PRIVACY POLICY AND PERSONAL DATA PROTECTION

Introduction

1.1. This Privacy Policy and Personal Data Protection ("Policy") governs how "Veneno Investment Group" Ltd. collects, processes, and stores your personal data in accordance with the requirements of the General Data Protection Regulation - Regulation (EU) 2016/679, the Personal Data Protection Act of the Republic of Bulgaria, and other applicable Bulgarian or international legal acts.

1.2. The confidentiality of our users' information is a top priority for us. "Veneno Investment Group" Ltd., in its capacity as a Data Controller, complies with the legislation and best practices, implementing the required technical and organizational measures to protect the personal data of individuals. "Veneno Investment Group" Ltd. complies with all regulatory requirements, collecting personal data only as necessary for the operation of the company, the provision of our services, the use of our websites, and for marketing purposes.

1.3. This Policy provides information on how and what types of personal data we collect from and about you, why we need them, to whom they may be provided or disclosed, and how they are protected.

1.4. Definitions:

1.4.1. "Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
1.4.2. "Processing" means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
1.4.3. "The Regulation" means the General Data Protection Regulation - Regulation (EU) 2016/679.

Contacts and Links

2.1. Information about "Veneno Investment Group" Ltd. as a Data Controller:
Name: "Veneno Investment Group" Ltd.
Company Identification Number: 207823134
Registered Office and Address of Management: Sofia, Botevgradsko Shose Blvd. No. 276, 5th floor, 1839
Correspondence Address: Bulgaria; Sofia-city; Sofia, Botevgradsko Shose Blvd. No. 276, 5th floor, 1839
Phone: 0700 700 53
E-mail: info@venenogroup.com
Website: www.venenogroup.com

Contact details of the Data Protection Officer:
Address: Bulgaria; Sofia-city; Sofia, Botevgradsko Shose Blvd. No. 276, 5th floor, 1839
Phone: 0700 700 53
E-mail: info@venenogroup.com

2.2. Information about the competent supervisory authority:
Name: Commission for Personal Data Protection
Headquarters and Address: Sofia, 1592, Prof. Tsvetan Lazarov Blvd. No. 2
Correspondence Address: Bulgaria, Sofia, 1592, Prof. Tsvetan Lazarov Blvd. No. 2
Phone: +359 2 915 3518
E-mail: kzld@government.bg; kzld@cpdp.bg
Website: www.cpdp.bg

Principles and Grounds for Collecting, Processing, and Storing Personal Data

3.1. To ensure that the processing of personal data complies with legal requirements, personal data is collected and used lawfully, ensuring the necessary security of the processing operations, and "Veneno Investment Group" Ltd. has taken measures to prevent the unlawful disclosure of personal data. In accordance with the main principles adhered to by "Veneno Investment Group" Ltd., your personal data is:

3.1.1. processed lawfully, fairly, and transparently concerning the data subject ("lawfulness, fairness, and transparency");
3.1.2. collected for specified, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes ("purpose limitation");
3.1.3. adequate, relevant, and limited to what is necessary concerning the purposes for which it is processed ("data minimization");
3.1.4. accurate and kept up to date; "Veneno Investment Group" Ltd. has taken all reasonable steps to ensure the timely erasure or correction of inaccurate personal data, considering the purposes for which it is processed ("accuracy");
3.1.5. kept in a form that permits identification of the data subject for no longer than necessary for the purposes for which the personal data is processed ("storage limitation");
3.1.6. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures ("integrity and confidentiality");
3.1.7. "Veneno Investment Group" Ltd. is responsible for and able to demonstrate compliance with the principles related to personal data processing ("accountability").

3.2. Grounds for collecting personal data:

3.2.1. "Veneno Investment Group" Ltd. collects and processes your personal data in connection with the use of the company's website and the subsequent provision of information, under Article 6, paragraph 1 of Regulation (EU) 2016/679 and specifically – based on your explicit consent as a customer/potential customer.