PRIVACY POLICY AND PERSONAL DATA PROTECTION FOR PATIENTS OF BIOENERGY THERAPY LTD
Sliven, Republika Street, bl.26, entrance B, 2nd floor, UIC: 207675173,
contact phone: +359 876 466 456
Our goal is to establish good and lasting relationships with our users/clients, built on the basis of trust, following the principles of legality, honesty and transparency.
Our aim is to preserve and protect your personal data.
For this purpose, we have prepared a “Privacy Policy and Personal Data Protection”, through which to regulate the processing of personal data provided by users/clients of the website https://marinminchev.com
This Privacy Policy and Personal Data Protection is in compliance with the Personal Data Protection Act and the General Data Protection Regulation (EU) 2016/679 and regulates the rules of “BIOENERGY THERAPY” LTD regarding the collection, processing, use and storage of personal data.
This Policy aims for the “CONTROLLER” to:
• be in compliance with applicable personal data legislation and follow established best practices;
• protect the rights of our users;
• ensure transparency in the way personal data of individuals is stored, processed and protected;
• establish the necessary technical and organizational measures to protect personal data from unlawful processing, accidental or unlawful destruction, accidental loss, unlawful access, alteration or distribution, as well as from all other unlawful forms of personal data processing;
“BIOENERGY THERAPY” LTD, according to the PDPA, is a “CONTROLLER” of personal data and collects and processes certain information of individuals to achieve a specific purpose and in connection with the use of the services and products we provide.
This information relates to all individuals, users of the site, with whom the “CONTROLLER” interacts, namely users, clients, companies for advertising a specific brand and site visitors.
This privacy policy and personal data protection regulates the way of collecting, processing and storing personal data of registered users, in accordance with the legal requirements of Regulation 2016/679.
“BIOENERGY THERAPY” LTD, which manages the website https://marinminchev.com, declares that all personal data, referred to below for brevity as “data”, are considered strictly confidential and measures and mechanisms have been taken for their storage to ensure protection from unlawful processing or misuse. All applicable legal provisions are complied with during their collection and storage.
1. Scope
This Policy applies to the processing of personal data of users/clients and companies that are processed on electronic media, and the accounting registers are established in accordance with the Policy, Bulgarian legislation and Art. 30 of Regulation 679/2016.
II. Collection of personal data
“Personal data” is any information related to an identified natural person or a natural person who can be identified. The “CONTROLLER” collects personal data regarding the following categories of persons:
• users/clients
III. Purposes of data collection:
The “CONTROLLER” collects personal data in connection with the fulfillment of the following purposes:
• for the performance of activities related to the conclusion, amendment and termination of contractual relationships
• for user registration;
• for establishing contact with the contact person by phone, email or any other lawful means;
• for fulfilling commitments undertaken by the “CONTROLLER”
• for communication in connection with achieving the specified purpose;
• for maintaining accounting records in connection with the fulfillment of official and contractual obligations to which the “CONTROLLER” is a party;
• For sending personal data to institutions and administration in connection with the adopted reporting rules;
• to ensure correctness in the fulfillment of undertaken commitments and to improve our services and feedback
• service purchase
We process your personal data to ensure correctness in the fulfillment of the commitment we have undertaken and to improve our services.
By purchasing a service through the “Bioenergy Therapy” LTD website, the person declares that they voluntarily provide personal data in the form of email, two names and a contact phone number.
The personal data provided by you are necessary for the fulfillment of the contract that arises between us, as well as for the fulfillment of the undertaken commitment. The provision of the necessary personal data is processed and used on a legal basis for issuing an accounting document.
Depending on which of our services you use, we collect the following personal data:
We collect:
• Name and contact details – email address and/or phone
By registering on our site, you declare that you voluntarily provide your personal data and that you are familiar with the Privacy Policy and Personal Data Protection.
IV. Legal basis
Personal data is collected and used lawfully – legally, contractually or voluntarily, through a declaration by the data subject.
We follow the principles set out in the REGULATION: lawfulness, transparency and accountability.
Following the principles:
• personal data is processed lawfully, fairly and transparently;
• personal data is collected for specific, lawful and legitimate purposes and is not processed in a manner incompatible with those purposes;
• personal data is minimized to what is necessary to fulfill the purposes for which it is processed;
• personal data is stored with the “CONTROLLER” allowing identification of data subjects for a period no longer than necessary for the purposes for which the personal data is processed;
• personal data is processed in a manner that ensures an appropriate level of personal data security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.
1. Transparency
Transparency and conditions for exercising the rights of data providing persons:
The “CONTROLLER” provides information to persons in a concise, transparent, understandable and easily accessible form, in clear and simple language.
The “CONTROLLER” strives to ensure that persons are informed about the personal data being processed, the basis on which it is processed, the purposes for which it is processed and the rights they can exercise.
The “CONTROLLER” provides persons with free information about actions taken in connection with a request regarding their right to access, rectification, erasure, restriction of processing, portability, objection and automated decision-making, without undue delay within one month of receiving the Application.
If necessary, this period may be extended by another two months, taking into account the complexity and number of Applications.
Through this Policy, we inform you as data subjects about your rights and how you can exercise them:
Right of access for persons:
Every person has the right to obtain confirmation from the “CONTROLLER” whether personal data concerning them is being processed, and if so, to obtain access to the data and the following information:
• the purposes of processing;
• the relevant categories of personal data;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, including third countries or international organizations;
• where possible, the envisaged period for which the data will be stored, or if that is not possible, the criteria used to determine that period;
• the existence of the right to request rectification or erasure of personal data from the Controller
Right to rectification:
Every person whose data is processed by the “CONTROLLER” has the right to request that the “CONTROLLER” rectify without undue delay inaccurate personal data concerning them. Taking into account the purposes of processing, the person has the right to have incomplete personal data completed.
Right to erasure (right “to be forgotten”):
Every person whose data is processed by the “CONTROLLER” has the right to request that the “CONTROLLER” erase personal data concerning them without undue delay for a future period, when:
• the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• the person withdraws their consent on which the processing is based. The “CONTROLLER” erases the personal data for the future period, without the SLD request affecting the previous period when the storage of a specific file is affected by a specific term.
Right to restriction of processing:
Every person whose data is processed by the “CONTROLLER” has the right to request restriction of processing when one of the following applies:
• the accuracy of the personal data is contested by the person, for a period enabling the “CONTROLLER” to verify the accuracy of the personal data;
• the processing is unlawful, but the data subject does not want the personal data to be erased and instead requests restriction of their use;
When processing is restricted according to the above paragraph, such data is processed, except for their storage, only with the consent of the data subject or for the establishment, exercise and defense of legal claims or for the protection of the rights of another natural person, as well as for important reasons of public interest. When a data subject has requested restriction of processing, the “CONTROLLER” informs them before lifting the restriction on processing.
How to exercise your rights:
You can at any time request free information about the processing of your personal data and demand removal of discrepancies or correction, completion, deletion of personal data or erasure of personal data at email contact@marinminchev.com or at the address: 64B Gen. Stefan Toshev Street, Monastirski Livadi district, Sofia, Bulgaria.
You can withdraw your consent for processing personal data, in which case your personal data will be deleted if the legal term for which “Bioenergy Therapy” LTD is obliged to store them has expired.
You can exercise the above rights by sending a free-form application to the CONTROLLER at email contact@marinminchev.com
The destruction, deletion or erasure of personal data will occur immediately after fulfillment of the set purpose and/or expiration of the legal basis.
In case you wish to delete and erase your data, we will not use your electronic contacts unless you request to become our client or user.
If you have cookies enabled in your web browser, we process cookie records located on the website managed by the company to ensure better functioning of the https://marinminchev.com site and for company advertising purposes.
You can find more information in a separate section of this document.
We do not perform fully automated processing that would have legal consequences for you.
Measures and mechanisms for personal data protection. Storage period
Your personal data is transmitted to us in encrypted form, as we use the SSL (secure socket layer) encryption system.
We maintain technical and organizational measures against loss and destruction of your data, having taken all necessary measures against access by unauthorized persons to your data, their alteration or distribution.
Personal data is processed and stored for the time necessary to secure all rights and obligations arising from the service contract, according to law or until the conclusion of an arising dispute.
To ensure adequate protection of your rights and interests, we store your personal data in encrypted form.
We process your data while ensuring protection and security of our systems.
Provision of personal data to third parties
Your personal data may be provided to third parties or intermediary parties only when necessary within the framework of service contract fulfillment, based on legitimate interest or if you have previously given consent for this.
The parties to whom data may be provided are third parties involved in data processing for the purpose of company reporting, legal representatives and state authorities.
“BIOENERGY THERAPY” LTD may provide personal data to third parties when there is basis for this and in cases when this is required by law or data is requested by law enforcement authorities and police for the purpose of preventing and/or detecting crime.
Cookie Policy
If you have cookies enabled in your web browser, we process cookie records located on the website managed by the company to ensure better functioning of the site – https://marinminchev.com/
Our site uses so-called cookies to make our offer interesting and user-friendly for you. Cookies are small text files that are stored on your computer, smartphone or other device used by your web browser.
We use Cookies so that the shopping cart functions properly and you can complete your order as easily as possible; through Cookies your login data is remembered so you don’t have to enter it again and you receive advertising tracking information because we cannot offer you advertising for goods in which you have no interest.
Some cookies may collect information that is subsequently used by third parties and which, for example, directly supports our advertising activities (so-called “third-party cookies”). For example, information about products purchased from our site may be displayed by an advertising agency in the context of displaying and adapting internet advertising banners on the image of pages you have selected.
It is not possible for you to be identified from this data.
The cookies used on our site can be divided into two main types. Short-term – “session cookies” are deleted immediately after completing your visit to our site, and long-term, i.e., “persistent cookies” – remain stored on your device much longer or until you manually remove them (the time for cookie files to remain on your device depends on the cookies themselves and your browser settings).
Blocking cookies
The setting for using cookie files is part of your internet browser. Most browsers automatically accept cookie files by default. Cookie files can be blocked or restricted in your browser by types you select.
Information about browsers and how to configure cookie file preferences can be found at: Chrome; Firefox; Internet Explorer; Android; iPhone and iPad
Contact us
If you have any questions, comments and inquiries about our policy, do not hesitate to contact us at 64B Gen. Stefan Toshev Street, Monastirski Livadi district, Sofia, Bulgaria, or via email: contact@marinminchev.com
You have the right at any time to withdraw your consent, to request from the controller access to personal data, their modification, deletion, portability or possible restriction of their processing. For more information call: +359 876 466456 or send a request
The more you interact with us, the more we learn about you and this gives us the opportunity to offer you personalized services.
Right to object:
The data subject has the right, at any time and on grounds relating to their particular situation, to object to processing of personal data concerning them.
In this case, the “CONTROLLER” shall cease processing the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
The right to object is exercised at the following address: Sofia 1592, 2 “Prof. Tsvetan Lazarov” Blvd., to the Personal Data Protection Commission.
VII. Technical and organizational measures for data protection
THE ADMINISTRATOR has taken protective measures, both technical and physical and organizational, with the aim of protecting against illegal forms of personal data processing.
VIII. Transfer of personal data
Through the provisions of Art. 45-50 of REGULATION (EU) 2016/679, the free transfer/exchange of personal data with recipients in third countries and international organizations (those outside the EU and EEA) is restricted in the hypotheses defined in REGULATION (EU) 2016/679 as prohibited transfers.
Transfer of personal data that is processed or intended for processing by a third country or international organization is carried out only on condition that the provisions of Regulation 2016/679 are observed. The provisions are applied to ensure the necessary level of protection for natural persons is not put at risk. Transfer of personal data to a third country or international organization may take place if the Commission decides that this third country, territory or one or more specific sectors in this third country, or the international organization in question provide an adequate level of protection.
Such transfer does not require special authorization. When assessing the adequacy of the level of protection, the Commission takes into account in particular the following elements:
• the rule of law, respect for human rights and fundamental freedoms, relevant legislation
• the existence and effective functioning of one or more independent supervisory bodies in the third country in question or to which a given international organization is subject, responsible for ensuring and enforcing data protection rules
• the international commitments that the respective third country or international organization has undertaken, or other obligations arising from legally binding conventions or instruments, as well as from its participation in multilateral or regional systems, more specifically regarding the protection of personal data.
In BIOENERGOTHERAPY EOOD NO transfer of personal data from employer to another entity, company in countries outside the EU is carried out
All personal data BIOENERGOTHERAPY EOOD considers strictly confidential and all applicable legal provisions are observed for them, all necessary measures have been taken – physical, technical and organizational, striving to guarantee security in collecting, processing, storing, archiving and transferring data to third parties. The purposes and grounds for their collection and processing, storage periods and mechanisms used are regulated in accordance with the requirements of the Regulation and Bulgarian legislation. Violations. Notification of violations
A data breach occurs when there is a security breach leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of data. In case of a personal data security breach, THE ADMINISTRATOR immediately takes action according to an adopted Procedure for violations and notification of violations
1. Destruction
Documents containing personal data are stored by “THE ADMINISTRATOR” for the legally established periods. After the expiration of their storage period, the information carriers (paper or technical) that are not subject to transfer to the National Archival Fund are destroyed according to the adopted Procedure for destruction of documents P04.
The privacy and protection policy for personal data protection comes into force from 06.03.2025, BIOENERGOTHERAPY EOOD reserves the right to change and supplement it.