1. Data about the administrator and contacting him.
“PROFIL GROUP” Ltd. is a commercial company, which is entered in the Commercial Register at the Registry Agency.
“PROFIL GROUP” Ltd. is the administrator of the personal data that are being processed in the course of or in the course of its commercial activity, the headquarters and the address of management of PROFIL GROUP LTD is: Sofia, Washburn Street, bl. 61, floor 5, apt. 11, and the address for correspondence is: 44, Nikolay Kopernik Str., Sofia, at which address you may send by post to PROFIL GROUP EOOD as a data administrator or personally submit your applications to the office of ” PROFIL GROUP “LTD at the address: 44, Nikolai Kopernik Str., Sofia.
You can also request your e-mail address: firstname.lastname@example.org, or call +359 894 509 372.
2. Purposes and grounds for processing of personal data, categories of data processed.
PROFIL GROUP LTD is a trade company whose main activity is production, trade and installation of doors, windows, blinds, railings, cladding, shower cubicles, shades, security shutters, interior and armored doors and offering services as finishing works, thermal insulation, construction repairs and building materials. In carrying out its trade activities PROFIL GROUP complies with the requirements of the Commercial Law, the Law on the Obligations and Contracts and the Legislation of the Republic of Bulgaria.
PROFIL GROUP Ltd. respects the highest levels of privacy of personal data and processes personal data in relation to the following main activities:
Keeping the register “staff – permanent and extra”;
keeping a register of “suppliers and customers”;
and in performing other functions defined by law.
In exercising its commercial activity PROFIL GROUP Ltd. processes personal data of employees / employees, suppliers, customers and other persons on the grounds of data processing under Art. 6, par. 1, b. “A”, “b” and “c” of Regulation 2016/679. In these cases, the data processed are related to the physical identity of the subject, economic identity, social identity, family identity, forensic data, health data, and are used for the purposes for which it is provided in the relevant law or other statutory instrument.
For the purposes of personnel administration and financial accounting, PROFIL GROUP Ltd. processes personal data pursuant to Art. 6, par. 1, b. “C” and art. 9, par. 2, b. “B” of Regulation 2016/679 for jobseekers, employees and individuals, contractors and representatives of legal entities – contractors. The categories of data processed are about physical and social, family and economic identity, data on the court’s past and the state of health, accounting and payment data, transaction data.
When PROFIL GROUP Ltd. processes data based on the consent of the subject, personal data is processed only if the persons have freely, specifically, informed and unambiguously expressed their consent to the processing.
The processing of personal data is done for the specific and precisely defined purposes only where there is a legal basis for it, the data being processed objectively, lawfully, in good faith and in a transparent manner and can not be further processed in a manner inconsistent with those purposes.
3. Categories of data recipients outside PROFIL GROUP EOOD.
PROFIL GROUP does not disclose personal data to third parties and recipients unless there is a legal basis for receiving the data or the data are not publicly available due to their inclusion in a public register.
Except in the case of public access to data included in a public register, data recipients, depending on the particular case, may be:
3.1. State authorities and bodies entrusted with public functions within the framework of their powers (NRA, NSSI, MI, etc.);
3.2. Courier companies and postal operators – for the needs of conducting correspondence with the physical persons-data subjects.
4. Data retention period.
As a personal data administrator, PROFIL GROUP Ltd. processes the data for a minimum duration according to the processing objectives and provided for in the legislation in force in accordance with the principle of restriction of storage.
For a period of 50 years, the data relating to employment and insurance relations are kept.
5. Rights of individuals-data subjects and how they can exercise them.
The measures taken to protect personal data in accordance with the requirements of Regulation 2016/679 are aimed at ensuring the rights of the individuals whose personal data are processed, namely:
– Right to access the information that you can hold at any time;
– Right to correct or supplement inaccurate or incomplete data;
– Right of wiping (the right to be forgotten), if the conditions of Art. 17 of Regulation 2016/679;
– The right to restrict processing to the extent that legal requirements are met to restrict the processing of its data;
– Right to data portability if the portability conditions under Art. 20 of Regulation 2016/679;
– Right to object to the processing of data if the conditions of Art. 21 of Regulation 2016/679.
– Right of withdrawal of consent. In case you have agreed to the processing of your personal data, you have the right to withdraw this consent with immediate effect. The lawfulness of processing your data before the withdrawal of consent remains unchanged.
The above rights can be exercised by applying to PROFIL GROUP LTD (in writing or electronically), in which you should specify your request. The application should be signed and sent to the correspondence address of PROFIL GROUP EOOD.
6. Right to appeal to the Commission for the Protection of Personal Data
If you believe that your rights under Regulation 2016/679 have been violated, you may file a complaint with the Supervisory Authority for Personal Data Protection – Sofia 1592, “Prof. Tzvetan Lazarov “№ 2 or www.cpdp.bg.
7. Transmission of personal data to third countries or international organizations.
PROFIL GROUP Ltd. does not transmit the processed personal data to third countries or international organizations.
8. Data protection measures introduced by PROFIL GROUP LTD.
With instructions for the measures for processing and protection of personal data by the company-administrator of personal data “PROFIL GROUP” EOOD, adopted by decision of the sole owner of the capital of PROFIL GROUP EOOD, measures have been put in place for effective protection of the personal data processed by the company data and the possibility to exercise the rights of data subjects provided for in Regulation 2016/679.
Additional information about the processing and protection of personal data in PROFIL GROUP LTD according to the instructions can be obtained from the person responsible for collecting, processing, storing and protecting the personal data of PROFIL GROUP EOOD by sending an inquiry to an electronic address: email@example.com.
9. Contact details of the PROFIL GROUP person responsible for the collection, processing, storage and protection of personal data.
If you have any comments, concerns, concerns or complaints about the collection and use of your personal data by PROFIL GROUP Ltd., please do not hesitate to contact the person responsible for the collection, processing, storage and protection of the personal data of the contact telephone: +359 894 509 372 or by e-mail: firstname.lastname@example.org, in which you should specify the necessary data for your individualization and contact for feedback.
10. Changes in personal data protection measures