Privacy Policy

I. INTRODUCTION

This Personal Data Protection Policy, hereinafter referred to as the “Data Protection Policy,” provides information on how “Fast Food Produkt” Ltd, hereinafter referred to as the “Provider,” “Administrator,” “We,” and/or “us,” the owner/operator of the website: https://magicalnuts.com, hereinafter referred to as the “Website,” processes (including but not limited to collects and stores) personal data of personal data subjects, such as users of the Website and the Provider’s services, hereinafter referred to as “User/s,” “You,” and/or “Your,” as well as regarding the latter’s rights in this respect. The term “personal data,” used in the Data Protection Policy, has the meaning given to it in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as the “General Data Protection Regulation” and/or “GDPR,” namely: “any information related to an identified or identifiable natural person (‘data subject’); an identifiable natural person can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

Below, you can find brief information regarding:

The Provider,
The competent supervisory authority,
The legal basis on which we process personal data,
The purposes for which we use personal data,
Principles of processing personal data,
What personal data do we collect,
The period of storage of personal data,
Access to and transfer of personal data, and
The rights and guarantees provided by the GDPR to the data subjects.

II. INFORMATION ABOUT THE PROVIDER

Name: “Fast Food Produkt” Ltd, ID 202462993
Headquarters and address of management: BULGARIA, Sofia, Triaditsa district, “Ivaylo Petrov” street, no. 5, fl. 6
Phone: +359 876 700 000, email: [email protected]
Registration in public registers: Commercial Register at the Registry Agency at the Ministry of Justice of the Republic of Bulgaria.

III. INFORMATION ABOUT THE COMPETENT SUPERVISORY AUTHORITY

Name: Commission for Personal Data Protection of the Republic of Bulgaria
Address: Sofia 1592, “Prof. Tsvetan Lazarov” Blvd. No. 2
Phone: 02 915 3 518
Email: [email protected]
Website: https://www.cpdp.bg/

IV. BASIS FOR COLLECTING, PROCESSING AND STORING PERSONAL DATA

We process (including, but not limited to: collect and store) your data solely in connection with our activity and in compliance with the applicable legislation, including the Personal Data Protection Act of the Republic of Bulgaria and the General Data Protection Regulation. We process your data based on at least one of the following grounds:

User’s consent to process personal data;
Processing of personal data is necessary for the fulfillment of contractual obligations of the Provider to the User;
Processing of personal data is necessary to take steps at the request of the User before entering into a contract;
Processing of personal data is necessary to comply with the legal obligations of the Provider;
Processing of personal data is necessary for the legitimate interests of the Provider to carry out its activity.

V. PURPOSES FOR COLLECTING, PROCESSING AND STORING PERSONAL DATA

We collect, process, and store the personal data of Users in connection with the provision of services offered by us and communication in connection with the use of the Website, as well as for the following purposes:

Communication and identification when performing a service contract and sales contract (including execution of a respective contract);
Communication, identification, processing, and execution of inquiries made, orders placed, requests, reservations, purchases of goods or services (including preparation for contract conclusion, order acceptance, goods dispatch, solving issues related to cancellation of orders, reservations, returning purchased goods, refunding paid sums, and others);
Fulfillment of tax and other legal obligations;
Accounting purposes in connection with the use of our services;
Protection of our legitimate interests in connection with the fulfillment of our obligations to state and municipal authorities (for example: National Revenue Agency, Ministry of Interior);
Protection of our legitimate interests in connection with the storage of information for protection against judicial or tax claims and to improve the performance of the Website;
Protection of the information security of the Website;
Statistical information about the use of the Website;
Providing advertising content according to the User’s interests;
Leaving comments on the content on the Website.

If a data subject refuses to provide us with some or all of the personal data necessary for the respective purpose stated above, we may not be able to provide the respective service (e.g., to execute a contract concluded with the respective User) or to fulfill the respective legal requirements (e.g., to allow the data subject to exercise their rights under the GDPR).

VI. PRINCIPLES OF COLLECTING, PROCESSING AND STORING PERSONAL DATA

We adhere to the following principles in collecting, processing, and storing your data:

Legality, fairness, and transparency;
Limitation of processing purposes;
Limitation of the storage period to achieve the purposes for which the data are processed;
Minimization of the data being processed;
Accuracy and timeliness of data;
Integrity and confidentiality in data processing and ensuring an appropriate level of security of personal data.

VII. PERSONAL DATA

We collect the following categories of personal data of Users for the following purposes and on the following grounds:

Your identifying data (name and surname, phone number and email address), as well as other data that you voluntarily provide to us, to process your inquiries, provide service proposals, and provide services on our part, upon your expressed desire, including communication with you in this regard, and based on taking steps at your request for potential contract conclusion, contract execution, in which you are a party or consent for processing, provided by you;
Your identifying data (name and surname, phone number and email address) and information related to payment and selected payment methods to issue and send accounting/tax documents (invoices) in connection with services used by you, including communication with you in this regard, and based on taking steps at your request for potential contract conclusion, contract execution, in which you are a party or fulfillment of our legal obligation;
Your identifying data (name and surname and email address) and information related to leaving comments on the content on the Website, upon your expressed desire;
Your IP address, browser settings, and preferred language, visited pages, and performed actions to send Push notifications, upon your expressed desire to receive such;
Your IP address, and visited pages, to protect the information security;
Other data that may be necessary in certain cases or related to the provision of services to Users on our part, including necessary for the fulfillment of obligations under the contract (for example, date of birth, signature, ID number) or other data that Users decide to voluntarily share with us, and based on contract execution, in which you are a party, consent for processing, provided by you or compliance with our legal obligation.

We use “cookies” on the Website, which are small files downloaded to your computer to improve your experience as a user of the site. You can find more information in this regard on our special page with “cookies” rules here. We do not process, respectively collect from Users, special categories of personal data (for example: data revealing racial or ethnic origin, political views, genetic or biometric data, as well as data on the sexual life and sexual orientation of the data subject). We do not make decisions based solely on automated processing of data, including profiling. We usually receive personal data directly from the data subject. However, it is not excluded that we may receive personal data from other persons such as other employees in the company in which the respective data subject works, as well as from publicly accessible sources such as the Commercial Register and the Register of Non-profit Legal entities at the Registry Agency at the Ministry of Justice of the Republic of Bulgaria.

VIII. PERIOD OF STORAGE OF PERSONAL DATA

We store the personal data of Users for a period not longer than necessary for the fulfillment of the respective purpose of processing or the legally established period, when applicable. For example:

Personal data provided by you when filling in the contact form will be stored until the fulfillment of the request or satisfaction of the question in connection with which you contacted us, as well as a maximum of one year thereafter for statistics and marketing analyses;
Personal data of our customers processed in connection with contracts concluded between us and the respective User will be stored for a period not longer than ten years, counted from January 1 of the year following the one in which the contract was accounted for tax purposes;
Personal data of our customers processed in connection with the issuance of tax documents (invoices) will be stored for a period not longer than ten years, counted from January 1 of the year following the one in which the document was accounted for tax purposes;
Personal data of our partners/suppliers processed in connection with contracts concluded between us and the respective partner/supplier will be stored for a period not longer than ten years, counted from January 1 of the year following the one in which the contract was accounted for tax purposes;
Personal data of participants in recruitment and selection procedures will be stored for a period not longer than six months, counted from the moment of conclusion of the recruitment/selection procedure in which the respective data subject participates, respectively after the expiration of the term for appealing the given procedure, unless the respective data subject has given consent for the storage of his/her data for a longer period, in which case the data subject has the right at any time and without stating reasons to withdraw his/her consent.

The period of storage depends, among other things, on the duration of the legal relations that have arisen between us and the respective User, as well as the purposes for which personal data are processed. When there is an indication/s of potential legal claim/s or liability, these periods will be accordingly extended. When the processing is based on the User’s consent (for example: in cases of personal data provided by third parties for direct marketing), we store these personal data as long as we have valid consent for their processing. After the expiration of the above periods, we take the necessary care to delete and/or destroy the respective personal data without undue delay.

IX. ACCESS TO PERSONAL DATA AND TRANSFER OF PERSONAL DATA TO THIRD PARTIES

In principle, the personal data of Users that we process are accessible to our employees, representatives, and partners who need them to fulfill legal obligations and/or perform contractual obligations (for example: providing a certain service under a contract with a User). In this regard, it is possible, at our discretion and in compliance with the requirements of the GDPR, to transfer all or part of your data to third parties such as accountants, professional consultants, including lawyers (for financial accounting and administrative servicing of our activity), cloud platforms for data processing/storage (for organizational servicing of our activity, for example, storage and processing of contracts with Users on cloud platforms for greater security), companies providing postal services (for organizational servicing of our activity, for example: sending contracts on paper to Users), IT service providers, system administration, marketing services (to provide more reliable and quality work of the Website and more secure data processing), providers of foreign information storage services (i.e., hosting companies) (for contract execution with Users). Based on the applicable legislation or at the request of public authorities, all or part of your data may be accessible also to public authorities. We do not intend to transfer your data to countries outside the European Economic Area or to international organizations.

X. RIGHTS OF DATA SUBJECTS

At any time, while we process your data, and in compliance with the limitations laid down in the applicable legislation, you, the data subject, have the following rights:

Right of access – you have the right to request information whether we process your data, as well as to access and obtain a copy of such personal data; in case you request more than one copy of such personal data, you may owe payment of a respective fee for each additional copy;
Right to correction/amendment – you have the right to request your data to be corrected, in case you consider them to be inaccurate or incomplete. We will make such corrections/amendments without undue delay;
Right to erasure/to be forgotten – under certain circumstances (for example: the respective personal data are no longer necessary for the purposes for which they were collected; you have withdrawn your consent for the processing of certain personal data for which there is no other legal basis), you may request your data that we process to be deleted from our registers/our database without undue delay. In certain cases, we may refuse to delete such personal data (for example: processing of personal data is necessary to comply with a certain legal obligation or to establish, exercise, or protect legal claims);
Right to restriction of processing – when certain conditions are met (for example processing of certain personal data is unlawful, but you do not want these data to be deleted), you have the right to request the restriction of the way your data are processed;
Right to data portability – when your data have been provided by you and are processed in an automated manner, you have the right to request these personal data to be transferred to you in a structured, widely used, and machine-readable format, as well as to be transferred to another personal data administrator, if this is technically feasible;
Right to object – you have the right, at any time, to object to the processing of your data for certain purposes, in which case we will stop using the personal data for the specific purpose unless we have overriding legitimate grounds for this (for example you have the right, at any time, to object to the processing of your data for direct marketing purposes, in which case we will stop processing your data for these purposes without undue delay);
Right to object to automated processing, including profiling – you have the right not to be subject to a decision based solely on automated processing of your data, including profiling, as well as to have all rights arising for you, in case you are subject to the legal consequences of such processing;
Right to withdraw your consent for processing – in case we process your data based on the provided consent, at any time, you have the right to withdraw your consent. Withdrawal will not affect the lawfulness of the processing based on consent before its withdrawal.

In case, at the request of a User, we delete his/her data from our database, we will store only the information that may be necessary for the protection of our legitimate interests or public authorities. You have the right to request to be informed about all recipients to whom personal data, for which correction, erasure, or restriction of processing has been requested, have been disclosed. We may refuse to provide this information if this would be impossible or require disproportionate efforts. In case we are required to transfer personal data to another administrator, to correct or delete personal data, to restrict the processing of personal data or to stop such processing, to provide information about the recipients to whom personal data, for which correction, erasure or restriction of processing has been requested, have been provided, or to provide access to personal data, and in case of concerns in connection with the identity of the User who made the respective request, we may first require additional information to confirm the identity of the respective data subject. In case there is a third party in the processing of your data to which all or part of your data has been transferred (as indicated in part IX above), all the above-mentioned requests will be referred to this third party. Exercising the above-mentioned rights is free of charge for Users, except when the submitted requests are unfounded or excessive. In such a case, we may either impose a reasonable fee for fulfilling the request or refuse to take action on the request. Users can exercise the above-mentioned rights by contacting us by email at: [email protected]

XI. COMPLAINT TO A SUPERVISORY AUTHORITY

In case you consider that your data are not processed lawfully or that any of your rights related to the protection of personal data are violated, you have the right to file a complaint to the competent supervisory authority for personal data protection, indicated in part III above of the Data Protection Policy. You also have the right to seek protection of your rights in court. In case there are links on the Website to other websites, we recommend that you carefully acquaint yourself with the personal data protection/privacy policies of these other websites, because when visiting these websites, your personal data may be processed by these websites, which processing is not covered by the Data Protection Policy. We reserve the right to change the Data Protection Policy, at our discretion, as well as when we find it appropriate.

Phone: +359 876700000

Privacy policy