Information on the administrator of the personal data
KRISTOR Ltd
BULSTAT Unified Identification Code (UIC): 203762196
Address:
1 A, Lom Street
1000 Sofia, Bulgaria
Phone: +359 876 999 850
E-mail: kristor@abv.bg
Web site: www.kristor.eu
Using the website of massage studio KRISTOR, you can voluntarily provide us your Personal Data.
Purpose and Scope
We appreciate your interest in our massage treatments and therapies and we believe you must feel confident about the protection of your personal data when you visit our website www.kristor.eu.
Please, read this privacy policy carefully. Here below we provide answers to questions related to what data and personal information we collect on our website and in the massage studio KRISTOR. By accepting our Terms and Conditions, you agree that we collect and process your personal data for the purposes and in the ways described in the Terms and Conditions. By visiting and using the Massage studio KRISTOR website, you declare that you have read, understood the relevant content and agree to this Privacy Policy.
The provision of your personal data is completely voluntary. If you do not wish to provide your personal data, you will not be able to book massage treatments and therapies offered on the website www.kristor.eu and in this case you could not take advantage of receiving information about promotions offered by a massage studio KRISTOR.
Massage studio KRISTOR does not disclose, sell, exchange or in any other way provide to third parties the information collected during online booking, except when required by applicable law and/or by a competent authority authorized by law, but always in compliance with the current legislation in the Republic of Bulgaria.
You have the right to request from us information, access to your personal data, as well as their deletion or restriction of the processing that concerns you. We want to make sure that your personal information is correct and up-to-date. You may also ask us to correct or remove any information you consider to be inaccurate.
As part of creating a user/client registration, we open a client account that is protected by the password you created. Within the client's account you get direct access to your data, including their editing, so you can see both your personal data and information about free hours and reservations made by you.
More information about customer registration can be found in our Registration&Policy.
Protection of personal data:
Your personal data is transmitted to us in encrypted form. We use the Secure Socket Layer (SSL) encryption system. On our website we maintain technical and organizational measures against access of unauthorized persons to your data, their modification or distribution. Access to your client account is possible only after setting your personal password. In this context, we want you to pay attention that you should not share your access data to third parties and after the end of your activity in the client account you should always close the window of your web browser, especially when sharing the computer with other users. Do not allow your browser to remember your password. In case you forgot it, use the "Password Recovery" option from our website. The new password will be sent to your previously registered email. KRISTOR Ltd in its capacity as owner and manager of the website www.kristor.eu is not responsible for misuse of passwords.
Term of processing and storage of personal data
The personal data of the registered individuals in www.kristor.eu will be stored until the registration is canceled. In order to cancel and delete the registration, the holder of personal data must send an explicit written notice of deregistration to kristor@abv.bg from the email with which he registered. When issuing an invoice from massage studio KRISTOR, your personal data, according to the generally binding legal regulations, as accounting documents, are archived in accordance with the term provided by law. Massage studio KRISTOR stores the personal data that it is necessary to keep under the applicable law for the relevant period.
Data subject rights under the General Data Protection Regulation (GDPR)
The right of access personal data and supplementary information
You have the right to request and receive from the massage studio KRISTOR confirmation whether personal data related to you are processed;
You have the right to access information relating to the collection, processing and storage of your personal data;
Massage studio KRISTOR provides you, upon request, a copy of the processed personal data related to you, in electronic or other appropriate form;
Providing access to the data is free of charge, but massage studio KRISTOR reserves the right to impose an administrative fee in case of recurrence or excessive requests.
The right to rectification
Data subjects can ask to erase or rectify inaccurate or incomplete data. The right to erasure (also known as right to be forgotten) personal data that are processed unlawfully or no longer need the data for the original purpose (no new lawful purpose), withdrawn consent, there are no other legal grounds to apply; The right to restrict processing. The processing is necessary in connection with legal rights in the presence of a legal dispute between massage studio KRISTOR and the individual until its resolution and/or for the establishment, exercise or protection of legal claims; The right to data portability if processed in an automated manner on the basis of consent or contract. For this purpose, the data is transmitted in a structured, widely used and machine-readable format. If technically feasible, the data transfer can be done directly from one administrator to another. The right of portability covers only data provided personally by the data subject, as well as personal data generated and collected by his activity; The right to object to processing in certain circumstances at any time and on grounds related to the specific situation of the individual, provided that there are no convincing legal grounds for processing that take precedence over the interests, rights and freedoms of the data subject or litigation; The right relating to automated decision making and profiling which has legal consequences for or significantly affects the data subject.
You can withdraw your consent to the processing of personal data at any time. If you withdraw your consent to the processing of personal data, your personal data may be deleted or replaced with anonymous data; however, this does not apply to the personal data that massage studio KRISTOR needs for the fulfillment of legal obligations (eg realization of an already placed order) or for the protection of one's own legitimate interests. The destruction of personal data will also occur in the event that the personal data is not necessary for the set purpose or the storage of your data is inadmissible for other reasons provided by law.
Data subjects may exercise their rights at the above address and telephone number for correspondence of massage studio KRISTOR after proper identification.
Data subjects may exercise their right of appeal to the Commission for Personal Data Protection, which is the supervisory authority in the field of personal data protection.
Your rights in the case of a personal data breach
In cases massage studio KRISTOR finds a violation of the security of your personal data, which may pose a high risk to your rights and freedoms, we will notify you of the violation, as well as of the measures that have been taken or are to be taken. Massage studio KRISTOR is not obliged to inform you:
where appropriate technical and organizational protection measures have been taken in respect of data affected by the security breach;
when measures are subsequently taken to ensure that the infringement does not pose a high risk to your rights;
which notification would require a disproportionate effort.
On what grounds do we process your personal data:
In connection with the adopted the General Data Protection Regulation (GDPR) (EU) 679/2016, which results in the grounds for personal data processing by massage studio KRISTOR, the legal obligations, the implementation of contractual relationships, the consent of the data subject are observed.
Information we collect:
All data that massage studio KRISTOR receives or collects from you are processed in accordance with applicable law and the principles introduced by the General Data Protection Regulation (GDPR) 679/2016 and for the purposes specified in this Policy. We collect and process the following categories of personal data:
Name and surname
Your email
Phone number
Date of birth
The information is collected after your voluntary consent. The provided data will be used by massage studio KRISTOR only for subsequent communication with you in accordance with the Terms and Conditions.
The website of massage studio KRISTOR uses cookies:
Massage studio KRISTOR website uses so-called cookies to make it’s offer relevant, interesting and user-friendly for you. For more details, see our Cookie Policy.
The purpose of collecting and processing your personal data:
Massage studio KRISTOR provides you with the opportunity to book online at a time convenient for you 7/24 of our services;
Massage studio KRISTOR will contact you;
You receive timely information about the promotions that massage studio KRISTOR provides to it’s clients;
Purposes permitted or not prohibited by law.
You expressly consent to the collection, use, processing and provision of your information and data as provided in this Privacy Policy, as well as their provision for storage on servers that are rented or owned by massage studio KRISTOR. Your data is stored for a period not longer than provided by law for the respective purpose.
Information about your rights:
The right to be informed:
At any time you can request and receive information about data that you identify with massage studio KRISTOR;
You have the right to access your personal data;
You have the right to request information from massage studio KRISTOR regarding the storage of your personal data.
The right of portability:
You have the right to request a copy of your personal data.
The right to correct or supplement your data:
You can correct or supplement your data at any time.
The right to erasure (also known as right to be forgotten):
You can request that your data be deleted and forgotten at any time.
The right to object to the processing of your personal data:
In case of an objection on your part, massage studio KRISTOR will stop processing your personal data.
The right to object and to cancel the newsletter/information about promotions of massage studio KRISTOR:
You can unsubscribe from the newsletter about our promotions at any time via the link provided in the newsletter or by sending a comment to confirm the cancellation of your registration.
Contact us:
If you have any questions or comments about this Privacy Policy, do not hesitate to contact us via the contacts listed above.
The right to lodge a complaint with a supervisory authority:
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority.
If you believe that we are processing your personal data incorrectly, you can contact us. You also have the right to file a complaint to the CPDP (Commission for Personal Data Protection).
Address of management: Sofia 1592
2, Blvd. Prof. Tsvetan Lazarov
Phone: 02 915 3518
Email: kzld@cpdp.bg
Website: www.cpdp.bg
Validity
The General Data Protection Regulation (EU) 679/2016 enters into force on 25.05.2018. Massage studio KRISTOR reserves the right to change and/or supplement this Policy at any time. The changes take effect immediately after their publication on the website, unless otherwise provided in the updated version. You should visit this review page periodically. The Privacy policy may be updated at any time without special notice to users of the website. Massage studio KRISTOR is not responsible if a user of the website has not read the latest version of this Policy.