DECLARATION OF PRIVACY
Data controller in the light of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL, hereinafter „the Regulation“, in terms of Members of the EU, along with relevant data protection legislation is:
"RIZOV FLOATS" OOD, UIC 203144157
Bulgaria
Address: Sofia, „Petar Dertliev“ Bld. №42, fl.3, office 19
Email: rizovfloats@abv.bg
Phone: .+359 888809155
Website: www.pole-floats.com
For questions regarding processing your personal data or for exercising data subject's rights pursuant to the Regulation, contact the Data protection officer of the Controller::
Name: Petar Rizov
Email: privacy.rizovfloats@gmail.com
Address: Dobrich, 25th September Bld. №49
While „RIZOV FLOATS" OOD conducting business activities, personal data processing is necessary not only for compliance with a legal obligation to which the controller is subject, but also for the right and complete performance of the offered services along with the subject of the contracts concluded. Without this personal data, „RIZOV FLOATS" OOD is not able to ensure right, complete and lawful execution of its obligations, as well as protect the interest of data subjects.
We hereby declare that all collected personal data will be processed only for the following purposes:
precontractual and current identification ;
performance of rights and obligations set out in or in connection with a contract
Dispute resolution - litigation or arbitration,;
Marketing purposes - (only after prior explicit consent given)
Implementation of Measures to Prevent Money Laundering and Financing of Terrorism
Statistics, reports and inqueries relevant to a contract;
Prevention against personal data fraud and misuse;
Legal obligations for transfering personal data to supervisory, national and regional institutions, court.;
Administration on the abovelisted purposes.;
„RIZOV FLOATS" OOD does not perform automated decision-making, including profiling, consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements, as well as the significance and the envisaged consequences of such processing for the data subject.
Where there is a necessity to process your personal data for another purpose, not listed in this Declaration, an updated Declarion will be presented to you and if required you will be requested for a new consent prior the processing.
If a consent is given by the data subject regarding the aforementioned purposes, pursuant to Article 6 (1) (a) we process personal data;;
Processing personal data for entering into a contract, where the data subject is party. The Controller process on a contractual basis pursuant to Article 6 (1) (b) of the Regulation .
Processing is necessary for compliance with a legal obligation to which the Controller is subject - Article (1) (c) of the Regulation ;
Processing is necessary in order to protect the vital interests of the data subject or of another natural person - Article 6 (1) (d) of the Regulation.;
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller - Article 6 (1) (e) of the Regulation;
processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child - Article 6 (1) (f) of the Regulation ;
In the light ot the Regulation, as Data controller we process only personal data necessary for the purposes listed in Section 3, as follows::
Full name ;
Personal identification number (PIN) , or other official personal identification number (passport number, ID number, etc.);
Nationality ;
Permanent , current address , correspondence address ;
Email ;
Phone number ;
Details regarding the exercise of data subject’s rights;
IP address ;
Credit/debit cards details.
In case “ sensitive data ” is processed, an explicit prior consent from the data subject is requested.
For collecting personal data the Controller uses the following sources:
publicly accessible sources;
information provided by the data subject by himself on electronic means or orally, in writing or by electronic form;
information provided in terms of contractual relationship with other Controller, where we acts as a Processor;
In some cases, to fulfill the purpose outlined in Section 3, your personal data may be disclosed to:
National and regional institutions - NRA, MofI, CPDP, FSC, courts, prosecution, NIS, municipality administration, etc.;
External experts, taking part in the performance of the contract between you and the Controller.;
Authorised personnel of „RIZOV FLOATS" OOD, in charge of personal data processing;
Organisations and entities that need the personal data for performance of the contract;
Third parties that in specific cases may receive your personal data are legally binded to implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk pursuant to the Regualtion and Bulgarian data protection legislation.
The Controller declares that no personal data will be transfered to third parties outside EU. If such transfer is necessary, the transfer will take place pursuant to the Regulation and taking into account technical and organisational measures implemented by the Controller..
„RIZOV FLOATS" OOD will store your personal data no longer than the period set out by law or in the contract, but no longer than 5 years where no period is prescibed by law, as the personal data will be stored pursuant to the Regulation. Read more about the processing of personal data on our website: www.rizovfloats.com - where the Privacy policiy of the Controller is published, outlining the terms and conditions of processing personal data along with Privacy notices pursuant to Article 13 and 14 of the Regulation.
During the processing of your personal data, you have the following rights:
right to request a copy of your personal data from „RIZOV FLOATS" OOD and right of access to your personal data anytime;
right to receive the personal data from „RIZOV FLOATS" OOD, in a structured, commonly used and machine-readable format to transmit those data to another controller or to have the personal data transmitted directly from us to another controller without hindrance.;
right to request from us without undue delay the rectification of your inaccurate personal data;
right to request from „RIZOV FLOATS" OOD the erasure of your personal data without undue delay where one of the following grounds applies:
personal data are no longer necessary in relation to the purposes for which they were collected;
withdrawn consent from your side ;
data subject have object the processing,
personal data have been unlawfully processed;
personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
personal data have been collected in relation to the offer of information society services.
Erasure request shall be rejected:
for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task,
for reasons of public interest in the area of public health;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes likely to render impossible or seriously impair the achievement of the objectives of that processing; for the establishment, exercise or defence of legal claims.
right to request from „RIZOV FLOATS" OOD to restrict the processing of your personal data, as in the meantime the personal data will not be processed but only stored. Our rejection of restriction will be presented in writing as we are obliged to provide a lawful basis for that.;
right to withdraw your consent for processing your personal data anytime by a request to the Controller;
right to object certain types of processing such as direct marketing (SPAM);
right to object automated processing, including profiling;
right not to be subject to a decision based solely on automated processing, including profiling;
where necessity arise to process your personal data for a new purpose, not listed in the present Declaration for privacy policy, a new notificiation will be sent to you and a new prior consent will be requested from you if required..
All abovementioned requests will be forwarded in case of third party (recipients, including outside EU and international organisations) during processing your personal data.
Exercise ot data subject rights
Every time you desire to make a request based on the aforementioned data subject rights (Articles 15-22 of the Regulation) you shall contact the Data protection officer and send a data subject Request in writing.
Pursuant to the requirements of the Regulation the Controller provide information on action taken on a request to the data subject without undue delay and in any event within one month of receipt of the request. Keep in mind the following:
That period may be extended by 2 further months where necessary, taking into account the complexity and number of the requests. The controller informs the data subject of any such extension within 1 month of receipt of the request, together with the reasons for the delay.
Where the data subject makes the request by electronic form means (email, etc.), the information shall be provided by electronic means where possible, unless otherwise requested by the data subject..
If the controller does not take action on the request of the data subject, the controller informs the data subject without delay and at the latest within 1 month of receipt of the request of the:
reasons for not taking action and
the possibility of lodging a complaint with a supervisory authority
and seeking a judicial remedy.
Information provided under Articles 13 and 14 of the Regulation and any communication and any actions taken under Articles 15 to 22 and 34 of the Regulation are provided free of charge. Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either:
a) | charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested, or |
b) | refuse to act on the request. |
The controller bears the burden of demonstrating the manifestly unfounded or excessive character of the request.
Without prejudice to Article 11 of the Regulation, where the controller has reasonable doubts concerning the identity of the natural person making the request referred to in Articles 15 to 21 of the Regulation, the controller may request the provision of additional information necessary to confirm the identity of the data subject. In this case we may require to identify yourself with a document or by other means.
Lodging a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, as the competent supervisory authority is
Commission for Personal Data Protection
Address: Sofia 1592, Prof. Tzvetan Lazarov Bld. № 2 (www.cpdp.bg).
Lodging a complaint with the Controller
In case you'd like to lodge a complaint through „RIZOV FLOATS" OOD, you shall contacts us directly or contact our Data protection officer. (check contact details above).
Read more about the processing of personal data on our website : www.pole-floats.com
Download - 3.3.REQUEST_OF_DATA_SUBJECT
