POLICY FOR PROTECTION OF PERSONAL DATA
Mandatory information about the Privacy Policy
General information
From May 25, 2018. a new Data Protection Protection Regulation adopted by the European Union comes into force. The regulation aims to ensure the protection of data of individuals from all EU Member States and to harmonize the regulations for their processing.
Being an ad secretary of personal data "Vedin " Ltd. , meets all the requirements of the new regulation by collecting only individuals data insofar as they are necessary for the provision of the service and keeping them responsibly and legally.
Information about The Privacy Controller
1. Name "Vedin " Ltd
2. UIC / BULSTAT: 831726188
3. Registered office and address of management: 1164 Sofia, 58 Tzanko Tserkovski Str
4. Correspondence data: 1164 Sofia, 58 Tzanko Tserkovski Str
5. E-mail: office@vedin-bg.com
Information on the competent supervisory authority
1. Name: Commission for Personal Data Protection
2. Headquarters and address of management: Sofia 1592, "Prof. 2 Tsvetan Lazarov
3. Correspondence data: Sofia 1592, "Prof. 2 Tsvetan Lazarov
4. Phone: 02 915 3 518
5. Email: kzld@government.bg , kzld@cpdp.bg
6. Website: www.cpdp.bg
"Vedi" Ltd. operates in accordance with the Law on Personal Data Protection and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
Reason for collecting, processing and storing your personal data
Art. 1. (1) Vedin OOD collects and processes your personal data in connection with the design and construction of exhibition stands based on the following:
● Executive alnenie the duties of "Vedi" Ltd under a contract with you;
● You explicitly obtain your consent by requesting through the site of Veidin Ltd. https: // ww w. vedin .bg / en / contacts /
● It is the legitimate interest of Vein Ltd for its purpose.
Objectives and principles of collecting, processing and storing your personal data
Art. 2. (1) "Vedi" Ltd collects and processes personal data that you provide to us regarding the use of our services and to contract with the company, as well as an inquiry via the website "Vedi" Ltd., including for the following purposes:
● individualisation of a party to the contract;
● accounting purposes;
● protection of information security;
● securing the execution of the contract for the provision of the respective service;
(2) "Vedin " Ltd adheres to the following principles when processing your personal data:
● lawfulness, good faith and transparency;
● limitation of processing goals;
● relevance to processing goals and minimization of data collection;
● accuracy and timeliness of the data;
● restriction of storage in order to achieve the objectives;
● integrity and confidentiality of the processing, and ensuring an adequate level of security of personal data.
(3) In the processing and storage of personal data, Vedin Ltd can process and store personal data in order to protect its following legitimate interests:
● fulfilling its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.
What types of personal data are collected, processed and stored Vedin Ltd ?
Art. 3. (1) Vedin Ltd performs the following personal data operations for the following purposes:
● Conclusion and execution of a trade deal with a client or a partner
(2) Vedin Ltd. processes the following categories of personal data and information for the following purposes and on the following grounds:
● Data: Your individualized data: Name card or passport, PIN / ID, nationality, ID card / valid national identity document, address, email and phone.
○ Purpose for which data is collected: 1) performance of a contract with a trading partner and its administration;
○ Reason for processing your personal information - contractual ground
● Additional data provided by you - If you wish to make a request through the web site of Veda Ltd: https: //www.vedin .bg / bg / contacts /, you must complete an online form that requires: name, surname, email and phone.
○ Purpose for which data is collected: Request for information regarding the activities and services of Veidin Ltd.
○ Grounds for data processing: By accepting the general terms and privacy policy of the website, you give a clear consent to your personal data being processed for that purpose.
● Other data that Vedin Ltd processing - Exc. And entering our website, Vedin Ltd. collects data about the IP address used.
○ Purpose for which data is collected: Improve service security and interface localization, statistical and marketing research.
○ Grounds for data processing: The IP address is collected on the grounds of realization of the legitimate interests of the controller - Art. 6, para. 1, b. (f) by GDPR;
● Your data for issuing an invoice to an individual - If you would like an invoice to be issued to you as an individual, you should provide your single citizenship number.
○ Purpose for which data is collected: Issuing an invoice for making payments under a contract for the provision of services.
○ Reason for processing your personal information - At the conclusion of a written agreement between Veda Ltd. and you, a contractual relationship is created, on which basis we process your personal data - art. 6, para. 1, b. (b) GDPR.
(3) Vedin Ltd does not collect or process personal data that relate to the following:
● reveal racial or ethnic origin;
● reveal political, religious or philosophical beliefs, or membership of trade unions;
● genetic and biometric data, health data, or data on sexual life or sexual orientation.
(4) The data are collected by Veda Ltd. of the persons to whom they relate.
(5) The company does not make automated decision making with data.
Term of storage of your personal data
Art. 4. (1) Vedin Ltd store your personal data for a period no longer than the requirements of the applicable legislation for the specified term. After the expiration of this term, Vedy Ltd takes the necessary care to erase and destroy all your data without undue delay.
(2) Vedin Ltd. informs you in case the data storage period needs to be extended in order to meet the objectives, performance of the contract with the legitimate interest of Veda Ltd. or otherwise.
Transmitting your personal data for processing
Art. 5. (1) Vedin Ltd may, at its own discretion, transmit all or part of your personal data to processors for the purposes of processing, subject to the requirements of Regulation (EC) 2016/679.
(2) "Vedin " Ltd notifies you in the event of intention to submit some or all of your personal data to third countries or international organizations.
Your rights in the collection, processing and storage of your personal data
Withdrawal of consent to process your personal data
Art. 6. (1) If you do not wish all or part of your personal data to continue to be processed by Vedin Ltd. for any or all processing purposes, you may at any time withdraw your consent to processing by filling in an online form or by requesting free text.
(2) Vedin OOD may ask you to certify your identity and identity with the data subject.
Right of access
Art. 7. (1) You have the right to request and obtain from Veidin Ltd confirmation that personal data relating to you are being processed.
(2) You have the right to access the data related to it, as well as information relating to the collection, processing and storage of your personal data.
(3) "Vedin " Ltd. provides you with a copy of the processed personal data relating to you, on request, in electronic or other appropriate form.
(4) Providing access to the data is free of charge, but Vedin Ltd reserves the right to impose an administrative fee in case of repeatability or excessive demand.
Right of adjustment or replenishment
Art. 8. You may correct or fill in the inaccurate or incomplete personal data relating to You by requesting it to Veidin Ltd.
Right to delete ("to be forgotten")
Art. 9. (1) You have the right to ask Vedin Ltd for deletion of your personal data, and Vedin Ltd. has the obligation to delete them without undue delay when there is any of the following reasons:
● personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
● You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
● You object to the processing of personal data related to you, including for the purposes of direct marketing, and there are no legitimate grounds for processing that have an advantage;
● personal data has been tampered with;
● personal data must be deleted to comply with a legal obligation under EU law or the law of a Member State that applies to Vedin Ltd;
● personal data were gathered in connection with the provision of information society services.
(2) Vedin Ltd is not obliged to delete the personal data if it keeps and processes it:
● for the exercise of the right to freedom of expression and the right to information;
● to comply with a legal obligation that requires treatment provided for under EU law or the law of the Member State that applies to the Administrator or for the performance of a public interest task or the exercise of official authority;
● for reasons of public interest in the field of public health;
● for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
● for the establishment, exercise or protection of legal claims.
(3) In order to exercise your right to "forget", you should file a replacement request sent to Vedin Ltd and certify your identity and identity with the person to whom the data relate by presenting your identity card on the spot identification purposes .
(4) "Vedin " Ltd. does not delete the data that it has a legal obligation to store, including for protection against claims brought against it or proof of its rights.
Right of limitation
Art. 10. You have the right to request from Vedin Ltd to restrict the processing of your related data when:
● contest the accuracy of personal data for a period that allows Vedy Ltd to verify the accuracy of the personal data;
● processing is illegal, but you do not want your personal data to be erased, but only to limit their use;
● Vedin Ltd no longer requires personal data for the purpose of processing, but you require them to establish, exercise or protect your legal claims;
● You have reproached the processing pending verification, and the legitimate grounds of Veda Ltd have the advantage over your interests.
Right of portability
Art. 11. (1) You may at any time download the data that is stored and processed for you in connection with the use of the services of Vedin Ltd by email request.
(2) You can ask Vedin Ltd. to transfer your personal data directly to an administrator you provide when it is technically feasible.
Right to receive information
Art. 12. You can ask Veda Ltd to inform you of all recipients to whom the personal data for which the correction, deletion or limitation of the processing has been requested has been disclosed. Vedy Ltd may refuse to provide this information if this would be impossible or requires disproportionate effort.
Right of objection
Art. 13. You may object at any time against the processing of personal data of Vein Ltd, which apply to you, including whether processed for profiling or direct marketing purposes.
Your rights in violation of the security of your personal data
Art. 14. (1) If Vedin Ltd establishes a breach of the security of your personal information, which may pose a high risk to your rights and freedoms, we shall notify you without undue delay of the violation and of the measures taken or to be taken.
(2) Vedy Ltd is not obliged to notify you if:
● has taken appropriate technical and organizational safeguards in respect of the data affected by the security breach;
● has subsequently taken measures to ensure that the violation will not lead to a high risk for your rights;
● notification would require disproportionate efforts.
Individuals to whom your personal information is provided
Art. 15. The administrator does not transfer your data to third countries.
Other provisions
Art. 16. In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows:
1. Name: Commission for Personal Data Protection
2. Headquarters and address of management: Sofia 1592, "Prof. 2 Tsvetan Lazarov
3. Correspondence data: Sofia 1592, "Prof. 2 Tsvetan Lazarov
4. Phone: 02 915 3 518
5. Email: kzld@government.bg , kzld@cpdp.bg
6. Website: www.cpdp.bg
Art. 17. You may exercise all of your rights to protect your personal data through the forms enclosed with this information. Of course, these forms are not mandatory and you can make your claim in any form that contains a statement about it and identifies you as the data holder.
Art. 18. If the consent relates to a transfer, the Administrator shall describe the possible risks for the transfer of data to third countries in the absence of a decision on adequate protection and appropriate remedies.
|
