What is the purpose of this document? For Karmet Bulgaria EOOD, the protection of your privacy and the security of your personal data are a top priority. We guarantee maximum protection level of your personal data.
It is important to read this policy carefully to understand how and why we use your personal information.
This privacy policy has been developed and is based on the Bulgarian legislation on data protection and is in line with the General Data Protection Regulation (Regulation 2016/679 of 27.04.2016), the GDPR. The privacy policy will explain you what personal data we collect, process and store, for what purposes we use it and what are your rights, as a subject of personal data. It is applicable to you if you are an individual or representative of a legal entity which is a customer or supplier of Karmet Bulgaria EOOD, and/or has registration on: www.karmet.eu.
All amendments and additions to the Privacy Policy will be applied only after we have posted the actual content available through our website: www.karmet.eu.
Who are we?
Karmet Bulgaria EOOD is a trade company, registered in the Commercial Register at the Registry Agency with UIC: 202217378.
Karmet Bulgaria EOOD is an administrator of personal data under the Law on Personal Data Protection Act (PDPA). This means that we collect, process and store your personal data under the terms of this Privacy Policy.
You can contact us at: Plovdiv district, Kuklen municipality, Kuklen 4101, Asenovgradsko shosse Blvd., Bunar Yollu area, Massif 11;
Tel .: +359 32 940 969;
Fax: +359 32 940 767;
e-mail: office@karmet.eu;
Website: www.karmet.eu.
I. Principles of data protection
We comply with the data protection legislation according to which personal data must:
1. be processed in a lawful, conscientious and transparent manner;
2. to collect only for valid purposes that we have clearly explained and not to be used in any other way that is incompatible with these purposes;
3. be appropriate, relevant and not exceeding the necessity of the purposes we have indicated;
4. be accurate and up-to-date;
5.be stored within a time limit not longer than it is necessary for the purposes we have specified;
6. be properly protected.
II. What information do we have about you?
“Personal data” or “personal information” means any information about an individual by which that individual is or can be identified.
There are special categories of more sensitive personal data that require a higher level of protection.
We will collect, store and use the following categories of personal data about you:
- names, PIN, PNF, PN, address, phone number and email address to contact you or a contact person you specify;
- names, PIN, PNF, PN, address, phone number and email address to contact your representative, as referred in the document with which you have authorized him to represent you before “Karmet Bulgaria” EOOD;
- bank account information;
- recordings of video surveillance systems (during visitations of our office);
- data from contact forms on: www.karmet.eu;
- information and other data you provide to us when you voluntarily participate in our researches or other feedback you provide us about the purchased and used products and services or about your preferences for the products and/or services we provide you;
- IP address when visiting our website.
Please note that the type of data processed cannot be exhaustively determined in advance. You can obtain a full description of the types of information we process for you by contacting us at the following address: Plovdiv region, Kuklen municipality, Kuklen town 4101, Asenovgradsko shose blvd., Bunar Yolu area, massif 11;
Tel.: +359 32 940 969;
Fax: +359 32 940 767;
e-mail: office@karmet.eu;
Web: www.karmet.eu.
III. How do we collect your personal data?
We collect your personal data in a variety of ways and through different channels chosen by you:
- through a conversation in or outside our office;
- by telephone, email or otherwise, using our contact details;
- by filling in paper forms or online when they are needed in connection with the service you want;
- otherwise defined as appropriate for the specific case;
- by business card.
There are cases in which we process personal data about third parties received by our clients, for example, when authorizing us.
IV. How will we use your personal data?
We will only use your personal data where permitted by law. Most often, we will use your personal data on the following grounds:
1. to enter into and perform our contract with you;
2. to comply with a legal obligation;
3. where necessary to protect our legitimate interests;
4. where necessary to protect your legitimate interests.
We may also use your personal data in the situations listed below, but we expect these to occur rarely:
1. to protect your interests (or the interests of someone else), for example, in the provision of emergency medical care;
2. where the processing is in the public interest.
V. Purposes for which we will use your personal data:
We will use the categories of personal data listed above primarily to perform our contractual obligations to you and comply with our legal obligations. In some cases, we may use your personal data for our legitimate interests or those of third parties, but only if your interests or fundamental rights do not override those interests.
Situations in which we will process your personal data include:
- implementing and developing our business in accordance with your legal interests;
- providing documentation and messages you have requested;
- providing quality products and services, which depends on the quality and completeness of the information you provide, including personal data;
- sending messages about our products and services and their delivery;
- evaluating, improving and developing our products and services to get the best possible quality service;
- protection against fraud and other threats;
- for direct marketing purposes;
“Karmet Bulgaria” EOOD may process your personal data or data of individuals related to your business to provide you with information about products, services and offers that may be of interest to you or your business. We may send marketing messages by post, email, telephone or text message. The personal data we process for this purpose consists of information that you provide to us and data that we collect and/or analyze when you use our services. We may use your personal data to promote our products and services only if we have your explicit consent to do so or when you are a client of “Karmet Bulgaria” EOOD within the scope of the defined legitimate interest. You have the right to object at any time to the processing of your personal data for marketing purposes by contacting us and requesting that it be suspended. In case you request this suspension, “Karmet Bulgaria” EOOD will continue to use your contact details only to provide you with important information related to contractual obligations. We also inform you that if the Company has processed personal data based on your explicit consent, you should bear in mind that this processing, carried out before its withdrawal, is lawful.
For some of the activities listed above, we may have more than one legal basis for processing your personal data.
When providing your personal data, you should note that the Company does not sell or provide your personal data to third parties unless your or our legitimate interests or obligations require such provision.
In our practice, we do not use the available personal data for automated decision-making intended to evaluate personal characteristics of individuals, including profiling.
VI. Failure to provide the personal data we request
Failure to provide the personal information we request may prevent us from entering into a contract with you and delay/make impossible the performance of the service or delivery of the product.
VII. Change of purpose
We will use your personal data only for the purposes for which we collected it, unless we reasonably believe that we need to use it for another reason, and that reason is compatible with the original purpose. If we need to use your personal data for another purpose, we will notify you and explain the legal basis for that use.
VIII. How will we use sensitive personal data?
Special categories of sensitive personal data require a higher level of protection and additional grounds for their collection, storage and use. We may process special categories of personal data in the following situations:
1. in limited cases, with your explicit written consent;
2. when the processing is in the public interest.
In less frequent cases, we may process sensitive data when it is necessary for the defence of a legal dispute or to protect your interests or those of someone else and you are unable to give valid consent, or when you have disclosed this sensitive information in the public domain.
IX. Do we need your explicit consent?
We are not legally obliged to obtain your consent when we process personal data to fulfill our obligations under a Regulatory Act, except in cases provided for by law, in which your explicit voluntary, unambiguous and informed consent will be required based on the information provided to you here.
X. Data Sharing
We may share your personal data with third parties. We require all third parties to respect data security and comply with data protection legislation.
We may send personal data to countries outside the European Economic Area (EEA), but in these cases you can expect a similar level of protection for your personal data.
We will share your personal data with third parties when required by law, when necessary for the administration of our relationship or when we have another legitimate interest in doing so.
These third parties may include: hosting service providers, companies providing accounting and legal services and others.
XI. Data Security
We have implemented appropriate technical and organizational measures to prevent the accidental loss, use or unauthorized access, modification or disclosure of your personal data. In addition, we limit access to your personal data to those employees and third parties who have a need to know. They will only process personal data on the basis of this policy and in accordance with their obligation of confidentiality.
We hope that you are aware that no transmission over the Internet is completely secure and that we cannot be responsible for unauthorized or unforeseen access that is beyond our control. For this reason, we expect you to take measures to protect your personal data when you provide it to us and after you receive it from us.
XII. How long will we use your personal data?
We will retain your personal data only for the period necessary to fulfill the purposes for which we collected it, including to comply with accounting legislation, which stipulates a 10 (ten) year statute of limitations.
To determine the appropriate retention period, we take into account the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we process it or whether we could achieve those purposes by other means, as well as applicable legal requirements.
In some situations, we may pseudonymize your personal data so that it can no longer be associated with you. As a result, we may continue to use the pseudonymized data without notifying you. After the termination of your contractual relationship with us, we will store your information in accordance with our policy and legal requirements and will destroy it in a secure manner after the retention period described here and regulated by law has expired.
In specific circumstances, we may retain your personal data for longer periods of time so that we have an accurate record of your relationship with us in order to improve the quality of service you receive, or in the event of complaints or disputes, as well as where there is a contract for continued processing beyond the established deadlines.
XIII. Right of access, correction, erasure and restriction
Your obligation to notify us of changes:
It is important that we keep your personal information accurate and up-to-date. We ask that you notify us of any changes to your personal data.
Your rights in relation to your personal data:
- access to information: this right allows you to obtain a copy of the personal data we hold for you and to verify that we have a legitimate reason for processing it.
- correction: this right allows us to ask us to correct any incomplete or inaccurate information about you.
- deletion: this right allows us to require us to delete or remove your personal information when we have no valid reason to continue processing. You also have the right to request your data to be deleted or removed when you have exercised your right to object to their processing.
- objection to processing: in cases where we rely on our legitimate interests as a basis for processing, you can object to this processing.
- limitation of processing: this right allows you to require us to temporarily suspend the processing of your personal data if, for example, you want us to determine the accuracy of the data or the reasons for its processing.
- data portability: this right is limited to cases where data is provided by us for the purposes of a contract and allows you to require us to provide your data stored in electronic form to a third party.
If you wish to exercise any of your rights described above, please contact us at the following address: Plovdiv region, Kuklen municipality, Kuklen town 4101, Asenovgradsko shose blvd., Bunar Yolu area, massif 11;
Tel.: +359 32 940 969;
Fax: +359 32 940 767;
e-mail: office@karmet.eu;
Web: www.karmet.eu.
In the event of such a request from you, we may need to provide you with information confirming your identity. This requirement is part of our data protection measures and aims to ensure that personal information is not disclosed to a person who is not entitled to receive it. We also reserve the right to charge a fee, for example, if your request is manifestly unfounded or excessive. We will respond to your request within the applicable time limits - within 1 month of receiving the notification, which may be extended by another two months, taking into account the complexity and number of requests. In the event of an extension, we will notify you and indicate the reasons for it.
You have the right to file a complaint at any time with the Personal Data Protection Commission, the Bulgarian data protection regulatory authority, or to seek protection of your rights in court.
XIV. Right to withdraw your consent
In case you have provided your explicit consent for the processing of your personal data for a specific purpose, you have the right to withdraw this consent. To withdraw your consent, please contact us at the following address: Plovdiv region, Kuklen municipality, Kuklen town 4101, Asenovgradsko shose blvd., Bunar Yolu area, massif 11;
Tel.: +359 32 940 969;
Fax: +359 32 940 767;
e-mail: office@karmet.eu;
Web: www.karmet.eu.
Upon receipt of your request, we will cease processing the data for the purpose(s) to which you initially consented, unless we have another legal basis to continue the processing, of which we will notify you in a timely manner.
XV. Data Protection Officer
Our core activities do not consist of processing operations which, by their nature, scope and/or purposes, require regular and systematic monitoring of data subjects on a large scale or in the large-scale processing of special categories of data and personal data relating to convictions and offences. In view of this circumstance, we are not obliged to appoint a data protection officer.
If you require further information, you can contact us at the following address: Plovdiv region, Kuklen municipality, Kuklen town 4101, Asenovgradsko shose blvd., Bunar Yolu area, massif 11;
Tel.: +359 32 940 969;
Fax: +359 32 940 767;
e-mail: office@karmet.eu;
Web: www.karmet.eu.
XVI. Changes to this Notice
We reserve the right to change and update this policy at any time.
This policy was last updated on 25.05.2018