PRIVACY NOTICE/STATEMENT OF PERSONAL DATA
Data of the administrator – WE: “MALINA PAMPOROVO” OOD, EIK 205708731, with address: Bulgaria, Sofia, Lozenets district, Evlogi i Hristo Georgievi Blvd. No. 22A, Mariaya Cocktail Bar, e-mail: manager@malina-pamporovo .com is a limited liability company whose main activity is hotel, restaurant, catering, trade in food products and any other type of goods.
Contact details for the Data Protection Officer: “MALINA PAMPOROVO” Ltd. cooperates and has chosen Mr. Borislav Aleksandrov Kanchelov as its personal data protection officer, and you can contact him through the electronic contact form on our website. The personal data we collect and process from you are:
We present you with information about us and our activities. In order to provide you with additional information about our products, services, partners and in general information beyond that disclosed at the headquarters and address of management and on our website, to respond to your inquiries and comments and in general to be in communication with you, it is necessary to collect your personal data so that we can identify you (if you wish) and respond to your needs, if and to the extent possible.
To achieve the stated goals, we collect information about your names, e-mail, telephone number, in the volume that you provide us. We guarantee that the information we collect and use is relevant for the stated purposes and is not for the purpose of invading your personal space and affecting your personal interest and private life.
Special categories of data we process: In view of the activities of “MALINA PAMPOROVO” OOD, we do not process sensitive personal data of our customers and partners.
Source:
We receive the above personal data from you, personally or in individual cases from our business partners and/or other third parties. We declare that the personal data we collect will be used for the following purposes: We need your personal data not only to communicate with you and to provide you with our products and services in the highest quality and on time, but also to perform other statutory obligations.
The basis that entitles us to process your data is: – Processing is based on your consent; – The processing of your data is necessary for the performance of a contract with you or our intention to enter into a contract; – Processing is necessary to comply with our legal obligation – Processing is necessary to protect your (vital) interests (or the interests of another person).
Consent:
By agreeing to accept this Notice, you give us permission to process your personal data only for the purposes specified by us, where necessary we will provide you with express and written informed consent. Consent is necessary for us to process both types (ordinary and special) of personal data, but it needs to be explicit. You can withdraw your consent at any time by submitting a form to us, which you can obtain from us upon request, or you can write it in free text.
Transfer of personal data to a country outside the EU or to an international organization: “MALINA PAMPOROVO” OOD has no intention of passing on your personal data to third parties, except in cases established by law. We will not sell your data to third parties, nor will we pass it on for any gain. We may provide your personal data to persons who assist us in achieving the goals described above – personal data processors who act on the basis of a written contract, in accordance with our express instructions and with the application of appropriate technical and organizational measures to protect your personal data.
Personal data will not be provided to third parties or shared outside the European Union or the European Economic Area. Recipients of your data can also be persons and authorities with authority, to whom we will provide them in fulfillment of specific and clear legal obligations. Where we intend to pass your specific personal data (if you have provided it to us) to a third party, we will only do so after obtaining your consent, unless we are required to do otherwise by law.
CONFIDENTIALITY of VISITORS’ data c “MALINA PAMPOROVO” OOD, where VIDEO SURVEILLANCE is carried out The personal data we collect and process: in the event that you are a visitor to our company at its address or to an object managed by us, in which there is video surveillance, your image and behavior data will be processed, giving information about the human image and the characteristic traits, insight into your behavior, habits, offenses and other visible information.
The source of this data is: We receive the above personal data from you, personally. We declare that the personal data we collect during video surveillance will be used only for legitimate purposes, such as protecting property, ensuring security, safety and order, protecting public health and preventing theft and other abuses.
The grounds that give us the right to process your image and behavior data are: our legitimate interest in implementing security and ensuring security and on the basis of the public interest. In addition to the above through processing, we can also provide the legally required assistance to competent public authorities within the framework of the powers granted to them.
Processing period: We store your data processed during video surveillance for up to 60 (sixty) days in accordance with the Law on Private Security Activities. Typically, this processing is limited to real-time monitoring of guarded locations and the storage of relevant records. Total data retention period The company’s customer personal data is stored for a period of up to 5 years from the conclusion of the relevant contract with the customer. This term is consistent with the statute of limitations for making any claims arising from the contract.
The personal data of job candidates who are not approved for appointment to the Company are stored for the period determined according to the current regulations in the field of personal data protection, from the end of the procedure, after which they are returned to the person or destroyed. Personal data may be stored for a longer period for the purpose of making job offers only with the applicant’s written consent.
Personal data of the company’s employees are stored in accordance with Bulgarian legislation, until the expiration of the terms provided for this after the termination of the employment relationship. The records of the video surveillance carried out in the company are stored for a period of up to 60 (sixty) days according to the Law on private security activities. The personal data that the company collects during video surveillance will be used only for legitimate purposes, such as property protection, ensuring security, safety and order in commercial establishments, protecting public health in the food trade and preventing theft and other abuses.
Personal data contained in accounting documents are stored according to the terms provided for this, according to the Accounting Law.
Method of storing and protecting your personal data that we process:
We will process your personal data while taking necessary and sufficient technical and organizational measures for their protection. Among other things, we have implemented the necessary internal policies and measures to protect your personal data at the design stage; the employees responsible for the data are well aware of the requirements regarding the protection of your personal data;
an internal process has been established for regular testing, assessment and evaluation of the effectiveness of technical and organizational measures in order to guarantee the security of the processing; a procedure has been developed for storing and destroying the data. We will process (collect, store and use) the information you provide in a manner compatible with the requirements of the General Data Protection Regulation (GDPR). We will endeavor to keep the information accurate and up to date. We do not perform automated decision-making (without human intervention) when processing your personal data for any of the above purposes. Your rights as a subject of personal data are as follows: At any time while we store or process your personal data, you (according to the legal terminology – data subject) have the following rights:
- you have the right to request a copy of your personal data from “MALINA PAMPOROVO” OOD and the right to access your personal data at any time;
- you have the right to request from “MALINA PAMPOROVO” OOD your personal data in a form convenient for transfer to another personal data administrator, or to request that we do so without being hindered by us;
- you have the right to ask “MALINA PAMPOROVO” OOD to correct your inaccurate personal data, as well as data that is no longer up-to-date, without undue delay;
- you have the right to request from “MALINA PAMPOROVO” OOD that your personal data be deleted without undue delay in the presence of any of the following grounds:
the personal data are no longer necessary for the purposes for which they were collected;
when you have withdrawn your consent;
when you have objected to the processing,
when the processing is unlawful; where the personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to us as a personal data controller; when personal data were collected in connection with the provision of information society services. We may refuse to delete your personal data for the following reasons:
in exercising the right to freedom of expression and the right to information; for compliance with a legal obligation on our part or for the performance of a task of public interest; for reasons of public interest in the field of public health; for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, to the extent that deletion is likely to make impossible or seriously hinder the achievement of the purposes of this processing; or for the establishment, exercise or defense of legal claims.
you have the right to withdraw your consent to the processing of your personal data at any time with a separate request addressed to the administrator;
you have the right to object to certain types of processing, such as direct marketing (unsolicited advertising messages);
you have the right to object to automated processing, including profiling;
you have the right not to be subject to a decision based solely on automated processing involving profiling;
if we need to use your personal data for a new purpose that is not covered by this data protection declaration, we will provide you with a new data protection notice and, when and where necessary, we will request your prior consent for the new processing.
All of the above requests will be forwarded if there is a third party (recipients including non-EU and international organizations) processing your personal data. You have the right to appeal to the supervisory authority You have the right to file a complaint directly with the supervisory authority, the competent authority being the Commission for the Protection of Personal Data, address: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2 (www.cpdp.bg). In the event that you wish to file a complaint regarding the processing of your personal data by “MALINA PAMPOROVO” OOD, you can do so at the specified contact details of “MALINA PAMPOROVO” OOD or directly to the Data Protection Officer at the above-mentioned data for contact.
Affirmed:
Rosen Hristov – Manager