Information on the processing of personal data
1. Personal Data Controller:
Avtosed EOOD
Address : Dupnitsa, 2 Dragoi Boliarin str.
Phone: 088 707 6718
Email: office @ avtosed.com
2. Definition of ‘Personal data’:
This means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indiraectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier etc.
3. Natural persons whose personal data are subject to processing:
Personal data of individuals who are legal representatives of a counterparty /such as representatives of commercial companies and other organizations with which our Company enters into contractual relations/, authorized representatives outside the scope of legal representatives, as well as contact persons specified by the partner shall be collected and processed.
4. Categories of personal data subject to processing:
Our Company collects the minimum amount and types of personal data necessary to respond to inquiries, to submit offers and to conclude and perform contracts, such as full name, Personal Identification Number [EGN], address, telephone, email, position.
5. Purpose of the processing of personal data:
Personal data of data subjects shall be collected and processed for the purposes of answering inquiries, submitting offers, concluding and performing contracts between two parties, as well as for exercising the rights and fulfilling the obligations of Controllers arising from and inextricably linked to the concluded contracts.
6. Legal grounds for the processing of personal data:
Personal data of data subjects shall processed in order:
To establish and perform contractual relations between two parties. To this end, the Controller should collect data identifying such persons as well as those that certify their representative authority and the position they hold within the specific enterprise/organization.
To fulfil the regulatory obligations of Controllers. Such obligations exist in the field of tax, accounting and environmental legislation.
To protection the legitimate interests of Controllers. Such legitimate interests could be the need for judicial protection of the rights of Controllers arising from a contract signed.
7. Recipients of personal data:
In order to comply with the legal obligations applied to Controllers, data from the register shall be provided to third parties. Our Company has such obligations in the field of tax, accounting and environmental legislation. Data shall be provided in compliance with the relevant legal obligations related to the reporting, as well as with any possible inspections carried out by any supervisory bodies.
Personal data of data subjects shall be disclosed to third parties (such as judicial authorities) in relation to the protection of the legitimate interests of Controllers, which do not contradict the interests of the data subjects.
No personal data shall be provided to any recipients in any third countries, or to any international organizations.
8. Deadline for processing data:
Personal data of data subjects shall be stored in accordance with the requirements of the applicable tax, accounting and environmental legislation for a period of 5 years after the expiry of the contract.
In the event of a legal dispute regarding the existence or the performance of a contract, the processing of data shall continue until its completion and the satisfaction of all claims.
Notwithstanding the above hypotheses, the processing of personal data of data subjects shall cease in case of withdrawal /refusal of/ from the representative authority of the persons concerned.
9. The rights of data subjects:
The right of access to the data – the data subjects have the right to receive from the Controllers any information about and any access to the personal data, which are processed and stored;
The right to rectification – the data subjects have the right to make a request to the Controllers for rectification of any inaccurate, as well as for supplementation of any incomplete, personal data related to them;
The right to erasure – the data subjects have the right to make a request for the erasure of personal data processed by the Controllers in case that such data are no longer necessary for the purposes for which they have been collected or processed for any purposes incompatible with the original ones;
The right to restriction of processing – the data subjects have the right to make a request to the Controllers for restriction of the processing of their data;
The right to data portability – the data subjects have the right, if the processing is carried out by automated means, to obtain from Controllers their data in a structured, commonly used and machine-readable format and have the right to transmit those data to another Controller.
The right to objection – the data subjects have the right to object against the processing of their data by to Controllers, unless such data are processed on the grounds of the legitimate interest of Controllers and Controllers cannot demonstrate compelling legitimate grounds for the processing which overrides the interests, rights and freedoms of the data subjects, or for the establishment, exercise or defense of legal claims;
The right to lodge a complaint with a supervisory authority – the data subjects have the right to lodge a complaint against the Controller with the Commission for Personal Data Protection in order to protect the personal data provided for processing.
10. The provision of personal data as a condition necessary for the conclusion and performance of a contract:
The provision of data is a condition necessary for the conclusion and existence of contracts with the partners, insofar as our Company uses the personal data of data subjects in order to decide on entering into a contractual relationship, for the performance of its obligations and the exercise of its rights, as well as for the fulfilment of the Company’s statutory obligations in the field of tax, accounting and environmental legislation.