PERSONAL DATA PROTECTION INFORMATION

Below Prizmos Ltd presents find brief information to the users of personalized marketing messages regarding the collection, purposes and processing of personal data, as provided pursuant to this declaration of consent. The entire information about the collection and processing of personal data is available in the Privacy policy of Prizmos Ltd.

Data controller

Your personal data controller is Prizmos Ltd a company incorporated under the laws of Bulgaria, with a registered address in Sofia, Bulgaria, registered in Commercial Register under number 202432360 (called hereinafter: „Prizmos”).

In order to contact us please:

a) send us an email to the following address: dpo@caristaapp.com,
b) send us a letter to the following address: 147 Knyaz Boris I Str., 1000 Sofia, Bulgaria;

Objectives and legal basis of the personal data processing

If you granted this consent, we process your data only for the purposes to provide you with marketing message via email with information about suitable services and products of Prizmos Ltd and services and products we consider relevant for you, based, based on your previous purchases within the Carista App and your use of services thereof, including information about promotions, promo codes, discounts of already used services and products within Carista App.

The legal basis for this processing is your consent.

Obligation of disclosing data

Disclosing your personal data is voluntary. However, if you do not agree to share these with us, we will be unable to provide you with information about relevant and suitable promotions of our services and products.

Data processing period

Personal data for the processing of which you granted consent, shall be processed until the moment you decide to withdraw the consent, however, not longer than 5 years since collection of personal data, except if there is longer period applicable, for instance in cases of court or administrative proceedings.

You are entitled to:

You are entitled to the following rights:

  • A right to access your personal data,
  • A right to rectify your personal data.
  • A right to delete your personal data.
  • A right to limit your personal data processing.
  • A right to transfer your personal data.
  • A right to withdraw your consent for personal data processing which you granted to us, utilizing that right will however not impact the compliance with the right to process of personal data which took place until the withdrawal moment.
  • A right to object to the unlawful processing of your personal data.
  • A right not to be subject to a decision, based on an automated processing.
  • A right to file a complaint before the Commission of Personal Data Protection or before a court in connection with your personal data processing by us.

Automated decision making process

We use automated tools to analyse some of the information you provide to us, together with your interactions with our website, emails, ads, forms, and services. This helps us understand your interests and send you more relevant marketing communication.

Profiling may be carried out automatically by our marketing systems based on factors such as:

  • the information you provide in forms;
  • your consent preferences;
  • products or services you have viewed or selected;
  • your interaction with our emails, website, campaigns, or advertisements;
  • your customer history, where/ if applicable.

The profiling is used only for marketing segmentation and personalisation, for example to decide which offers, content, reminders, or campaigns may be more relevant to you.

We do not use this profiling to make decisions that produce legal effects or similarly significant effects for you. It does not affect your legal rights, access to services, pricing eligibility, or contractual position.

In some cases, our team may review or adjust marketing segments manually to make sure the communication is appropriate and relevant.

You can withdraw your marketing consent or object to this type of profiling at any time by using the unsubscribe link in our emails or by contacting us at dpo@caristaapp.com.

Personal data protection measures

The access to the processed personal data is limited to the persons, who perform marketing strategies and actions within the company, and other employees do not have access to this data. Pseudonymized data about purchases is available to the business team within the company for business strategies and development plans.

Personal data transfer

We do not transfer your personal data to other bodies or units. Your personal data are not transferred to any international organizations and is not transferred outside of the European Union.