CONFIDENTIALITY STATEMENT OF "FURISTO"LTD

I. PRIVACY POLICY

"FURISTO" Ltd. strictly monitors the security and integrity of all personal data collected from our customers. We pay special attention to the legal, conscientious and transparent processing of personal data. We collect and process the data provided only for specific, explicitly stated and legitimate purposes and do not further process in a manner incompatible with these purposes. The data we collect and store is kept to a minimum and is related to and limited only to what is necessary to fulfill the purposes for which we collected it. We make every effort within our organization to ensure that your personal data is always accurate and up-to-date, and we also rely on you if you find an inaccuracy in the data to remove it in a timely manner. We never store your data for a period longer than necessary for the purposes for which it is processed. We provide you with the opportunity at any time and without giving reasons to withdraw your consent to process your data, as well as to delete them, if you notify us of your wish. At the same time, it is a priority for us that processing is carried out in such a way as to guarantee the appropriate level of security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage. We have taken the technical and organizational measures necessary and prescribed in the applicable legislation to ensure the protection and security of the personal data of our customers.

"FURISTO" Ltd. is the controller of personal data and in this capacity complies with the provisions of the applicable legislation (General Regulation on the protection of personal data - Regulation (EU) 2016/679, Law on the Protection of Personal Data, etc.)


DEFINITIONS
"PERSONAL DATA" is any information relating to an identified natural person or an identifiable natural person. Personal data includes name, social security number, email address, telephone, postal address, etc.

"PROCESSING" means any operation or set of operations performed on personal data or a set of personal data by automatic or other means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making the data available, arrangement or combination, restriction, erasure or destruction.

Our privacy policy also describes the options we provide for you to access, update or otherwise take control of your personal data that we process. If you have any questions about our practices or any of your rights described below, you can contact our team at orders@furisto.com. This mailbox is actively monitored and managed.


II. WHAT INFORMATION WE COLLECT - PERSONAL DATA, PURPOSES AND BASIS ON WHICH "FURISTO" Ltd. PROCESSES THEM

"FURISTO" Ltd. collects and processes your personal data in connection with the use of the online store -  www.furisto.com,  the conclusion of contracts with the company, and more specifically the following personal data with a view to the purposes stated below:

1. Data for registration, concluding a contract / placing an order / and receiving a newsletter - names and email

Purpose for which the data is collected - Making contact with the user and sending information to him, for user registration in the online store, ensuring the fulfillment of the contract for the provision of the relevant goods, as well as for sending an information bulletin.

Basis for processing this personal data - Express consent received from you as a customer; taking steps to conclude a contract and concluding a contract - with your registration in the electronic store or placing an order without registration, as well as with a requested purchase and delivery from our online store, a contractual relationship is created with you, on the basis of which we process your personal data ;

2. Delivery details – Your names, phone, email, address.

Purpose for which the data is collected: Fulfillment of the administrator's obligations under a distance sales contract and delivery of the purchased food.

Basis for processing these personal data - fulfillment of the administrator's obligation to deliver the purchased food.

3. Data for issuing an invoice for the purchase of food offered by us - names, social security number, address, email;

Purpose for which the data is collected: we process these personal data in order to fulfill obligations arising from accounting and tax legislation - tax and accounting legislation in the Republic of Bulgaria requires that certain accounting and commercial information be compiled, including that this information be stored for a certain period of time , as well as any other information and documents relevant to taxation. When fulfilling this obligation, the relevant information and documents, which also contain personal data, are stored for the periods stipulated in the relevant laws.

Basis for processing these personal data - compliance with a legal obligation that applies to the company;

4. The company does not collect and process data for persons under the age of 14, except with the express consent of their parents or legal representatives.

We process information about the child's food allergies for the purpose of providing appropriate and tailored food for the child's health.


III. SHARING/TRANSFER OF PERSONAL DATA

"FURISTO" Ltd. does not share, sell, rent, trade or transfer personal information collected from its customers.

There are exceptions where your personal information may be disclosed to third parties as follows:

It may be transferred as an asset in connection with a business merger or sale or as part of our business or as part of a corporate reorganization or other changes in corporate governance.

It can be provided to service providers who assist us in providing our goods - couriers, accountants. No supplier can have access to personal data stored by "FURISTO" Ltd. without a prior data confidentiality agreement, which entitles "FURISTO" Ltd. to check compliance with the obligations accepted by the agreement. We transfer the collected personal information only to our trusted partners, together with whom we carry out the organization and provision of the goods offered by us. Before any such data transfer, we check that these providers provide sufficient guarantees that they apply appropriate technical and organizational measures, in such a way that the processing complies with the requirements of the General Data Protection Regulation (Regulation (EU) 2016/679), on The Personal Data Protection Act, its implementing regulations, as well as our privacy policy and to ensure the protection of the data subject's rights. In accordance with the principle of minimizing the data that is processed, these providers receive only that personal information that they need to perform their functions.

Service providers are not permitted to retain aggregate data for their own or independent benefit, nor to retain it for longer than is necessary to perform the specified service.

We share personal data with the provider when we have your express permission to do so or when there is another legal basis.

Finally, personal data can be provided to state authorities (eg for control authorities and their subdivisions, authorities for detection and prevention of crimes and violations), only when provided for by law and under the conditions specified therein.

"FURISTO" Ltd. does not transfer/share your personal data with administrators and processors in countries outside the EU.


IV. TERM AND DURATION OF PERSONAL DATA PROCESSING BY "FURISTO" Ltd.

"FURISTO" Ltd. stores your personal data for a period not longer than the existence of your profile in the online store or until you withdraw your consent to processing. After deleting your account or withdrawing your consent, "FURISTO" Ltd. takes the necessary care to delete and destroy all your data, without unnecessary delay or to anonymize it (i.e. reduce it to a form that does not reveal your identity) .

"FURISTO" Ltd. stores your personal data, provided in connection with online orders, for a period of 5 years for the purpose of protecting the legal interests of "FURISTO" Ltd. in legal or administrative disputes with users of the online store, and the accounting documents are kept for the relevant statutory period.

"FURISTO" Ltd. notifies you in the event that the data storage period needs to be extended in order to fulfill a legal obligation or in order to have legitimate interests of the Administrator or otherwise.


V. YOUR RIGHTS REGARDING PERSONAL DATA PROVIDED

1. Right to information
You have the right at any time to request information about whether your personal data is stored, the purposes for which it is processed, what categories of personal data are processed, the recipients to whom the personal data is disclosed, the expected period for which it will be stored, whether there is an automated collection of solutions and data profiling.

2. Right of Withdrawal
If you have given consent to the use of your data, you can withdraw it at any time with effect in the future, without having to give reasons.
Your request to withdraw your consent can be sent to us at the following email:  orders@furisto.com

3. Right to rectification
If you find that your data stored by us is inaccurate, you can contact us to correct it.

4. Right to data deletion
You have the right to request that we delete your data without undue delay. We will delete them within a reasonable time, as soon as we are satisfied that there are no other grounds that require their processing/storage.
After the deletion of your data, it is no longer possible to provide information.

5. Right to restriction of processing
In certain cases - for example, when you dispute the accuracy of the data, when checking the grounds for their storage, etc., you have the right to request that we limit the processing of your personal data. During the restriction, we can only store the personal data, and other processing activities are only possible with your consent.

6. Right to data portability
Upon your request, we will transmit or transfer the data to you or another controller in a structured, widely used and machine-readable format. Direct transfer of the data only takes place if this is technically feasible.

7. Right to object
You can at any time and without stating reasons object to the processing of your personal data for the purposes of direct marketing, including profiling, as well as in cases where your data is processed on the basis of the performance of a task of public interest or the processing is necessary for the purposes of our legitimate interests.

8. Right not to be subject to a decision based solely on automated data processing, including profiling - "FURISTO" Ltd. - does not carry out such data processing.

9. Right of appeal
You have the right to file a complaint against the processing of your personal data before the competent supervisory authority (in Bulgaria – the Commission for the Protection of Personal Data or the court) if you believe that your rights to the protection of personal data have been violated.

The Commission for the Protection of Personal Data

Sofia - 1592, Prof. Blvd. Tsvetan Lazarov" No. 2
Center for information and contacts - tel. 02/91-53-518
Email: kzld@cpdp.bg
Website: www.cpdp.bg

Contacts of "FURISTO" Ltd. and details of the data protection officer:

"FURISTO" Ltd., town
Sofia, p.k. 1700, Studentski district
Blvd./Str. 3 "Josef Waldhard" str
Phone: 0893 44 92 98
Email: orders@furisto.com
Website: www.furisto.com

Please note that when you contact us via the above email, the data you provide (your email, possibly your name and your phone number) is processed by us in order to answer your questions and resolve the problem you have requested. We undertake to delete the data saved in this connection once their processing is no longer necessary or we will limit the processing if there are legal storage obligations.