DECLARATION OF CONSENT FOR NEWSLETTER

DECLARATION OF CONSENT BY A DATA SUBJECT FOR DATA PROCESSING IN RELATION TO A NEWSLETTER SIGN-UP

This Declaration considers the processing of data of users of the website of Philly Vibe AD, Unified Identification Code (UIC) 203418843: https://pizzalab.bg, who would wish to sign up for a newsletter with information about promotions and campaigns, of visitors of Philly Vibe AD’s pizza sites, who would like to use the free Wi-Fi access and of customers who would like to register in the mobile app Pizza Lab, owned by Philly Vibe AD, UIC 203418843.
*The Declaration is filled only in case of data processing of an individual on a basis, different than a contract or law. The GDPR Regulation EU 2016/679 is not applicable to data processing of legal entities including the name and legal form of the legal entity, as well as its contact details. The Declaration is not to be filled by individuals whose data are processed on the basis of a contract or a legal provision (for example by employees on a labor contract or a subcontractor with whom the Processor had made an agreement).

AS A DATA SUBJECT I AGREE AND CONFIRM:
In the present document the terms enlisted below shall have the following meaning:
(i) “Personal Data Administrator” means Philly Vibe AD, UIC 203418843;
(ii) “Personal Data” means any information that identifies the data subject directly or indirectly (for example name, address, PIN, phone number, e-mail, ID number and other similar data that directly identifies the data subject; other identification details as tax number, pseudonymized, encrypted data and others via which the subject can be identified indirectly);
(iii) “Data Processor” means an individual or a legal entity that processess data on behalf of the Data administrator and at the request of the Data administrator - for example a lawyer or a law firm, outside accountant, outside adviser, software company, IT company, subcontractor on a services contract etc.;
(iv) “GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and with regard to the free movement of such data and regarding repealing of Directive 95/46/EC;
(v) "Recipient" means a person, a legal entity, a public authority, an agency or other entity to which Personal Data is disclosed, whether or not the recipient is a third party;
(vi) "Personal Data Subject" or "Data subject" means a person whose personal data is processed by the Personal Data Administrator. The data subject can be identified directly or indirectly through certain information about him that directly or indirectly identifies him or is able to identify him / herself (eg name, address, PIN, telephone, etc.)

1)  With this Declaration, I agree that the following Personal Data can be processed by the Personal Data Administrator:
o Name;
o Email address
o Phone;
2)  I declare that I will notify the Personal Data Administrator without delay of any change to my Personal Data.
3)  I provide my Personal Data for the following purpose of processing: receiving a newsletter for promotions and campaigns.
4)  I am aware that my Personal Data will be kept by the Personal Data Administrator for the period I subscribe to the newsletter and will be deleted immediately upon termination of this service by the Administrator or in the case that I withdraw my consent. If my data will be used for another purpose, for example for statistical purposes, I will be given a separate declaration of agreement.
5) I am aware of and agree that my Personal Data will be processed by:

Personal Data Administrator:
Philly Vibe AD, UIC 203418843, registered address: City of Sofia, 115з Tsarigradsko Shose Blvd., The Mall, level 2, Pizza Lab, represented by the Executive DIrector Kristian Valentinov Velev
* In case of change of the processor’s details including change of the data protection officer (“DPO”) you shall be notified in written.

Data protection officer (DPO):
e-mail: dpo@pizzalab.bg
postal address: City of Sofia, 115з Tsarigradsko Shose Blvd., The Mall, level 2, Pizza Lab
registered address: City of Sofia, 115з Tsarigradsko Shose Blvd., The Mall, level 2, Pizza Lab
Data processor – IT Company
Transfer to third parties -NO

6.  I am aware that as a data subject and in connection with my consent to the processing of Personal Data, I have the following rights:
6.1. Right of access to my Personal Data and the right to receive the following information: for what purpose the Personal Data is processed, what Personal Data is processed, the recipients of the Personal Data and the processing period. When requesting access to personal data, I have the right to receive a copy of my personal data in “understandable form”.
I am aware that I can use my rights in the following way: I have to send a request in free text to the data protection officer at the specified addresses or to ask him for a template of a request. If the request is made in free text, it must include all details about the subject, the type of personal data, and any other information that will help the administrator to locate and identify the personal data. The Personal Data Administrator may request additional information to specify the personal data or processing activities to which the request relates. I am aware that I should receive a response to the request within 1 month of receipt and, in the case of a refusal, it should be motivated.
6.2. Right to request correction of my Personal Data that is inaccurate / outdated:
I am aware that I can exercise my right in the following way: I have to file a request / request in a free text with the data protection officer at the specified addresses or to request from him a letter of filing to a request / request. If the request is made in free text, it must include all details about the subject, the type of personal data for which correction is requested, as well as any other information that will help the Personal Data Administrator to locate and identify the personal data. The Personal Data Administrator may request additional information to clarify the personal data or processing activities to which the request relates. I am aware that I should receive a response to the request within 1 month of receipt and, in the case of a refusal, it should be motivated.
6.3. Right to ask the Personal Data Administrator to restrict the processing of My Personal Data in the following cases:
(i) When Personal Data is inaccurate, in which case the limitation is for a period within which the Personal Data Administrator will verify the accuracy of the Personal Data;
(ii) When the processing of the Personal Data is unlawful, but does not wish to be erased, but only to limit the usage of the data;
(iii) When the Personal Data Administrator no longer requires Personal Data for the processing purposes but the data is necessary for the establishment, exercise or protection of legal claims;
(iv) When I have objected to the processing of Personal Data, pending verification that the legitimate grounds of the Privacy Controller take precedence over my interests as a Data subject;
I am aware that I can exercise my rights in the following way: I have to file a request / request in a free text with the data protection officer at the specified addresses or to request from him a letter of filing to a request / request. If the request is made in free text, it must include all details about the subject, the type of personal data and the reasoning, as well as any other information that will help the controller to locate and identify the personal data. The DPO may request additional information to specify the personal data or processing activities to which the request relates. I am aware that I should receive a response to the request within 1 month of receipt and, in the case of a refusal, it should be motivated.
6.4. Right to request deletion of my Personal Data without delay (the data protection officer must delete the Personal Data from all systems and records where they are stored, including notification to any third party / processor of the Personal Data to which the data was provided). A deletion request may be made on any of the following grounds: personal data is no longer required for the purposes for which they were collected; when you have withdrawn your consent; when you have objected to the processing when the processing is unlawful; where personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State which applies to the controller; when personal data has been gathered in connection with the provision of information society services.
I am aware that I can exercise my right in the following way: I have to file a request / request in a free text with the data protection officer at the specified addresses or to request from him a letter of filing to a request / request. If the request is made in free text, it must include all details about the subject, the type of personal data and the reasoning, as well as any other information that will help the controller to locate and identify the personal data. The DPO may request additional information to specify the personal data or processing activities to which the request relates.
I am aware that a DPO may refuse to delete the personal data for any of the following reasons: A) exercising the right to freedom of expression and the right to information; (B) compliance with a legal obligation on the part of the DPO or for the performance of a task of public interest or in the exercise of official authority conferred on the controller; (C) for reasons of public interest in the field of public health; (D) for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, in so far as deletion is likely to render impossible or seriously obstructing the achievement of the purposes of such processing; or for the establishment, exercise or protection of legal claims. I am aware that if a DPO refuses to erase the data, he / she must explain the reasons for this. I am informed of my right to file a complaint with the supervisory body - the Data Protection Commission in the event of a denial by the controller / DPOA.
6.5. I have the right to object to the Personal Data Administrator against the processing of my Personal Data at any time, stating the reasons for doing so. I am aware that I can exercise my right in the following way: I have to submit a request / request in a free text to the data protection officer at the specified addresses. If the request is made in free text, it must include all details about the subject, the type of personal data and the reasoning, as well as any other information that will help the controller to locate and identify the personal data. The DPO may request additional information to specify the personal data or processing activities to which the request relates. I am aware that I should receive a reply to the objection within 1 month, and in case of refusal it should be motivated.
6.6. Right to withdraw my consent to process Personal Data which I have provided for the purpose of receiving a newsletter. The right can be exercised as follows: I have to submit an application / request in a free text to the data protection officer at the specified addresses or to request a form from the DPO. If the application is made in free text, it should include all details about the subject, the type of personal data, and any other information that will help the administrator to locate and identify personal data. I am aware that I should be given a reply within 1 month, and in the case of a refusal it
6.7. Right to object to the processing of my personal data for the purposes of direct marketing - I am aware that by filling in the registration form and requesting a newsletter from Philly Vibe AD, I agree that the company will send me a newsletter (the marketing material). I am aware that at any time and without any grounds, I can object and ask Philly Vibe to stop sending this material for the future, no matter the reason and without incurring any costs. For this purpose, I should object to the DPO at any of these contacts. In the event that the objection is filed by email, the entity should file an objection from the email address to which the ballot is sent in order for the DPO to have the necessary information in order to locate the subject and the data. If the objection is filed in hard copy at the administrator's office, it should indicate the subject and the email address at which the subject receives. I am aware that if, after the filing of the objection, Philly Vibe AD continues to send the ballot, I can file a complaint with the supervisory body for protection of the personal data for the Republic of Bulgaria - CPDP at the following address: 1592 Sofia, 2, Prof. Tzvetan Lazarov Blvd. (www.cpdp.bg).
6.8. In all cases of violation of my rights in relation to the protection of Personal Data, I have the right to file a complaint against the processing of my Personal Data to the competent supervisory authority - the Personal Data Protection Commission, address: 1592 Sofia, 2, Prof. Tzvetan Lazarov Blvd. (www.cpdp.bg).
6.9. I am aware that I should be notified when there is a risk of breaching the security of my Personal Data. The Personal Data Administrator should inform me of the nature of the violation and what steps have been taken to resolve it and whether the Supervisory Authority has been informed about the infringement.
6.10. I am aware that I have the right to legal or administrative protection in case my rights in relation to Personal Data have been violated;
I declare that I freely consent to the processing of Personal Data in accordance with my will and I guarantee the correctness of the data stated in this Declaration.