Mobile App Privacy Notice

1. Who is responsible for your personal data?

We, Threevita Ltd., UIC: 205364700, contact details: Sofia, 66 Patriarch Evtimiy Blvd., ent. C, floor 1, e-mail: privacy@3veta.com, (also called “the Company” in the document) acknowledge that it is important for you to understand how we collect, store and share personal data that we process through the mobile application we provide to our customers.

2. Who is the Declaration for?

This Privacy Policy is intended for users of our mobile application. Users of the application can only be registered users of the platform: https://3veta.com/, regardless of whether they are registered as professionals or as end customers.

3. What personal data do we process and from whom do we receive it?

The type of personal data we process depends on the purpose for which we need it.

When registering and using the mobile application, we process personal data provided by the persons to whom it relates, which includes:

• Registration data– names and e-mail; password, photograph (at your discretion;
• Data on past and upcoming events– we store information about the use of the platform in providing your services such as date and time; supplier (for the end customer) or end customers (for the professional); price and rating for the provided service, which is determined by the end users and is visible to the provider.

We automatically collect technical data for the proper functioning of the Application (device brand and type, type and version of operating system) only if malfunctioning occurs.

4. On what grounds is the processing performed?

Processing of personal data is carried out only in the presence of a legal basis for this processing. We process the data on one of the following grounds:

• • the processing is necessary in order to conclude or fulfill the contract for the use of our mobile application (see Terms of use of the 3VETA mobile application);
  • the processing is based on our legitimate interests, which are aimed at effective management of our business processes and to increase the availability and quality of the services provided.

5. For what purposes is the data being processed?

We have created the mobile application in order to facilitate the interaction between professionals and end customers, as well as to increase the quality of services offered by providing an easy, accessible and completely free additional channel for using the 3veta.com platform. In order for the application to work, we process personal data for:

• management of user profiles;
• technical support of the application.

We process personal data only for the purpose for which they were collected and do not reuse them for incompatible purposes. Further processing is permissible only for the establishment, exercise or defense of legal claims.

We do not use the data obtained in the implementation of our core business for automated decision-making using computer algorithms that replace human judgment, including by performing profiling.

6. How long do we store the data?

We retain personal data only for as long as it is necessary to achieve the purposes for which they were collected or as provided by law. We keep the data within the statute of limitations for periodic contracts – 3 years. After the expiration of the storage period, we anonymize the data so that it is not possible to reconnect them with the data subject.

7. To whom do we provide your personal data?

We process your data mainly within our organization. We may outsource certain activities to our providers (processors), but only after making sure that they comply with the requirements for personal data protection. To ensure the functioning of the application, we use the services of Camplight Ltd. As our processors, they are obliged to provide a high level of security, and we control the processing activities they perform.

We provide data to the competent state authorities whenever this is required by law.

We do not transfer personal data to third countries or international organizations.

8. Is the data protected?

We take reasonable physical, technical and organizational security measures designed to protect all personal data from loss, misuse, alteration, destruction or damage, as required by European and national legislation. We determine these measures on the basis of the risks identified by us, we periodically review the measures provided and, if necessary, update them. We provide security when transferring data through encryption (HTTPS and SSL certificate).

9. What rights do you have?

When processing your personal data, we apply the statutory rules for exercising the rights of data subjects. As a data subject, you have the right to request that we:

• provide you with access to your personal data, while respecting the rights of third party;
• remove inaccurate personal data (including the right to fill in incomplete personal data);
• delete personal data (where applicable);
• limit data processing to storage (where applicable);
• to exercise your right of portability – for data that are processed on the basis of a contract or consent, when their processing is performed in an automated manner.

You have the right to object to the processing of data based on our legitimate interests, at any time and on grounds related to your specific situation.

You also have the right to file a complaint to the Commission for Personal Data Protection, address: Sofia 1592, Blvd. “Prof. Tsvetan Lazarov “№ 2, with e-mail address: https://www.cpdp.bg/ or to request protection of your rights from the court.

If you have any questions or concerns regarding the processing of your personal data or wish to exercise any of your rights, please contact us at the following e-mail address: privacy@3veta.com. Please visit our website for detailed instructions on exercising your rights.

10. Updating this document

The document has been last updated on 05.01.2022. We review this document periodically. When we need to update it, all changes will be published through the application itself and we will not notify you individually of the changes.