This Privacy Notice explains how Vitosha Wine Ltd® [a company registered in Bulgaria, European Union (BULSTAT No. 175343505. Vitosha Wine Ltd is a wholly owned subsidiary of Umesh Prasad Holding Ltd., a company registered in Bulgaria, European Union (BULSTAT No. 204354333)] processes your personal data and your rights in relation to the personal data we hold. Our policy takes into account the Data Protection Act 1998 (the Act) and, with effect from 25 May 2018, the General Data Protection Regulation (GDPR).
Data protection legislation gives you a number of rights to protect you against an organisation mishandling your personal information.
2.1 Information which you provide to us
This information is generally provided by you when you
1. Access our website
2. fill in forms on our website or our apps, for example to order products or services, to sign up to a mailing list, or to register to use our website, make an application for employment, add to comments section, complete surveys or testimonials and/or request any information from us.
3. communicate with us by post, telephone, fax, email, social media etc
The information you give may include biographical information (your name, title, date of birth, age and gender, academic institution, affiliation, job title, subject specialism), contact information (email address, mailing address, telephone number) and financial or credit card details.
2.2 Information we collect about you
a) When your visit our website to our apps
b) We may also collect and process certain personal information about you which you have not provided to us yourself.
On very limited occasions we may collect data that you have made available in the public domain, such as your contact details, research interests, courses that you teach and the institution that you are based at. When we do this, we carefully consider whether do so is in your interest and any impact on your rights, and we will inform you as soon as practically possible about our use of your data and your right to object to this and to unsubscribe from any communications from us.
2.3 Information from other sources
Any third-party sources from where your information could be made available to us. Currently,
(a) Data analysis partner who analyse your use of our websites and apps
(b) Our e-commerce partners for payment
We use information held about you in the following ways:
1. To deliver our products and services to you
We may use your personal information to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us (as is necessary for the performance of those contracts); notify you about changes to our service (as is necessary for the performance of a contract to which you are a party and/or as is necessary for our legitimate interests); allow you to access restricted areas of our websites, when you choose to do so (which may rely on your consent for the processing of your personal information which is necessary for giving you access to those restricted areas);To improve the effectiveness of our products, services and marketing communications – we may use your personal information (in each case as is necessary for our legitimate interests or exceptionally where you have given your consent) to:
2. For our use
(a) administer our websites
(b) improve our websites to ensure that content is presented in the most effective manner for you and for your computer or device;
(c) keep our websites safe and secure;
(d) measure or understand the effectiveness of advertising we deliver to you and others, and to deliver relevant advertising to you;
(e) provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about, provided that you have not told us that you do not wish to receive this information (as is necessary for our legitimate interests);
(f) make suggestions and recommendations to you about goods or services that we believe may interest you, based on your previous transactions, behaviour, subject interests and other information that we may hold about you and your institution or organization. third party service providers such as shipping companies and our website and app platform providers who assist us in delivering our products to you;
(f) our bank to whom payment details are provided in order to process a payment;
(g) our data storage providers and those who provide our Customer Relationship Management (CRM) platforms; and
If you would like to update your details, including details of how you prefer to be contacted for marketing purposes, you can do this by:
(a) Clicking on ‘Unsubscribe’ link on an email communication
(a) Setting your preferences in the ‘Preference’ link on an email communication
In limited circumstances, disclose personal data to third parties, or allow personal data to be stored or handled, in countries outside the European Economic Area. In these circumstances, your personal data will only be transferred on one of the following bases:
where the transfer is subject to one or more of the "appropriate safeguards" for international transfers prescribed by applicable law (e.g. standard data protection clauses adopted by the European Commission under Article 46(2)(c) GDPR). If you wish to obtain a copy of the standard clauses we use, please contact us under an approved certification mechanism such as Privacy Shield (Article 42 GDPR)
a European Commission decision provides that the country or territory to which the transfer is made ensures an adequate level of protection (Article 45 GDPR)
there exists another situation where the transfer is permitted under applicable law (for example, where we have your explicit consent)
We retain your personal information for as long as required to provide our products to you or is necessary for our legal purposes or our legitimate interests. Products provided by us for ten years after the product has been provided, unless our relationship with you continues for a longer period; information gained from the cookies we use on our website and apps for 30 days for marketing purposes until you inform us that you no longer wish to hear from us (for example, through clicking ‘unsubscribe’ on an email communication). If you express this preference we may retain your contact details on a suppression list so that you no longer receive communications from us.
8.1 Under the Data protection Act you have the following rights
a) to obtain access to, and copies of, the personal information that we hold about you;
b) to require that we cease processing your personal information if the processing is causing you damage or distress; and
c) to require us not to send you marketing communications.
8.2 With effect from 25 May 2018 after GDPR, you have the following additional rights
a) To request that we erase your personal data;
b) To request that we restrict our data processing activities in relation to your personal data;
c) To receive from us the personal data we hold about you, which you have provided to us, in a reasonable format specified by you, including for the purpose of transmitting that personal data to another data controller; and
d) To require us to correct the personal data we hold about you if it is incorrect.
Please note that the above rights are not absolute, and requests may be refused where exceptions apply.
If you have any comments, questions or concerns about anything you have read on this page or you are concerned how your personal information has been handled by Vitosha Wine Ltd®, you can contact us at info@MyVitosha.com
If you are an EU Citizen and are not satisfied with how we are processing your personal data, you can refer us to the Information Commissioner. You can find out more about your rights under data protection legislation from the Information Commissioner's Office website available at: https://www.cpdp.bg/en
If we make changes to this policy we will detail them on this page. If it is appropriate we may provide you with details by email; we suggest that you regularly visit this page to see any changes or updates to this policy.
This policy was last updated in Oct 2018.