Cookie Policy

PRIVACY POLICY


The protection of personal data and the protection of the personal and financial information of our customers is a priority for "CANNAPOPOLIS" EOOD. Therefore, we process your information exclusively on the basis of the applicable legislation, namely: REGULATION (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (better known as GDPR), the Personal Data Protection Act (PDPA) , the Electronic Document and Electronic Authentication Services Act (EAD) and the Electronic Commerce Act (EAC).

I. WHO PROCESSES AND IS RESPONSIBLE FOR YOUR PERSONAL DATA "CANNAPOPOLIS" EOOD, (ADMINISTRATOR) is a commercial company registered in the Commercial Register at the Registration Agency, with headquarters and management address in the city of Plovdiv, 65 Pere Toshev St., tel. +359/882343404; e-mail: cannapopolis@gmail.com Website: http://cannapopolis.bg "CANNAPOPOLIS" EOOD is a personal data controller within the meaning of Article 4, Paragraph 7 of Regulation 2016/679. You can contact us at the above address, phones and e-mail.

II. TYPES OF DATA WE PROCESS "CANNAPOPOLIS" EOOD processes the following types of personal data: - two names, - telephone number, - address for delivery of a shipment, in cases where we send one; - Email; - residence /city/village/; - year of birth; - EGN when we issue you an invoice; - bank account, in cases where we carry out bank transactions. 2

III. GROUNDS FOR PROCESSING "CANNAPOPOLIS" EOOD processes your personal data on the basis of Art. 28, paragraph 3 of Regulation 2016/679 in connection with Art. 6, paragraph 1, b. "a", b. "b", b. "c" and b. "e" of the GDPR, namely: - Art. 6, paragraph 1, b. "a" from GDPR - You have given your consent to the processing of your personal data for the purposes of direct marketing - advertising, commercial messages, promotions, offers, surveys, etc. The data processed on this basis are: two names, e-mail, telephone, year of birth, place of residence, user profile. When you voluntarily participate in a survey or game organized by the ADMINISTRATOR on his FACEBOOK page or on his website http://cannapopolis.bg, you agree to the latter processing your personal data: username and/or user profile. In the event that you win a prize, you must provide the information described above in order for it to be sent. The latter will be accepted and processed by the ADMINISTRATOR, only after your consent. If you do not provide such, "CANNAPOPOLIS" EOOD cannot process the above data and send the corresponding prize. When you voluntarily participate in a survey or game organized by the ADMINISTRATOR at its public events, you provide the above-described data voluntarily in paper form, only with the simultaneous expression of consent to this, in the same paper form. In the event that you have not declared your consent, CANNAPOPOLIS EOOD will immediately destroy the paper medium containing your personal data. The latter will not be processed and you will not participate in our raffles, games and/or be invited to the next public event organized by the ADMINISTRATOR. - Art. 6, paragraph 1, b. "b" of the GDPR - the processing is necessary for the performance of a contract to which you are a party, or for taking steps at your request prior to the conclusion of a contract. The data processed on this basis are: two names, telephone number, delivery address, e-mail, year of birth, user profile. - Art. 6, paragraph 1, b. "c" of the GDPR - the processing is necessary to comply with a legal obligation that applies to the ADMINISTRATOR, such as obligations for accounting of commercial activity, etc. The data processed on this basis are: two names, social security number, telephone number, delivery address. 3 - Art. 6, paragraph 1, b. "e" of the GDPR - the processing is necessary for the purposes of the legitimate interests of the ADMINISTRATOR, except when such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, in particular when the data subject is kid. The data processed on this basis are: two names, contact phone number, year of birth, e-mail and user profile.

IV. PURPOSES OF THE PROCESSING A/ For the purpose of concluding or executing a contract for the supply of goods offered by the ADMINISTRATOR: - Identification of a customer when ordering; - Identification of the recipient of the shipment/goods; - Order delivery; - Updating your personal data; - Service and response to customer complaints/inquiries/applications under Art. 15-22 of Regulation 2016/679/appeals; - Payment of amounts for accepted orders; - Processing by data processors - assignment, reporting, acceptance, payment. B/ In fulfillment of its legal obligations, "CANNAPOPOLIS" EOOD processes your data for the following purposes: - Issuing invoices, preparing a detailed report, when this is provided for in the client's individual contract; - To carry out financial and accounting processing of the contract with the client and for tax and insurance control by the relevant competent authorities. C/ For the purposes of the legitimate interests of "CANNAPOPOLIS" EOOD, namely: - tracking the performance of each delivery; - provision of all issues related to complaints; D/ For marketing purposes: - analysis of consumer demand and behavior; - sending messages about promotions, offers, surveys, advertising games; - sending advertising and/or informational messages.

V. MINORS AND MINOR PERSONS "CANNAPOPOLIS" EOOD does not provide services to persons under the age of 18. 4 In the event that "CANNAPOPOLIS" EOOD receives information that it has collected personal data from a person under the age of 18, the same is immediately deleted, unless the law obliges "CANNAPOPOLIS" EOOD to store such data. Please contact us if you believe that we have mistakenly or unknowingly collected information from a person under the age of 18, at the following contacts: tel. +359/882343404; e-mail: office@cannapopolis.bg
VI. DATA COLLECTION METHOD "CANNAPOPOLIS" EOOD only processes data that has been voluntarily provided by our customers and users. This means that each customer is responsible not to provide data to third parties in violation of their rights to the protection of personal data, since "CANNAPOPOLIS" EOOD does not have access to these persons and has no practical possibility to control whether our customers provide data to third parties with their knowledge and consent given as required by law. Therefore, any data subject bears full personal responsibility if they provide us with data to a third party without their knowledge or consent in compliance with the requirements of applicable data protection legislation, including in relation to names, telephones and addresses to the recipients of the shipments provided to us by a customer. Each data subject bears full personal responsibility if they intentionally provide us with false data, incl. year of birth or indicated that he was over 18 years of age when in fact

VII. WHERE WE STORE YOUR DATA The data we collect from you is stored within the European Economic Area ("EEA") in compliance with national and European legislation and in particular REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 year (better known as GDPR).

VIII. WHO HAS ACCESS TO YOUR DATA "CANNAPOPOLIS" EOOD does not provide your personal data to third parties without a legal or contractual basis, and does not distribute data to third countries and international organizations outside the EU and EEA borders. The transmission of your data to other processors of personal data is carried out only for the purpose of providing the service/delivery you have chosen, for marketing campaigns aimed at increasing the quality of the goods provided to you, in order to fulfill FAST MENU's legal obligations, namely: - Transport/courier companies with a view to fulfilling orders; - Companies for technical analysis of the service; - The banks serving the payments made by you; - Persons performing consulting services in various fields - legal, accounting, auditing, incl. forced debt collection, etc.; - State administrative bodies - National Revenue Agency, etc., when applicable in cases provided for by law.

IX. PERIOD OF PROCESSING AND STORAGE. DATA DESTRUCTION After the execution of a specific delivery or after giving your consent, your personal data is stored for the following periods: - 10 years for accounting documents, starting from the beginning of the year following the year in which the accounting document was issued - two names , EGN, address. - 5 years from the execution of a specific delivery, with a view to tracking the execution of each delivery and securing all issues related to complaints and legal claims - two names, phone number, delivery address, e-mail and user profile. - 1 year from receipt of consent - for e-mail for sending commercial and advertising messages, informational materials, surveys, etc. The destruction of personal data is carried out in compliance with a prescribed procedure for this, according to the internal documents of "CANNAPOPOLIS" EOOD. SECURITY MEASURES "CANNAPOPOLIS" EOOD has taken a wide range of technical and organizational measures to protect your personal data against loss or other forms of illegal processing in accordance with Art. 32 of Regulation 2016/679. Personal data is accessible only to those persons who need access to perform their work in connection with the provision of our services. These persons are trained and empowered accordingly.

XI. WHAT ARE YOUR RIGHTS 1. Right of access: At any time, you have the right to request information about your personal data that we store, the basis, purposes, terms of processing and storage, whether they have been provided to a personal data processor, whether they have been destroyed, etc. .n. 2. Right to rectification: You have the right to request rectification of your personal data if it is incorrect, including completion of incomplete personal data. 3. Right to deletion /right "to be forgotten"/: You have the right to delete all personal data processed by "CANNAPOPOLIS" EOOD at any time, except when the processing is necessary for at least one of the following purposes, namely: a) to exercise the right to freedom of expression and the right to information; b) to comply with a legal obligation that requires processing provided for in the law of the Union or the law of the Republic of Bulgaria; c) for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes pursuant to Article 89(1) of Regulation 2016/679, insofar as the right to erasure is likely to make impossible or seriously impede the achievement of the objectives of this processing or d) for the establishment, exercise or defense of legal claims. 4. Right to limitation You have the right to request CANNAPOPOLIS EOOD to limit the processing of your personal data in the following circumstances: a) the accuracy of the personal data is disputed by the data subject, for a period that allows the administrator to verify the accuracy of the personal data data; b) the processing is unlawful, but the data subject does not wish the personal data to be deleted, but instead requests the restriction of its use; c) the administrator no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defense of legal claims; d) the data subject has objected to the processing according to Art. 21, paragraph 1 of Regulation 2016/679, pending verification of whether the legitimate grounds of the controller prevail over the interests of the data subject. 5. Right to portability: When "CANNAPOPOLIS" EOOD processes your personal data in an automated manner on the basis of your consent or on the basis of a contract, you have the right to receive a copy of your data in a structured, widely used and machine-readable format, transferred to you or to another party. This only includes the personal data you have provided to us. 6. Right to object to the processing based on legitimate interest: You have the right to object to the processing of your personal data based on the legitimate interest of "CANNAPOPOLIS" EOOD. We will not continue to process your personal data unless it is demonstrated that there are compelling legal grounds for doing so that override your interests and rights or due to legal claims.

XII.EXERCISE YOUR RIGHTS We take the protection of personal data very seriously, which is why we have a customer service team that handles your requests in relation to the above rights. You can always contact them at the following contacts: phone +359/882343404; e-mail: cannapopolis@gmail.com You should send your requests in writing in free text to the ADMINISTRATOR or use our application form under Art. 15-22 of Regulation 2016/679. Please note that where your requests are manifestly unfounded or excessive, in particular because of their repetition, we may: 1. impose a fee, taking into account the administrative costs of providing the information or communication or taking the requested action, or 2. refuse to act on the request. We will use reasonable efforts to honor your request within 30 days of receiving your request. If necessary, this period can be extended by another two months, taking into account the complexity and number of requests.

XIII. WITHDRAWAL OF CONSENT At any time, you have the right to withdraw your consent to the processing of your personal data only for these purposes and this type of personal data necessary to achieve the specific purposes that we process on the basis of Art. 6, paragraph 1, b. "a" of the GDPR, detailed in section III and IV of this policy, as well as in the Cookie Policy. In the event that you wish to withdraw your consent to processing, you can submit it in writing to the above-mentioned email or follow the active link 8 where you can fill out our consent withdrawal form or see Cookie Policy.

XIV. REPORTS OF IRREGULARITIES AND COMPLAINTS If you believe that we have violated your rights in relation to your personal data, as well as that there is a risk of breaching the security of your personal data, you can submit a report to the following contacts: tel. +359/882343404 ; e-mail: cannapopolis@gmail.com Exercising the above rights does not deprive you of the right to appeal. You can submit one to the supervisory authority of Bulgaria - the Commission for the Protection of Personal Data. More information can be found at: www.cpdp.bg