The protection of the personal data and the protection of the personal and financial information of our clients are our top priority. That is why we process your information exclusively on the basis of the applicable legislation, in particular REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (better known as GDPR), the Personal Data Protection Act (PDPA) and the Electronic Commerce Act (ECA). www.raffy.bg is owned by Canella 2011 LTD, which provides the service – delivery of food to an address or on-site. We take delivery orders by phone and online. We shall use the web-based platform Fast Menu for orders placed online.
Canella 2011 LTD, is a company entered in the Commercial Register at the Registry Agency. The services we provide you with require the processing of your personal data by Canella 2011 LTD as CONTROLLER, subject to the terms and requirements for the measure for personal data protection under GDPR. Canella 2011 LTD shall be responsible for the processing of your personal data.
As our clients, you have to create a user profile containing the following personal data, namely:
As our customers, you can place a delivery order over the phone, in which case we shall collect the following personal data:
Canella 2011 LTD shall process your personal data on the basis of Article 6, paragraph 1, letter “a”, letter “b”, letter “c” and letter “f” of GDPR, namely:
А/ For the purpose of concluding or executing a contract for the delivery of the dishes offered by www.raffy.bg
B/ In fulfillment of its legal obligations, www.raffy.bg shall process your data for the following purposes:
C/ For the purposes of the legitimate interests of www.raffy.bg namely: www.raffy.bg именно:
D/ For marketing purposes:
www.raffy.bg does not provide services to people under the age of 18. A person under the age of 18 may use our services only with the assistance of an adult who acts as a representative of the minor/juvenile. In the event that Raffy Bar & Gelato - receives information that it has collected personal data from a person under the age of 18, they are to be erased immediately unless the law obliges www.raffy.bg -- to store such data. If you believe that we have mistakenly or unknowingly collected information from a person under the age of 18, please contact us on: www.raffy.bg www.raffy.bg получи информация, че е събрал лични данни от лице под 18-годишна възраст, то същите незабавно се изтриват, освен ако закон не задължава нас да съхраняваме такива данни. Моля, свържете се с нас, ако смятате, че погрешно или несъзнателно сме събрали информация от лице на възраст под 18 години, на следните контакти: www.raffy.bg
www.raffy.bg shall process only data provided by you – our clients. This means that you are responsible not to provide data of third parties in violation of their rights to personal data protection, because www.raffy.bg does not have access to these persons and has no practical ability to control whether the clients provide us with data of third parties with their knowledge and consent given in accordance with the legal requirements.
Therefore, every data subject bears full personal responsibility if he/she provides us with data of a third party without his/her knowledge or without obtaining his/her consent in compliance with the requirements of the applicable data protection legislation, including with regard to names, phone numbers and addresses of the recipients of the shipments provided to us by a client.
The data we collect from you shall be stored within the European Economic Area (EEA) in compliance with the national and European legislation, and in particular with REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (better known as GDPR).
www.raffy.bg shall not provide your personal data to third parties without legal or contractual grounds, and it shall not distribute data to third countries and international organisations outside the EU and EEA. www.raffy.bg shall use the FAST MENU web-based platform to fulfill tour orders. The transfer of your data to FAST MENU and/or to other processors shall be made solely for the purpose of providing the service/delivery of your choosing, for marketing campaigns aimed at enhancing the quality of the services provided to you and/or for the purpose of fulfilling legal obligations of www.raffy.bg namely:
After the fulfillment of a particular delivery and/or service or after have given your consent, your personal data shall be stored for the following periods:
The destruction of personal data shall be carried out in compliance with a written procedure for that, according to the internal documents of www.raffy.bg
www.raffy.bg has implemented a wide range of technical and organisational measures for protection of your personal data against loss or other forms of unlawful processing in accordance with Article 32 of GDPR. The personal data are accessible only to those persons who need access in order to perform their work in connection with the fulfillment of our deliveries and/or services. These persons have been trained and authorised accordingly. The FAST MENU web-based platform, via which www.raffy.bg processes your orders, encrypts the information.
You are entitled to request at any time information about your personal data we store, the basis, the purposes, the periods of processing and storage, whether they have been provided to a processor or they have been destroyed, etc.
You have the right to rectification of your personal data if they are incorrect, including the supplementation of incomplete personal data.
You have the right to erasure of all personal data processed by www.raffy.bg and its processors at any time unless the processing is necessary for at least one of the following purposes, namely:
You have the right to request from www.raffy.bg - to restrict the processing of your personal data under the following circumstances:
You have the right to object to the processing of your personal data on the basis of a legitimate interest of www.raffy.bg We shall no longer process your personal data unless demonstrated that there are compelling legitimate grounds for that, which override your interests and rights, or due to legal claims.
When the personal data breach is likely to result in a high risk to your rights and freedoms, www.raffy.bg shall communicate the personal data breach to the data subject without undue delay describing the nature of the personal data breach and indicating at least:
The above information shall not be sent in the event of a security breach if www.raffy.bg - has met any of the following conditions:
In the last hypothesis www.raffy.bg shall post a message on its website whereby the data subjects are informed in an equally effective manner.
We take the protection of personal data very seriously, and therefore, we have a customer service team that handles your requests in relation to the above rights. You may always contact them on: www.raffy.bg Please note that where your requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may:
We shall make reasonable efforts to uphold your request within 30 days of receiving your application. That period may be extended by two further months, where necessary, taking into account the complexity and number of the requests.
В случай, че желаете да оттеглите дадено от Вас съгласие за обработка на следните лични данни, а именно: ел. поща за изпращане на търговски и рекламни съобщения, информационни материали, анкети и др., както и бисквитки и Google Анализиране, Бисквитки за функционалност и ефективност, Задължителни бисквитки (еssential cookies), то можете да подадете писмено такова на посочения по-горе мейл.
If you consider that we have infringed your rights with regard to your personal data and that there is a risk of breaching the security of your personal data, you may report that on:
www.raffy.bg Exercising the above rights shall not deprive you of the right to lodge a complaint. You may lodge a complaint with the Bulgarian supervisory authority – the Commission for Personal Data Protection. You can find more information at: www.cpdp.bg.