popcorn Ltd..

AST Popcorn 11 Ltd. is an administrator of personal data regarding your data as users of our services. Regarding the personal data that you process using our services, AST Popcorn Ltd. acts as a processor of personal data.

Goals and principles for the collection, processing and storage of your personal data

AST Popcorn 11 Ltd. collects and processes personal data that you provide to us in connection with the use of our hosting and other services, to enter into a contract with the company and to register for participation in our events, including for the following purposes:

1. To create a profile and ensure full functionality in the provision of our services.
2. For individualization of a party under contract with AST Popcorn 11 Ltd. according to the general conditions published on http: // techmag. bg / general terms and conditions
3. For an invitation to register a participant in an event organized by AST Popcorn Ltd..
4. For the purposes of accounting of AST Popcorn Ltd..
< li> For internal statistical purposes.
5. To maintain and ensure a high level of information security.
6. To ensure the implementation of a contract to which AST Popcorn 11 Ltd. is a party.
7. To send informational messages, service change notifications, service improvement recommendations, new and / or more productive subscription plans / services, security newsletters, etc.
8. To improve and individualization of the services offered by AST Popcorn 11 Ltd. by offering suitable for you offers for renewal, events and other products and services that may be of interest to you.
9. To provide technical support through a ticket system or call center.

AST Popcorn 11 Ltd. observes the following principles in the processing of your personal data:

1. Transparency, good faith and legality.
2. Correlation with the purposes of processing and minimizing the data collected.
3. Accuracy and timeliness of data;
< li> Restriction of storage in order to achieve the objectives.
4. Integrity and confidentiality of processing.
5. Ensuring an appropriate level of security of personal data.

In the processing and storage of personal data, AST Popcorn 11 Ltd. may process and store personal data in order to protect the following legitimate interests:

Fulfill its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal bodies.

Types of personal data transactions:

1. Registration of a user on the website - the purpose of this operation is to create an account that is associated with the used / selected service and to allow the registered user to manage their services through the created administrative panel. Conclusion of the impact assessment: Based on the above-mentioned impact assessment, the Data Protection Officer considers that the operation "Concluding a distance contract" is admissible and provides sufficient guarantees to protect the rights and legitimate interests of the subjects of data in accordance with the requirements of the GDPR.
2. Concluding and executing a trade transaction with a client or partner - the purpose of this operation is to conclude and execute a contract with a trade partner or client and its administration.
< li> Sending information messages - the purpose of this activity is to administer the process of sending messages to customers, which relate to improvements or changes in services, changed / exceeded parameters, expiring services, open proforma maturity, etc. according to the contract for the provision of the service.
3. Sending a newsletter (newsletter) - the purpose of this operation is to administer the process of sending newsletters to customers who have stated that they wish to receive.

AST Popcorn 11 Ltd. processes the following categories of personal data and information for the following purposes and on the following grounds:

1. Data: Your personal data (name and surname, e-mail, country, telephone)
2. Purpose for which the data is collected:

• User registration;
• Contacting and sending information to the user, including if desired - to send newsletters and advertisements;

Grounds for processing your personal data - By accepting the general terms and conditions and registering on the website and purchasing a service, a contractual relationship is created between AST Popcorn Ltd. and you, on which basis we process your personal data.

Additional information provided by you - If you wish to complete your account, you can fill in your address and email address for technical contact.

Purpose for which the data is collected: Complete information about the user in his user account.

Grounds for data processing: By accepting the general terms and conditions and registering on the website and purchasing a service, a contractual relationship is established between AST Popcorn Ltd. and you, on which basis we process your personal data.

Other data that AST Popcorn Ltd. processes - When logging in to our website or in your account, AST Popcorn Ltd. collects data about the IP address used.

Purpose of data collection: Improving service security and interface localization, statistical and marketing research.

Grounds for data processing: The processing is necessary for the performance of a contract to which the data subject is a party.

Until the creation of a user profile, the IP address is collected on the basis of: Realization of the legitimate interests of the administrator;

Your Individual Invoice Issue Details - If you wish to be issued an invoice as an individual, you must provide your unique civil number.

Purpose for which the data is collected: Issuance of an invoice for payments under a service contract.

Grounds for processing your personal data - By accepting the general terms and conditions and registering on the website, or by concluding a written contract, a contractual relationship is created between AST Popcorn Ltd. and you, on which basis we process your personal data. p>

AST Popcorn 11 Ltd. does NOT collect or process personal data relating to the following:

• disclose racial or ethnic origin;
• disclose political, religious or philosophical beliefs, or trade union membership;
• genetic and biometric, health, or data on sexual life or sexual orientation.

Personal data is collected by AST Popcorn Ltd. from the persons to whom it relates.

AST Popcorn Ltd. does not perform automated decision making with data.

AST Popcorn 11 Ltd. does not provide your data to third parties without your explicit consent.

Retention period of your personal data

AST Popcorn Ltd. stores your personal data for a period not longer than the existence of your account on the website. After this period, we take the necessary care to delete and destroy the information without undue delay.

AST Popcorn Ltd. stores the personal data that it is necessary to keep in accordance with the applicable legislation for the relevant period, which may exceed the period of existence of your registration.

Transfer your personal data for processing

AST Popcorn Ltd. does not transfer your data and will warn you and collect the necessary consent (if such is not properly collected), if it intends to transfer your data in compliance with the requirements of Regulation (EU) 2016/679 . p>

Withdrawal of consent to the processing of your personal data

If you do not want all or part of your personal data to continue to be processed by AST Popcorn 11 Ltd. for specific or all purposes of processing, you can at any time withdraw your consent to processing by filling out the form in your profile or by request in free text.

By withdrawing your consent to the processing of personal data required to create and maintain your registration for the use of the Services, your account will become inactive.

Right of access

You have the right at any time to request and receive from AST Popcorn Ltd. confirmation whether personal data related to you are processed.

You have the right to access data related to you, as well as information related to the collection, processing and storage of your personal data.

AST Popcorn 11 Ltd. provides you, upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.

Providing access to data is free, but AST Popcorn 11 Ltd. reserves the right to impose an administrative fee in case of recurrence or excessive requests.

Right to correct or complete

You can correct or fill in the inaccurate or incomplete personal data related to you directly through your profile on the website or by making a request to AST Popcorn Ltd.

Right to delete

You have the right to request from AST Popcorn Ltd. the deletion of the personal data related to you, and AST Popcorn Ltd. has the obligation to delete them without undue delay when there is any of the following reasons:

• personal data are no longer needed for the purposes for which they were collected or otherwise processed;
• you withdraw your consent on which the data processing is based and there is no other legal basis
• you object to the processing of personal data related to you, including for direct marketing purposes, and there are no legitimate grounds for processing to take precedence;
• personal data has been
• personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State applicable to AST Popcorn Ltd.;
• personal data were collected in connection with the provision of information society services.

AST Popcorn Ltd. is not obliged to delete personal data if it stores and processes them:

• to exercise the right to freedom of expression and the right to information;
• to comply with a legal obligation requiring processing provided for in EU law or the law of the Member State applicable to The administrator or for the performance of a task in the public interest or in the exercise of official powers conferred on him;
• for reasons of public interest in the field of public health;
• for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
• for the establishment, exercise or defense of legal claims.

In order to exercise your right to "forget", you should submit a request through the option in your profile or a written request sent to AST Popcorn Ltd., as well as to verify your identity and identity with the data subject. .

AST Popcorn Ltd. does not delete the data that it has a legal obligation to store, including for protection in connection with court claims against it or proof of their rights.

Right of restriction

You have the right to request AST Popcorn Ltd. to restrict the processing of data related to you when:

• dispute the accuracy of personal data for a period that allows AST Popcorn 11 Ltd. to verify the accuracy of personal data;
• processing is illegal, but you do not want your personal data to be deleted , and only their use should be limited.

AST Popcorn Ltd. no longer needs personal data for the purposes of processing, but you require them for the establishment, exercise or protection of your legal claims.

Right of portability

You can at any time download the data stored and processed for you in connection with the use of the services of AST Popcorn 11 Ltd. directly through your account or by request by email.

Notification would require a disproportionate effort.

Other provisions

In the event of a breach of your rights under the above or applicable data protection law, you have the right to lodge a complaint with the Data Protection Commission as follows:

Title: Data Protection Commission

Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2

Correspondence data: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2

Phone: 02 915 3 518

Email: [email protected], [email protected]

Website: www.cpdp.bg

You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are optional and you can submit your requests in any form that contains a statement to that effect and identifies you as the data holder.

When you assign AST Popcorn Ltd. to process personal data of a third party for the purposes of using the service, AST Popcorn Ltd. acts as a processor of personal data.

In these cases AST Popcorn Ltd. acts only according to your instructions (you are a user of the service) and the possibility of AST Popcorn Ltd. to have control over the personal data you process (store in the hosting service provided by AST Popcorn 11 Ltd.) is limited.

AST Popcorn 11 Ltd. has no control over the content and data that you as a user of the service choose to upload (upload, up-load) to the service (including if this data includes or does not include personal data). In this case AST Popcorn Ltd. has no role in the process of deciding whether the user uses the service for personal data processing, for what purposes and whether they are protected. Accordingly, the liability of AST Popcorn Ltd. in this case is limited to:

1) Compliance with the instructions of the user of the service according to the contract and the general conditions

and

2) Providing information about the service and its functionalities through its interface.

Cookie Policy

The site of AST Popcorn 11 Ltd. uses cookies, which are important for its proper operation.

By visiting our site, you agree to the use of cookies.

Required cookies

These cookies are necessary for the correct operation of the website. For example, with these cookies we show you the information on our website in the correct language, and the prices - according to the currency and VAT for the respective country. Such cookies are also those for enabling caching, etc.

Analytical cookies

Thanks to these cookies, we monitor the traffic to our site and can analyze how easily our users work with it (Google Analytics cookies). These cookies do not give us any information about your personal data. They show us which pages of our site you have viewed, whether you have visited our site via mobile or desktop device and other anonymous data. For Google Analytics, we also use IP anonymization. The maximum period in which we keep analytical data in Google Analytics is 50 months.

Functional cookies

These cookies allow you to use the full functionality of our site, watch videos on it, chat with us, and remember your preferred language in which to load information on our site.

You can make the cookie settings you receive from our site in the browser you use. Please note that if you restrict certain types of cookies, our site may not work completely correctly and you may not be able to use its full functionality.

controller of personal data under the General Data Protection Regulation and has no related responsibilities under EU law. AST Popcorn 11 Ltd. is responsible only for the service provided and should be considered only as a processor, on behalf of its customers, data on any customer information containing personal information that is subject to the requirements of the GDPR.

The customer is the data controller under the Regulation for all customer data containing personal information, which means that this party controls the way this personal data is collected and used, as well as the determination of the purposes and means of processing such personal data. data.

AST Popcorn Ltd. is not responsible for the content of personal data contained in customer data or other information stored on its servers, at the discretion of the customer, nor AST Popcorn Ltd. is responsible for the way the customer collects, processes, disseminates or otherwise processes such personal information.