Definitions:
- In this policy, "personal data" refers to the meaning of this term as defined in Article 4, paragraph 1 of Regulation (EU) 2016/679 of the European Parliament and of the Council (the Regulation), and means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
- The terms "natural person," "ordering party," "user," "data subject," and "client" used in this policy refer to a natural person who is a data subject within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (the Regulation).
- The personal data controller responsible for processing data related to orders and deliveries through the MyCatering.bg website is Party Service Plus Ltd., with VAT number BG120524666.
- The Data Protection Officer (DPO) is responsible for answering any questions from users regarding the processing and protection of their personal data. Any user of the Site can contact the DPO via email at info@mycatering.bg.
- Data subjects whose personal data may be processed are only natural persons—users or representatives of legal entities for the purposes of ordering and purchasing products from the Site.
- To protect clients' and contractors' personal data from unauthorized access and disclosure, Party Service Plus Ltd stores this data on specialized servers with restricted physical access. – Additionally, various methods of data encryption and limitations on remote access to the database are employed. – Employees with access to personal data connect to the database using unique identifiers. – To further enhance security and eliminate the risk of unauthorized access, Party Service Plus Ltd uses special methods to verify whether a particular employee is physically present in the company's office, and if not, their access credentials are disabled, preventing access to protected personal data.
- Types of personal data that Party Service Plus Ltd processes based on contractual and pre-contractual obligations for processing orders and deliveries according to the Consumer Protection Act and the Website’s Terms of Service:
– Delivery address
– Contact phone number
– Email address
1.2. Payment Information (depending on the payment method selected by the customer): – Bank account details – account holder, bank account number, and servicing bank
– Epay.bg account – Email address; names, if provided in the profile
– Credit/Debit card information – cardholder, card number, CVC code
1.3. Billing Information (for issuance of accounting documents): – Full name of the ordering party, if they are a natural person, or of their representative if the ordering party is a legal entity
– Identification number (PIN or Personal Number of a Foreigner) as required by tax legislation for the issuance of accounting documents
1.4. Customer Information: – Contact phone number
– Contact email
– Phone number for calls to/from the Sales Department
1.5. Website Profile Information: – Username
– Password
– All data contained in the Profile
– Contact phone number
– Email address
1.6. Google+ Profile Data (if provided during user registration): – Email address
– Username
– Delivery address
– Mobile phone number
1.7. Facebook Profile Data (if provided during user registration): – Email address
– Username
– Delivery address
– Mobile phone number
1.8. Anonymized Data: – Statistical information on the total number of site visits, completed deliveries, received requests for assistance, and complaints collected and analyzed to improve the services and products offered by Party Service Plus Ltd
– Cookies and Pixel Tags
Party Service Plus Ltd collects information, which may include personal data, from visitors’ browsers (e.g., Internet Explorer, Mozilla Firefox, Google Chrome). This information is collected using various methods, including cookies and pixel tags, and may include IP address, unique cookie identifier, browser type, country, previous web pages visited, and user interactions with the Site.
These cookies are essential for the functioning of the site and for displaying requested information correctly. They are always enabled and help in processes such as shopping and fixing technical issues. Cookies also allow Party Service Plus Ltd to analyze user behavior on the site to improve functionality and performance. Additionally, they may be used for showing users relevant advertisements from third parties. Users can change their cookie settings at any time through their browser settings.
- Purposes of processing personal data:
– Fulfillment of a distance contract
– Delivery via courier or postal services to the address specified in the order
– Invoicing and payment
– Contacting the ordering party regarding the order and subsequent delivery
– Sending notifications about delivery status or issues
– Providing information about new products/services through email or SMS, with the user’s explicit consent
– Sending messages for direct marketing and advertising, with the user’s explicit consent
– Tracking previous orders and their status
2.2. Payment Data for the purposes of: – Verifying received payments via bank transfer, bank card, or Epay.bg
– Refunding amounts (if a return or claim is made)
2.3. Billing Data for the purposes of: – Issuance of accounting documents (invoices), containing legally required details
2.4. Customer Information for the purposes of: – Providing product and service information, including updates on orders and handling complaints or inquiries
- Third parties to whom we provide your personal data:
3.2. Government authorities and institutions in connection with inspections, as per legal requirements
3.3. Business partners – online platforms for promoting and advertising the products and services offered by Party Service Plus Ltd
- Retention periods for personal data: – Data processed for fulfilling a distance purchase contract – legal prescription periods for filing claims
– Data processed for accounting purposes – as per Bulgarian legislation (Accounting Act and VAT Act)
– Data provided based on consent – until withdrawal of consent
- Rights related to personal data of natural persons:
5.1. Right of access, including the right to request a copy of the data being processed
5.2. Right to rectification of inaccurate personal data
5.3. Right to erasure ("Right to be forgotten") under certain circumstances
5.4. Right to restriction of processing when data accuracy is disputed
5.5. Right to data portability
5.6. Right to object to data processing based on legitimate interest
5.7. Right to object to direct marketing
5.8. Right to file a complaint with the Data Protection Authority