I. Principles of data protection We comply with the data protection legislation according to which personal data must: 1. be processed in a lawful, conscientious and transparent manner; 2. to collect only for valid purposes that we have clearly explained and not to be used in any other way that is incompatible with these purposes; 3. be appropriate, relevant and not exceeding the necessity of the purposes we have indicated; 4. be accurate and up-to-date; 5. be stored within a time limit not longer than it is necessary for the purposes we have specified; 6. be properly protected.
II. What information do we have for you? “Personal data” or “personal information” means any information about an individual through which that person is or may be identified. There are special categories of more sensitive personal data that require a higher level of protection. We will collect, store and use the following categories of personal data for you:
III. How do we collect your personal information? We collect your personal data in a variety of ways and through different channels selected by you:
IV. How will we use your personal information? We will use your personal data only when permitted by law. Most often we will use your personal data for the following reasons: 1. for concluding and implementing our contract with you; 2. to comply with a legal obligation; 3. when it is necessary to protect our legitimate interests; 4. when it is necessary to protect your legitimate interests; It is also possible to use your personal information in the situations listed below, but we expect them to occur rarely: 1. to protect your interests (or the interests of someone else), for example, in emergency medical assistance; 2. when processing is in the public interest.
V. Purposes, for which we will use your personal data: We will use the categories of personal data listed above, mainly to fulfill our contractual obligations with you and to comply with legal obligations. In some cases, we may use your personal data for our legitimate interests or those of third parties, but only if your interests or fundamental rights do not take precedence over those interests. The situations in which we process your personal data include:
VI. No provision of the personal data we require No provision of personal information requested by us may prevent us from drafting a contract with you and delaying/impossibility to perform the service or deliver the product.
VII. Change of purpose We will only use your personal data for the purposes for which we have collected it unless we reasonably believe that we should use it for any other reason, and that reason is compatible with the original purpose. If we need to use your personal information for another purpose, we will let you know and we will explain to you what the legal basis for this use is.
VIII. How will we use sensitive personal data? Special categories of sensitive personal data require a higher level of protection and additional justification for their collection, storage and use. It is possible to process special categories of personal data in the following situations: 1. in limited cases, with your explicit written consent; 2. when the processing is in the public interest. In rare cases it is possible to process sensitive data where it is necessary to protect the legal dispute or for the protection of your interests or those of someone else and you are not able to give consent, or when you’ve discovered this sensitive information in the public domain.
IX. Do we need your explicit consent? We have no legal obligation to obtain your consent when processing personal data in order to fulfill its obligations under a Normative act, except in the cases provided for by the law in which your explicit, voluntary, unambiguous and informed consent will be requested on the basis of the information provided here.
X. Data Sharing We may share your personal data with third parties. We require all third parties to respect data security and comply with data protection legislation. It is possible to send personal data to countries outside of the European Economic Area (EEA), but you can expect a similar level of protection for your personal data. We will share your personal data with third parties when required by law when it is necessary to administer our relationships or when we have another legitimate interest in doing so. These third parties may include: hosting providers, companies providing accounting and legal services, and others.
XI. Data security We have implemented appropriate technical and organizational measures to prevent the accidental loss, use or unauthorized access, modification or provide your personal data. In addition, we restrict access to your personal data to those employees and third parties for whom there is a need to obtain this information. They will process personal data only on the basis of this policy and its obligation of confidentiality. We hope you realize that no transmission over the Internet is completely secure and that we can not be held responsible for unauthorized or unintended access beyond our control. For this reason, we expect you to take measures to protect your personal data when you provide it to us and after you receive it from us.
XII. How long will we use your personal information? We will only store your personal data for the period of time we are required to meet the purposes we have collected, including to comply with the requirements of accounting law that prescribes 10 (ten) years of limitation. In order to determine the appropriate storage period, we take into account the quantity, nature and sensitivity of personal data, the potential risk of harm resulting from unauthorized use or provision of the data, the purposes we are processing, or whether we could achieve these goals by other means, as well as the applicable legal requirements. In some situations, it is possible to pseudonymize your personal information so that it is no longer possible to be connected with you. As a result, we can continue to use the pseudonymized data without letting you know about it. Upon termination of your contractual relationship with us, we will preserve your information in accordance with our policy and legal requirements and will destroy it in a safe manner after the retention period described here and governed by law expires. Under specific circumstances, we may retain your personal data for longer periods of time so that we have a precise record of your relationship with us in order to improve the quality of service you receive or in case of complaints or disputes as well as when there is a contract for the continuation of the processing beyond the set deadlines.
XIII. Right of access, correction, deletion, and limitation Your obligation to let us know about a change: It is important to keep your personal information accurate and up to date. Please notify us whenever you change your personal information. Your rights in relation to your personal information:
XIV. Right to withdraw your consent If you have given your explicit consent to the processing of your personal data for a particular purpose, you have the right to withdraw that consent. To withdraw your consent, please get in contact with Atanaska Grozeva – Secretary, at: Plovdiv district, Kuklen municipality, Kuklen 4101, Asenovgradsko shosse Blvd., Bunar Yollu area, Massif 11; Tel .: +359 32 940 969; Fax: +359 32 940 767; e-mail: firstname.lastname@example.org; Website: www.karmet.eu Upon receipt of your request, we will discontinue the processing of the data for the purpose (s) you initially agreed to, unless we have any other legal basis to continue the processing, which we will notify you in due course.
XV. Data Protection Officer Our main activities do not consist of processing operations which, due to their nature, scope and/or purposes, require regular and systematic large-scale monitoring of data subjects or large-scale processing of special categories of data and personal data related to convictions and violations. In view of this circumstance, we have no obligation to appoint a Data Protection Officer. If additional information is required you can get in contact with Atanaska Grozeva – Secretary, at: Plovdiv district, Kuklen municipality, Kuklen 4101, Asenovgradsko shosse Blvd., Bunar Yollu area, Massif 11; Tel .: +359 32 940 969; Fax: +359 32 940 767; e-mail: email@example.com; Website: www.karmet.eu
XVI. Changes to this notification
We reserve the right to change and update this policy at any time. This policy was last updated on 25.05.2018