GENERAL INFORMATION ON THE PROTECTION OF NATURAL PERSONS IN REGARD
TO THE PROCESSING
OF PERSONAL DATA BY "IVANOVA & CO." LTD
I. “IVANOVA & CO” LTD is a personal data controller within the meaning of Regulation
(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the
protection of natural persons with regard to the processing of personal data and on
the free movement of such data and the Personal Data Protection Act.
For the needs of the subjects of personal data processed by “IVANOVA & CO” LTD, the
Company has the following identification:
Name: “IVANOVA & CO” LTD;
Address: Burgas, residential complex “Slaveykov”, building 126, entrance A, offices №
6 and № 7
tel. 056/586767
E-mail: ivanovasie@mail.bg
II. Categories of personal data collected by “IVANOVA & CO” LTD for the
"Counterparties" register and the purposes for which they are processed are as
follows:
Regarding the physical identity of individuals
-names and personal data (Personal Identification Number, address), other data
related to the specific service, banking information - the data is necessary in order to
comply with the regulatory requirements for concluding contracts for services
provided by “IVANOVA & CO” LTD, payments under these contracts and their
implementation, as well as for issuing the relevant accounting documents in
accordance with the requirements of the Accountancy Act and others.
III. The data collected and processed by “IVANOVA & CO” LTD are not transferred to
third parties, except for the accounting department serving the Company and the
relevant state authorities in fulfillment of the statutory obligations under the Labor
Code, the Code of Social Security, the Health Insurance Act, the Personal Income Tax
Act, the Corporate Income Tax Act, etc., as well as to banking institutions for the
purpose of cashless payments of remuneration, etc. “IVANOVA & CO” LTD does not
transfer data to third countries outside the European Union.
IV. The storage period for personal data collected and processed by “IVANOVA & CO”
LTD is 5 years from the date of issuance of the invoice/provision of the service.
V. Rights of data subjects collected and processed by “IVANOVA & CO” LTD:
1. The data subject has the right to obtain from “IVANOVA & CO” LTD confirmation as
to whether personal data relating to him or her are being processed, and if so, to
obtain access to the data.
2. The data subject has the right to obtain from “IVANOVA & CO” LTD a copy of the
personal data which are being processed.
3. The data subject has the right to request from “IVANOVA & CO” LTD to rectify
without undue delay inaccurate personal data relating to him or her.
4. The data subject shall have the right to obtain from “IVANOVA & CO” LTD the
erasure of personal data concerning him or her without undue delay, and “IVANOVA &
CO” LTD shall have the obligation to erase the personal data without undue delay
where one of the following grounds applies:
- the personal data are no longer necessary for the purposes for which they were
collected or otherwise processed;
- the data subject withdraws his or her consent to which the processing of the data is
based on the consent of the data subject or special categories of personal data are
processed with the explicit consent of the data subject, and there is no other legal
basis for the processing;
- the data subject objects to the processing and there are no overriding legitimate
grounds for the processing, or the data subject objects to the processing where
personal data are processed for direct marketing purposes;
- the personal data have been processed unlawfully;
- the personal data must be erased for compliance with a legal obligation under Union
law or the law of the Republic of Bulgaria;
- the personal data were collected in connection with the offering of information
society services.
5. The data subject has the right to request from “IVANOVA & CO” LTD restriction of
processing in any of the following cases:
- the accuracy of the personal data is contested by the data subject, for a period that
allows “IVANOVA & CO” LTD to verify the accuracy of the personal data;
- the processing is unlawful, but the data subject does not wish the personal data to
be erased, but requests instead the restriction of their use;
- “IVANOVA & CO” LTD no longer needs the personal data for the purposes of the
processing, but the data subject requires them for the establishment, exercise or
defense of legal claims;
- the data subject has objected to the processing pending verification of whether the
legitimate grounds of “IVANOVA & CO” LTD override the processing.
6. The data subject has the right to receive the personal data concerning him or her,
which he or she has provided to “IVANOVA & CO” LTD, in a structured, commonly
used and machine-readable format and has the right to transmit those data to
another controller without hindrance from “IVANOVA & CO” LTD to whom the personal
data have been provided, where:
- the processing is based on consent or a contractual obligation;
- the processing is carried out by automated means.
6.1. When exercising his or her right to data portability under point 6., the data
subject has the right to obtain a direct transfer of the personal data from one
controller to another, where this is technically feasible.
7. The data subject shall have the right, at any time and on grounds relating to his or
her particular situation, to object to processing of personal data concerning him or
her, which is based on Article 6(1)(e) or (f) of the Regulation /where the processing is
necessary for the performance of a task carried out in the public interest or in the
exercise of official authority vested in the controller; where the processing is
necessary for the purposes of the legitimate interests pursued by the controller or by
a third party, except where such interests are overridden by the interests or
fundamental rights and freedoms of the data subject which require protection of
personal data, in particular where the data subject is a child/, including profiling based
on those provisions. “IVANOVA & CO” LTD shall no longer process personal data
unless it demonstrates compelling legitimate grounds for the processing which
override the interests, rights and freedoms of the data subject, or for the
establishment, exercise or defence of legal claims.
8. The data subject has the right not to be subject to a decision based solely on
automated processing, including profiling, which produces legal effects concerning the
data subject or similarly significantly affects him or her.
9. The data subject has the right to lodge a complaint with the Commission for
Personal Data Protection and to the court.
10. The acceptance, consideration and response within one month of requests from
individuals to exercise their rights as personal data subjects is carried out in
accordance with the internal procedures approved by “IVANOVA & CO” LTD.
VI. Personal data in the Counterparties Register are collected and processed by
“IVANOVA & CO” LTD in fulfillment of its obligations under the law. Failure to provide
such data would result in the inability of “IVANOVA & CO” LTD to fulfill these
obligations, as well as the inability to enter into contractual relations with the subject
of the personal data.
VII. The collection and processing of personal data by “IVANOVA & CO” LTD is not
intended to and does not result in decisions based on automated processing, including
profiling, which would produce legal consequences for the data subject.
Subscribe for our online newsletter
Subscribe to our newsletter to receive news from the field of legal advice.
