Privacy Policy

The protection of personal data and the safeguarding of our clients' personal and financial information is a priority for "BAUTEK BULGARIA" Ltd – AquaLife Sport&Hotel. Therefore, we process your information exclusively based on the applicable legislation, namely: REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (better known as GDPR), the Personal Data Protection Act (PDPA), the Electronic Document and Electronic Trust Services Act (EDETSA), and the Electronic Commerce Act (ECA).

I. WHO PROCESSES AND IS RESPONSIBLE FOR YOUR PERSONAL DATA

"BAUTEK BULGARIA" Ltd, UIC BG200961766, registered with the Dobrich Registry Agency, with its seat and registered address at Dobrich, 9300, 2A Nezavisimost Str., floor 35, office No. 2, tel. +359 884 95 00 33; e-mail: info@aqualife-sport.com Website: http://aqualife-sport.com "BAUTEK BULGARIA" Ltd is a personal data controller within the meaning of Art. 4, paragraph 7 of Regulation 2016/679. You can contact us at the above-mentioned address, telephone numbers, and e-mail.

II. TYPES OF DATA WE PROCESS

"BAUTEK BULGARIA" Ltd processes the following types of personal data: – first and last name, – telephone number, – shipping address, in cases where we send a shipment; – e-mail address; – place of residence /city/village/; – year of birth; – job title.

III. GROUNDS FOR PROCESSING

"BAUTEK BULGARIA" Ltd processes your personal data on the grounds of Art. 28, paragraph 3 of Regulation 2016/679 in conjunction with Art. 6, paragraph 1, letters "a", "b", "c", and "f" of the GDPR, namely: – Art. 6, paragraph 1, letter "a" of the GDPR – You have given consent for the processing of your personal data for the purposes of direct marketing – advertising, commercial messages, promotions, offers, surveys, etc. The data processed on this basis are: first and last name, e-mail, telephone, year of birth, place of residence, user profile, job title. When you voluntarily participate in a survey or inquiry form organized by the CONTROLLER on its FACEBOOK page or on its website http://aqualife-sport.com, you agree that the latter may process your personal data: username and/or user profile. If you win a prize, you must provide the above-described information for it to be sent. The latter will be accepted and processed by the CONTROLLER only after your consent. If you do not provide such consent, "BAUTEK BULGARIA" Ltd cannot process the above data and send the corresponding information. When you voluntarily participate in a survey or inquiry form, you provide the above-described data voluntarily on paper, only with the simultaneous expression of consent for this on the same paper carrier. If you have not declared your consent, "BAUTEK BULGARIA" Ltd will immediately destroy the paper carrier containing your personal data. The latter will not be processed and you will not be invited to an event organized by the CONTROLLER. – Art. 6, paragraph 1, letter "b" of the GDPR – processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. The data processed on this basis are: first and last name, telephone number, address, e-mail, year of birth, user profile, job title. – Art. 6, paragraph 1, letter "f" of the GDPR – processing is necessary for the purposes of the legitimate interests pursued by the CONTROLLER, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. The data processed on this basis are: first and last name, contact telephone, year of birth, e-mail and user profile, job title.

IV. PURPOSES OF PROCESSING

A/ For the purpose of concluding or performing a contract offered by the CONTROLLER: – Client identification; – Updating your personal data; – Servicing and responding to client complaints/inquiries/requests under Art. 15-22 of Regulation 2016/679/complaints; – Providing information.

B/ In fulfillment of its legal obligations, "BAUTEK BULGARIA" Ltd processes your data for the following purposes: – Issuing invoices, preparing a detailed statement, when provided for in the client's individual contract; – To process the contract with the client and for tax and social security control by the relevant competent authorities.

C/ For the purposes of the legitimate interests of "BAUTEK BULGARIA" Ltd, namely: – ensuring all matters.

D/ For marketing purposes: – analysis of consumer demand and behavior; – sending messages about promotions, offers, surveys, advertising games; – sending advertising and/or informational messages.

V. MINORS

"BAUTEK BULGARIA" Ltd does not provide services to persons under 18 years of age. If "BAUTEK BULGARIA" Ltd receives information that it has collected personal data from a person under 18 years of age, it will be deleted immediately, unless the law obliges "BAUTEK BULGARIA" Ltd to store such data. Please contact us if you believe that we have mistakenly or unknowingly collected information from a person under the age of 18, at the following contacts: tel. +359 884 95 00 33; e-mail: info@aqualife-sport.com

VI. DATA COLLECTION METHOD

"BAUTEK BULGARIA" Ltd only processes data that has been voluntarily provided by our clients and users. This means that each client is responsible for not providing third-party data in violation of their personal data protection rights, as "BAUTEK BULGARIA" Ltd does not have access to these individuals and has no practical ability to control whether our clients provide us with third-party data with their knowledge and consent, given in accordance with legal requirements. Therefore, each data subject bears full personal responsibility if they provide us with third-party data without their knowledge or without obtaining their consent in compliance with the requirements of the applicable personal data protection legislation, including with regard to the names, telephone numbers, and addresses of the recipients of shipments provided to us by a client. Each data subject bears full personal responsibility if they intentionally provide us with false data, including year of birth or state that they are over 18 years of age, when in fact they are not.

VII. WHERE WE STORE YOUR DATA

The data we collect from you is stored within the European Economic Area ("EEA") in compliance with national and European legislation and in particular REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (better known as GDPR).

VIII. WHO HAS ACCESS TO YOUR DATA

"BAUTEK BULGARIA" Ltd does not provide your personal data to third parties without a legal or contractual basis, nor does it distribute data to third countries and international organizations outside the borders of the EU and EEA. The transfer of your data to other data processors is carried out only for the purpose of providing the service/delivery you have chosen, for marketing campaigns aimed at 5 improving the quality of the goods provided to you, in order to fulfill the legal obligations of FAST MENU, namely: – Transport/courier companies for the execution of orders; – Companies for technical analysis of the service; – Banks servicing payments made by you; – Persons providing consulting services in various fields – legal, accounting, auditing, including forced collection of receivables, etc.; – State administrative bodies – NRA, etc., when applicable in cases provided by law.

IX. TERM OF PROCESSING AND STORAGE. DATA DESTRUCTION

After the completion of a specific delivery or after you have given your consent, your personal data is stored for the following periods: – 10 years for accounting documents, starting from the beginning of the year following the year in which the accounting document was issued – first and last name, Personal Identification Number, address. – 5 years from the execution of a specific delivery, in order to track the performance of each delivery and to secure all issues related to complaints and legal claims – first and last name, telephone number, delivery address, e-mail and user profile. – 1 year from receipt of consent – for e-mail for sending commercial and advertising messages, informational materials, surveys, etc. The destruction of personal data is carried out in compliance with a prescribed procedure for this, according to the internal documents of "BAUTEK BULGARIA" Ltd.

X. SECURITY MEASURES

"BAUTEK BULGARIA" Ltd has undertaken a wide range of technical and organizational measures to protect your personal data against loss or other forms of unlawful processing in accordance with Art. 32 of Regulation 2016/679. Personal data is accessible only to those persons who need access to perform their work in connection with the provision of our services. These persons are trained and authorized accordingly.

XI. WHAT ARE YOUR RIGHTS

1. Right of access: You have the right at any time to request information about your personal data that we store, the grounds, purposes, terms of processing and storage, whether it has been provided to a 6 data processor, whether it has been destroyed, etc.

2. Right to rectification: You have the right to request the correction of your personal data if it is incorrect, including the completion of incomplete personal data.

3. Right to erasure /right to be forgotten/: You have the right to erase all personal data processed by "BAUTEK BULGARIA" Ltd at any time, except when the processing is necessary for at least one of the following purposes, namely:

a) for exercising the right of freedom of expression and information;

b) for compliance with a legal obligation which requires processing by Union or R. Bulgaria law;

c) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of Regulation 2016/679 in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

d) for the establishment, exercise or defense of legal claims.

4. Right to restriction: You have the right to request that "BAUTEK BULGARIA" Ltd restrict the processing of your personal data in the following circumstances:

a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;

b) the processing is unlawful, but the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;

d) the data subject has objected to processing pursuant to Article 21(1) of Regulation 2016/679 pending the verification whether the legitimate grounds of the controller override those of the data subject.

5. Right to portability: When "BAUTEK BULGARIA" Ltd processes your personal data by automated means based on your consent or on a contract, you have the right to receive a copy of your data in a structured, commonly used and machine-readable format, transferred to you or to another party. This only includes the personal data that you have provided to us.

6. Right to object to processing based on legitimate interest: You have the right to object to the processing of your personal data based on the legitimate interest of "BAUTEK BULGARIA" Ltd. We will not continue to process your personal data unless it can be demonstrated that there are compelling legal grounds for this which override your interests and rights or due to legal claims.

XII. EXERCISING YOUR RIGHTS

We take the protection of personal data very seriously, which is why we have a customer service team that handles your requests in connection with the above-mentioned rights. You can always contact them at the following contacts: tel. +359 884 95 00 33; e-mail: info@aqualife-sport.com Your requests should be sent in writing in free text to the CONTROLLER or you can use our application form under Art. 15-22 of Regulation 2016/679. Please note that when your requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may: 1. charge a fee, taking into account the administrative costs of providing the information or communication or taking the action requested, or 2. refuse to act on the request. We will make reasonable efforts to honor your request within 30 days of receiving your application. If necessary, this period may be extended by another two months, taking into account the complexity and number of requests.

XIII. WITHDRAWAL OF CONSENT

You have the right at any time to withdraw your consent to the processing of your personal data only for those purposes and that type of personal data necessary to achieve the specific purposes that we process on the basis of Art. 6, paragraph 1, letter "a" of the GDPR, described in detail in Sections III and IV of this policy, as well as in the Cookie Policy. If you wish to withdraw your consent for processing, you can submit a written request to the above-mentioned e-mail or follow the active link where you can fill out our consent withdrawal form or see the Cookie Policy.

XIV. REPORTING IRREGULARITIES AND COMPLAINTS

If you believe that we have violated your rights in connection with your personal data, and that there is a risk of a breach of the security of your personal data, you can submit a report to the following contacts: tel. +359 884 95 00 33; e-mail: info@aqualife-sport.com The exercise of the above rights does not deprive you of the right to complain. You can file one with the supervisory authority of Bulgaria – the Commission for Personal Data Protection. More information can be found at: www.cpdp.bg