DEFINITIONS

For the purposes of this Privacy Policy, the terms and expressions listed below shall have the following meanings:

Provider – “LIGHTNESS 777” Ltd., with registered office and address of management in the city of Stara Zagora, 17 “Sveti Knyaz Boris” Str., registered in the Commercial Register of the Registry Agency under UIC 208139908;

RF0005744 – an electronic store owned by “LIGHTNESS 777” Ltd., accessible at the internet address lightness.bg, through which customers may enter into contracts (agreements) for the purchase and sale of the services offered by the electronic store;

User – any person who has completed registration in accordance with this Privacy Policy and has an active user profile for using the electronic store;

User Profile – created upon completion of the registration and stored in the database of the electronic store, accessible by entering a username and password;

Services – fitness services offered by “LIGHTNESS 777” Ltd. at the company’s premises.

APPLICABILITY

The Provider acts as a personal data controller for personal data collected and processed in connection with the provision of services and the operation of the electronic store.

By ticking the relevant checkbox upon completion of the registration, each new user declares that they are familiar with this Privacy Policy and agree with its content with regard to any use of the electronic store for the duration of the activity of their user profile. This Privacy Policy is available on the website under “Privacy Policy”.

In addition to accepting this Privacy Policy, the User is also bound by the General Terms and Conditions and the Rules and Conditions of “LIGHTNESS 777” Ltd.

If the User is a minor, by ticking the relevant checkbox confirming acceptance of this Privacy Policy and completing the registration, the User declares the knowledge and consent of their parents or guardians for acceptance of this Privacy Policy and the completion of the registration. If the User is under the age of 14, the declaration of familiarity with and acceptance of this Privacy Policy shall be made by a parent or legal guardian.

The declaration of familiarity with and acceptance of this Privacy Policy by ticking the relevant checkbox and submitting the registration form by clicking the relevant button constitutes an electronic statement within the meaning of the Electronic Document and Electronic Trust Services Act.

Upon registration and subsequent updates, the User, or respectively their parent or guardian, declares that the provided identification data are accurate, true, and complete.

The Provider does not collect or process data of minors or underage persons when it knows that the required consent has not been given in the manner described above.

TYPES OF PERSONAL DATA, METHODS OF COLLECTION, PURPOSES OF USE

The Provider collects and processes personal data of its users. This information includes data provided by users upon registration or update of their user profile, such as names, email address, telephone number, as well as any other data the Provider deems necessary. These personal data are the property of the respective User.

The Provider uses the consent given during the registration process as the legal basis for collecting and processing the personal data of individual users. Providing the requested data is a necessary condition for entering into a contract between the parties, as without these data the Provider cannot fulfill its contractual obligations.

The Provider strives to limit the collection of personal data to the minimum necessary to provide the requested services. Without access to this minimum of personal data, “LIGHTNESS 777” Ltd. cannot offer its services to potential users.

The protection of users’ personal data is of utmost importance to the Provider. Although the Provider cannot guarantee complete security, it undertakes internal technical and organizational measures to protect users’ personal data against unauthorized access by third parties.

The Provider processes personal data within the scope of the consent given by users for the purpose of providing the requested services, such as service delivery, contacting users, direct marketing or statistical purposes, informing users about current initiatives of “LIGHTNESS 777” Ltd., and improving the overall quality of the offered services. The Provider does not carry out automated decision-making or profiling.

The Provider does not use personal data for purposes other than those stated above.

WITH WHOM AND WHY WE SHARE YOUR PERSONAL DATA

The Provider does not share personal data with third parties or grant them access to such data, except in the following cases:

• With the consent of the respective User;

• When strictly necessary for the provision of a service requested by the User, such as when making payments through an external payment service provider, in which cases the Provider strives to disclose no more than the minimum necessary personal data and to ensure that such third parties apply adequate data protection measures;

• For the protection of its legal rights and interests, as well as those of its users;

• When the Provider is legally obliged to disclose such personal data.

STORAGE OF YOUR PERSONAL DATA

The Provider stores and otherwise processes users’ personal data in accordance with applicable European and national legislation. Transfer of data to third countries within the meaning and scope of Regulation (EU) 2016/679 shall be carried out in compliance with the requirements set out in that Regulation.

The Provider strives to retain personal data for the period necessary for the purposes for which they were collected. Where a lack of legal basis or necessity for retention is established, the relevant personal data shall be deleted within 6 months of such determination, including from all archives, backups, databases of recipients of such personal data, etc.

The Provider may store personal data in anonymized form for a longer period, for example for statistical purposes.

ACCESS TO PERSONAL DATA

The User has the right to withdraw their consent for the processing of their personal data and to request their deletion in writing. In such cases, the Provider will not have the minimum necessary information to continue providing the services of “LIGHTNESS 777” Ltd., and the user profile of the respective User will be deleted.

The User also has the right to object to processing, as well as the right to data portability.

If a User has questions regarding the described rights, wishes to receive information about or a copy of their personal data stored and processed by the Provider, they should submit a written request to the Provider using one of the contact methods listed below.

CHANGES TO THE PRIVACY POLICY

Where necessary, the Provider has the right to unilaterally make amendments and/or additions to this Privacy Policy.

In the event of material amendments and/or additions, the Provider shall notify users and provide them with a two-week period to familiarize themselves with the changes.

Within the provided two-week period, users may submit an explicit written notice to the Provider stating that they do not accept the amendments and/or additions to the Privacy Policy. In such cases, the respective user profile shall be closed and the relationship between the parties shall be terminated.

If the User does not explicitly object within the two-week period, it shall be deemed that they accept the amendments and/or additions, which shall thereafter apply to and bind the parties.

DISPUTE RESOLUTION, OTHER PROVISIONS

In the event of disagreement by a User with these practices, the Provider encourages the User to contact a representative of the company directly using one of the contact options listed below, in order to attempt informal resolution of the dispute. If the User does not wish to use this method or is not satisfied with the Provider’s response, the User has the right to refer the matter to the Commission for Personal Data Protection.

For matters not regulated in this Privacy Policy, the general provisions of Bulgarian law and the applicable international legislation shall apply.

The invalidity of any provision of this Privacy Policy shall not result in the invalidity of the Privacy Policy as a whole.