Information about the personal data management activities of GREEN WAY FOOD (SHANGHAI) LTD.

which was prepared in order to comply with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (hereinafter: Regulation).

1. Name and contact information of the Data Controller:

Name of the Data Controller: GREEN WAY FOOD (SHANGHAI) LTD.
(company registered office: ROOM 1322, 13TH FLOOR, BUILDING 1, NO. 55 AONA ROAD, CHINA)

Contact details of the Data Controller:
– e-mail: ali@gwfoods.com

2. Name and contact information of the representative of the Data Controller:

The name of the Data Controller’s representative: Mr. Ali Sharifehzadeh, Founder

Contact details of the representative of the Data Controller:
– e-mail: ali@gwfoods.com

3. Purposes and legal bases of data management:

3.1. The purpose of data management:

Maintaining contact with Customers, Facilitators (hereinafter collectively: concerned), fulfilling contracts, fulfilling legal interests.

3.2. Legal basis for data management:

Data management is primarily based on point b) of Article 6 (1) of the Regulation, i.e. data management is necessary to fulfil the contract. In the case of facilitators, it is based on point a) of Article 6 (1) of the Regulation, i.e. data management is based on the consent of the data subject.

4. Consequences of failure to provide datas:

If the data subject does not provide the necessary data, the Data Controller cannot provide its services.

5. Categories of personal data managed by the data controller and their sources:

Personal data categories:
– Name of natural person, mother’s name, place and time of birth, address, tax ID number, telephone number, email address, bank account number
– Name, registered office, company registration number, tax identification number, statistical number, name, telephone number, email address, bank account number of the authorized representative of the non-natural person.

6. Data processors to whom the processed personal data may be forwarded:

The data controller will not forward the data subject’s personal data to data processors or third countries. They may only be published upon formal request by authorities or official bodies with appropriate legal basis.

7. Storage period of personal data managed by the data controller:

The data controller stores documents for the fulfillment of tax and accounting obligations for the period specified in applicable tax and accounting legislation, so, if this is not stipulated, the retention period of data contained in the contract will also be adjusted to this period. Other purposes and legal bases for data management (e.g. enforcement of legal claims).

The period of data management by the coordinator shall be 1 year from the date of conclusion of the last contract, the conclusion of which was effected by the data subject, but shall not be extended until the data subject withdraws his or her consent.

8. Data subjects’ rights with respect to data management:

8.1. Right of access to processed personal data

Data subjects have the right to access their personal data managed by the data controller as well as the following information:
a) Purpose of data management;
b) the categories of personal data concerned;
c) in relation to data processors to whom personal data has been or will be disclosed;
d) Regarding the planned storage period of the personal data, or, if this is not possible, the criteria for determining that period;
e) The data subject has the right to request the data controller to correct, delete or restrict the processing of personal data relating to him or her, and to object to the processing of such personal data;
f) The right to lodge a complaint with the National Data Protection and Freedom of Information Authority and the right to access the courts;

The data controller will provide the data subject with a copy of the personal data of which he is the data controller upon request. The data controller may charge a reasonable fee based on administrative costs for additional copies requested by the data subject. If a data subject submits an access request electronically, the data controller will provide the information in electronic format unless the data subject requests otherwise.

8.2. Right to rectify

The data subject shall have the right to request from the data controller without delay the rectification of inaccurate personal data concerning him or her.
The data subject has the right to request the completion of incomplete personal data.

8.3. Right to deletion

The data subject has the right to request the data controller to immediately delete the personal data related to the data subject, and if one of the following reasons exists, the data controller is obliged to immediately delete the personal data related to the data subject:
a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) Personal data is illegally processed;
c) or the personal data must be erased for compliance with a legal obligation under Union or Member State law applicable to the data controller.

The data subject cannot exercise the right to deletion if the following circumstances occur in data management:
a) For the purpose of exercising the right to freedom of expression;
b) for compliance with obligations arising from Union or Member State law applicable to the data controller requiring processing of personal data, or for the performance of a task carried out in the public interest or in the exercise of public authority vested in the data controller, or;
c) Necessary for the filing, enforcement and defense of legal claims.

8.4. Right to restrict data processing

The data subject has the right to ask the data controller to restrict the processing of data at his or her request if one of the following conditions is met:
a) The data subject contests the accuracy of the personal data, in which case a limitation shall apply to the period within which the data controller checks the accuracy of the personal data;
b) The data management is illegal and the data subject objects to the deletion of the data and requests restriction of its use;
c) The personal data are no longer required by the data controller for the purposes of data management, but they are requested by the data subject for the establishment, exercise or defense of legal claims.

Subject to data management restrictions, personal data may only be processed with the consent of the data subject, except for the storage, submission, exercise or defense of legal claims or for the protection of the rights of other natural or legal persons. or is in the important public interest of the Union or a Member State. If the restriction no longer exists, the data controller notifies the data subject in advance of the lifting of the data management restriction.

8.5. Right to data portability

For personal data controlled by a data controller, the data subject shall have the right to receive that data in a segmented, widely used, machine-readable format, and he shall also have the right to have that data transmitted to another data controller without the data. . The controller prevents him from doing so.

In exercising this right, the data subject may request the direct transmission of personal data between controllers, where technically feasible.

8.6. right to remedy

The Data Controller assists interested parties in complying with 8.1.-8.5. Contents of this Notice. Exercise your rights under the Terms. The data controller shall not refuse to comply with a data subject's request to exercise these rights unless it can be demonstrated that the data subject cannot be identified.

The data controller shall inform the data subject immediately, but in any event within one month of receipt of the request, of the steps taken upon request to exercise the above-mentioned rights. If necessary, taking into account the complexity of the application and the number of applications, this period can be extended by a further two months. The data controller shall notify the data subject of the extension of the period within one month of receipt of the request, stating the reasons for the delay.

If the data subject submits a request electronically, the information must be provided electronically wherever possible, unless the data subject requests otherwise.

If the data subject submits a request electronically, the information must be provided electronically wherever possible, unless the data subject requests otherwise.

If the data controller fails to take action, the data subject has the right to information self-determination and freedom of information CXII 2011. Initiate an investigation by submitting a report to the National Data Protection and Freedom of Information Authority pursuant to Article 52(1) of the Act on the grounds that an infringement of rights has occurred with respect to the management of your personal data, or that such an infringement exists of imminent threats.

Investigations by the National Data Protection and Freedom of Information Agency are free of charge and the costs of the investigation are advanced and borne by the Agency.

If the rights contained in this information are violated, the data subject may also bring legal proceedings against the data controller before the courts. The adjudication of proceedings falls within the jurisdiction of the courts. Affected persons may, at their option, bring proceedings before a court of competent jurisdiction based on their place of residence or stay. The court acted out of order in this case.