I. PRIVACY POLICY
MattiD Ltd. strictly monitors the protection and integrity of all personal data collected from our clients. We pay particular attention to the lawful, fair, and transparent processing of personal data. The data provided is collected and processed solely for specific, clearly defined, and legitimate purposes and is not further processed in a manner incompatible with these purposes. The data we collect and store is minimized and limited to what is necessary to fulfill the purposes for which it was collected. We make every effort within our organization to ensure that your personal data is always accurate and up-to-date, relying on you to inform us of any inaccuracies to correct them promptly. We never store your data for longer than necessary for the purposes for which it is processed. You have the right to withdraw your consent for us to process your data at any time and without giving a reason, and to have it deleted if you notify us of this desire. At the same time, our priority is to process data in a manner that ensures an appropriate level of security for personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage. We have taken the necessary and prescribed technical and organizational measures under applicable law to ensure the protection and security of our clients’ personal data.
MattiD Ltd. is a personal data controller and, in this capacity, complies with the provisions of the applicable legislation (General Data Protection Regulation – Regulation (EU) 2016/679, Personal Data Protection Act, and others)
Definitions
“PERSONAL DATA” refers to any information relating to an identified or identifiable natural person. Personal data includes name, identification number, email address, phone number, postal address, etc.
“PROCESSING” means any operation or set of operations performed on personal data or sets of personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making the data available, alignment or combination, restriction, erasure, or destruction.
Our privacy policy also describes the options available to you to access, update, or otherwise control your personal data that we process. If you have any questions about our practices or any of your rights described below, you can contact our team at salon@matti.bg. This mailbox is actively monitored and managed.
II. WHAT INFORMATION WE COLLECT – PERSONAL DATA, PURPOSES, AND GROUNDS ON WHICH “MattiD Ltd.” PROCESSES IT
MattiD Ltd. collects and processes your personal data in connection with the use of the website – www.matti.bg contract conclusion with the company, and specifically the following personal data for the purposes listed below:
1. Data for registration, contract conclusion/order placement, and newsletter subscription – names and email address.
Purpose of data collection: Establishing contact with the user and sending information to them, registering the user in the online store, ensuring the fulfillment of the contract for the provision of the respective goods, and sending a newsletter.
Grounds for processing these personal data: Explicit consent received from you as a client; taking steps to conclude and executing a contract – with your registration in the online store or making an order without registration, and when you place a purchase and request delivery through our online store, a contractual relationship is established based on which we process your personal data.
2. Data for delivery – your names, phone number, email, and address.
Purpose of data collection: Fulfillment of the administrator’s obligations under a distance sales contract and delivery of purchased food and/or event organization.
Grounds for processing these personal data: Fulfillment of the administrator’s obligation to deliver the purchased food or services.
3. Data for issuing an invoice for food purchased from us – names, personal identification number, address, email.
Purpose of data collection: We process these personal data to fulfill obligations arising from accounting and tax legislation – the tax and accounting legislation in the Republic of Bulgaria requires certain accounting and commercial information to be prepared, including storing it for a certain period, as well as any other information and documents relevant to taxation. In fulfilling this obligation, the relevant information and documents containing personal data are stored for the periods provided by the relevant laws.
Grounds for processing these personal data: Compliance with a legal obligation applicable to the company.
4. The company does not collect and process data on individuals under 14 years of age, except with the explicit consent of their parents or legal representatives.
- Information about food allergies is processed to provide suitable food that is tailored to the health condition of our clients.
III. SHARING/TRANSFERRING PERSONAL DATA
MattiD Ltd. does not share, sell, rent, trade, or transfer personal information collected from its clients.
There are exceptions when your personal information may be disclosed to third parties as follows:
- It may be transferred as an asset in connection with a merger or sale of the business or as part of our business or corporate reorganization or other changes in corporate governance.
- It may be provided to service providers who assist us in providing our goods – couriers, accountants. No service provider can access personal data stored by MattiD Ltd. without first signing a data confidentiality agreement, which grants MattiD Ltd. the right to verify compliance with the obligations assumed under the agreement. The collected personal information is shared only with trusted partners with whom we carry out the organization and provision of the goods we offer. Before any such data transfer, we ensure that these providers provide sufficient guarantees that they apply appropriate technical and organizational measures in a manner that complies with the requirements of the General Data Protection Regulation (Regulation (EU) 2016/679), the Personal Data Protection Act, and our privacy policy, and ensures the protection of the rights of the data subject. In accordance with the principle of data minimization, these providers receive only the personal information they need to perform their functions.
- Service providers are not permitted to retain the shared data for their own benefit or for longer than necessary to provide the specified service.
- Personal data is shared with the provider only when we have your explicit permission or when there is another legal basis.
- Personal data may also be provided to public authorities (e.g., regulatory authorities and their subdivisions, authorities for the detection and prevention of crimes and violations) only when provided for by law and under the conditions specified therein.
MattiD Ltd. does not share your personal data with controllers and processors outside the EU.
DURATION AND STORAGE PERIOD OF PERSONAL DATA BY “MattiD Ltd.”
MattiD Ltd. stores your personal data for no longer than the existence of your profile on our site or until consent for processing is withdrawn. After the deletion of your profile or withdrawal of your consent, MattiD Ltd. takes the necessary measures to delete and destroy all your data without undue delay or to anonymize it (i.e., render it in a form that does not reveal your identity).
MattiD Ltd. stores your personal data provided in connection with online orders for a period of 5 years for the purpose of protecting MattiD Ltd.’s legal interests in judicial or administrative disputes with users of the online store, while accounting documents are stored for the legally required period.
MattiD Ltd. will notify you if the storage period needs to be extended to fulfill a regulatory obligation or for the legitimate interests of the controller or other.
V. YOUR RIGHTS REGARDING THE PROVIDED PERSONAL DATA
You have various rights regarding your personal data, including the right to information, withdrawal, correction, erasure, restriction of processing, data portability, objection, and filing a complaint.
For more details on each of these rights, please refer to the original document or contact us at events@matti.bg.