Privacy

What personal data is processed and for what purpose?

As you browse our website we collect the following information:

• By clicking the consent button you give the administrators of this website the right to use data about you as part of the global traffic statistics of the site. Such data includes IP address, type and version of your browser, type and version of your operating system, etc.
• With your consent, this data will only be used and fed to website traffic analysis tools as well as direct marketing via Google or Facebook platforms.
• If you refuse consent, data about you will not be collected, sent to third parties and processed.
• For the products you have reviewed. We use this information to be able to show you a list of the products you have most recently viewed.

What cookies do we use?

By consenting to the use of cookies on the website of https://www.fitto-terra.com/, you automatically consent to receive advertisements related to the services and activities of Fitto Terra EOOD through the Google and Facebook network.

A cookie is a small java script file that will automatically be stored on your computer or other device when you load the Fitto Terra Ltd page through your browser.

Each cookie is unique to your browser and contains anonymous information. “Cookies usually contain the name of the website to which they belong, the length of time they are stored on the user’s computer and a unique number.

We use cookies to better serve our visitors. They allow the site to remember your actions and preferences for a certain period of time, so that you do not have to enter them every time you visit the site or move from one page to another.

What types of cookies we use:

• Functional cookies – these cookies are necessary as they allow you to navigate the website and use its various features or provide you with a service requested by you. For example, they allow the website to remember your preferences (e.g. your name, language or the region you are in) and provide you with a better and personalised service.
• Performance cookies – these cookies collect information about how you use the website, such as which pages you visit most often and whether you receive error messages from them. They do not collect information that identifies you. Information collected in this way is aggregated and anonymous. It is used solely for the purpose of improving the functionality of the website.
• Targeting and advertising cookies – these cookies are used to show you ads that best match your interests. They are designed to limit the repetition of ads you see and to measure the effectiveness of the relevant campaign.

How to manage cookies:

You have the option to agree to the use of cookies, which will allow you to use all the features of the site without restrictions.

If you do not wish to use cookies, you can disable their use from your browser settings. Usually these settings are found in the “options”, “tools” or “preferences” menu of the respective browser.

Your rights over your personal data

Right of access to personal data:
The data subject has the right to access the personal data relating to him or her and, if so, to obtain feedback from Fitto Terra within the period from the date of receipt of the request and under the terms of the Regulation and the DPA;

Right to rectification of personal data:
The data subject shall have the right to request the controller to rectify inaccurate personal data concerning him or her and to obtain feedback from Fitto Terra on the action taken within the period from receipt of the request – the application and under the terms of the Regulation and the GDPR;

Right to erasure (right of the data subject to be forgotten):
The data subject shall have the right to request from Fitto Terra the erasure of personal data concerning him or her, and the controller shall have the obligation to erase the same, where one of the following legal grounds applies:

• the personal data is not necessary for the purposes established by Fitto Terra for which it was collected or otherwise processed;
• the data subject’s consent to the processing has been duly withdrawn, and at the time of the withdrawal there is no other right to a basis for the processing of the data by Fitto Terra;
• the data subject objects to the processing pursuant to Article 21(1) of Regulation (EU) 2016/679 of 27 April 2016, in force since 25 May 2018 (the Regulation) and there are no legitimate grounds for the processing pursuant to Article 21(2) of the Regulation;
• the subject’s personal data have been unlawfully processed;
• the personal data must be erased in order to comply with a legal obligation under Union law or Bulgarian law to which the controller is subject;
  

  Fitto Terra shall inform the data subject of the action taken by him or her in relation to the exercise of this right within the period from receipt of the request – the application and under the terms of the Regulation and the PDPA;
  Fitto Terra informs data subjects that the right to be forgotten is not an absolute subjective right and that the controller may refuse the erasure request in one of the cases expressly provided for by Article 17(3) of the Regulation, as well as in cases where the controller can demonstrate that it is not in a position to identify the data subject who exercised that right;

Right to restriction of processing of personal data:
The data subject shall have the right to request from Fitto Terra the restriction of the processing of personal data where one of the following grounds applies:

• the accuracy of the personal data is contested by the data subject, for a period which allows Fitto Terra to verify the accuracy of the personal data;
• the processing is unlawful but the data subject does not wish the personal data to be erased and requests instead that Fitto Terra restrict its use;
• Fitto Terra no longer needs the personal data for the purposes of the processing, but the data subject fi requires it for the establishment, exercise or defence of legal claims;
• the data subject has objected to Fitto Terra to processing pursuant to Article 21(1) of the Regulation, pending verification whether the legitimate grounds of the controller override the interests of the data subject;
  

  Where processing is restricted by reason of the proper exercise of the right to restrict processing, such data shall be processed, with the exception of their storage, only with the consent of the data subject or for the establishment, exercise or defence of legal claims or the defence of the rights of another natural person on grounds of important Union or Member State public interest grounds.

  Where a data subject has requested the restriction of processing, Fitto Terra shall inform him or her before the restriction of processing is lifted.

  In all cases, Fitto Terra shall inform the data subject in relation to the exercised right to restriction of the action taken within a period of time from receipt of the request – the application and under the terms of the Regulation and the PDPA.

Right to withdraw consent of the data subject
The data subject shall have the right to withdraw the consent where the processing is based on Article 6(1)(a) or Article 9(2)(a) of the Regulation. The right to withdraw consent may be exercised at any time, without prejudice to the lawfulness of processing based on consent before it is withdrawn;

The right to data portability:
The data subject has the right to data portability, which means that he or she may request the controller to obtain the personal data processed by the latter in a structured or machine-readable format in order to transfer them to another controller, or Fitto Terra to carry out a direct transfer of the data to that other controller, if this is technically feasible.

Right to object:
Fitto Terra informs the data subjects that separately and independently of the other rights listed, they have the right, pursuant to Article 21 of the Regulation, at any time and on grounds relating to their particular situation, to object to processing of personal data concerning them which is based on Article 6(1)(e) of the Regulation, i.e. “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”; or letter f) i.e. “processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, including profiling based on those provisions.” Upon exercise of this right in the above cases, Fito Terra shall cease processing the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment or defence of legal claims.

Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for that type of marketing, which shall include profiling insofar as it relates to direct marketing. Where the data subject objects to the processing for direct marketing purposes, the processing of personal data for those purposes shall cease.

Right to information and assistance:
Fitto Terra shall provide the data subject with information concerning the action taken in relation to a request to exercise the subjects’ rights under Articles 15 to 22 of the Regulation, without undue delay and in any event within 30 days of receipt of the request, unless the PDPA provides for a longer period.

Right to lodge a complaint with a supervisory authority:
Without prejudice to the other rights to judicial protection, every data subject shall have the right, by lodging a complaint with the Commission for Personal Data Protection (CPDP) address. By lodging a complaint with the Data Protection Authority (the “Data Protection Authority”), by filing a complaint with the Inspector General for Personal Data Protection, at 1592 Sofia Blvd. “1592 Proff. 2 (www.cpdp.bg), to refer to a supervisory authority a breach of the Regulation and/or the PDPA by Fitto Terra or a data processor on its behalf. The complaint shall be lodged within the time limits provided for in the HIPAA.

Right to an effective judicial remedy:
Without prejudice to the right to lodge a complaint with the supervisory authority, any interested/affected data subject shall have the right to challenge/appeal actions/inactions of Fitto Terra or the processor on his/her behalf that affect him/her as unlawful before the relevant Administrative Court in the region where the controller/processor is based. The subject’s complaint under this procedure shall be inadmissible if there is a pending dispute before the CPD for the same infringement or the CPD has issued a decision which has been appealed before the competent Administrative Court.