Obligatory information on the rights of personal data protection (Privacy Policy)
General information
From May 25, 2018 a new General Data Protection Regulation, adopted by the European Union, enters into force. The regulation aims to guarantee the protection of the data of individuals from all EU Member States and to harmonize the rules for their processing.
As a data controller, Sidi Ltd. meets all the requirements of the new regulation, collecting only the data of the persons to the extent necessary for the provision of the service, and keeping them responsibly and legally.
Information about the Data Controller
1. The name "MiS Systems 70" Ltd.
2. UIC / BULSTAT: 200051462
3. Registered office and registered address: Varna, 25 Morska Sirena Str., Fl. 15, ap. 99
4. Correspondence data: Varna, 128 Eight Primorski Polk Blvd., fl.2, of. 216
5. Email: office@mssystems.eu
Information concerning the competent supervisory authority
1. Name: Data Protection Commission
2. Headquarters and address of management: 1592 Sofia, Prof. Tsvetan Lazarov ”№ 2
3. Correspondence information: 1592 Sofia, Prof. Tsvetan Lazarov ”№ 2
4. Phone: 02 915 3 518
5. Email: kzld@government.bg, kzld@cpdp.bg
6. Website: www.cpdp.bg
MIS Systems 70 Ltd. conducts its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
Grounds for collecting, processing and storing your personal data
Art. 1. (1) "MiS Systems 70" Ltd. collects and processes your personal data in connection with the provision of repair and construction activities on the basis of the following:
● Fulfillment of the obligations of "MiS Systems 70" EOOD under contract with you;
● You have explicitly received your consent when asked through the website of "MiS Systems 70" Ltd. https: //www.ms
● For the legitimate interest of MiS Systems 70 Ltd.
Aims and principles in the collection, processing and storage of your personal information
Art. 2. (1) "MiS Systems 70" Ltd. collects and processes the personal data you provide to us in connection with the use of our services and to conclude a contract with the company, as well as to request through the website of "MiS Systems 70" Ltd., including for the following purposes:
● individualisation of a party to the contract;
● accounting goals;
● protection of information security;
● ensuring the performance of the contract for the provision of the relevant service;
(2) MiS Systems 70 Ltd. adheres to the following principles in the processing of your personal data:
● lawfulness, good faith and transparency;
● limitation of processing purposes;
● correlation with the purposes of processing and minimizing the data collected;
● data accuracy and timeliness;
● storage limitation to achieve goals;
● the integrity and confidentiality of the processing and ensuring an adequate level of security of personal data.
(3) In the processing and storage of personal data, "MiS Systems 70" Ltd may process and store personal data in order to protect its legitimate interests:
● fulfillment of its obligations to the National Revenue Agency, the Ministry of the Interior and other state and municipal bodies.
What types of personal data is collected, processed and stored by MIS Systems 70 Ltd.?
Art. 3. (1) "MiS Systems 70" Ltd. carries out the following operations with personal data for the following purposes:
● Conclude and execute a trade transaction with a client or partner
(2) MiS Systems 70 Ltd. processes the following categories of personal data and information for the following purposes and on the following grounds:
● Data: Your personally identifiable information: Identity card or passport names, PIN / ID, citizenship, ID / valid national ID, address, email and telephone.
○ Purpose for which the data is collected: 1) execution of a contract with a trading partner and its administration ;;
○ Reason for processing your personal data - contractual basis
● Additional information provided by you - If you wish to make an inquiry through the site of "MiS Systems 70" Ltd.: https: //www.mssy, you must fill in an online form which requires: name, surname, email and telephone.
○ Purpose for which the data is collected: Request for information on the activities and services of "MiS Systems 70" Ltd.
○ Grounds for data processing: By agreeing to the terms and conditions and privacy policy of the Website, you give your express consent to the processing of your personal data for that purpose.
● Other data that "MiS Systems 70" Ltd processes - Upon entering our website, "MiS Systems 70" Ltd. collects data about the IP address used.
Aims and principles in the collection, processing and storage of your personal information
Art. 2. (1) "MiS Systems 70" Ltd. collects and processes the personal data you provide to us in connection with the use of our services and to conclude a contract with the company, as well as to request through the website of "MiS Systems 70" Ltd., including for the following purposes:
● individualisation of a party to the contract;
● accounting goals;
● protection of information security;
● ensuring the performance of the contract for the provision of the relevant service;
(2) MiS Systems 70 Ltd. adheres to the following principles in the processing of your personal data:
● lawfulness, good faith and transparency;
● limitation of processing purposes;
● correlation with the purposes of processing and minimizing the data collected;
● data accuracy and timeliness;
● storage limitation to achieve goals;
● the integrity and confidentiality of the processing and ensuring an adequate level of security of personal data.
(3) In the processing and storage of personal data, "MiS Systems 70" Ltd may process and store personal data in order to protect its legitimate interests:
● fulfillment of its obligations to the National Revenue Agency, the Ministry of the Interior and other state and municipal bodies.
What types of personal data is collected, processed and stored by MIS Systems 70 Ltd.?
Art. 3. (1) "MiS Systems 70" Ltd. carries out the following operations with personal data for the following purposes:
● Conclude and execute a trade transaction with a client or partner
(2) MiS Systems 70 Ltd. processes the following categories of personal data and information for the following purposes and on the following grounds:
● Data: Your personally identifiable information: Identity card or passport names, PIN / ID, citizenship, ID / valid national ID, address, email and telephone.
○ Purpose for which the data is collected: 1) execution of a contract with a trading partner and its administration ;;
○ Reason for processing your personal data - contractual basis
● Additional information provided by you - If you wish to make an inquiry through the site of "MiS Systems 70" Ltd.: https: //www.mssy, you must fill in an online form which requires: name, surname, email and telephone.
○ Purpose for which the data is collected: Request for information on the activities and services of "MiS Systems 70" Ltd.
○ Grounds for data processing: By agreeing to the terms and conditions and privacy policy of the Website, you give your express consent to the processing of your personal data for that purpose.
● Other data processed by MiS Systems 70 Ltd - Upon entering our website, MiS Systems 70 Ltd. collects data about the IP address used.
○ Purpose for which data is collected: Improvement of service security and interface localization, statistical and marketing studies.
○ Grounds for data processing: The IP address is collected on the grounds of fulfilling the legitimate interests of the administrator - Art. 6, para. 1, b. (f) GDPR;
● Your invoice details for an individual - If you wish to be issued an invoice in your capacity as an individual, you must provide your unique citizenship number.
○ Purpose for which the data is collected: Issuance of an invoice for making payments under a concluded service contract.
Вание Reason for processing your personal data - Upon entering into a written contract, a contractual relationship is created between MiS Systems 70 Ltd. and you, on the basis of which we process your personal data - Art. 6, para. 1, b. (b) GDPR.
(3) "MiS Systems 70" Ltd. does not collect or process personal data related to the following:
● disclose racial or ethnic origin;
● reveal political, religious or philosophical beliefs, or membership of trade union organizations;
● Genetic and biometric data, health data, or sexual life or sexual orientation data.
(4) The personal data are collected by "MiS Systems 70" Ltd. from the persons to whom they relate.
(5) The company does not carry out automated decision making with data.
The storage period of your personal data
Art. 4. (1) "MiS Systems 70" EOOD shall keep your personal data for a period not longer than the requirements of the applicable legislation for the respective stipulated period. After this deadline, MiS Systems 70 Ltd. takes the necessary care to erase and destroy all your data without undue delay.
(2) "MiS Systems 70" Ltd. notifies you in case the data retention period needs to be extended for the purpose of fulfilling the goals, the fulfillment of the contract, for the legitimate interests of "MiS Systems 70" Ltd. or other.
Transmission of your personal data for processing
Art. 5. (1) "MiS Systems 70" EOOD may, at its sole discretion, transmit some or all of your personal data to processing personal data for the fulfillment of the processing goals in compliance with the requirements of Regulation (EU) 2016/679.
(2) "MiS Systems 70" Ltd. notifies you in case you intend to transfer some or all of your personal data to third countries or international organizations.
Your rights in the collection, processing and storage of your personal data
Withdrawal of consent to the processing of your personal data
Art. 6. (1) If you do not wish all or part of your personal data to be further processed by MiS Systems 70 Ltd. for a specific or for all purposes of processing, you may at any time withdraw your consent for processing by completing online form or by request in free text.
(2) "MiS Systems 70" EOOD may ask you to verify your identity and identity with the data subject.
Right of access
Art. 7. (1) You have the right to request and receive from MiS Systems 70 Ltd. confirmation that personal data related to you are processed.
(2) You have the right to access the data related to it, as well as to the information concerning the collection, processing and storage of your personal data.
(3) "MiS Systems 70" Ltd. provides upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.
(4) The provision of access to the data is free of charge, but "MiS Systems 70" EOOD reserves the right to impose an administrative fee in case of repeated or excessive requests.
Right of correction or completion
Art. 8. You may correct or fill in inaccurate or incomplete personal data related to you by requesting to "MiS Systems 70" Ltd.
Right to be deleted ("to be forgotten")
Art. 9. (1) You have the right to request from "MiS Systems 70" EOOD to delete your personal data, and "MiS Systems 70" Ltd has the obligation to delete them without undue delay when any of the following is available. grounds:
● personal data are no longer needed for purposes for which they were otherwise collected or processed;
● You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
● You object to the processing of personal data relating to you, including for direct marketing purposes, and there are no legitimate grounds for processing to take precedence;
● personal data were processed illegally;
● personal data must be deleted in order to comply with a legal obligation under EU or Member State law applicable to MiS Systems 70 EOOD;
● personal data have been collected in connection with the provision of information society services.
(2) MiS Systems 70 Ltd. shall not be obliged to delete personal data if it stores and processes:
● to exercise the right to freedom of expression and the right to information;
● compliance with a legal obligation requiring processing as provided for in EU or Member State law that applies to the Administrator or for the performance of a public interest task or in the exercise of official powers conferred on it;
● for reasons of public interest in the field of public health;
● for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
● To establish, pursue, or defend legal claims.
(3) In order to exercise your right to "forget", you must submit a written request sent to "MiS Systems 70" Ltd., as well as to prove your identity and identity with the data subject by submitting on the spot his identity card for identification purposes
(4) "MiS Systems 70" EOOD does not delete the data that it has a legal obligation to keep, including for protection in connection with legal claims against it or proving its rights.
Right of restriction
Art. 10. You have the right to request MiS Systems 70 Ltd. to restrict the processing of your related data when:
● challenge the accuracy of personal data for a period that allows MiS Systems 70 Ltd. to verify the accuracy of personal data;
● the processing is unlawful, but you do not want your personal data to be deleted, and only their use will be restricted;
● "MiS Systems 70" Ltd. no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defense of your legal claims;
● You objected to the processing pending verification that the legitimate grounds of MiS Systems 70 EOOD have priority over your interests.
Right to portability
Art. 11. (1) You may at any time download the data stored and processed for you in connection with the use of the services of "MiS Systems 70" Ltd., by request by email.
(2) You may request that MiS Systems 70 Ltd. directly transfer your personal data to an administrator designated by you, where technically feasible.
Right to receive information
Art. 12. You may request MiS Systems 70 Ltd. to inform you of any recipients to whom the personal data for which correction, deletion or restriction of processing has been requested have been disclosed. MIS Systems 70 Ltd. may refuse to provide this information if this would be impossible or would require a disproportionate effort.
Right to object
Art. 13. You may object at any time to the processing of personal data from MiS Systems 70 EOOD that apply to you, including if it is processed for profiling or direct marketing purposes.
Your rights in breach of your personal data security
Art. 14. (1) If MiS Systems 70 Ltd. establishes a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, we shall notify you without undue delay of the breach, as well as of the measures taken or to be undertaken.
(2) "MiS Systems 70" Ltd. is not obliged to notify you if:
● Has taken appropriate technical and organizational safeguards with respect to data affected by a security breach;
● subsequently took measures to ensure that the breach would not pose a high risk to your rights;
● notification would require a disproportionate effort.
Persons to whom your personal data are provided
Art. 15. The controller does not transfer your data to third countries.
Other provisions
Art. 16. In the event of a violation of your rights under the aforementioned or applicable personal data protection legislation, you have the right to file a complaint with the Personal Data Protection Commission as follows:
1. Name: Data Protection Commission
2. Headquarters and address of management: 1592 Sofia, Prof. Tsvetan Lazarov ”№ 2
3. Correspondence information: 1592 Sofia, Prof. Tsvetan Lazarov ”№ 2
4. Phone: 02 915 3 518
5. Email: kzld@government.bg, kzld@cpdp.bg
6. Website: www.cpdp.bg
Art. 17. You may exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are optional and you can submit your requests in any form that contains a statement to that effect and identifies you as the data owner.
Art. 18. If the consent concerns a transfer, the Administrator shall describe the potential risks of transferring the data to third countries in the absence of adequate protection and adequate remedies.
