Protection of personal data
Mandatory information on the rights of persons on personal data protection
We at Mon Caprice Beauty Center have a long-term commitment to respect the privacy of every consumer and customer we interact with. It is therefore very important for us to be transparent about how we manage your personal data.
Information about the competent supervisory authority for the protection of personal data
Name Personal data protection commission
Headquarters and address of management, Sofia 1592, “Prof. Tsvetan Lazarov” No. 2
Address for correspondence, Sofia 1592, “Prof. Tsvetan Lazarov” No. 2
Phone 02 915 3 518
Website www.cpdp.bg
Mon Caprice beauty center (hereinafter referred to as “Administrator”) carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in connection with the processing of personal data and regarding the free movement of such data. This information is intended to inform you about all aspects of the processing of your personal data by the Company and the rights you have in relation to this processing.
Basis for collecting, processing and storing your personal data
The administrator collects and processes your personal data in connection with the use of Facebook chatbot on the basis of Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), and more specifically on the following grounds:
• Expressly obtained consent from you;
• Compliance with a legal obligation that applies to the Administrator;
• For the purposes of the legitimate interests of the Administrator or a third party;
Purposes and principles in the collection, processing and storage of your personal data
We collect and process the personal data you provide to us for the purposes of operating moncaprice.com, including for the following purposes:
• improving the presentation of publications on the platform;
• statistical purposes for improving the bulletins;
• protection of information security.
We observe the following principles when processing your personal data:
• legality, good faith and transparency;
• limitation of processing purposes;
• relevance to the purposes of the processing and minimization of the collected data;
• accuracy and timeliness of the data;
• limitation of storage in order to achieve the goals;
• integrity and confidentiality of processing and ensuring an appropriate level of personal data security.
What types of personal data does our company collect, process and store
The company performs the following operations with the personal data provided by you as users of the chatbot platform for the following purposes:
Registration and participation in an event
For participation in events organized by the Company, we collect personal data from the persons who wish to participate and attend, to establish their identity and identify them in the list of participants in the event. If you wish, we can send you information about future events that would be of interest to you. Registration for participation in the event is carried out on site at the Company’s office or by e-mail before its start, according to the conditions for its holding.
Conclusion of the impact assessment: Given the small volume of natural persons whose data is processed, and given the limited volume of personal data that is collected, the Personal Data Protection Officer considers that conducting an impact assessment is not necessary for the current operation .
Organizing games and sending prizes – For users who have won prizes by participating in any of our games, raffles, contests and others, we collect and process the data you provide in order to send you the won prize. The prize can be sent by us or our partner, as well as by a courier company. If you wish, we can keep the data you provided for the delivery of the prize in the future. The provision of data for sending the prize takes place after we send you a notification that you have won, requesting the necessary information.
Conclusion of the impact assessment: Given the small volume of individuals whose data is processed and given the limited volume of personal data that is collected, the Personal Data Protection Officer considers that conducting an impact assessment is not necessary for the current operation.
The administrator processes the following categories of personal data and information for the following purposes and on the following grounds:
• Data: Your individualizing data (e-mail, social network profile (Facebook), Nickname/Username, etc.)
• Purpose for which the data is collected:
Establishing a connection with the user and sending information to him.
• Basis for processing your personal data: – You have provided express consent for processing
