INFORMATION BY EURODESIGN SYSTEMS LTD. REGARDING PERSONAL DATA PROCESSING
Your privacy is important to us. We have taken all the necessary organizational and technical measures in order to process your personal data in a manner that is lawful, appropriate and transparent. In this privacy statement by „EURODESIGN SYSTEMS” LTD., we explain which of your personal details we will process, for what purposes and on what grounds, to whom we could provide them and how long will we store them.
We recommend that you read this information carefully, so that you know more about the manner of processing of your personal data as a client, potential client, related party to a client of ours, counterparty, contact person, representative of a legal entity, or any other interested party. Regardless of what are the purposes and the grounds on which we process your personal data, „EURODESIGN SYSTEMS” LTD. will treat your data with equal care. This document contains also information about your rights and the manners in which you can exercise them.
„EURODESIGN SYSTEMS” LTD. may update this privacy statement and its most recent version will be available at www.eurodesign.SYSTEMS „EURODESIGN SYSTEMS” LTD. will inform you of all material changes to its terms via its website or other communication channels.
You will also find more information about the Bulgarian privacy legislation on the website of the Bulgarian Commission for Personal Data Protection at www.cpdp.SYSTEMS
- About the company
„EURODESIGN SYSTEMS” LTD. (hereinafter referred to as „EURODESIGN SYSTEMS” LTD.), Company ID 175151387, 23, Dragan Tsankov Blvd, Entr. A, 3.fl, Sofia. For questions, related to the processing of personal data, please contact us by phone on No. 02 9607117 from 09.00 till 17.00 every working day or by e-mail on: info@eurodesign.SYSTEMS
„EURODESIGN SYSTEMS” LTD. in its capacity of a Personal Data Controller conducts its activities in strict compliance with the requirements of the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, in order to ensure confidentiality and lawful collection and processing of clients’ personal data.
„EURODESIGN SYSTEMS” LTD. is a controller with respect to the personal data of its clients but also a personal data processor of data provided by its contragents for the purpose of execution of resoective contractual obligations, whereas in the second case „EURODESIGN SYSTEMS” LTD. strictly follows the controller’s instructions in carrying out this activity.
- Definitions
- “Personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, a personal identification number, location data, gender, address, telephone number, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- “Processing of personal data” any operation or set of operations which is performed on personal data whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Rights of Data Subjects
If you are a person whose personal data is processed by „EURODESIGN SYSTEMS” LTD. under the General Personal Data Regulation, effective since 25.05.2018, you have the following rights:
- Right to access – Upon your request, as the data subject, „EURODESIGN SYSTEMS” LTD. shall provide information about the categories of the personal data relating to you, which are being collected and processed by us, and information about the purposes of the processing, the recipients or categories of recipients to whom your data are disclosed and the sources of this data, except the cases when the data was collected directly from you.
- Right of rectification, blocking (restriction of processing) and/or erasure (deletion) – Upon your request, the „EURODESIGN SYSTEMS” LTD. shall correct, erase or cease the processing of your personal data in the cases when its processing would be unlawful. In such cases „EURODESIGN SYSTEMS” LTD. shall notify all third parties to whom your personal data has been disclosed regarding all rectifications and erasures that have been made or all cases of restriction of processing of your personal data.
- Right to data portability – As a data subject, you have the right to request to receive the personal data concerning you, which you have provided to „EURODESIGN SYSTEMS” LTD., in a structured and commonly used and machine-readable format and you have the right to transmit/transfer those data to another Controller without hindrance from „EURODESIGN SYSTEMS” LTD. as personal data controller, to whom the data was provided, where the processing is based on consent or on a contract or the processing of your personal data is carried out by automated means.
- Right to object – As data subject, you have the right to object to the processing of your personal data when the processing of personal data is based on the „EURODESIGN SYSTEMS” LTD. ‘s legitimate interest. „EURODESIGN SYSTEMS” LTD. shall review your objection and shall provide its opinion in writing within 30 days unless this term needs to be extended, for which we will notify you in due time. After reviewing the objection, „EURODESIGN SYSTEMS” LTD. will generally discontinue the processing of your personal data and will notify all interested parties to whom the personal data have been submitted of the objection received and of the measures taken in this regard. In some cases, however, „EURODESIGN SYSTEMS” LTD. has an indisputable legal basis to continue the processing of your personal data even after receiving your objection (for example, in cases of unsetteled contractual relations, lawsuits etc.). In such cases „EURODESIGN SYSTEMS” LTD. will contact you to clarify the reasons why it will continue to process your personal data. If your objection concerns the processing of personal data for direct marketing, the „EURODESIGN SYSTEMS” LTD. will suspend unconditionally the processing of your for that purpose.
- Right to withdraw the consent given for personal data processing for the purposes outlined in the Declaration of Consent. The withdrawal can be done via a consent withdrawal declaration.
- Right to lodge a complaint with the Commission for Personal Data Protection (CPDP) – as the data subject, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) against the actions of „EURODESIGN SYSTEMS” LTD. in connection with the processing of your personal data.
In the cases when you are exercising your rights as a data subject, it would be necessary for you to make a detailed description of your request in the application submitted to „EURODESIGN SYSTEMS” LTD.. When exercising your rights, „EURODESIGN SYSTEMS” LTD. will need to verify your identity so as to avoid anyone else trying to impersonate you. For this purpose, we may require an ID card or other identification document when providing you with the information you request.
You may ask in writing various questions about the processing of your personal data by „EURODESIGN SYSTEMS” LTD., electronically at the e-mail indicated in item 1 above.
If you do not agree with the „EURODESIGN SYSTEMS” LTD. ‘s opinion regarding your inquiry or if you wish to receive more information, please visit the website of the Commission for Personal Data Protection at www.cpdp.SYSTEMS where you could file a complaint.
In the cases when „EURODESIGN SYSTEMS” LTD. has received your personal data from third parties, e.g. your employer is processing them for its own purposes, you may file a complaint against the actions of these third parties directly to them.
The exercise of your rights can not be opposed to the provision of your personal data to the competent authorities for the prevention, investigation and detection of criminal offenses.
- Types of processed personal data
„EURODESIGN SYSTEMS” LTD. may process different types of personal data related to your physical, social or economic identity. Such data may be obtained from you as the data subject or from third parties.
„EURODESIGN SYSTEMS” LTD. may process some or all of the data categories listed below in order to achieve the purposes described below, only if it has a good reason to do so.
- to identify you:
– full name
– permanent address (street, number, zip code, city, country)
– current address (street, number, zip code, city, country)
– ID card’s (passport) data.
- b) to contact you:
– phone number – mobile/fixed
– email address
– address (street, number, zip code, city, country)
– occupated job’s position in respective company
– similar details of contact persons related to you.
„EURODESIGN SYSTEMS” LTD. sometimes processes public information such as from official public registers, which are responsible for keeping this information legally, or to purchase them from companies that are responsible for the lawful collection of personal data.
Such public data may be processed for the purposes listed by „EURODESIGN SYSTEMS” LTD. in this document.
- Recipients of personal data
Personal data is generally processed by the employees of „EURODESIGN SYSTEMS” LTD.. The processing of personal data may also be carried out by personal data processors with whom „EURODESIGN SYSTEMS” LTD. has signed a contract for this purpose. Where there is a legitimate reason, personal data may be provided to other administrators to use them for their legitimate purposes.
In case the recipients mentioned above are established outside the European Economic Area „EURODESIGN SYSTEMS” LTD. shall forward personal data to non-EEA member countries (third countries), provided that an adequate level of personal data protection is ensured in accordance with the local and European laws, and that the personal data provided are sufficiently protected in the third country concerned, and with the approval of the Commission for Personal Data Protection. Your personal data may be transferred to a third country outside the EEA European Economic Area with your explicit and freely given consent. „EURODESIGN SYSTEMS” LTD. will take all the necessary measures to protect your personal data by limiting their availability to third parties in or outside the European Economic Area.
- Purposes of personal data processing
Personal Data, collected by the „EURODESIGN SYSTEMS” LTD. in its capacity of Personal Data Controller, may be processed for different purposes on different lawful basis, as follows:
6.1. Purposes, where personal data processing is based on legal obligations:
- Client identification and authentication of personal data pursuant to the Law.
- Reprting on the state and control authorities – National Revenew Agency, National sotial security institute etc.
6.2. Purposes for which the processing of your personal data is performed on the basis of performance of a contract
- Drawing up contracts at your request – to enter into a contract with you, as a customer or as a co-contractor „EURODESIGN SYSTEMS” LTD. must have your specific personal data (e.g. name, date of birth, PIN, ID card number) as well as your contact details. It is possible that „EURODESIGN SYSTEMS” LTD. would require additional information, depending on the type of the services that are subject of the contract.
- Execution of commercial cotracts, concluded with your employer or assignor – „EURODESIGN SYSTEMS” LTD. may process personal data, provided by its contragens – your employer or assignor for the purpose of execution of specified contractual obligations and rights.
- c. Litigations – Establishment, exercise and defense of „EURODESIGN SYSTEMS” LTD. ‘s rights – „EURODESIGN SYSTEMS” LTD. will process its clients data in order to protect its rights in court/ litigation procedures, when settling claims with the help of hired solicitors/lawyers, etc. This pertains to situations where your personal data is processed in connection with the administration of information related to litigations, judicial warrants, petitions and court decisions.
- Term of storage of personal data
„EURODESIGN SYSTEMS” LTD. shall use your personal data when „EURODESIGN SYSTEMS” LTD. has a clear purpose in mind. When the purpose disappears, we will no longer store the data.
The grounds for storing your data is rooted in the legal retention period (which is often ten years after the end of the legal relationship). The term may be longer when this is necessary for us to be able to exercise our rights. Where there is no legally defined time limit, the period may be shorter.