PRIVACY POLICY

This Privacy Policy (PP) aims to explain what information we collect about you, why and how we do it, as well as your rights under the Personal Data Protection Act (PDPA) and the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – GDPR, hereinafter referred to in this policy as “GDPR”).

This Privacy Policy is current as of 09.07.2020.

“RIVERSIDE WINE” Ltd. reserves the right to change and/or supplement this Privacy Policy at any time, with changes taking effect immediately after publication at: www.manastirawinery.com (the “Site”).

Definitions

“Personal Data” means any information related to an identified natural person or a natural person who can be identified through it—directly or indirectly—by name, unique number, address, or other location data, online identifier, or through one or more specific factors related to physical, physiological, genetic, mental, economic, cultural, or social identity.

“Administrator” means an entity that alone or jointly with others determines the purposes and means of processing personal data. In this case, the Administrator is “RIVERSIDE WINE” Ltd., UIC 202002258, registered office and address: Pazardzhik 4400, Tsaritsa Yoanna St. No. 6E.

“Data Processor” means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Administrator.

“Processing” means any operation or set of operations performed with personal data or sets of personal data using automated or other means, such as collection, recording, structuring, storage, modification, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, restriction, erasure, or destruction.

“Supervisory Authority” means an independent public authority in an EU member state responsible for monitoring compliance with data protection regulations. In Bulgaria, this is the Commission for Personal Data Protection.

Purpose of the Policy

This Privacy Policy aims to ensure that the Administrator:

• Complies with applicable data protection laws and follows best practices;
• Protects users, employees, customers, and partners;
• Ensures transparency about how personal data is stored and processed;
• Provides protection against data breach risks.

How We Collect Your Information

We collect information about you in several ways:

1. Through Forms You Submit
   • When you fill out and submit forms (requests, orders, complaints, notifications, etc.) related to the services on the Site, you voluntarily share personal data and consent to its processing under Article 6, Paragraph 1, Letter “a” of the GDPR.
2. Through Observations
   • We may collect information by monitoring your behavior on the Site using standard Internet tracking methods such as IP address logging, analyzing HTTP GET/POST requests, browser settings, and language preferences. By visiting our Site, you consent to this data collection.
3. From Third Parties
   • Sometimes, we receive data from third parties such as social media profiles (e.g., Facebook). These data are only collected if you have explicitly consented to them being shared with us.
4. Cookies
   • The Site uses cookies to store settings and identifiers necessary for service provision. Some cookies are essential for the Site’s functionality, while others enhance usability. More information is available in the Site’s Cookie Policy.

What Information We Collect

We only collect personal data with your explicit consent through the Site’s tools and functionalities, based on Article 6, Paragraph 1, Letter “a” of the GDPR. We do not collect personal data without a legal basis.

• Through Forms: Full name, phone number, email, shipping address, and payment details required for order fulfillment. If you refuse to provide this data, we cannot process your order.
• Through Observations: IP address, browser type, mobile device identifier, browsing behavior, search history, and interaction with advertisements. Refusal to provide this data may limit access to certain functionalities of the Site.
• From Third Parties: Basic profile information (name, email, birth date), contacts, and social media interactions.

Purpose of Processing

We process collected information for the following purposes:

• Site Functionality: Ensuring smooth operation and security.
• Contract Fulfillment: Processing and delivering orders.
• Data Storage and Access: Retaining information necessary for service provision.
• Legal Compliance: Providing data to competent authorities when required by law.

Who Has Access to Your Information?

We may disclose your personal data to third parties, including:

• Hosting Providers: Companies providing virtual server services.
• Analytics & Marketing Providers: Google, Facebook, and other GDPR-compliant partners.
• Service Providers: Accountants, auditors, legal advisors, advertising agencies, data administration service providers.
• Regulatory Authorities: When required by law.

Data Retention

We store your personal data only for as long as necessary to fulfill the purpose for which it was collected. Extended retention may occur if required by law.

Your Rights Regarding Personal Data

Under GDPR, you have the right to:

• Withdraw your consent for data processing at any time.
• Request correction or completion of inaccurate data.
• Access your personal data.
• Restrict the processing of your data.
• Object to the processing of your data.
• Request data portability.
• Request deletion of unlawfully processed data.
• Request the Administrator to inform third parties about data corrections, deletions, or processing restrictions.
• File a complaint with the Commission for Personal Data Protection if you believe your rights have been violated.

How to Manage Your Personal Data

You can obtain more information about your personal data processing by sending a request to “RIVERSIDE WINE” Ltd. at: Pazardzhik, Tsaritsa Yoanna St. No. 6E, or via email: office@manastirawinery.com.

This Privacy Policy is published on the Site and may be updated at any time. The latest version always applies.