Privacy policy
Hosse-kitchen.com respects your privacy and is committed to protecting your personal data. Our Privacy Policy will inform you about how we look after your personal data when you visit our site (the “Site”) and will inform you of your privacy rights and how the law protects you. Also use the Glossary to understand the meaning of some of the terms used in this privacy policy.
1. IMPORTANT INFORMATION AND WHO WE ARE
Purpose of this Privacy Policy
This Privacy Policy is intended to give you information about how hosse-kitchen.com collects and processes your personal data through your use of this Site, including any data you may provide through this Site when you register , browse or make a purchase through the Site, participate in our promotions or engage with us on our Site or through emails you may receive from us.
It is important that you read this Privacy Policy together with any other privacy notice or fair processing notice we may provide in specific cases where we collect or process personal data about you so that you are fully aware of how and why we use this data. This privacy policy supplements other notices and is not intended to replace them.
Personal data administrator
BIO EUROPE TRADE LTD (the company that owns the website hosse-kitchen.com) is a registered administrator of personal data and is responsible for them (collectively referred to as "hosse-kitchen.com", "we", "us" or "our" in this Privacy Policy).
If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us using the details below.
Contact data
Full name of the company: "BIO EUROPE TRADE" LTD, EIK: 202591858, city of Petrich, "Kukush" street #1 Email address: [email protected]
You have the right to submit a complaint at any time to the Commission for the Protection of Personal Data (CPDP), which is the supervisory authority of the Republic of Bulgaria for all data protection issues ( https://ec.europa.eu/consumers/odr/main/index ).
However, we would like to take the chance to deal with your concerns before you turn to CPLD, so please contact us first.
CHANGES TO THE PRIVACY POLICY AND OUR OBLIGATION TO NOTIFY YOU OF THE CHANGES
This version was last updated in July 2023. This policy may change and be updated periodically. Please check back regularly.
It is important that the personal data we hold about you is accurate and up-to-date. Please inform us if your personal data changes during your relationship with us.
Links with third parties
This site includes links to other third-party sites, plug-ins and applications. Clicking on these links or enabling these links may allow third parties to collect or share data about you. We do not control these third party sites and are not responsible for their privacy policies. When you leave our site, we encourage you to read the privacy notice of each website you visit.
2. DATA WE COLLECT ABOUT YOU
Personal data or personal information means any information about an individual from which that individual can be identified. It does not include de-identified data (anonymized data).
We may collect, use, store and transfer different types of personal data about you, which we have aggregated as follows:
- Identity data includes first name, last name, last name, user ID
- Contact details include shipping address, telephone number and email address for registration and PayPal email address
- Financial data includes bank account details such as IBAN
- Technical data includes internet protocol address (IP address), your login details, browser type and version, time zone setting and location, operating system and platform and other technologies of the devices you use to access this site
- Profile data includes your email address and password, purchases or orders made by you, your interests, preferences and feedback
- Marketing and communications data includes your desire or refusal to receive email notifications about important news, new offers and stores.
We also collect, use and share aggregate data, such as statistical or demographic data, for any purpose. Aggregated data may be derived from your personal data, but is not considered personal data under the law, as such data does not directly or indirectly reveal your identity. For example, we may aggregate your personally identifiable information to calculate the percentage of male users. However, if we combine or associate aggregated data with your personal data so that it directly or indirectly identifies you, we consider the combined data to be personal data that will be used in accordance with this Privacy Policy.
Except in limited circumstances which will be made clear to you, we do not collect special categories of personal data about you (this includes details of your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political views, trade union membership, information about your health and genetic and biometric data). Nor do we collect information about criminal convictions and crimes. Please note that we will not knowingly collect information from anyone under the age of 18. If you are under the age of 18, you should not use this website or provide us with personal data.
If you failed to provide personal data
Where we are required to collect personal data by law or under the terms of a contract we have with you and you cannot provide that data upon request, we may not be able to perform the contract we have or are trying to enter into with you. In this case, you will not be able to join hosse-kitchen.com.
3. HOW IS YOUR PERSONAL DATA COLLECTED?
We use a variety of methods to collect data from and about you, including through:
Direct interactions . You may provide us with your personal information, contact information, transactional or financial information by completing forms or by communicating with us by post, email, telephone or otherwise. This includes personal data that you provide when:
- You create a profile on our site
- You provide us with feedback
Automated technologies or interactions . As you interact with our site, we may automatically collect technical data about your equipment, actions and browsing patterns. We collect this personal data using cookies, server logs and other similar technologies. We may also receive technical data about you if you visit other sites that use our cookies. Please see cookie policy for more details.
Third parties.
Technical, transactional, identity and contact data from the following parties:
- Partner networks based both in the EU and outside;
In order to improve the service we provide and the functionality of our site, we may receive personal data about you from various third parties as set out below:
- Technical data from analytics providers such as Google based outside the EU
- Contact data and technical data when you join our site as a result of our marketing activities involving third parties.
4. HOW WE USE YOUR PERSONAL DATA
We will use your personal data in accordance with relevant laws. We will most often use your personal data in the following circumstances:
- Where we need to perform the contract we will enter into or have already entered into with you.
- Where this is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
PURPOSES FOR WHICH WE USE YOUR PERSONAL DATA
We have set out in table format below a description of all the ways in which we plan to use your personal data and the legal grounds on which we rely. We have also set out what our legitimate interests are where relevant.
What is a legitimate interest?
Legitimate interest means our business interest in conducting and managing our business to provide you with the best service and most secure experience on our Site. We ensure that we consider and balance any potential impact on you (positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are outweighed by the impact on you (unless we have your consent or we are otherwise required or permitted by law).
Contract performance means processing your data when this is necessary for the performance of a contract to which you are a party. If you do not provide personal data that we require for the performance of a contract with you, we cannot enter into a contract with you for the provision of our services.
| Activity/Purpose | Data type | Legal basis for processing, including a basis for legitimate interests |
| Provision of our service. This includes but is not limited to:
|
|
Performance of the Agreement with you |
| Responding to and processing any requests or queries you may raise with us, including:
|
|
Necessary for our legitimate interests to provide the most efficient service to our members and for evidentiary purposes in the event of a dispute. |
| Using fraud prevention measures to protect the business from fraudulent activity and the resulting consequences. |
|
Necessary for our legitimate interests in fraud prevention. |
| Managing our relationship with you, for example:
|
|
Necessary for our legitimate interests to update customer details and preferences |
| Promote the features of the Site, such as:
|
|
Necessary for our legal interests related to the promotion of the site and the imposition of our brand on the market in Bulgaria and the European Union. |
| Conducting marketing campaigns to attract new users. To achieve this, we use various channels for new users Campaigns to attract new users If you join our site as a result of a referral from a third party site, we may pay the referring party a commission. To do this, we share data with affiliate networks and tracking agencies to calculate and pay any commission due. Pay Per Click If you join our site as a result of clicking on our web page from a search engine such as Google or Bing, this will be tracked by a third party. Your data will be shared between us and a third party tracking company to calculate how many new users have joined the site and how much commission is due. Social Media Marketing We like to market the Site to new or existing members. To ensure that our marketing is relevant, we find ways to ensure that marketing promotions are targeted at the right people. To do this, we may share our data with major social media pages to ensure that our marketing reaches the target audience. |
|
Necessary for our legitimate interests to engage in marketing activities. |
| To administer and protect our business and this Site, such as:
|
|
Necessary for our legitimate interests in site security |
MARKETING
We strive to provide you with the ability to choose certain personal data, particularly in relation to marketing and advertising. Within your account, you can review and make certain decisions about the use of your personal data in connection with marketing emails.
PROMOTIONAL OFFERS FROM US
We may use your identity, contact, technical information, usage and profile data to assess what we think you may want or need, which is of interest to you. This is how we decide which products, services and offers may be relevant to you (we call this marketing). You will receive marketing communications from us if you have registered on our site and have not opted out of receiving email notifications.
THIRD PARTY MARKETING
We will never sell your personal data to any company. As stated above, we may share your contact details or identity details with certain third parties, e.g. sub-processors to facilitate the delivery of marketing emails to you and social media publishers to ensure that our marketing is targeted and relevant to hosse-kitchen.com members.
UNSUBSCRIBE FROM EMAIL NOTIFICATIONS
You can ask us to stop sending you marketing emails at any time by logging into your account on the Site and unchecking email notifications, or by following the opt-out links in any marketing email sent to you or sending an email and letting us know .
COOKIES
You can set your browser to refuse all or some cookies or to warn you when websites place or access your cookies. If you disable or refuse cookies, please note that some parts of this site will become unavailable or will not function properly. For more information about the cookies we use, please see our cookie policy
CHANGE OF PURPOSE
We will only use your personal data for the purposes for which we collected it, unless we reasonably believe that we need to use it for another reason and that reason is compatible with the original purpose. If you would like an explanation of how processing for the new purpose is compatible with the original purpose, please contact us at [email protected]. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.
Please note that we may process your personal data without your knowledge or consent in accordance with the above rules where required or permitted by law.
5. DISCLOSURE OF YOUR PERSONAL INFORMATION
We may need to share your personal data with the parties listed below for the purposes set out in the table in paragraph 4 above.
- External third parties as defined in the Glossary;
- Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Another option is to try to acquire or merge with other businesses. If our business changes, the new owners may use your personal data in the same way as set out in this privacy notice.
We require all third parties to respect the security of your personal data and treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and allow them to process your personal data only for certain purposes and in accordance with our instructions.
6. INTERNATIONAL DATA TRANSFERS
Some of our external third parties are located outside the European Economic Area (EEA), so processing their personal data will involve a transfer of data outside the EEA.
Whenever we transfer your personal data outside the EEA, we ensure that it is afforded a similar level of protection by ensuring that at least one of the following safeguards is in place:
- We will only transfer your personal data to countries deemed to provide an adequate level of personal data protection by the European Commission.
- When we use certain service providers, we may use specific contracts approved by the European Commission that give personal data the same protection as it has in Europe.
- When we use US-based providers, we may transfer data to them if they are part of a privacy protection that requires them to provide similar protection to personal data shared between Europe and the US.
7. DATA SECURITY
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized manner, altered or disclosed. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a confidentiality obligation.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach when we are legally required to do so.
8. PERIOD OF DATA STORAGE
How long will you keep my personal data?
We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying legal, accounting or reporting requirements.
To determine the appropriate personal data retention period, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and applicable legal requirements.
Details of the retention periods of various aspects of your personal data are available in our retention policy, which you can request from us by contacting us at [email protected]
In some cases, you can ask us to delete your data.
In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice from you.
9. YOUR LEGAL RIGHTS
In certain circumstances you have rights under the Data Protection Laws.
These rights are to:
You request access to your personal data (commonly referred to as a "data subject access request"). This gives you the opportunity to obtain a copy of the personal data we hold about you and to check whether we are lawfully processing it.
You want to correct the personal data we hold about you. This allows you to correct any incomplete or inaccurate data we hold about you, although we may need to check the accuracy of new data you provide to us.
Request to delete your personal data. This allows you to ask us to delete or remove your personal data when there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to the processing (see below), where we may have processed your information unlawfully or where we are required to delete your personal data to comply with local laws. Please note, however, that we may not always be able to comply with your deletion request for specific legal reasons, which will be communicated to you, if applicable, at the time of your request.
Subject of the processing of your personal data where we rely on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you object to the processing on that basis because you believe it affects your fundamental rights and freedoms. You also have the right to object when we process your personal data for direct marketing purposes. In some cases, we may show that we have compelling legitimate grounds to process your information that exceed your rights and freedoms.
Request restrictions on the processing of your personal data. This allows you to ask us to stop processing your personal data in the following scenarios: (a) if you want us to establish the accuracy of the data; b) where our use of the data is illegal, but you do not want us to delete it; c) when you need us to store the data, even if we no longer need it, because you need to establish, exercise or defend legal claims; or (d) you have objected to us using your data, but we need to check whether we have overriding legitimate grounds for you to use it.
You want to transfer your personal data to you or to a third party. We will provide you or a third party you have chosen with your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information that you have initially given your consent for us to use or where we have used the information to enter into a contract with you.
You withdraw consent at any time where we rely on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide you with certain products or services. We will advise you if this is the case when you withdraw your consent.
You can exercise the rights set out above by sending us a written request signed and dated by you to our email or postal address, indicating whether you want us to send you this information to a specific email address or via a correspondence service.
USUALLY NO FEE IS REQUIRED
You will not pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is manifestly unfounded, repetitive or excessive. Alternatively, we may refuse to fulfill your request in these circumstances.
WHAT WE MAY ASK OF YOU
We may need to ask you for specific information to help us verify your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure that ensures that personal data is not disclosed to any person who does not have the right to receive it. We may also contact you to request additional information in connection with your request to expedite a response.
ANSWER TIME
We try to respond to all legitimate requests within one month. Sometimes it can take us more than a month if your request is particularly complex or you have made several requests. In this case, we will inform you.
10. DICTIONARY
External third parties
- Service providers that provide IT and system administration services
- Various affiliate networks that track your purchases through the Site
- Regulatory authorities and other authorities based in Bulgaria that may require reporting of processing activities under certain circumstances
- Various payment providers available on the Site.
- Depending on your marketing preferences, we may engage email providers as an external service
- Social media
- Various tracking agencies through which you joined our Site as a result of a third-party referral
Affiliate Networks means a network that acts as an intermediary between our site that advertises products and services and the stores that sell those products and services.