Privacy and Personal Data

Privacy and Personal Data

Privacy Notice

1. Terminology Used
   In this document, the terms are used according to Bulgarian legislation.

   • Personal Data: Any information related to an identified or identifiable natural person.
   • Processing: Any operation or set of operations performed on personal data or sets of personal data, whether by automated means or otherwise, such as collecting, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, dissemination, or otherwise making available, arranging or combining, restricting, erasing, or destroying.
   • Controller: A natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of processing personal data.
   • Electronic Document: Any content stored in electronic form, particularly text, sound, visual, or audiovisual recordings.
   • Sensitive Personal Data: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a person, health data, or data concerning a person’s sex life and sexual orientation.
   • Employees: Workers or employees in an employment relationship, as well as lawyers and other persons acting on behalf of and under the direct control of the company, regardless of the specific nature of the relationship.

2. About Us
   We are Diverso Hair Ltd., located at: Alexander Malinov Blvd. №23, 1st floor, office 59A, Sofia, Bulgaria. You can reach us at: +359 883561832 or email: contacts@diversohair.com.

3. Purpose of This Document
   We understand that it is important for you to know how we collect, store, share, and use information about you that qualifies as personal data. This Privacy Notice aims to inform you about the data processing practices we follow and your rights under the applicable European and national legislation. Please review this document carefully. This notice may be updated periodically, and we will notify you accordingly.

4. Scope
   This notice applies to all information containing personal data that is stored or otherwise processed. Information may be held in various forms, including:

   • Paper-based records
   • Electronic records

5. Types of Personal Data We Process
   The types of personal data we process depend on the services we provide to you and may include, but are not limited to:

   • Names, ID card details, address, phone number, and email.

   In some cases, providing your personal data is required for us to enter into a contract with you or to comply with applicable laws. If you do not provide this information, we may not be able to fulfill our contractual obligations.

6. Legal Basis and Purposes of Processing Your Personal Data
   We process your personal data for various purposes, which are detailed in sections 3.2 and 3.3. The legal basis for processing your data is stated in section 3.1.

   • Legal Basis for Processing:
     We only process your personal data where we have a valid legal basis for doing so. The processing of special categories of personal data (including data related to health, sex life, racial or ethnic origin, or religious beliefs) is always based on a separate legal ground.
     In most cases, the processing of your personal data will be based on one of the following grounds:

     • Legal obligation
     • Performance of a contract

   • Purposes of Processing:
     The company may process your personal data for the following purposes:

     • Performance of a contract, payroll processing, maintenance of employment records, recruitment.
     • Establishing, exercising, and defending legal claims.

7. Sources of Personal Data
   The personal data we process is primarily provided by you when entering into or performing a contract with us. Occasionally, we may receive your personal data from third parties such as clients, other business partners, government authorities, and local authorities.

8. Storage of Personal Data
   Our general approach is to retain personal data only for as long as necessary to fulfill the purpose for which it was collected, including considering applicable legal retention periods. For more information on our data retention practices, please request additional details.

9. Disclosure and Transfer of Personal Data
   For the purposes listed above, we may share your personal data with colleagues within the company or third-party service providers (e.g., IT service providers, accounting services).

10. Security of Your Personal Data
    We implement reasonable physical, technical, and administrative security measures to protect your personal data from loss, misuse, alteration, destruction, or damage, in accordance with national legal requirements.

11. Your Rights
    Regarding our processing of your personal data, you have the following rights:

• Right to Information and Access: You can request details about the personal data we hold about you.
• Right to Rectification, Erasure, or Restriction: You can request the correction, deletion, or restriction of your data.
• Right to Object: You can object to processing based on legitimate interests unless the controller demonstrates compelling legitimate grounds.
• Right to Data Portability: You have the right to receive your data in a structured format.
• Right to Withdraw Consent: You can withdraw consent for data processing at any time.
• Right to Lodge a Complaint: You can file a complaint with the data protection authority.

12. Contact Us
    If you have any questions or concerns regarding your personal data or wish to exercise any of your rights, please contact us at:

• Address: Alexander Malinov Blvd. №23, 1st floor, office 59A, Sofia, Bulgaria
• Phone: +359 883561832
• Email: contacts@diversohair.com