We are Carino Natural EOOD, с with the UIC 205916942, with headquarters in Sofia, Zip code 1700, region Vitosha zh.k. Vitosha, Str. Dimitar Yablanski 15., Entr. A, fl. 3, apt. 22.

We are seriously committed to the security of your personal data and rights, with all customers and users of www.carinonatural.com available, according to the General Regulation on Personal Data Protection (EU) 2016/679 and our national Data Protection Act. The customers of our e-shop provide their personal data, which Carino Natural EOOD processes in its capacity as a personal data administrator, with all the ensuing obligations.

All users of our e-commerce page www.carinonatural.com, who wish to register, provide their chosen e-mail address, combined with the following categories of personal data:

• Name and surname
• Phone number
• Shipping address
• Invoice address
• E-mail address
• Bank account, in case you choose to pay by bank transfer

The subjects of personal data directly provide us with their personal data. We do not receive personal data from third parties, do not buy and would never "sell" your personal data to third parties. The processing of personal data by Carino Natural EOOD is always legally, in good faith and in a transparent manner - You have the right to know our legitimate processing purposes.

Beyond registration, we may also obtain your personal data in the following cases:

• At the order of our products without registration (order as a guest)
• When visiting our e-shop - through the use of cookies (according to the detailed information below)
• When sending an inquiry/feedback through our contact form on our e-shop or by sending a message to us through other mentioned contacts

Carino Natural EOOD processes your personal data (through storage, access and review) for the purposes of:

• Concluding a contract for distance selling
• Administration of your orders
• Delivery of your orders
• Administration and maintenance of the account created by you (registration)
• Customizing site usage
• Statistical goals and marketing (informing you about new / suitable products for you), based on our legitimate interest

In case you have not given your explicit consent in advance to receive marketing messages, you can object to this type of processing of your personal data at any time and we will comply with your request. Please note that the use of your personal data for marketing communications is lawful, within the meaning of the Regulation on the protection of personal data, as it is based on our legitimate interest. However, in the event of an objection on your part, we will immediately suspend the sending of advertising messages to you.

Internally, within the organization of Carino Natural EOOD, your personal data is accessed by a very limited number of employees, who use them only for the above purposes and in the performance of their official duties. Your personal data is stored on electronic media, as we have introduced a number of technical and organizational measures to protect your personal data: SSL certificate (Secure Socket Layer is a protocol that provides encryption of the connection between our e-shop and the browser (i.e. personal data subjects). Information transmitted through such a connection is protected from unauthorized access and interception), complex passwords with frequent change, periodic technical support of the e-shop, trainings on personal data protection, observance of established good practices, etc.

Your personal data may be shared with the following recipients:

• Google Inc. - as for online identifiers, but not personal data such as names, address, telephone (for statistical purposes and individualization of the content)
• With courier companies (for the purpose of delivery of goods ordered by users)
• Bodies, institutions and persons to whom we are obliged to provide personal data under current legislation
• External company providing accounting services for Carino Natural EOOD (for the purposes of processing the invoices issued by us)
• Providers of marketing and telemarketing services with a good reputation

Our contractual relationship with the above companies guarantees that the objectives will be limited to those mentioned above. The processors of personal data are committed to ensuring the necessary level of protection of personal data, as for them, they are also in force all legal processing requirements.

Carino Natural Ltd. processes your personal data on the basis of: art. 6, para. 1, b. b of the General Regulation Personal Data Protection, namely: the processing is necessary for the performance of the contract, to which the data subject is a party, or to take steps at the request of the data subject before concluding a contract. In limited cases, the processing is based on the legitimate interest of Carino Natural EOOD (eg. for marketing), except where such interests take precedence over the interests or fundamental rights and freedoms of the data subject.

Carino Natural EOOD stores users, personal data for so long, as necessary to achieve the objectives set out in this Privacy Notification or to be observed requirements of lawful. The duration of storage of your personal data depends on the purposes of the processing, for which they are collected. In the most general case, the personal data that we process in order to administer the account you have registered, are stored for the duration of the account (until it is deleted by you). Please note that certain personal data may continue to be stored by Carino Natural EOOD and after deleting the account, e.g. personal data appearing in invoices issued by Carino Natural EOOD. The legal term for keeping the accounting documentation implicitly obliges us to continue to keep them. When placing an order, Carino Natural EOOD stores personal data for a period of 5 years (total limitation period).

Personal data subjects have a number of rights, namely

• right of access / you have the right to receive information from us about your personal data that we process, etc./
• right of adjustment / you have the right to ask us to correct inaccurate personal data that we have, etc./
• the right to be forgotten / you can ask us to delete all your personal data that we have, but you should keep in mind that there are a number of circumstances in which your request for deletion will not be legally granted /
• the right to you request a restriction of processing / in case you do not want us to delete them, but to temporarily stop using them for specific purposes or for all purposes /
• right of portability / in certain cases, you may request that we provide your personal information in a structured manner widely used and machine-readable format or data to be directly "transferred" to another administrator /
• data right to object to direct marketing / You do not need to motivate such a desire. It will be respected without undue delay on our part /
• Right of complaint to the Commission for Personal Data Protection. Without limiting or affecting your right to complain to the regulatory body, we call you to contact us first if you believe there is an irregularity and we assure you that your signal/request will be taken under serious attention.

If you need further clarification, or want to exercise any of your rights, please contact us at: contact@carinonatural.com