Privacy Policy

Information about the company processing your data

Nutrend Bulgaria EOOD
UIC (Bulgarian Company Number): 202792101
Registered office and address of management:
City of Sofia, 40 Nishava Street, Shop 1
Email: info@brainlegend.com

Nutrend Bulgaria EOOD (hereinafter referred to as the “Controller,” “We,” or the “Company”) operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), regarding the protection of natural persons in connection with the processing of personal data and the free movement of such data. This policy aims to inform you about all aspects of the processing of your personal data by the Company and the rights you have in relation to this processing.

Nutrend Bulgaria EOOD guarantees the confidentiality of the information and personal data provided by its users/clients. These data will not be used, disclosed, or made available to third parties, except as provided in this Privacy Policy.

1. Grounds for Collecting and Processing Personal Data

Nutrend Bulgaria EOOD collects and processes your personal data in connection with the use of the online store at https://brainlegend.com/ and the conclusion of contracts with the Company, pursuant to Article 6, Paragraph 1 of Regulation (EU) 2016/679 (GDPR). Specifically, on the following grounds:

1.1. Explicit consent obtained from the user/client;
1.2. Fulfillment of obligations of Nutrend Bulgaria EOOD under a contract with a user/client;
1.3. Compliance with a legal obligation applicable to Nutrend Bulgaria EOOD;
1.4. Legitimate interests of the Controller (Nutrend Bulgaria EOOD) or a third party.

2. Purposes for Collecting and Processing Personal Data

Nutrend Bulgaria EOOD collects and processes personal data that users/clients provide in connection with using the online store at https://brainlegend.com/ and concluding a contract with the Company, including for the following purposes:

2.1. Creation of a profile and provision of full functionality for using the online store;
2.2. Identification of the contracting party;
2.3. Accounting purposes;
2.4. Statistical purposes;
2.5. Protection of information security;
2.6. Ensuring contract performance;
2.7. Sending a newsletter if the user/client has expressed a desire to receive one.

2a. Principles for Processing Personal Data

When processing personal data of users/clients, Nutrend Bulgaria EOOD follows these principles:

3.1. Lawfulness, fairness, and transparency;
3.2. Purpose limitation;
3.3. Data minimization (collecting only what is necessary);
3.4. Accuracy and timeliness of data;
3.5. Storage limitation to meet the stated objectives;
3.6. Integrity and confidentiality, ensuring an appropriate level of security for personal data.

3. Types of Operations with Personal Data

Nutrend Bulgaria EOOD carries out the following operations with the personal data provided by users/clients for the following purposes:

3.1. Registration of a user profile in the online store and execution of a distance sales contract – the purpose is to create a profile for using the online store to purchase goods and to provide contact details for the delivery of purchased goods. Registration and the creation of a user profile are not mandatory for purchasing goods from the online store.

3.2. Conclusion and execution of a commercial transaction with a client or partner – the purpose is to conclude and execute a contract with a commercial partner or client and administer it.

3.3. Sending a newsletter (and promotional messages) – the purpose is to administer the process of sending newsletters to users/clients who have indicated they wish to receive them. This includes managing any withdrawal or complaint process related to the newsletter.

3.4. Distance sale of goods – the purpose is to facilitate the transfer of goods through the conclusion of a distance sales contract with a natural person.

4. Categories of Personal Data Processed

Nutrend Bulgaria EOOD processes the following categories of personal data and information for the following purposes and on the following grounds:

4.1. Data for registration and newsletter subscription (name, email, phone)

Purpose:

To establish contact with the user/client and send information;
To register a user profile in the online store;
To send a newsletter.

Grounds:
By accepting the Terms and Conditions and registering in the online store, or placing an order without registration, or upon the conclusion of a contract between Nutrend Bulgaria EOOD and the user/client, a contractual relationship is established, on which basis we process your personal data—Article 6, Paragraph 1, Point (b) GDPR. Data for sending the newsletter is processed based on the user/client’s explicit consent—Article 6, Paragraph 1, Point (a) GDPR.

4.2. Data for delivery (name, phone, email, address)

Purpose:
To fulfill Nutrend Bulgaria EOOD’s obligations under a distance sales contract and deliver the ordered goods, including when exercising the right to return, exchange, or withdraw from purchased goods.

Grounds:
By accepting the Privacy Policy in the online store, placing an order without registration, or upon conclusion of a contract between Nutrend Bulgaria EOOD and the user/client, a contractual relationship is established—Article 6, Paragraph 1, Point (b) GDPR.

5. Special Categories of Data

Nutrend Bulgaria EOOD does not collect or process personal data relating to:

5.1. Racial or ethnic origin;
5.2. Political, religious, or philosophical beliefs, or membership in trade union organizations;
5.3. Genetic and biometric data, health data, or data concerning sexual life or sexual orientation.

6. Automated Decision-Making

Nutrend Bulgaria EOOD does not perform automated decision-making with the data it collects.

7. Processing Data of Individuals Under 16

The Company does not collect or process data for individuals under 16 years of age, except with the explicit consent of their parents or legal guardians.

8. Data Retention Period

Nutrend Bulgaria EOOD stores users/clients’ personal data for no longer than the existence of their profile in the online store or until an order placed as a “Guest” is completed. After the user profile is deleted or an order is successfully completed, Nutrend Bulgaria EOOD takes the necessary steps to erase or anonymize all personal data without undue delay.

9. Data Retention for Legal Purposes

Nutrend Bulgaria EOOD retains personal data provided in connection with online orders for 10 years to protect its legal interests in the event of judicial or administrative disputes with users/clients. Accounting documents are retained for the legally established period.

10. Data Retention for Legal Representatives of Business Partners

Nutrend Bulgaria EOOD retains the personal data of legal representatives of its business partners for the duration of the contract, to fulfill its legitimate interests and legal obligations. This period may exceed the term of the concluded contract.

11. Data Sharing with Third Parties

Nutrend Bulgaria EOOD may, at its discretion, transfer some or all personal data of users/clients to data processors for the purposes for which users/clients have consented, in compliance with Regulation (EU) 2016/679 (GDPR).

12. Withdrawal of Consent

If a user/client does not wish all or part of their personal data to continue to be processed by Nutrend Bulgaria EOOD for specific or for all processing purposes, they may withdraw their consent to processing at any time by sending a free-form request to info@brainlegend.com.

13. Effect of Withdrawal of Consent

Upon withdrawal of consent for the processing of personal data required to create and maintain a user profile in the online store, the profile becomes inactive. The user/client can still browse the online store, view the offered products, and place orders as a “Guest” or register a new user profile.

14. Pending Orders

If the user/client has placed an order that is still being processed, the earliest time they can withdraw their consent for processing is upon successful completion of the order.

15. Right of Access

The user/client has the right to request and obtain from Nutrend Bulgaria EOOD confirmation as to whether personal data relating to them is being processed. If they have a registered user profile, they can view the personal data provided to and processed by Nutrend Bulgaria EOOD at any time within their profile.

16. Right to Information

The user/client has the right to obtain access to the data relating to them, as well as information about the collection, processing, and storage of their personal data.

17. Copy of Personal Data

Upon request, Nutrend Bulgaria EOOD provides the user/client with a copy of the personal data being processed in electronic or another appropriate form. Access to the data is provided free of charge, but Nutrend Bulgaria EOOD reserves the right to impose an administrative fee if requests are repeated or excessive.

18. Right to Rectification

The user/client can correct or complete inaccurate or incomplete personal data related to them directly through their user profile on the website or by sending a free-form request to info@brainlegend.com.

19. Right to Erasure (“Right to be Forgotten”)

The user/client has the right to request that Nutrend Bulgaria EOOD erase all or some of the personal data relating to them without undue delay when one of the following grounds applies:

19.1. The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
19.2. The user/client withdraws their consent, and there is no other legal basis for processing;
19.3. The user/client objects to processing, including for direct marketing, and there are no overriding legitimate grounds for processing;
19.4. The personal data has been unlawfully processed;
19.5. The personal data must be erased to comply with a legal obligation under EU or Member State law applicable to Nutrend Bulgaria EOOD;
19.6. The personal data has been collected in relation to the offering of information society services.

20. Exceptions to the Right to Erasure

Nutrend Bulgaria EOOD is not obliged to erase personal data if it stores and processes it:

20.1. For exercising the right of freedom of expression and information;
20.2. For compliance with a legal obligation under EU or Member State law applicable to Nutrend Bulgaria EOOD or for the performance of a task carried out in the public interest;
20.3. For reasons of public interest in the area of public health;
20.4. For archiving purposes in the public interest, for scientific or historical research, or for statistical purposes;
20.5. For the establishment, exercise, or defense of legal claims.

21. Actions After Exercising the Right to Be Forgotten

If the user/client exercises their right to be forgotten, Nutrend Bulgaria EOOD will erase all their data, except for the following information:

21.1. Information necessary to certify that the right to be forgotten has been fulfilled—email, IP address;
21.2. Technical information regarding the operation of the online store that cannot be linked to the identity of the user/client;
21.3. The email used by the user/client to register in the online store.

22. How to Exercise the Right to Be Forgotten

To exercise the right to be forgotten, the user/client must send a free-form request via email to info@brainlegend.com.

23. Pending Orders and the Right to Be Forgotten

If the user/client has placed an order that is still being processed, the earliest time they can request to be “forgotten” is after the successful completion of the order.

24. Data Retention When Legally Required

Nutrend Bulgaria EOOD will not erase data for which there is a legal obligation to store, including data necessary for defense against legal claims or to prove its rights.

25. Right to Restrict Processing

The user/client has the right to request that Nutrend Bulgaria EOOD restrict the processing of their data when:

25.1. The accuracy of the personal data is contested by the user/client, for a period enabling Nutrend Bulgaria EOOD to verify its accuracy;
25.2. The processing is unlawful, but the user/client does not want the personal data to be erased, only restricted;
25.3. Nutrend Bulgaria EOOD no longer needs the personal data for processing purposes, but the user/client requires it for the establishment, exercise, or defense of legal claims;
25.4. The user/client has objected to processing pending verification of whether Nutrend Bulgaria EOOD’s legitimate grounds override those of the user/client.

26. Right to Information About Data Recipients

The user/client may request that Nutrend Bulgaria EOOD inform them about all recipients to whom personal data, subject to rectification, erasure, or restriction, has been disclosed. Nutrend Bulgaria EOOD may refuse to provide this information if it would be impossible or would require disproportionate effort.

26a. Right to Object

The user/client may object at any time to the processing of personal data by Nutrend Bulgaria EOOD that relates to them, including if processed for profiling or direct marketing purposes.

27. Notification of Personal Data Breach

If Nutrend Bulgaria EOOD identifies a personal data breach that could pose a high risk to the rights and freedoms of the user/client, Nutrend Bulgaria EOOD will notify the user/client without undue delay and inform them of the measures taken or to be taken.

28. Exceptions to Notification of Personal Data Breach

Nutrend Bulgaria EOOD is not obliged to notify the user/client if:

28.1. Nutrend Bulgaria EOOD has implemented appropriate technical and organizational protection measures for the data affected by the breach;
28.2. Nutrend Bulgaria EOOD has taken subsequent measures to ensure the breach no longer poses a high risk to the user/client’s rights;
28.3. Notification would require disproportionate effort.

29. Data Transfers to Third Countries

Nutrend Bulgaria EOOD does not transfer personal data to third countries.

30. Cookies

For this website to function properly and to provide the most relevant products and services, we place small data files called “cookies” on your device. This section explains how cookies are used and how you can manage them.

30.1. What Are Cookies?

Cookies are small files stored on your device that help us collect data about your actions. They enable us to remember your settings and preferences, store your login data, provide targeted content and marketing, and help us analyze which parts of our website are most popular. Cookies can come from us (“first-party cookies”) or from third parties whose services we use (“third-party cookies”).

30.2. What Cookies Do We Use?

Strictly Necessary Cookies: Essential for the website’s operation. They do not gather information for marketing. This category cannot be disabled.
Analytical Cookies: Help us recognize and count visitors and see how they move around our website, aiding improvements in site functionality. Data collected is anonymous.
Functional Cookies: Used to recognize you when you return, enabling personalization such as language preferences. Data collected is anonymous.

Social Network Plugins: Our website uses plugins for social networks (e.g., Facebook, Google+). If you are logged into these networks while visiting our website, they may link your access to your social network profile. Any actions (likes, shares) will be transmitted to and stored by the respective network, making the content visible to your friends/followers. If you do not want social networks to link your visit to our website with your accounts, log out of those networks before visiting our website.

30.3. How to Manage Cookies

Cookies can be disabled or removed using tools available in most modern browsers. Each browser offers unique settings and functionalities. For more information on blocking, deleting, or disabling cookies, check your browser or device settings.

31. Complaints

In the event of a violation of the user/client’s rights under the above or applicable data protection legislation, the user/client has the right to file a complaint with the Commission for Personal Data Protection:

Name: Commission for Personal Data Protection
Registered Office and Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Telephone: +359 2 915 3 518
Website: www.cpdp.bg

Effective Date: [Insert Date]
Last Updated: [Insert Date]

For any questions or concerns regarding this Privacy Policy, please contact us at info@brainlegend.com.