Privacy Policy

General information

From May 25, 2018, a new regulation for the protection of personal data (GDPR) adopted by the European Union is in force. The regulation aims to ensure the protection of the personal data of natural persons in all EU member states and to unify the regulations for their processing and protection.

In its capacity as a personal data administrator, Personal Bulgaria meets all the requirements of the new regulation by collecting and processing personal data of natural persons to the extent necessary for the provision of products and services, and stores them responsibly and legally.

Information about the company that processes your data

Name: Personal Bulgaria
EIK/BULSTAT: 202199139
Management address: 1000 Sofia, Vitosha Blvd. No. 29
Address for correspondence: 1000 Sofia, 29 Vitosha Blvd
E-mail: info@personalbulgaria.eu
Website: www.personalbulgaria.eu
Phone: 00359 879 821052
Certificate of registration for intermediary activity: No. 2644 of 26.10.2018.
Personal data controller certificate: No. 431490

Information about the competent supervisory authority for the protection of personal data

Name: Personal Data Protection Commission
Headquarters and management address: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2
Address for correspondence: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg

What is the Personal Data Privacy Policy of Personal Bulgaria?

The personal data privacy policy aims to provide you with comprehensive information in a clear and accessible language about what actions are performed with the personal data you provide to Personal Bulgaria, including:

  • What personal data do we collect about you?
  • What is the purpose of their collection?
  • For how long do we keep the provided personal data?
  • Who do we share your personal data with?
  • How do we notify you of a change to our Privacy Policy?
  • What types of cookies do we use and for what purpose?
  • What are your rights regarding the provided personal data?
  • What is the scope of our Privacy Policy?

With this Personal Data Privacy Policy, Personal Bulgaria declares that it applies all technical and organizational measures to protect the personal data of natural persons, which are prescribed by laws or other normative acts at the national and European level.

What is personal data?

Personal data is any information or data that can directly or indirectly identify an individual. An example of indirect identification is your mobile phone number. An example of direct identification is a unique identifier such as social security number, first name, last name and last name, customer code, etc.

What personal data does Personal Bulgaria collect for you?

  • Name, surname and last name;
  • Phone number;
  • Email;
  • Address;
  • Identification number;
  • ID card or other identity document number;
  • Date of issue of an identity card or other identity document;
  • Bank account data /if necessary/;
  • Gender /when this is required by partners of the relevant service – for example employers/;
  • Health status /when this is required by partners of the relevant service – for example employers/;
  • Cookies to identify your browser or device.

On what basis does Personal Bulgaria collect, process and store your personal data?

Personal Bulgaria collects and processes your personal data in connection with the use of the website personalbulgaria.eu, as well as in connection with the conclusion of contracts with the company on the basis of Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), and more specifically on the following grounds:

  • Express consent received from you as a customer;
  • Fulfillment of the Administrator’s obligations under the contract with you;
  • Compliance with a legal obligation that applies to the Administrator;
  • For the purposes of the legitimate interests of the Administrator or a third party.

What are the purposes of collecting, processing and storing your personal data?

(1) We collect and process the personal data that you provide to us in connection with the use of the personalbulgaria.eu website and the conclusion of a contract with the company, including for the following purposes:

  • individualization of a party to the contract;
  • accounting purposes;
  • statistical purposes;
  • information security protection;
  • ensuring the performance of the contract for the provision of the relevant service;
  • sending information messages about new products or services when registering to receive an electronic newsletter;
  • participation in events and training seminars organized by the company and its partners;
  • participation in holding games, raffles, advertising campaigns.
  • For answers to your inquiries, opinions and recommendations;
  • fulfillment of obligations to the National Revenue Agency, the Ministry of Internal Affairs and other state and municipal bodies.

(2) We observe the following principles when processing your personal data:

  • legality, good faith and transparency;
  • limitation of processing purposes;
  • relevance to the purposes of the processing and minimization of the collected data;
  • accuracy and timeliness of the data;
  • limitation of storage in order to achieve the goals;
  • integrity and confidentiality of processing and ensuring an appropriate level of personal data security.

How does Personal Bulgaria collect and process your personal data?

In order to provide you with products or services, Personal Bulgaria collects the personal data provided by you in the following ways:

  • by completing a registration form on the Personal Bulgaria website;
  • by filling in forms, contracts and declarations provided to you by employees or representatives of Personal Bulgaria. The forms are provided and completed in a free form provided to you on paper or electronic media. Contracts and declarations are provided by employees or representatives of Personal Bulgaria in blanket form;
  • when updating data at your request and filling out an update form on paper or electronic media;
  • by processing information about your visits to the website of Personal Bulgaria;
  • by processing information about IP addresses, cookies, operating system, browser type, etc.
  • Personal Bulgaria collects your personal data through the following means: email; telephone; on site at the office of Personal Bulgaria, at the office of another of our partners;
  • When processing your personal data, Personal Bulgaria complies with the following principles laid down in Article 5 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL, dated April 27, 2016, regarding the protection of natural persons in connection with the processing of personal data data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation), namely:
  • legality, good faith and transparency;
  • limitation to the purposes of processing;
  • relevance to the purposes of the processing and minimization of the collected data;
  • accuracy and timeliness of the data;
  • limitation of storage in order to achieve the goals;
  • integrity and confidentiality of processing and ensuring an appropriate level of personal data security.

Personal Bulgaria does not collect or process personal data that:

  • reveal ethnic origin;
  • reveal race;
  • reveal political, religious or philosophical beliefs or membership in various organizations;
  • disclose genetic and biometric data;
  • reveal data about sex life or sexual orientation.

Personal Bulgaria collects the personal data of the persons to whom they relate. Personal Bulgaria does not perform automated decision-making for personal data. The company does not collect and process data for persons under the age of 16, except with the express consent of their parents or legal representatives.

How long does Personal Bulgaria store your personal data?

Depending on the basis on which we collect, store and process your personal data, the storage period is different.

(1) Personal Bulgaria stores your personal data within the statutory period or until withdrawal of consent for processing. Upon successful completion, the Administrator shall take reasonable care to delete and destroy all Your data without undue delay or to anonymize it (i.e. make it in a form that does not reveal your identity).

(2) Personal Bulgaria stores your personal data, provided in connection with concluded contracts, for a period of 5 years for the purpose of protecting the legal interests of Personal Bulgaria EOOD in legal or administrative disputes with users of the website, and the accounting documents are stored for the relevant statutory term.

(3) Personal Bulgaria notifies you in the event that the data storage period needs to be extended in order to fulfill a legal obligation or in view of legitimate interests of Personal Bulgaria EOOD or otherwise.

(4) After the expiration of the terms entered in the normative acts and in the relevant laws in the Republic of Bulgaria, and in the event that there is no legal basis for continuing the storage of your personal data, your information is destroyed.

(5) Personal Bulgaria stores the personal data of the legal representatives of its commercial partners for the period of performance of the contract, to comply with the legitimate interests and legal obligations of Personal Bulgaria, and this period may exceed the term of the concluded contract.

To whom may we pass on your personal data?

Personal Bulgaria undertakes NOT to provide your personal data to third parties without your express consent, except when this is necessary for the fulfillment of contractual obligations towards you.

(1) Personal Bulgaria may, at its own discretion, transfer part or all of your personal data to processors of personal data for the fulfillment of the purposes for processing that you have agreed to, subject to compliance with the requirements of Regulation (EU) 2016/679 (GDPR).

(2) Personal Bulgaria notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations.

Are there other cases in which we may pass on your personal data?

Your personal data is also provided to third parties in the following cases:

  • At the request of the natural person who provided the data, subject to the protection of personal data;
  • At the request of competent authorities, according to the current legislation of the Republic of Bulgaria and the European Union.

In all the above cases, the persons to whom we provide your personal data have declared that they provide an adequate level of personal data protection, including the foreign companies positioned within the EU and EEA. With regard to companies positioned outside the EU and EEA, for each specific case the relevant company ensures that it provides an adequate level of personal data protection, complying with the requirements of European legislation.

User profiling - use of cookies

The Personal Bulgaria website uses cookies.

“Cookies” are small text files that are saved on your computer when you visit the Personal Bulgaria website. In the event that you access this web page at another time, your browser sends back the contents of the “cookies” to the respective provider and thus enables the re-identification of the terminal device. Reading cookies allows us to design our website optimally for you and makes it easier for you to use it.

Cookie Policy

The Personal Bulgaria website uses “cookies”, which are important for its correct operation. By visiting our site, you accept the use of “cookies”.

Types of "cookies" used by the Personal Bulgaria website

Required cookies
These “cookies” are necessary for the correct operation of the website. Without these cookies, some services and/or functionalities will not be available.

Analytical cookies
These cookies are needed to collect information about how visitors use our website. All information collected by these cookies does not contain personal data. It is used to improve the website.

Functional cookies
These cookies are needed to track the choices the user makes on the website. In this way, you are provided with more accurate, relevant and personalized website content.

“Cookies” for accurate display of content
These cookies contain information about how you use the website and may be triggered by our advertising partners. They do not store personal information.

The settings for the “cookies” that you accept from the website of Personal Bulgaria can be made in the web browser that you use. Restricting certain types of “cookies” may lead to incorrect or incomplete operation of the site, as well as to the inability to use its full functionalities.

What rights do you have regarding the collection, processing and storage of your personal data?

In compliance with Bulgarian and European legislation, including Regulation 2016/679 of the EU (GDPR) on the protection of personal data, you can exercise the following rights:

  • The right to access the personal data that Personal Bulgaria processes for you and to receive a copy of them;
  • The right to request from Personal Bulgaria a correction, in case you find inaccuracies or the need to update your personal data, by sending an email to: info@personalbulgaria.eu;
  • The right to request the blocking of your personal data or restriction of the processing of personal data in the cases determined by law and the Regulation;
  • The right to request erasure, i.e. deletion of your personal data by Personal Bulgaria EOOD, in case there are conditions for this;
  • The right to object to the processing of your personal data for direct marketing purposes by using the “unsubscribe” link we have included in any email sent to you containing promotional information about our products and services;
  • The right to object to the provision of your personal data to third parties by sending an email to: info@personalbulgaria.eu;
  • The right, whenever you wish, to withdraw your consent to your personal data being processed for the purposes for which you have consented by sending an email to info@personalbulgaria.eu;
  • The right to request portability of your personal data in a structured, machine-readable format that is commonly used;
  • The right to file a complaint or request for the protection of your rights before the Commission for the Protection of Personal Data, if the prerequisites for this are met.

You can exercise all rights at any time regarding the processing of your personal data. The Administrator may request that you verify your identity and identity with the data subject on-site at the Company’s office in front of an employee of ours.

What does each of the rights listed mean?

Right of access to your personal data
This right gives you the opportunity to obtain information about the data that identifies the administrator and his representative, the purposes of the processing of the personal data, the recipients or categories of recipients to whom the data may be disclosed, data on the mandatory or voluntary nature of the provision of the data and the consequences of refusal to provide them, as well as information on the right of access and the right to correct the collected data.

The data are not provided when the natural person to whom they refer already has them or there is an explicit prohibition to provide them by law.

Right to deletion, access, correction, blocking
The right at any time to ask the administrator to delete, correct or block personal data, the processing of which does not meet the requirements of the GDPR, as well as the right to ask the administrator to notify the third parties to whom the personal data were provided of any deletion , correction or blocking that has been carried out, except in cases where this is impossible or involves excessive efforts.

Right to object
Right to object to the administrator against the processing of the personal data of the natural person if there is a legal basis for this, as well as against the processing and provision of your personal data to third parties for the purposes of direct marketing. You have the right to be notified before your personal data is provided for the first time to third parties or used on their behalf for direct marketing purposes, and you have the right to object to such provision or use.

Right of portability
When the processing of personal data takes place in an automatic way, you have the right to receive the personal data concerning you that you have provided to the administrator in a structured, widely used, machine-readable and interoperable format and to transmit them to another administrator.

This right should apply where the data subject has provided the personal data on the basis of his own consent or the processing is necessary due to a contractual obligation. The right should not apply where the processing is based on a legal basis other than consent or contract. Due to its very nature, this right should not be exercised in relation to controllers processing data in the performance of their public duties. Therefore, this right should not apply when the processing of personal data is necessary to comply with a legal obligation to which the controller is subject, or to perform a task in the public interest, or in the exercise of an official authority granted to the controller. The data subject’s right to transmit or receive personal data relating to him does not create an obligation for controllers to adopt or maintain technically compatible processing systems. Where more than one data subject is affected in a particular package of personal data, the right to receive the personal data should not affect the rights and freedoms of other data subjects in accordance with this Regulation.

Right to make a complaint or request to the Commission for the Protection of Personal Data
In the event of a violation of your rights, you have the right to refer the Commission for the protection of personal data within one year of becoming aware of the violation, but no later than five years after its commission. In case of violation of your rights, you have the right to appeal actions and acts of the administrator in court or before the Supreme Administrative Court. The court cannot be referred to if there is a pending proceeding before the Commission for the same violation or a decision of the CPLD regarding the same violation has been appealed and no court decision has entered into force.

What is the scope of the Personal Data Privacy Policy of Personal Bulgaria EOOD?
The personal data privacy policy covers all products and services offered by Personal Bulgaria EOOD. Products and services with separate privacy statements that do not include this Privacy Policy are excluded from this policy.

The Privacy Policy does not cover products and services offered by other companies or individuals, including products, services or websites that may be shown to you in search results, websites that may include products and services of Personal Bulgaria EOOD, or other websites to which there are links to products and services of Personal Bulgaria EOOD. The policy does not cover the information practices of other companies and organizations that advertise the products and services of Personal Bulgaria EOOD and that may use cookies, pixel tags and other technologies to display and offer relevant advertisements.

Changes to Personal Data Privacy Policy of Personal Bulgaria EOOD

For all changes in this Personal Data Privacy Policy, we declare that we will notify you by sending a letter by electronic means (e-mail) to the e-mail address provided by you.

We thus provide you with the opportunity to discontinue the use of some or all products and services and/or to exercise your rights, some of which are expressly stated above. In addition, Personal Bulgaria EOOD will take all possible measures to inform in case of changes regarding the protection of personal data by placing notices in the offices and on the website of Personal Bulgaria EOOD.

This Personal Data Privacy Policy has been adopted by Personal Bulgaria EOOD and is in effect since May 2018.