DATA AND SITE CONFIDENTIALITY POLICY
Date of entry into force: 05.05.2018
The policy describes what methods Edmark BG uses and for what purposes, respectively our service providers process the information collected by and about you when concluding contracts or using services through the website https://edmarkinternational.bg (the "Website").
We process your personal information in accordance with the laws on privacy and personal data protection in force in the European Union and the Republic of Bulgaria. Important note! We invite you to read this Policy carefully.
It provides important information about how we process personal data and explains your legal rights.
Edmark BG collects and processes personal data of individuals, our customers, contractors, or other contacts on the Bulgarian market and not only (given the specifics of our business). We are aware of our responsibility to take care of and protect your personal data, to comply with applicable legislation in the field of privacy and personal data protection.
PERSONAL DATA ADMINISTRATOR
Edmark BG, acting as an administrator, is responsible for the proper and lawful processing of personal data that you provide when concluding contracts or using services through the Website or other services. If you wish to contact us with questions regarding this Policy, please use the following forms of contact:
Phone: +359/28888889; Email: [email protected]
COLLECTION OF YOUR PERSONAL DATA
Edmark BG may process your personal data in the following cases: If you contact us directly, for example by visiting our office or by filling out a feedback form on the Website, or by customer service telephone numbers to request information about our products and services.
If you are under the age of 14, please do not provide us with any of your information unless you have the permission of a parent or guardian to do so. We ask for your assistance to keep your information up to date by informing us of any changes in your personal data.
PERSONAL DATA COLLECTED BY EDMARK BG
Depending on whether you are our client, contractor and what services we use, the following categories of personal data may be collected from and for you: Regarding the physical identity - names, PIN, data from ID card or identity document, address, telephone, e-mail address;
Regarding economic identity - financial condition, bank account information;
Use of the Website - date and time of your visit; how many and which pages you browse during the visit and how long you stay there; the name of your internet domain (this can be your ISP) and the 'IP' address (this is the number attached to your computer when you browse the internet) that allows you to access our site; the Internet browser you are using (eg MS Internet Explorer or Google Chrome) and your computer's operating system (eg Windows 8.1); the site you were on before you linked to our site (e.g. Google if you found us with this search engine).
PROCESSING OF YOUR PERSONAL DATA
The processing of your personal data in accordance with the current Bulgarian legislation and the principles of the European Union Framework Directives for the protection of information and in particular the General Regulation for Personal Data Protection EU / 2016/679 (the "Regulation") must be justified according to one on several legal grounds under the Regulation.
We are required to state the reasons for each use of your data as follows: Purpose:
Exercise of the rights and obligations of Edmark arising as a result of contracts concluded with you;
Grounds for processing: performance of a contract within the meaning of Art. 6, para 1 letter “b” of the Regulation or the observance of a legal obligation within the meaning of Art. 6, para 1 letter "c" of the Regulation;
Purpose: Carrying out financial and accounting activities by Edmark BG during and on the occasion of the contracts concluded with you, including: receiving and ordering amounts due in bank accounts, issuing invoices; Grounds for processing: performance of a contract within the meaning of Art. 6, para 1 letter “b” of the Regulation or the observance of a legal obligation within the meaning of Art. 6, para 1 letter "c" of the Regulation;
Purpose: Correspondence with potential, current and former clients of Edmark BG and customer service, including to answer your questions and fulfill your requests, for example to send you the requested documents or notifications by email; send you important information and / or other administrative notifications about the Website, our relationship with us or changes in our terms or policies;
Grounds for processing: performance of a contract within the meaning of Art. 6, para 1 letter “b” of the Regulation; or the observance of a legal obligation within the meaning of Art. 6, para 1 letter "c" of the Regulation; or explicit consent of each subject within the meaning of Art. 6, para 1, letter “a” of the Regulation or the legitimate interests of the administrator within the meaning of Art. 6, para 1, letter “e” of the Regulation; Purpose: Direct marketing in relation to potential, current and former clients of the Administrator; Grounds for processing: explicit consent of each subject within the meaning of Art. 6, para 1, letter “a” of the Regulation or the legitimate interests of the administrator within the meaning of Art. 6, para 1, letter “e” of the Regulation;
You may object to the processing of your personal data for this purpose or withdraw your consent to receive marketing communication and direct marketing, at any time with effect from now on, by sending the objection or withdrawal notice to Edmark by e-mail / telephone for contact mentioned above.
Objective: For our business purposes, such as data analysis, authentication, development of new models, improvement of our Website, improvement of our products and services, identification of trends in browsing the Website, development of a personalized environment on the Website by introducing products and offers that are personalized for your personal needs or measure the effectiveness of our promotional campaigns.
Grounds for processing: the legitimate interests of The legitimate interest of Edmark International BG to provide first-class products and services meets the interests of the client and therefore complies with the requirements of the legislation in force in Bulgaria on personal data protection and sufficient grounds for their processing.
Customers expect high quality products and services from Edmark BG. In order to meet these expectations, it is necessary to constantly monitor and improve the quality, as well as to develop or offer new products and services.
* Provision of personal data in compliance with the law
Edmark BG, in his capacity of Personal Data Administrator is subject to the legislation in the Republic of Bulgaria.
In some cases, this may require the provision and / or disclosure of your personal data, when required by law, upon request and / or if necessary to third parties - government and others. bodies, institutions and departments, banks and institutions within the scope of their competence and in compliance with the provisions of the Regulation, LPPD and other norms of the Bulgarian legislation.
Whenever possible, we will address such a request to you or notify you before responding, unless it is a matter of preventing or detecting a crime.
* Provision of personal data to third parties, including personal data processors
The personal data we collect may be provided for processing by third parties acting on their own behalf or on behalf of Edmark BG in accordance with the requirements of the Regulation and ensuring the protection of the rights of data subjects. Your personal data may be processed by companies providing services to Edmark BG, such as IT support, IT hosting, etc.
* Data transfer to countries outside the European Economic Area
Edmark BG makes such a transfer, but only to the extent necessary to register and create a distributor profile. This transfer does not affect customers in any way. To the extent that this is done, Edmark BG complies with all requirements under the Regulation for data transfer outside the EEA, applying the relevant provisions to the recipients of this data.
WHAT WE DO TO PROTECT YOUR PERSONAL DATA
We protect personal data in strict accordance with the current Bulgarian legislation and the principles of the framework directives of the European Union for the protection of information and personal data (including Regulation EU / 2016/679).
Your information is stored on our secure servers or on secure servers of our subcontractors or business partners (or in certain cases the information is also stored on paper subject to the necessary protections).
The information is available and used in accordance with our security policies and standards (or those of our subcontractors or business partners), always in compliance with applicable legislation and the necessary protection measures.
Although we cannot guarantee that the transmission of data over the Internet or the Website is free from the risk of cyber attacks, we and our business partners work hard to maintain physical, personal, documentary and automated information systems protection measures in Your data in accordance with applicable law.
For example, we apply the following measures: Strictly limited access of our employees and subcontractors to your data, provided only when necessary for knowledge and in order to achieve the purposes for which they are processed and on the basis of the need for knowledge; Personal data is stored electronically in databases or in shared folders, protected by passwords or with different degrees of authorization; monitoring and protection against viruses; backups and backups are created for recovery; the systems also store logs with a history of document operations; All paper documents that may contain your personal data are stored in Edmark's office; At Edmark's sites, where personal data are processed, round-the-clock security is provided; fire protection, procedures for control of physical access have been introduced; Edmark's staff who process personal data are familiar with the requirements of applicable law, with Edmark's policies, with the existing risks and scenarios for their occurrence. There is also contractual protection under contracts with third parties - processors of personal data on behalf of Edmark.
TERM OF STORAGE OF YOUR PERSONAL DATA WITH US
We store your data for as long as necessary for the purpose for which we received them. If your data is processed for two purposes, we will retain it until the purpose with a longer processing period is achieved; but we will stop processing them for this purpose with a shorter period, after the expiration of this shorter period.
We restrict access to your data to those individuals who must process it for that purpose. In certain circumstances, we may retain your personal information for longer periods of time in order to have an accurate record of your relationship with us in the event of complaints or disputes or if we reasonably believe that there is a possibility of litigation in view of which your personal data will be needed.
Storage periods are based on our business needs and in accordance with applicable law. Personal data that is no longer needed is anonymized (anonymized data may be retained, but it is no longer associated with you) or destroyed.
YOUR RIGHTS FOR THE PROTECTION OF PERSONAL DATA
You have certain rights regarding your personal data, such as the right to:
Ask us to provide you with additional details on how your data is used;
request us to provide you with access to your personal data and to provide you with a copy of them;
obtain the personal data concerning you and have provided us in a structured, widely used and machine-readable format and, where technically possible, transfer this data to another controller without hindrance if the processing of your data is based on your consent or contract and is performed by automated means;
ask us to update any inaccuracies in the data we store and to correct / update them; ask us to delete or anonymize all data about you for which we no longer have a legal basis to process;
where the processing is based on consent and in connection with direct marketing, you may withdraw your consent to stop this particular processing in the future;
object to any processing for the purpose of automated individual decision-making (including profiling) when it significantly affects you; ask us to limit the processing of your data, e.g. while an appeal is being investigated.
The You can submit a request for exercising your rights to Edmark BG in one of the following ways: on the spot, by mail incl. email or phone. Every request, inquiry or your request is accepted, considered, we check your legitimacy and the right you want to exercise and we respond within one month of receipt.
In more complex cases or during the receipt of numerous requests, this period may be extended by another two months, of which we will inform you. In the event that there are reasons for the request not to be complied with, we will state these reasons to the applicant in writing.
The exercise of these rights is subject to certain exceptions, for example when the public interest must be protected (for example, in the prevention or detection of crime), or our interests, or the rights and freedoms of others. If you have any questions about the processing of your data, please contact us via the above contact details (Monday - Friday from 09:00 to 17:00). If you are not satisfied with the processing of your data or our response in exercising these rights, you have the right to file a complaint to the Commission for Personal Data Protection, at: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2; tel .: 02 / 91-53-518, website: https://www.cpdp.bg. Please try to resolve the issue with us beforehand, for which we will provide any assistance, although you have the right to contact the Data Protection Commission at any time.
Cookie processing Cookies are small text files that some websites store on your computer or mobile device.
If cookies are disabled, you may not be able to use all of the interactive features of this Website. Most current browsers allow you to control cookies through the saved browser settings. Cookies help To make our Website work according to your expectations; To remember your settings during visits; We are constantly improving our Website for you.
We do not process cookies for: Collection of personally identifiable information - we will always ask for your explicit permission if we ever want to collect such information; Collection of sensitive information without your explicit consent.
Cookie processing falls into several categories: Cookies function We process cookies to make our Website work better. For example, we store information once you log in to the Website so that you do not have to log in again each time you visit a different page / menu during your session.
Examples include: How did you get to our Website (for example from a search engine, advertisement, etc.); The actions you take on the Website, such as the number of pages viewed, the time spent on a page, on which page visitors have left the Website; How often do you return to our Website; The technology used by visitors (eg browser, operating system, device, etc.).
The UPDATE OF THIS POLICY
We may make changes to this Policy from time to time. Changes to this Policy will take effect when the revised Policy is published on the Website. If you use our Website or our services after the changes, this will be construed as your acceptance of the updated Policy.
Familiarize yourself with the provisions on the export of personal data outside the European Union