Privacy Policy

INFORMATION ON PERSONAL DATA PROTECTION POLICY,

TREATED IN "DNV-Prospeed" EOOD, in connection with Art. 13 and Art. 14 of EU Regulation 2016/679

DNV-Prospeed EOOD highly values the protection of the personal data of contractors and its staff. This information is designed to notify you how your personal data is processed.

If questions are left unanswered after reading your information, do not hesitate to contact us!

1. Personal data administrator

Trade Company "DNV-Prospeed" EOOD, address: Sofia, 1 Stoyan Edrev Str., Email: violeta.nikolcheva@prospeed.bg Phone: 028689005 (Personal Data Administrator) (Data Entities) in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Personal Data Protection Act and the Privacy Policy.

According to the General Regulation, "personal data" means any information relating to a natural person through which it can be directly or indirectly identified. Processing of personal data is any operation or set of operations that can be performed on personal data by automatic or other means.

2. Natural persons whose personal data are processed by the company

In connection with the services provided by it, DNV-Prospeed EOOD processes personal data regarding the following data subjects:

(a) Natural persons, contractors or potential contractors of the company - customers and suppliers of goods and services, respectively their employees.

(b) Staff - current and former employees of the company as well as jobseekers.

3. Targets of processing

The Company processes personal data to its clients and suppliers, including their employees, for the following purposes:

(a) Providing commercial and service services in performance of a contract or order;

(b) Protecting the legitimate interests of the company, including:

- Ensure the proper functioning, maintenance and security of the company's Internet sites and IT systems;

- Providing communication with customers, including electronically;

- Enforcement and protection of the company's rights and legitimate interests, including by court order.

4. Legal grounds for processing

The company processes personal data only if there is one of the alternative legal bases under the General Regulation and in particular:

(a) Execution of a contract, including pre-contractual relations prior to its conclusion;

(b) Statutory obligations applicable to the Company;

(c) The legitimate interests of the company, in so far as they have an advantage over the interests or fundamental rights and freedoms of the data subjects;

(d) Freedom of expression, in particular, informed and unambiguous consent of the data subject. The consent already granted may be withdrawn by the person at any time in the same manner as it was granted.

5. Possible consequences if personal data is not provided

In case the client does not provide the required information, including the necessary personal data, the company will not be able to conclude a contract with the client or will not be able to provide the requested service.

6. To whom is the personal data transmitted or disclosed?

The personal data of the company's clients are provided to:

(a) Leasing companies;

(b) Employees of "DNV-Prospeed" EOOD, providing sales and after-sales services of goods and services;

(d) Commercial companies providing accounting services and information support to the Company's IT systems as processors of personal data;

(e) Other competent public authorities in discharge of an obligation provided for by law.

7. Shelf life of personal data

The personal data of the contractors of the company are kept for 5 years from the conclusion of the respective contract in accordance with the general limitation period under the Obligations and Contracts Act.

The personal data contained in the accounting documents shall be kept within the terms of art. 12 of the Accountancy Act.

Personal data obtained by consent of a user of a service, such as contact details for the purposes of direct marketing, shall be retained until withdrawal of consent.

8. Personal data security

The Company applies all appropriate technical and organizational measures to ensure the security of personal data, including the explicit obligation of the employees to confidentiality.

9. Rights as data subjects

Any individual whose data is processed by the company has the following rights:

- the right of access to his or her personal data, including a copy of them;

- the right to correct or supplement inaccurate or incomplete personal data;

- the right to delete personal data processed without a legal basis;

- the right to limit the processing - in the case of a legal dispute between the company and the person until its resolution or the establishment, exercise or protection of legal claims;

- the right of objection - at any time and on grounds relating to the particular situation of the person, provided that there are no compelling legal grounds for the processing that take precedence over the interests, rights and freedoms of the data subject or trial.

Pursuant to the Personal Data Protection Act, the above rights may be exercised by submitting a written application on the spot at the office of DNV-Prospeed EOOD. An application may also be made electronically in accordance with the Electronic Document and Electronic Signature Act. The application is made personally by the data subject or by an explicitly authorized person.

10. Protecting the rights of data subjects

In accordance with the Data Protection Act and Regulation (EC) 2016/679 (General Data Protection Regulation), any individual who considers that his / her right to the protection of his or her personal data is violated may appeal to The Personal Data Protection Commission at: 1592 Sofia, "Prof. 2 Tzvetan Lazarov Str., Website: www.cpdp.bg.