Privacy Policy
on the website www.alegriabg.com/en
At Alegria Wedding Agency, we respect your privacy, value your trust and work tirelessly to earn it every day.
In a world where data is an invaluable asset, your privacy is not just an obligation to us, it is our commitment.
We understand the importance of keeping your personal information safe and this policy describes how we collect, use and protect it.
This policy (together with our Terms and Conditions of Use available on our website and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
Please read this privacy policy carefully to understand our practices regarding your personal data and how we will process it. By visiting www.alegriabg.com , you accept and agree to the practices described in this policy.
- Information about us
The website www.alegriabg.com, is owned and operated by Alegria Perfecta Ltd.
Alegria Wedding Agency ("Alegria Perfecta" Ltd.) is a wedding planner. In its activities, the agency processes information, including that constituting personal data.
Please read the end of this Privacy Policy as it includes important information about your personal data and other information about your rights.
By accessing and using the website and the services on the website, you acknowledge that you have read, understood and agree to be bound by the terms of this Privacy Policy.
- Definitions
For the purposes of this Policy, the terms have the following meanings:
When this Privacy Policy uses the terms "We", "Our" and "Alegria" , we mean Alegria Perfecta Ltd.
Persons who use the Website and our services are referred to in this Policy as "You", "Your" and "User".
In this Privacy Policy, the term "Website" and/or "www.alegriabg.com" means a distinct location on the World Wide Web, accessible via a Uniform Resource Locator (URL) using HTTP, HTTP5 or another standardized protocol and containing files, plugins, sound images, images and other materials and resources with the electronic address https://alegriabg.com/ .
By "Personal Data" we mean information that can be linked to or that relates to an individual and/or can be used to identify the individual.
- Subject
This Policy is a legally binding agreement between you and Alegria. By accepting it, you declare that you are aware of and agree to our policy regarding your personal data that we collect and process, the measures we take to protect it, and your rights in this regard.
The Policy is applicable to personal data collected from visitors to the Website.
The restrictions and requirements in this Policy regarding the collection, use, disclosure, transfer, storage/destruction of personal data do not apply to automatically collected information and to any other information that does not constitute personal data.
Alegria processes your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and the Personal Data Protection Act, as well as applicable European and Bulgarian legislation.
If you have any questions regarding your personal data, please do not hesitate to contact us using one of the contact methods listed at the end of this document.
- Acceptance of this policy
You acknowledge that you have read this Policy and agree to all of its terms and conditions when you consent to it in the ways set out in this document. By accessing and using the website and services and submitting your personal data, you agree to be bound by this Policy. If you do not agree to be bound by the terms of this Policy, you may not access or use our Website and Services.
- Automatically collected data
When you open the Website, the computer, mobile device and/or browser you use to access the Website automatically records the information your browser sends - your device's IP address, browser type and version, language preferences or the web page you visited before you accessed the Website and Services, the pages of the Website you visit, the time spent on those pages, the information you search for on the Website, the times and dates of access, and other statistical information. This data is used to identify instances of abuse and website usage and traffic, but is not otherwise collected in a way that can identify a specific individual.
To collect real-time information about how you use our website, we may use third-party web analytics solutions, such as Google Analytics, which is a web analytics service provided by Google, Inc. that uses cookies.
More information on how we use cookies and similar tracking technologies in our Cookie Policy.
- Privacy of children
We do not knowingly collect or publish any personal data about children through the website. If you have reason to believe that a child has provided us with personal information through the website, please contact us to request that we delete that child's personal information.
- Personal Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the data controller is Alegria Perfecta Ltd, unless otherwise specified in this Privacy Policy.
- Personal data we collect
You may access and use the website without disclosing to us any information that could identify you as a specific individual. If you do want to use some of the features of the website, you may be asked to provide certain personal information (for example, your name and email address).
Some of the information we collect is directly through the website. However, we may also collect personal information about you from other sources, such as public databases and our joint marketing partners and others.
You can choose not to provide us with your personal information, but then you may not be able to take advantage of some of the features of the website. Users who are unsure what information is required may contact us.
8.1 Data collected via the website
When you fill in your details on the contact form on the Website or when you contact us with an enquiry on the contact details provided on the Website we receive and store the information that you knowingly provide to us, this information includes the following:
- Your names - your choice of three names or first name last name
- Contact details - email address and telephone number
- Information containing personal data - if you provide information in an attachment or message that contains additional personal data about you.
The data we collect through the contact form on the Website is only used to contact you and to provide you with information about our services. This information is confidential. We do not use it for any other purpose and do not share it with any third parties.
8.2 Data we collect to perform our services:
When concluding a contract with you, you can provide us with:
- Your data - first, second and family names, your personal identification number, your address, your email address and any other information you choose to provide and/or that allows us to identify you and fulfil our obligations to you.
- Sensitive personal information (such as ethnicity, religious beliefs, etc.)
- Information about other persons (details of your family members, friends and guests at the wedding, details of service providers (photographers, cameramen, etc.) you have chosen, etc.)
- How we use and process your personal data
We act as a data controller or processor within the meaning of the GDPR when processing personal information, unless we have entered into a data processing agreement with you, in which case you will be the data controller and we will be the processor.
Our role may also differ depending on the specific situation. We act as a data controller when we ask you to provide us with your personal information that is necessary for us to provide our services and to contact you. In such cases, we are the data controller as we determine the purposes and means of processing personal information and comply with the obligations of data controllers set out in the GDPR. In other circumstances, we may be the data processor, as the situation may require.
In order to make our website and services available to you or to comply with a legal obligation, we may need to collect and use certain personal information. If you do not provide the information we request, we may not be able to provide the services you request.
- Purposes of processing
Any information we collect from you may be used for the following purposes:
- Signing, execution, amendment of contracts with customers - You provide data necessary for the conclusion and performance of our contract with you;
- To fulfil our contractual obligations - Without you providing us with details of you and/or your guests, suppliers etc. we cannot fulfil our contract with you;
- To contact you - if you use the contact form on the Website or send us an enquiry via our email, the information you provide, including your contact details, is used to process the enquiry and/or provide further information and is stored by us for future use.
- Improving the services we offer;
- Response to inquiries, including previous inquiries and requests and their status
- Management of the website and its functionalities, including statistical analysis of the total number of visits to the website, fulfilled requests and contracts, accepted inquiries, etc.
- Improving the user experience on the website;
- Feedback from users;
- Post customer reviews;
- Providing targeted advertising
- Defending against, identifying or dealing with misconduct
- Compliance with applicable legal requirements
- Provision of information to third parties - We may be required to provide personal data to third parties (i) to comply with legal requirements and/or to fulfil legal obligations to public authorities and commissions if required to do so by law, in litigation, in legal proceedings and/or at the request of public and governmental authorities and/or (ii) to provide information necessary to protect a legal interest in administrative and judicial proceedings
- Marketing purposes - You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to a third party for such purposes. You can exercise your right to prevent such processing by not ticking certain boxes on the forms we use to collect your data or by contacting us at wedding@alegriabg.com .
- Grounds for processing.
The processing of your personal information depends on how you interact with our website and services and whether one of the following conditions applies, namely:
- the subject's consent to the processing of personal data for one or more specified purposes;
- where the processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract;
- the processing is necessary to comply with a legal obligation to which the administrator is subject;
- the processing is necessary to protect the vital interests of the data subject or of another person;
- the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the administrator;
- the processing is necessary for the purposes of the legitimate interests of the administrator or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child;
- other grounds specified by law;
- Disclosure of personal data to third parties
Depending on the type of services or if necessary to perform any service you have requested, we may share your personal information with our trusted partners, service providers, etc. We will not share any personal information with third parties and will not share any information with unrelated third parties.
For cases where we share information about you, we require these third parties to adequately protect the security of your personal data that they process on our behalf in accordance with the requirements of European and Bulgarian law, and we check that these third parties provide a level of data protection according to the legal requirements for this.
Your data is also considered confidential for our partners.
Subcontractors and service providers to whom we disclose data are not authorized to use or disclose your information except as necessary to perform services on our behalf or to comply with legal requirements.
We may also disclose any personal information we collect, use or receive if required or permitted to do so by law, and where we believe disclosure is necessary to protect our rights or the safety of others, in cases of fraud investigation or in response to a request by a competent authority.
If you link to other websites or social networks through the use of the website, we are not responsible for the protection of your privacy when using those websites. In such cases, you should read the privacy policies posted on the relevant websites in detail.
- Consent to data processing
13.1 Giving consent via the website
We only process your personal data if you have voluntarily consented to this.
You give your consent by a clear affirmative act, which expresses a freely given, specific, informed and unambiguous statement of consent on your part to the processing of personal data relating to you.
When you use the contact form on the Website, you consent to us processing your personal data when you complete the following steps together:
- fill in your details in the contact form in the "Contacts" section,
- after the text "Consent" tick the box "I confirm that I have read the Terms and Conditions and agree to the Privacy Policy of this website" and
- press the "Send" button
By completing these steps, you freely, specifically, informedly and unambiguously consent to us holding and processing your personal data.
13.2 Consent to the performance of a contract/service
You consent to us processing your personal data by signing a contract that we enter into with you, which contract incorporates a written statement of your consent.
- Withdrawal of consent.
You have the right to withdraw your consent, which you have previously given, at any time by sending a written request to us at the email or mailing address specified in this Policy. The withdrawal will not affect the lawfulness of the processing of the data prior to the withdrawal. Once we receive it, we will cease using and processing your personal data. We will respond to your request within the statutory time limit of two months of receiving it. The time limit may be extended by a further month where the complexity or number of requests requires it.
- Time limit for use of data
We will retain and use your personal information for no longer than is necessary for the purposes for which the personal data is processed in accordance with the principle introducing "storage limitation". We retain data only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy legal, accounting or reporting requirements, to comply with our and our affiliates' obligations, to resolve disputes, and otherwise, unless a longer retention period is required or permitted by law.
We store personal data in a form that permits identification of the data subject for a period of.
In determining the appropriate retention period, we take into account the following criteria: the type of personal data, the purposes for which we process it and the specific legal requirements for the retention of certain categories of data in order to comply with our obligations and to protect our legal rights in the event of a claim.
After the retention period, the Personal Data will be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be exercised after the expiry of the retention period.
Personal data is stored as follows:
- Data provided via the website - data of persons who have filled in the contact form is stored for a maximum period of 2 /two/ years, unless legislation provides for a longer period.
- Contract data - We store the personal data of our customers for the duration of the contract and 5 / five / years after its execution / termination or until the expiration of the statute of limitations for liability or after the final settlement of all obligations under the contract and/or after the expiration of the statutory data retention obligations set by the applicable law.
If we no longer need to store it, we will delete or destroy your personal data securely and without undue delay.
- Your rights
You have certain data protection rights and we aim to take reasonable steps to allow you to correct, amend, delete or limit the use of your personal information. If you would like to be informed what personal information we hold about you and if you would like it removed from our records, please contact us. You have the following data protection rights in certain circumstances:
- Right to withdraw your consent -You have the right to withdraw the consent you have given for the processing of your personal data at any time;
- Right of access to personal data - to learn whether your personal information is being processed by us, to obtain disclosure of certain aspects of the processing and to obtain a copy of the information that is being processed;
- Right to rectification or completion - to check the accuracy of your information and request that it is updated or corrected. You also have the right to ask us to complete personal information that you believe is incomplete;
- Right to erasure ("right to be forgotten") - you have the right to ask the controller to erase the personal data relating to you without undue delay, and we have the obligation to erase it when: the personal information is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw your consent to processing; you object to processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data has been processed in accordance with the rules of applicable data protection law.
- Right to restrict processing - to restrict the processing of your personal information where the accuracy of that information is disputed by you and we need to verify it; the processing is unlawful but you object to the erasure of your personal data and instead request a restriction on its use; we no longer need your personal information for processing purposes but you require it to establish, exercise or defend your legal claims; you have objected to the processing pending verification of whether our lawful
- Right to data portability - You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format and you have the right to transfer that data to another controller without hindrance from the controller to whom the personal data is processed (1) on the basis of consent or contract and (2) the processing is carried out by automated means. If technically feasible, the transfer of the data may take place directly from one controller to another, where technically feasible.
- Right to object - You have the right, at any time and on grounds relating to your particular situation, to object to the processing of personal data concerning you.
If your personal information is processed for direct marketing purposes, you may object to this processing at any time without providing any justification.
- Right of the data subject not to be subject to a fully automated decision involving profiling - The data subject has the right not to be subject to a decision based solely on automated processing, involving profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
- Right to lodge a complaint with a supervisory authority - you have the right to lodge a complaint with the Commission for the Protection of Personal Data if you believe that the processing of personal data concerning you violates the provisions of the General Data Protection Regulation.
- All other rights under the Data Protection Act and the General Data Protection Regulation.
- How to exercise your rights
Any requests to exercise your rights may be directed to us through the contact means set out at the end of this document.
Please note that we may ask you to confirm your identity before responding to such requests. Your request must provide sufficient information to enable us to verify that you are the person you claim to be or that you are an authorised representative of such person.
You must include enough details to allow us to properly understand and respond to your request. We cannot respond to your request or provide you with personal information unless we first verify your identity or authority to make such a request and confirm that the personal information relates to you.
You can lodge a complaint with the supervisory authority, the Data Protection Commission, if you believe your rights have been violated.
Contact details for the Commission for Personal Data Protection:
Address: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov” 2,
Tel: 02/91-53-519
Fax: 02/91-53-525
E-mail: kzld@cpdp.bg
Website: www.cpdp.bg
- Security of your data
We make reasonable efforts and implement measures to ensure the confidentiality and protection of your personal information.
Alegria's team and partners are obliged to protect the confidentiality of your personal data, as well as to comply with the applicable organizational and technical measures for its protection.
In the event that we become aware that the security of the Website and Services has been compromised or that users' personal information has been disclosed to unrelated third parties as a result of external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigating and reporting, and notifying and cooperating with law enforcement authorities. In such cases, we will notify affected individuals if we believe there is a reasonable risk of harm to the User as a result of the breach or if notification is otherwise required by law. When we do, we will post a notice on the Website and/or send you an email.
- Amendments and additions to this Policy
We reserve the right to change this Policy or its terms and conditions relating to the Website and the Services at any time in our sole discretion. When we do, we will change the current date at the bottom of this page. We may also notify you in other ways at our discretion, such as through the contact information you have provided.
The updated version of this Policy will be effective immediately upon posting of the revised Policy on the Website, unless otherwise specified. Your continued use of the Website and Services after the effective date of the revisions (or any similar action taken at that time) will mean that you have consented to those revisions. However, we will not use your personal information without your consent in a manner materially different from that stated at the time the data was collected.
- Contact us
If you have any questions, concerns or complaints about this Policy, the information we hold about you, or if you wish to exercise your rights, we encourage you to contact us using the details below:
"Alegria Perfecta" Ltd,
Address Sofia 1700, Lozenets district, str. "Danail Krapchev", bl. 21, apt. 8
Tel: + 359 (0) 89 509 96 10
E-mail: wedding@alegriabg.com
Data Protection Officer: Bilyana Natskova Tsaneva
This Privacy Policy was last updated on 15.05.2024.