Privacy Policy

1. What is Personal Data?

Personal data is information that directly or indirectly identifies you as an individual, with “indirectly” meaning when combined with other information such as your name, postal address, email address (e-mail), phone number, and similar details.

2. How do we process your personal data?

We at “DIM Golden Group” EOOD – the administrator of the website https://after-foods.com (the “Website”) – will use your personal data solely for the purpose of fulfilling the contract for the delivery of goods to which you are a party when ordering items from our website https://after-foods.com, as well as for the purpose of further communication with you if you have chosen to contact us via any of our phone numbers or email addresses – support@after-foods.com ; dimgoldengroup@gmail.com.

Please be assured that we do not collect or process more or other types of personal data than are necessary to fulfill the purposes specified in this Privacy Policy.

We will use personal data only as stated in this policy, unless you have given us your explicit consent for another use of your personal data, such as through an express declaration of consent to receive marketing communications.

3. What personal data do we process?

For the purpose of registering a user profile on the Website and fulfilling the obligations under the contract for the sale and delivery of goods, we will process the following categories of your personal data:

(1) full name – first name, middle name, last name;
(2) postal address;
(3) email address;
(4) contact phone number.

The listed categories of personal data are only those that you provide to us when placing an order for the delivery of goods. “DIM Golden Group” EOOD will not request any other personal data from you for the fulfillment of the contract for the sale and delivery of goods.

If you give your consent to receive the AFTER-FOODS newsletter, we will also process your personal data for the purposes of direct marketing and sending an email newsletter featuring our latest promotions, news, and current offers to your specified email address. In this case, “DIM Golden Group” EOOD will process only the following categories of your personal data: first name, last name, and email address.

We may be required to process and store personal data on legal grounds and to ensure regulatory compliance, such as for the prevention, detection, or investigation of a crime, or the prevention of loss, fraud, or other types of financial abuse.

4. Use of the Homepage of https://after-foods.com:

This Privacy Policy also applies to your use of our website https://after-foods.com, with the following mechanisms and features related to the protection of personal data.

(1) “Cookies”: Our Website uses “cookies” and other technologies to improve user experience and Website performance, usability, and security, as well as for research purposes related to advertising effectiveness. Please see our Cookie Policy for more details.

(2) Third-Party Websites: For the convenience of our visitors, this portal may contain links to various websites that are not affiliated with, controlled, or managed by us. The policies and procedures described here do not apply to those websites. We are not responsible for the security or protection of any data collected by these third parties. We advise you to contact these websites directly for information regarding their data protection policies.

5. Who do we share your personal data with:

We will disclose your personal data only for the purposes and only to those third parties listed below – unless we have obtained additional consent from you for the transfer of personal data to other categories of third parties, given elsewhere, such as through a declaration of consent for a specific purpose. “DIM Golden Group” EOOD will take appropriate measures to ensure that your personal data is processed, protected, and transferred in accordance with applicable legislation.

(1) External service providers

When necessary, we engage other companies and individuals to perform certain tasks on our behalf, such as companies delivering our goods – postal operators, courier and freight forwarding companies, and specialized companies for the maintenance of our website. Such information will be shared with or accessed by external service providers only to the extent necessary for the respective purposes. This information may not be used by them for any other purposes, and specifically neither for their own purposes nor for the purposes of third parties. The external service providers of “DIM Golden Group” EOOD are bound by law or by contract to observe the confidentiality of your personal data.

(2) Corporate restructuring and acquisition of shares:

In connection with a transformation, restructuring, merger, sale, or other type of asset transfer, “DIM Golden Group” EOOD will transfer information, including personal data, to a reasonable extent to the acquirer of these shares or assets, and as necessary for the transfer of ownership, after the receiving party agrees to process your personal data and apply the necessary measures for its protection in a manner consistent with applicable Bulgarian and European legislation.

(3) Competent authorities:

We will disclose your personal data to public authorities when required by law. For example, “DIM Golden Group” EOOD will comply with requests from courts, administrative, and other public state or municipal bodies, which may include similar state or municipal authorities.

We do not transfer your personal data, nor any information that may concern you, outside the territory of the Republic of Bulgaria.

6. Processing of personal data of children:

“DIM Golden Group” EOOD does not collect or process personal data of children under 14 years of age, except with the consent of a parent or guardian in accordance with applicable local legislation. If we learn that personal data of a child has been accidentally collected, we will promptly delete the data in question.

7. Processing of special categories of personal data (“sensitive” data):

“DIM Golden Group” EOOD does not process so-called special categories of personal data, namely: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the sole purpose of identifying a natural person, data concerning health, or data concerning a natural person’s sex life or sexual orientation.

8. Security of your data:

“DIM Golden Group” EOOD takes the security of your personal data seriously. We apply an appropriate level of protection, and for this purpose, we have implemented reasonable physical, electronic, and technical procedures to safeguard the data we collect from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed. Access to your personal data is granted only to those employees, service providers, or individuals affiliated with “DIM Golden Group” EOOD on a need-to-know basis, or who require it to perform their job duties or fulfill a contract. In the event of a data breach involving personal data, “DIM Golden Group” EOOD will comply with all applicable notification regulations for such cases.

9. What are your legal rights?

As a data subject, you have specific legal rights regarding the personal data we collect from you. This applies to all processing activities that “DIM Golden Group” EOOD carries out with your personal data and which are listed above. “DIM Golden Group” EOOD respects your individual rights and will always respond to your questions and inquiries regarding the ways in which we process the personal data received from you.

The following list contains information about your rights arising under applicable data protection laws:

Right to rectification: You have the right to the rectification of the personal data concerning you. We make reasonable efforts to ensure that the personal data in our possession and under our control, which is regularly processed, is accurate, complete, up-to-date, and relevant, based on the latest information available to us.

• Right to restriction: You have the right to restriction of processing of your personal data if:
– you contest the accuracy of your personal data, for the period we need to verify their accuracy,
– the processing is unlawful and you request the restriction of processing instead of the erasure of your personal data,
– we no longer need your personal data, but you require them for the establishment, exercise, or defense of legal claims, or
– you object to the processing, pending verification of whether our legitimate grounds override yours.

• Right of access: You have the right to ask us for information about the personal data we hold about you, including information regarding what categories of personal data we possess or control, what they are used for, where we obtained them from if not directly from you, and to whom they have been disclosed, if applicable. You have the right to one free copy of the personal data we hold about you. In accordance with applicable laws, we reserve the right to charge a reasonable fee for any additional copy after the first one that you may request.

• Right to data portability: At your request, we will transfer your personal data to another controller where technically feasible, provided that the processing is based on your consent or on a contractual obligation. Instead of receiving a copy of your personal data, you may request that we transfer them directly to another controller designated by you.

• Right to erasure: You have the right to the erasure of your personal data if:
– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
– you have the right to object to further processing of your personal data (see below) and you exercise this right to object to the processing;
– the processing is based on your consent, you withdraw this consent, and there is no other legal basis for the processing;
– the personal data have been unlawfully processed;

unless processing is necessary for any of the following reasons:
– for compliance with a legal obligation that requires processing on our part;
– in particular, for archiving purposes in the public interest;
– for the establishment, exercise, or defense of legal claims.

• Right to object: You may object at any time to the processing of your personal data in connection with your particular situation, in cases where the processing is not based on our legal obligation to do so. In such a case, we will cease all active processing activities of your personal data, unless we demonstrate that compelling legal grounds exist which override your interests, or for the establishment, exercise, or defense of legal claims. If you object to the processing, please specify whether you wish for the erasure of your personal data or the restriction of processing on our part.

• Right to lodge a complaint:
In the event of an alleged violation of applicable data protection laws, you may lodge a complaint with the data protection supervisory authority – the Commission for Personal Data Protection (CPDP).

Additional information required to exercise your rights:

• Timeframe:
We will endeavor to fulfill your requests to exercise rights or request information from us concerning your personal data within the statutory period of 30 (thirty) days, whereby this period may be extended due to specific reasons related to the particular legal right or due to the complexity of your request, of which we will certainly notify you before the expiration of this period.

• Restriction of access:
In certain situations, we may not be able to grant you access to all or part of your personal data due to statutory provisions. If we refuse your request for access, we will inform you of the reason for this refusal.

• Inability to identify:
In some cases, we may not be able to verify your personal data based on the identifiers provided in your request. In such cases, when we cannot identify you as a data subject, we do not have the objective ability to fulfill your request to exercise your legal rights as set out in this section, unless you provide us with additional information enabling us to identify you.

• Exercise of your legal rights:
To exercise your legal rights, please contact us at the addresses specified at the end of this policy.

10. Retention of your personal data:

In general, we will retain the personal data you have provided to us for the purposes of the sale and delivery of goods for as long as necessary to fulfill the delivery, as well as for a longer period insofar as required by the applicable regulations governing the requirements for accounting and cash flow control of the company, and as evidence of the performance of our contractual obligations under the contract for the sale and delivery of goods, in the event that you have purchased a product sold by “DIM Golden Group” EOOD (https://after-foods.com).

11. Changes to this policy:

We reserve the right to change our data protection practices and to update and amend this policy at any time. For this reason, we invite you to regularly review the policy. This data protection policy is up to date as of the date indicated after “Effective from:” on the document.

12. Contact details:

“DIM Golden Group” EOOD, with UIC 208080865, with registered office and address of management: Plovdiv, 154 Vasil Aprilov Blvd., fl. 7, apt./room 17, e-mail: dimgoldengroup@gmail.com.