Personal data controller
Idealist EOOD collects personal data only to the extent necessary for the provision of its services and safeguards it responsibly and lawfully.
Information about the Personal Data Controller
- 1. Name: “Idealist” EOOD
- 2. UIC: 207479832
- 3. Registered office and management address: Sofia, 67 Zlatovrah St.
- 4. Business activity address: Sofia, 195 Knyaz Boris I St.
- 5. E-mail: info@vrooms.bg
- 6. Telephone: 0878 141 333
Information about the Data Protection Officer
- 1. Correspondence details: Sofia, 195 Knyaz Boris I St.
- 2. Telephone: 0878 141 333
- 3. Email: info@vrooms.bg
Information about the competent supervisory authority
- 1. Name: Commission for Personal Data Protection
- 2. Address: Sofia, 15 Ivan Evstatiev Geshov Blvd.
- 3. tel.: (02) 940 20 46
- 4. Email: kzld@government.bg, kzld@cpdp.bg Website: www.cpdp.bg
“Idealist” EOOD carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.
Grounds for collecting, processing and storing your personal data
Art. 1. (1) “Idealist” EOOD collects and processes your personal data in connection with the provision of virtual reality experiences and the sale of gift vouchers on the basis of Art. 6(1) of Regulation (EU) 2016/679 and applicable local legislation, and more specifically on the basis of the following:
- Explicit consent received from a customer;
- Performance of the obligations of “Idealist” EOOD under a contract with a customer;
- Compliance with a legal obligation.
(2) “Idealist” EOOD is a personal data controller with respect to the data of its customers and website users.
Purposes and principles for collecting, processing and storing personal data
Art. 2. (1) “Idealist” EOOD collects and processes personal data provided by customers in connection with the use of the services and conclusion of a contract with the company, as well as registration for participation in virtual reality experiences:
- accounting purposes;
- statistical purposes;
- protection of information security;
- ensuring performance of the contract and provision of services;
- sending confirmation messages;
- where the customer has expressly consented and subscribed to the email newsletter – sending information about new experiences, promotional offers, etc.
(2) “Idealist” EOOD complies with the following principles when processing personal data:
- lawfulness, fairness and transparency;
- purpose limitation;
- relevance to the purposes of processing and minimization of the data collected;
- accuracy and keeping data up to date;
- storage limitation with regard to achieving the purposes;
- integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.
(3) When processing and storing personal data, “Idealist” EOOD may process and store personal data for the purpose of protecting legitimate interests and complying with applicable legislation.
What types of personal data do we collect, process and store?
Art. 3. (1) “Idealist” EOOD carries out the following operations with personal data for the following purposes:
- Registration of participants for VR experiences – first and last name (or nickname), telephone number and email address of one customer are collected.
- Gift vouchers for VR experiences – first and last name (or nickname), telephone number and email address of one customer are collected.
(2) “Idealist” EOOD processes the following categories of personal data and information for the following purposes and on the following grounds:
- Data: Your identifying data - first and last name (or nickname), email, telephone.
- Purpose for which the data is collected: 1) Registration of a user in a customer management system; 2) Contacting the user and sending information to them, including, where requested, newsletters and advertising messages;
- Ground for processing your personal data – By accepting the Terms and Conditions and purchasing a service, a contractual relationship is created between “Idealist” EOOD and you, on the basis of which we process your personal data – Art. 6(1)(b) GDPR.
- Other data processed by “Idealist” EOOD – When entering our website or your profile, “Idealist” EOOD collects data about the IP address used.
- Purpose for which the data is collected: Improving the security of the service and localization of the interface, statistical and marketing research.
- Grounds for processing the data: The processing is necessary for performance of a contract to which the data subject is party – Art. 6(1)(b) GDPR. The IP address is collected on the basis of the legitimate interests pursued by the controller – Art. 6(1)(f) GDPR;
- Your data for issuing an invoice to an individual – If you wish to be issued an invoice in your capacity as an individual, you must provide your personal identification number (EGN).
- Purpose for which the data is collected: Issuing an invoice for payments made under a concluded contract for provision of services for use of the platform for creating online stores.
- Ground for processing your personal data – By accepting the Terms and Conditions or upon conclusion of a written contract, a contractual relationship is created between “Idealist” EOOD and you, on the basis of which we process your personal data – Art. 6(1)(b) GDPR.
(3) “Idealist” EOOD does not collect or process personal data relating to the following:
- reveals racial or ethnic origin;
- reveals political, religious or philosophical beliefs, or trade union membership;
- genetic and biometric data, health data or other sensitive personal data.
(4) The personal data is collected by “Idealist” EOOD from the persons to whom it relates or from their authorized representatives.
(5) The company does not perform automated decision-making with data.
Retention period for your personal data
Art. 4. (1) “Idealist” EOOD stores your personal data in accordance with the periods under applicable Bulgarian legislation. After expiry of this period, “Idealist” EOOD takes the necessary care to delete and destroy all your data without undue delay.
Transfer of personal data for processing
Art. 5. (1) “Idealist” EOOD may, at its discretion, transfer part or all of your personal data to personal data processors for performance of the processing purposes in compliance with the requirements of Regulation (EU) 2016/679.
(2) “Idealist” EOOD notifies you in the event of an intention to transfer part or all of your personal data to third parties or international organizations.
Withdrawal of consent to processing of personal data
Your rights when personal data is collected, processed and stored
Art. 6. (1) If you do not want all or part of your personal data to continue to be processed for a specific purpose or for all processing purposes, you may withdraw your consent to processing at any time by email to info@vrooms.bg.
(2) “Idealist” EOOD may ask you to verify your identity and that you are the person to whom the data relates.
Right of access
Art. 7. (1) You have the right to request and receive confirmation as to whether personal data relating to you is being processed.
(2) Upon request, “Idealist” EOOD provides you with a copy of the personal data relating to you that is being processed, in electronic or another appropriate form.
Right to rectification or completion
Art. 8. You may correct or complete inaccurate or incomplete personal data by submitting a request.
Right to erasure (“right to be forgotten”)
Art. 9.(1) You have the right to request erasure of personal data relating to you, and “Idealist” EOOD has the obligation to erase it without undue delay where one of the grounds listed below applies:
- the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
- you withdraw your consent on which the processing is based and there is no other legal ground for the processing;
- you object to the processing of personal data relating to you, including for direct marketing purposes, and there are no overriding legitimate grounds for the processing;
- the personal data has been unlawfully processed;
- the personal data must be erased for compliance with a legal obligation in Union or Member State law that applies.
(2) “Idealist” EOOD is not obliged to erase the personal data if it stores and processes it:
- for compliance with a legal obligation requiring processing under Union or Member State law that applies to the Controller, or for performance of a task carried out in the public interest or in the exercise of official authority vested in it;
- for reasons of public interest in the area of public health;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
- for the establishment, exercise or defence of legal claims.
(3) To exercise your “right to be forgotten”, you should submit a written request to info@vrooms.bg and verify your identity and that you are the person to whom the data relates by presenting an identification document on site.
(4) “Idealist” EOOD does not erase data that it has a legal obligation to retain, including for defence against legal claims made against it or for proving its rights.
Right to restriction
Art. 10. You have the right to request that “Idealist” EOOD restrict the processing of data relating to you where:
- you contest the accuracy of the personal data;
- the processing is unlawful but you do not want your personal data to be erased and instead request restriction of its use;
- “Idealist” EOOD no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims;
- you have objected to processing pending verification whether the legitimate grounds of “Idealist” EOOD override your interests.