Practical Dermatology EOOD is the controller of the personal data provided by you through the website www.neoval.info, including through its mobile version and the Neoval profiles in social media such as Facebook, Instagram, Pinterest, YouTube or through other communication channels.
I. Data on the Controller
Practical Dermatology EOOD, Unified identification code 103958190, with headquarters and managing address at 29 Kraishte str., fl.4, ap.7, Ivan Vazov residential area Sofia 1408, manager Argir Vasilev Argirov, is the controller of your personal data pursuant to the applicable legislation.
II. Data categories processed by Practical Dermatology EOOD:
• If you are a user who has made an inquiry or another statement through the website www.neoval.info by filling in the contact form, we will receive and process your identification data and contact data (name, telephone number and e-mail address).
• If you are a registered social media (Facebook, Instagram, Pinterest,YouTube and others) user who has made an inquiry, comment or another statement to us, through our profiles or fan pages in the indicated social media, we will receive and process your identification data and contact data (username, name, telephone number and e-mail address).
III. Purposes of Processing
We process your identification data and contact data for the purpsoes of elaborating and sending replies to questions, complaints, inquiries and other statements sent to us by filling in the contact form on the website www.neoval.info as well as through our social media profiles.
Practical Dermatology EOOD shall not request the provision of sensitive data by its users. If a user provides data on his or her health status or on the one of his or her children under the age of 14 years, we can, with his or her express consent, use this data for the purposes of elaborating and sending a reply of the posed question to the indicated contact data. If the express consent to process such data is not provided but nevertheless this data is disclosed to us, the user who has provided the data shall bear the risk and shall be held liable for this. We shall not process this data and it shall be erased upon detecting its receipt.
IV. Legal Grounds of Processing
The grounds on which we process your data consist in article 6 (1), (a) of GDPR or we process you personal data in accordance with your consent provided by filling out and sending a statement through the contact form on the website www.neoval.info or by sending us a message or by publishing a comment in our social media profiles (Facebook, Instagram, Pinterest, YouTube etc.).
The processing of your personal data by us is separate and different from the processing of your data by the administrators of the relevant social media for the purposes and pursuant to the legal grounds defined by them.
V. Obligation to Provide Data
You are not obliged to provide us your personal data. Filling out the contact form and sending us statements through that form is entirely voluntary. If you do not wish to provide us your personal data, you will not be able to make your inquery to us but all other functionalities of the website www.neoval.info shall still be accessible.
VI. Period for Storing the Data
The personal data provided by you and processed for the purposes of elaborating and sending a reply to queries and other statements to us shall be stored for a period of 12 months after a reply is sent by us.
VII. Data Collected by Cookies
Through the cookies we collect information on the device or devices which you use or which you have used to access www.neoval.info (for instance brand and model of your device, operative system, browser or IP address) as well as in what way you use the website functionalities but we do not collect data that identify you personally. The collected information can be used for the purposes of internal statistics and system administration of the website. We do not collect and we do not access information concerning the websites visited by you aside from www.neoval.info.
This information is collected and processed pursuant to your consent for using the cookies. You can find more information on the types of cookies used by us in Information on Cookies. You can choose to delete our cookies using the options of your browser. This can affect the interactions with our website or with another.
VIII. Automated Decision-Making
Based on your data no decisions are taken using automated means including profiling. Profiling means any form of automated processing of personal data consisting in using personal data to evaluate certain personal aspects related to the natural person and more specifically to analyse or forecast aspects concerning the execution of the professional obligations of that natural person, his or her economic status, health, personal preferences, interests, reliability, conduct, location or movement.
IX. Data Recipients
Recipients of your data can be:
• State institutions or officials within their authority and/or when this is stipulated by a legal norm;
• Controllers – contractual partners of the controller processing the data on our behalf who have provided sufficient guarantees for the application of adequate technical and organization measures in order for the processing to be conducted according to the applicable legislation;
• Suppliers of postal and currier services when addressing correspondence.
We can also disclose your information to third persons in order to protect our legal interests or to exercise our rights as stipulated by the law as well as to protect other users, systems and servers.
X. Your Rights as Data Subjects
Right of access to the data subject personal data which is processed by the controller
You shall have the right to obtain from us a confirmation as to whether we process your personal data and, where this is the case, access to the data and the following information – the purposes of processing, the relavant categories of personal data, recipients and categories of recipients to which the personal data will be or have been disclosed, in particular recipients in third countries or international organizations, the period for which your data is being stored and if this period is impossible to determine by default – the way to define the criteria on the period, the existence of the right to request from us rectification or erasure of personal data or restriction of processing as well as to object to such processing, your right to lodge a complaint to a supervisory authority as well as to obtain information on the source from which your personal data has been received in case you are not that source and if the data comes from a publicly accessible source. You shall have the right to receive information if decisions are taken based on your data with automated means, including profiling and in this case – to obtain meaningful information about the applied logic as well as the significance and envisaged consequences of such processing.
The access shall be provided free of charge, after obtaining a request from the data subject sent to us. If needed, before providing access we can request additional information with a view to your dully identification. You shall have the right to obtain a copy of your personal data which we process.
Right of rectification
You shall have the right to request from us that we rectify your data which is processed or stored by us, in case there are any inaccuracies. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right of erasure (“right to be forgotten”)
You shall have the right to obtain the erasure of your personal data without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; the processing has been based solely on your consent and where there is no other legal ground for it and you have withdrawn that consent; in case you have objected to the processing and there are no overriding legal grounds; the personal data have been unlawfully processed; the personal data have to be erased for compliance with a legal obligation of the controller; the personal data have been collected in relation to the offer of information society services to children and the consent has been given by the person bearing the parental responsibility for the child.
We can refuse to erase your personal data only in case there is a legal ground for this.
Right to restriction of processing
You shall have the right to obtain from us restriction of processing where one of the following applies: you have contested the accuracy of the personal data. In this case you can request restriction of processing for a period enabling us to verify the accuracy of the personal data; the processing is unlawful but you oppose the erasure of the personal data; the controller no longer needs the personal data for the purposes of the processing, but they are requested by you for the establishment, exercise or defence of legal claims; you have objected to processing pending the verification whether the legitimate grounds of the controller override your interests as a data subject.
In such cases, should you make a request for restriction of processing and provided that any of the above applies, your personal data will only be stored and not processed in another way.
Right to data portability
You shall have the right to receive the personal data concerning you and which you have provided, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where at the given moment are present the following conditions at the same time: the processing is based on consent or on a contract obligation and the processing is carried out by automated means.
You shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
Right to object to processing
You shall have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data when processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party including profiling based on those provisions.
In such cases the controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject or for the establishment, exercise or defence of legal claims.
You shall have the right to object to processing of your personal data for the purposes of direct marketing and profiling related to direct marketing. Should you make such objection, the personal data processing for such purposes shall be terminated.
Right not be subject of automated individual decision-making, including profiling.
You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right shall not apply if the decision is necessary for entering into, or performance of, a contract between you and a data controller; is authorised by applicable law which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or is based on the your explicit consent.
Right to withdraw the consent
If we process your personal data solely based on your consent, you shall have the right to withdraw that consent at any given moment. Withdrawing the consent is free of charge and in order to do this you should inform us accordingly in writing by e-mail or mail.
Right to lodge a complaint to a supervisory body
If you think that the processing of your personal data infringes the applicable legislation you shall have the right to file a complaint to the Commission for Personal Data Protection (CPDP) which is the supervisory body for personal data protection in the Republic of Bulgaria.
You shall have the right to a legal defence pursuant to the established procedures.
You can find the contant details of the CPDP on https://www.cpdp.bg/
Should you wish to exercise any of the rights described herein, you can contact us in the following ways:
• By e-mail: email@example.com;
• By mail: 29 Kraishte str., fl.4, ap.7, Ivan Vazov residential area Sofia 1408;
• For additional information: telephone +359 29 96 30 70.
Exercising your rights described above shall be free of charge. We will be entitled to charge a reasonable fee solely if the queries are obviously unreasonable or excessive, including due to their repetition, based on the administrative costs for providing the information or the communication or undertaking the requested action or to refusal to undertake any action on the query.