The company Kofit Club EOOD, UIC 202988527, with registered office, address of management and address of activity: Sofia, 40 Gorski Patnik Str., Processes personal data of its clients or persons who are interested in the services of the company, as a controller of personal data in carrying out its main activity - providing fitness services to members of the association and providing ancillary services by authorized partners of the sports club. This means that your personal data - for example names, phone, contact e-mail, etc. may be stored and processed by us and our authorized partners. We collect and process your personal data for specific and necessary purposes for the provision of our services.

To ensure your rights under REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, we ask for your explicit consent.
Kofit Club EOOD may provide aggregated statistics about our customers, sales, traffic patterns and related data for trusted third party sites, but these statistics will not contain any personal information.

Kofit Club EOOD collects and processes personal data for the purposes of providing, developing and personalizing the site and fitness services and / or products offered by the company and our sports clubs throughout the country, research, statistics and customer care. In particular, Kofit Club EOOD collects personal information for the purpose of personal communication with you in order to answer your questions and fulfill your requests. Such information may include, but is not limited to, your name, email address, IP address, and telephone number. This data will be used in events in which you agree to participate, as well as for direct marketing purposes, carried out by e-mail or telephone, Viber, etc., to conduct market research and provide information and to receive feedback on upcoming products, services and / or promotions.

If you send us inquiries for services or if you send materials to the site, we may need to contact you to obtain additional information necessary for the processing or execution of your orders and / or requirements. Your personal information will not be disclosed to third parties without your prior consent, unless otherwise provided by law or when necessary to fulfill your order and improve the services.

The site may use various technologies that enable Kofit Club Ltd. to collect certain technical information, for example: your IP address, the type of operating system on your computer, the type of Internet browser and the addresses of related sites to improve services provided.

We also receive technical information when you use our site. Each time you use the site, mobile application or other Internet service, the system creates and saves certain information automatically. Here are some of the categories of information we collect:

a / Data in the log files. When you use the site, our servers record information (log data or log data), including information that your browser automatically sends when you visit a website or your mobile application automatically sends when you use it. This log data includes the address of the Internet Protocol, the address and activity of the websites you visit, searches, type and settings of the browser, date and time of your request, how you used the site, cookie data and device data. If you want to get more details about the information we collect - contact us via the contact form.

b / Cookie details. We also use cookies (small text files sent from your computer each time you visit our website) or similar data capture technologies. When we use cookies or other similar technologies, we use session cookies (continue until you close your browser) or persistent cookies (which continue until you or your browser delete them). For example, we use cookies to store your language preferences or other settings, so you don't have to set them every time you visit the site. Some of the cookies we use are related to your account (including information about you, such as the email address you gave us), and others are not cookies. If you do not wish to accept cookies, please change their settings (by selecting "Settings" and then selecting which cookies you want to load).

c / Device information. In addition to log data, we collect information about the device through which you use our website, including device type, operating system, settings, unique device identifiers, and crash data to help us understand when something breaks. Whether we collect some or all of the information often depends on the type of device you are using and its settings. For example, there are different types of information depending on whether you are using a Mac or a computer, iPhone or Android phone. To learn more about what information makes your device available to us, please also check the device manufacturer's or software provider's policies.

Data on the implementation of our services

Some of our services, such as issuing a club card or issuing an invoice, require you to share personal information with us. We use them so that we can prepare and fulfill our "contract" with you and to provide our fitness services. When we link your account to your Facebook or Google account or to other third-party services, we also receive information from those accounts (such as friends or contacts). The information we receive from these services depends on the settings and privacy statements, so each person should check what they are.

Data used in measuring and reporting the services used

We collect information about the content you use, which we combine with previously collected information to measure, understand and report your use of our services in order to improve quality.

In view of the normal functioning of our website and following the normal business logic, we need a basic measurement of your user behavior.

For this purpose, we use only the Google Analytics tool, and until the moment of obtaining your consent, we have disabled the Google Analytics functionality for advertising functions and have issued a command to anonymize your IP to Google Analytics.

We believe that in this way, on the one hand, we have minimized the volume of information collected for the purposes of measurement to the minimum necessary for this purpose and thus ensure that this data is not used for purposes other than measurement, but by on the other hand, we believe that we are defending our legitimate interest in the normal and necessary functioning of our services.

Data for selection, delivery and reporting of advertisements

Our business model is based on providing users with free access to the content of our website at the expense of advertising. We collect information and combine it with previously available information to select and deliver relevant advertising to you and to measure its delivery and effectiveness. This may include pre-collected information about your previous interests in selected ads, processing of data about your behavior, when your ad was shown, how often you were shown certain ads, where and when they were shown to you, whether you took action related to the ad, including a click on the ad and a purchase.

By confirming the application for registration of an account, confirming an order for a service or product, the user gives his explicit consent to the processing and transfer of personal data for one or more of the following purposes:

a / Inclusion of the user's assessment and his opinion in marketing research by electronic methods - by e-mail or messenger.

b / Receiving electronic messages for products, services, etc. advertising messages on all owned devices.

c / Receive personalized advertising that is tailored to the user's preferences. Personalization is based on an assessment of user behavior data;

d / Receiving personalized commercial offers in accordance with the consumer's behavior and relevant to his preferences by e-mail, mail or messenger. For this purpose, the data on the consumer's consumption based on his purchasing behavior, his participation in advertising campaigns, as well as the use of the site can be the subject of analysis and forecast of the user's interests.

e / Receiving non-personalized advertising. Users will also receive information about current products, services, initiatives and more. advertising messages.

Personalization and profiling data

We collect and process information about the use of our services for the subsequent serving of personalized advertising and / or content in another context, e.g. other sites and mobile applications over time. Typically, your content and behavior on the site / mobile applications is used to draw conclusions about your interests that govern the future choice of ads and / or content served.

Data collected on the assignment of joint projects with third countries
Sometimes we use your personal data to inform you about games and promotional offers of our clubs, as well as third parties - our partners. To fulfill this goal, we collect your personal data to inform you about our or third parties, our partners, initiatives, promotions, games, offers and more.

For all purposes described above, we may use third-party tools.

Direct marketing data

In order to always send you up-to-date and useful information about our initiatives, we collect data such as e-mail address or other way of contacting you - Viber, Skype, Messenger account or one in another communication platform.

Purposes of data storage and processing

Kofit Club EOOD processes and stores the personal data mentioned above only for the purpose of fulfilling its contractual obligations and more precisely processing the requests of its users, performing services, as well as for the following purposes:

a / Pursuant to Art. 6, item 1, letter “b” of the Regulation - for implementation of pre-contractual relations;

b / Pursuant to Art. 6, item 1, letter “b” of the Regulation - for fulfillment of already incurred contractual obligations.

c / Pursuant to Art. 6, para. 1, letter “a” and Art. 7 of the Regulation - for non-personalized advertising;

d / On the grounds of art. 6, para. 1, letter “a” and Art. 7 of the Regulation - for personalized advertising;

e / On the grounds of art. 22, para. 2, letter “c”, Art. 6, para. 1, letter “a” and Art. 7 of the Regulation - for personalized assessment of information;

f / Pursuant to Art. 6, para. 1, letter "e" - for marketing purposes.

g / Pursuant to Art. 6, para. 1, letter "e" of the Regulation - for retargeting in connection with the purposes of marketing, remarketing or optimization;

Term

The data is stored and processed as long as the user's account is valid and 1 year after its deactivation or deletion, as well as as long as it is needed to provide our services. In case the person makes the respective request, the information shall be destroyed immediately.

For the purpose of delivery, when such is requested by the user, Kofit Club EOOD has the right to provide the above personal data or part of them to courier companies or national postal operators. In this regard, the user may receive SMS or calls from these persons.

Rights you may exercise in relation to your personal data

All rights are exercised, and the relevant requests and notifications in connection with the rights of data subjects are deposited through the CONTACT FORM on the website https://coffit.bg/ and by e-mail coffitclub@gmail.com. or by post to the address of management indicated above. Requests shall be made in a way that allows the identity of the applicant to be identified. For some rights, technical possibilities for exercising them may be applicable, such as a Unsubscribe button. In any case, the administrator should respond to the request or rule on the declared right to the address or e-mail provided in the contact form, within one month of receiving it.

According to the General Data Protection Regulation, the data subject is entitled to:
Awareness (in connection with the processing of his personal data by the administrator); When there is a risk of breach of security of your personal data, the controller is obliged to inform you about the nature of the breach and what measures have been taken to eliminate it, as well as whether the supervisory authority has been notified of the breach.

Access to your own personal data and the right to withdraw consent to processing. As a data subject, you have the right to request confirmation of whether your personal data is being processed and, if so, to have access to your data and the following information: for what purpose the data are being processed, what personal data, data recipients, processing time . Requests for access must be made in writing / electronically and addressed to the administrator. You also have the right to withdraw your consent to the processing of your personal data at any time.

Adjustment (if data is inaccurate). As a data subject, you have the right to request the correction of your personal data that is inaccurate / out of date. You must submit a separate request for this purpose. Your request will be answered by the administrator in the following way - in writing, at the provided e-mail address.

Deletion of personal data (right to be "forgotten"). As a data subject, you have the right to be "forgotten", ie. to request that your personal data be deleted without undue delay, ie. the administrator to delete your personal data from all systems and records where they are stored, including notifying all third parties / processors of personal data to whom he has provided the data. A request for deletion may be submitted on the grounds provided for in the Regulation, incl. in the presence of any of the following grounds: personal data are no longer necessary for the purposes for which they were collected; when you have withdrawn your consent; when you have objected to the processing, when the processing is illegal; where personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State applicable to the controller; when personal data have been collected in connection with the provision of information society services. The controller may refuse to delete personal data on the grounds specified in the Regulation - when the processing of specific data is for the purpose of: exercising the right to freedom of expression and information; performing a legal obligation or task of public interest or exercising public authority; for public health purposes; archiving for purposes of public interest, historical research or statistical purposes; or establishing, exercising or defending legal claims.

Restriction of processing by the controller or processor of personal data. As a data subject, you have the right to ask the controller of your personal data to restrict the processing of personal data. The restriction is allowed in the following cases: - when you believe that your personal data is not accurate, in which case the restriction is for a period necessary for the administrator to verify the accuracy; - when the processing of your personal data is illegal, but you do not want them to be deleted, but you only want their use to be restricted; - when the controller no longer needs your personal data for the purposes of processing, but you, as the data subject, require them for the establishment, exercise or protection of legal claims; - when you have objected to the processing pending verification that the administrator's legitimate grounds take precedence over your interests. For this purpose, in the presence of any of the above conditions, you should submit a request.

Portability of personal data, incl. between individual administrators. The data subject has the right to portability - to receive the personal data concerning him and which he has provided to the controller, in a structured, widely used and machine-readable format and has the right to transfer this data to another controller without interruption by the controller, to whom the personal data are provided when the processing is based on consent or a contractual obligation and the processing is carried out in an automated manner. When exercising its right to data portability, the data subject shall also have the right to receive a direct transfer of personal data from one controller to another where this is technically feasible.

Objection to the processing of his personal data. As a data subject, you have the right to object to the processing of your personal data at any time, incl. when for direct marketing purposes. The administrator should be motivated whether he accepts the objection, resp. why he continues to process personal data if he rejects the objection.

The data subject is also entitled not to be the subject of a decision based solely on automated processing, including profiling, which has legal consequences for the data subject or similarly affects him to a significant extent. The data subject has the right to challenge the automated decision at any time.