Data for the Administrator:

Who are we?
ESTELINE MEDICAL – IPSMPD offers a comprehensive concept of beauty and health – cosmetic procedures, consultations with a rehabilitator, complex therapies to maintain health.

Contact information for ESTELINE MEDICAL – IPSMPD:

Location:
Country: Bulgaria
Address: z.k. Studentski Grad, Yordan Yosifov St. No. 1A, 3rd floor
Phone: 02 405 8000
El. mail: info@aestheline.com
Internet pages: https://www.aestheline.com/

Data Protection Officer contact details:

Our Data Protection Officer can be contacted directly here:
El. mail: administration@aestheline.com
Phone: 0988 156 161

The personal data we collect and process from you are:

Your personal data that we usually process in connection with our business are as follows:

  • Name: First name, last name and last name
  • Identification: Uniform civil number
  • Contacts: E-mail, address and phone number
  • Address: permanent or current
  • Bank information: bank account number

Special categories of data we process:

In order to provide you with our services, we process data regarding your state of health.
We do not process data about your racial or ethnic origin, political views, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data about sex life or sexual orientation.

Source:

The data we process for you is provided to us personally by you, by your proxy or legal representative.

We declare that the personal data we collect will only be used for the following purposes:
  • Performance of a contract with you or our intention to enter into a contract;
  • Direct marketing; or
  • To comply with our legal obligations.
The basis that entitles us to process your data is:
  • Processing is based on your consent; or
  • The processing of your data is necessary for the performance of a contract with you or our intention to enter into a contract; or
  • Processing is necessary to comply with our legal obligations.
The following organizations/persons will receive your personal data:

ESTELINE MEDICAL – IPSMPD may transfer your personal data to our service sub-providers who have entered into a contract with us.

Consent:

By agreeing to accept this Privacy Statement (personal data privacy notice), you give us permission to process your personal data only for the purposes we specify.
Consent is necessary for us to process both types (ordinary and special) of personal data, but it needs to be explicit.
In cases where we ask for consent for special (sensitive) personal data, we will always justify why and how this information will be used.
You can withdraw your consent at any time by informing us in accordance with our Subject Rights Policy.

Transfer of personal data to a country outside the EU or to an international organization

ESTELINE MEDICAL – IPSMPD has no intention of passing on your personal data to third parties without your prior consent.

Data retention period

ESTELINE MEDICAL – IPSMPD will store your personal data for no more than five years, and the data will be stored according to the procedures adopted by us.

Your rights as a subject of personal data are as follows:

At any time while we store or process your personal data, you (according to the legal terminology – data subject) have the following rights:

  • you have the right to request a copy of your personal data from ESTELLINE MEDICAL – IPSMPD and the right to access your personal data at any time;
  • you have the right to request from ESTELLINE MEDICAL – IPSMPD your personal data in a form convenient for transfer to another personal data administrator or to request that we do so without being hindered by us;
  • you have the right to ask ESTELLINE MEDICAL – IPSMPD to correct your inaccurate personal data, as well as data that is no longer up-to-date, without undue delay;
  • you have the right to request from ESTELINE MEDICAL – IPSMPD that your personal data be deleted without undue delay if any of the following grounds exist:
    • the personal data are no longer necessary for the purposes for which they were collected;
    • when you have withdrawn your consent;
    • when you have objected to the processing,
    • when the processing is unlawful;
    • where the personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to us as a personal data controller;
    • when personal data were collected in connection with the provision of information society services.
  • We may refuse to delete your personal data for the following reasons:
    • in exercising the right to freedom of expression and the right to information;
    • for compliance with a legal obligation on our part or for the performance of a task of public interest,
    • for reasons of public interest in the field of public health;
    • for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, to the extent that deletion is likely to make impossible or seriously hinder the achievement of the purposes of this processing; or for the establishment, exercise or defense of legal claims.
  • you have the right to ask ESTELLINE MEDICAL – IPSMPD to limit the processing of your personal data, in which case the data will only be stored, but not processed. Our refusal to limit will be expressly only in writing, and we are obliged to motivate it with the lawful reason;
  • you have the right to withdraw your consent to the processing of your personal data at any time with a separate request addressed to the administrator;
  • you have the right to object to certain types of processing, such as direct marketing (unsolicited advertising messages);
  • you have the right to object to automated processing, including profiling;
  • you have the right not to be subject to a decision based solely on automated processing involving profiling;
  • if we need to use your personal data for a new purpose that is not covered by this data protection declaration, we will provide you with a new data protection notice and, when and where necessary, we will request your prior consent for the new processing.

All of the above requests will be forwarded if there is a third party (recipients including non-EU and international organizations) processing your personal data.

You have the right to appeal to the supervisory authority

You have the right to file a complaint directly with the supervisory authority, the competent authority being the Commission for the Protection of Personal Data, address: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2 (www.cpdp.bg).

In the event that you wish to file a complaint regarding the processing of your personal data by ESTELLINE MEDICAL – IPSMPD (recipients, including non-EU and international organizations), you can do so at the indicated contact details of ESTELLINE MEDICAL – IPSMPD or directly to the Protection Officer of the details (of the above contact details.)

You can read more about how and why we use your data here: https://www.aestheline.com/rights