This privacy policy is designed to help you understand what personal data we collect, why we collect it and what we do with it. Please take the time to read our privacy policy carefully. We want you to be aware of how we use your information and the ways in which you can exercise your rights.
This Privacy Policy applies to your personal data when you visit https://flowerinatesttube.com/ and/or use our services through this website and does not apply to other websites and/or products/services that we do not own and/or control.
DATA CONTROLLER
Personal data controller is Petar Tsvetanov Neftelimov, address. Petrov Petrov, Sofia, g.k. petar@neftelimov.com
At ,,Flower in a test tube” we respect the right to privacy and work continuously to keep the data we process to a minimum and as secure as possible. However, in order for you to use our services and for us to improve and develop them, we need to process some personal data. By using any of our services you acknowledge that you have read and understood this Privacy Policy.
WHAT PERSONAL DATA WE COLLECT AND HOW WE USE IT
In order for you to use our services, we need to process certain personal data. Personal data is data that describes and relates to someone in a personal capacity. It is data by which individuals can be identified.
We only process personal data for lawful reasons. We do not sell or otherwise distribute your personal data. We may only share it with our chosen subcontractors where this is necessary for the provision of our services, as specifically described below.
We process the following personal data about individuals for the following purposes:
User details: two names, email addresses, phone number, photos, location, occupation, descriptions of experience and links to other social media profiles of the user.
- The user’s name and email address are required for us to be able to identify the person as our user using a specific profile.
- E-mail address, telephone number are necessary for us to contact the user at any point in the implementation of the requested services in connection with their successful and timely implementation, to respond to inquiries and to respect user requests.
- The remaining user data is necessary in order to be able to make full use of all the services and opportunities offered on our website, namely – a complete presentation of users and the possibility to contact them. The registration instructions specify which data is entered at the user’s choice.
- We would like to use your email address to send you information about our services, campaigns and initiatives. We will only do this if you give us your consent to receive this information.
Your consent is voluntary and we will not refuse our services if you do not provide it. However, we believe that you will benefit greatly from receiving this information because it will reflect our latest projects and ideas to improve our services and the satisfaction of our users.
We will not use your contacts to advertise third party products or services.
You may withdraw your consent to receive this information at any time by writing to the data controller in any way that is convenient for you: by letter and/or e-mail.
METHOD OF COLLECTION OF PERSONAL DATA
We only process and use data that our users have voluntarily provided to us. This means that it is each user’s responsibility not to provide data to third parties in breach of their data protection rights, as we do not have access to these individuals and have no practical ability to control whether users provide data to us with third parties with their knowledge and consent given in accordance with legal requirements.
Therefore, any person is fully personally liable if they provide data to us without their knowledge and/or without obtaining their consent in complying with the requirements of applicable data protection legislation, including in respect of the names, telephone numbers and addresses provided to us by the user.
SUBCONTRACTORS
To provide quality services, we have engaged service providers – processors carefully selected according to their capacity to protect and process personal data. Without them, the implementation of our services would not be possible. We use only subcontractors – professionals in the relevant field, through whom we provide additional security for your data and to whom we provide only the information necessary for them to carry out their assigned activities, including:
- To manage the services provided to users and administer correspondence and notifications: Mailchimp and OneSignal Push;
- For domain and hosting: Superhosting;
- To analyze the use of the site and improve our services – Google Analytics, Google Search Console and Google AdWords;
- To personalise the content you see – Google AdSense.
Within Google tools, we are unable to identify the individuals whose data is generated. However, this information can be individualized by Google platforms and influence the content they show you. For more information and to disable certain features, you should use the Google platform settings, over which we have no control and cannot block their functionality.
In other cases, where required by law or contract, your data may be provided in connection with accounting or legal processing, making payments, collecting debts, etc., in which cases the data is processed for us only on the basis of our explicit instructions and directions and in accordance with our privacy policy with due care and security.
We do not provide your personal data to third parties without a legal or contractual basis, nor do we sell or otherwise distribute it.
In carrying out the activities of the controller, no transfer of personal data to third countries outside the EU of persons shall take place unless it is necessary to perform certain functions as part of the service with users listed above. All persons to whom data is transferred are approved and comply with all requirements of the EU-U.S. Privacy Shield Framework.
MINORS
We only provide services to persons over the age of 18. If you are under the age of 18, please seek the assistance of a person at least 18 years of age to use our services.
If we receive information that we have collected personal data from a person under the age of 18, we will delete it immediately unless we are legally obliged to retain such data.
Please contact us if you believe that we have mistakenly or unknowingly collected information from a person under the age of 18.
STORAGE PERIOD AND DELETION OF DATA
In principle, we process data as long as the user uses our services and has a registered account on our website. Any user may at any time request the deletion of their personal data stored and processed by the controller, by letter and/or e-mail.
YOUR RIGHTS
You have the right to request a copy of your personal information at any time, to verify the accuracy of the information held, to correct or update that information, to request that your personal information be deleted if there are grounds for doing so as described below. You also have the right to complain where your data protection rights have been breached. We have detailed your rights as a data subject below:
you have the right to request confirmation as to whether personal data relating to you is being processed and to request a copy of your personal data, as well as information relating to the collection, processing and storage of your personal data;
- you have the right to have your personal data erased on any of the following grounds: where the personal data are no longer necessary for the purposes for which they were collected; where you have objected to the processing; where the processing is unlawful; where the data are processed on the basis of your consent and you withdraw that consent; where the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject. We may refuse to erase your personal data for the following reasons: to exercise the right to freedom of expression and the right to information; to comply with our legal obligation and/or to perform a task carried out in the public interest and/or in the exercise of official authority vested in us; for reasons of public interest in the field of public health; for the establishment, exercise or defence of legal claims;
- you have the right to have your personal data corrected if it is inaccurate or completed if it is incomplete;
- you have the right to request that we restrict the processing of your personal data if this is applicable and there is a basis for doing so, for example: you contest the accuracy of the personal data for a period that allows us to verify the accuracy of the personal data; the processing is unlawful but you do not want the personal data to be erased, only their use to be restricted; we no longer need the personal data for the purposes of the processing but you require them for the establishment, exercise or defence of legal claims; you have objected to the processing in the charging authority; you have not objected to the processing of your personal data.
- you have the right to request to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transfer that data to another controller where the processing is based on consent or a contractual obligation and the processing is carried out by automated means;
- you have the right to object to such processing of your personal data if there are grounds for doing so.
You may address any requests to the data controller. In order for us to be able to fully assist you, please provide us with accurate information about you and specify your request. It is possible that in exercising your rights we may request additional information to establish your identity.
Please note that where your requests are manifestly unfounded and/or excessive, in particular due to their repetitive nature, we may:
- charge a fee, taking into account the administrative costs of providing the information or communication or taking the action requested, or
- Refuse to act on the request.
We will use reasonable efforts to grant your request within thirty (30) days of receipt of your request. If necessary, this period may be extended by a further two (2) months, taking into account the complexity and number of requests.
SUPERVISORY AUTHORITY
If you believe that we have violated your rights in relation to your personal data, you may file a complaint with the supervisory authority in the Republic of Bulgaria, which is the Personal Data Protection Commission. More information can be found at: www.cpdp.bg.
You can also lodge your complaint in the country where you live, where you work and/or where you believe we are violating your rights.
RECTIFICATION AND COMPLETION OF PERSONAL DATA
For your convenience and ease, you may use the following text to correct and complete your data:
Request for correction/addition of data
To Petar Tsvetanov Neftelimov, e-mail: petar@neftelimov.com
From:______________________________ (full names)
Tel:____________________
E-mail:_________________
Please correct/add the following data:__________
Please complete the data as follows:______________________
and/or
Please correct the details as follows:______________________
WITHDRAWAL OF CONSENT
For your convenience and convenience, you may use the following text to withdraw consent:
Request for withdrawal of consent
To Petar Tsvetanov Neftelimov, e-mail: petar@neftelimov.com
From:______________________________ (full names)
Tel:____________________
E-mail:_________________
I withdraw my consent to the collection, processing and storage of the following personal data provided by me:_______________________________________________
I withdraw my consent in respect of all data provided by me/ in respect of the following data:
I withdraw my consent for all purposes of use of the data / in respect of the following purposes:
DELETION OF DATA
For your convenience and convenience, you may use the following data erasure request text.
Request for deletion of data
To Petar Tsvetanov Neftelimov, e-mail: petar@neftelimov.com
From:______________________________ (full names)
Tel:____________________
E-mail:_________________
I request that all personal data that you collect, process and store, provided by me or related to me, be deleted, except data that should be stored for the purpose of fulfilling legal obligations.
DATA TRANSFER
For your convenience and convenience, you may use the following data transfer request text.
Data transfer request
To Petar Tsvetanov Neftelimov, e-mail: petar@neftelimov.com
From:______________________________ (full names)
Tel:____________________
E-mail:_________________
Please send all personal data you collect, process and store provided by me or related to me to:
Date of publication: 20.09.2021