Privacy Policy

DECLARATION OF CONFIDENTIALITY  AS TO PERSONAL DATA PROTECTION 

The present Declaration of confidentiality concerns personal data of contractors, employees and other natural persons collected by “Grenboel” AD with unified identification code (UIC) BG175223559 for the purposes of providing services and products in accordance with its scope of activity.

The policy on protection of personal data that we apply is with regard to data collected from the personal data subjects via various forms of correspondence, contract signing or any other methods of personal data collection as permitted by law.

This Declaration of confidentiality aims at provision of complete information about the practices we apply in the protection of personal data of contractors, employees of the company and other natural persons as well as about their rights related to the collected personal data in the abovementioned manners.

Introduction

In the process of collecting, storage and processing of personal data of subjects, “Grenboel” AD adheres to the laws and regulatory rules which determine the principles of storage and processing of personal data as well as the guarantees for personal data protection which have to be applied. These laws and regulatory rules include, but are not limited to, the General Data Protection Regulation (Regulation (EU) 679/2016), the Personal Data Protection Act and the acts related to them.

Categories of personal data we collect from you 

The data collected by us corresponds to those explicitly stated in the law or such that are necessary for the use of services, signing of contracts and purchase of products, sold by the company.  

When you ask us questions, for instance via e-mail or by using the online platform of our website, we keep the message in order to process your enquiry and to give you the information you need as well as to improve our services.

“Grenboel” AD does not process special categories of personal data as per the definition thereof in art.9, paragraph 1 of GDPR, namely: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.  

We commit to advising you in a clear and transparent manner on the occasions whereby collecting personal data from you is necessary although those data are not explicitly stated in the law as mandatory but are considered necessary by “Grenboel” AD and/or the company has legal interest in collecting or does so due to necessity of protecting your vitally important interests.

Purpose for collecting and manner of use of personal data 

Personal data is collected, processed and stored by “Grenboel” AD for the following purposes:

- Identification of the data subjects in relation to conclusion of employment contracts and in relation to observing legal requirements concerning the sphere of activities performed by “Grenboel AD in its capacity of an employer;

- The fulfilment of the duties of “Grenboel” AD in its capacity of a seller and manufacturer of products when concluding sales contracts and providing to contractors products and additional services ;

- Meeting the requirements of the law and the regulatory framework concerning the sphere of activity of “Grenboel” AD and the products and services provided.

Disclosure of personal data and sharing of information with third parties 

“Grenboel” AD discloses personal data to third parties only in particular cases. Such third parties include state authorities, institutions and persons to whom we are obliged to submit personal data by virtue of the law in the event of uncovering, investigation and prevention of fraud and other unlawful activities. We engage all of those third parties in the implementation of the same protection to your personal data as our employees do and in the observing of the legal framework and the Policy of “Grenboel” AD on personal data protection.

Transfer of personal data 

„Grenboel“ AD is responsible for the transfer of data without hindrance and guarantees they are transferred with the respective level of communication security. “Grenboel” AD makes assessment of the specific risks related to the portability of data and undertakes appropriate measures for risk mitigation.

Protection of personal information 

In the course of collecting, processing and storing your personal data we strive to meet the requirements of all legal provisions by applying the necessary technical means and organizational measures on security.  

Period (time limit) of storage of your personal data

Your personal data are stored for a period as specified by the effective laws, depending on the purpose of their collection. In the event of an absence of a legally specified period, we commit to storing your personal data for a time limit based on certain parameters, among which is our striving to provide to you products and services of optimal quality as well as a normal development of partnership relations.

When the collecting and storing of personal data for the stated aims is no longer needed, we undertake in their erasure, rendering them anonymous or we destroy them in other proper manners.

Your right to access and receipt of information 

You can contact us at any time and request access to your personal data as well as to receive information on what personal data we process, the aims of their storage, the manner of their use and the time limits of storing.

In your capacity of personal data subjects and in protection of your rights you may address  the following requests to “Grenboel“ AD: request for data portability, request for access, request for rectification, request for restriction of processing, request for data transfer, objection against processing and request for erasure (“the right to be forgotten”). Certain circumstances guarantee your right to demand that your personal data is erased. This is possible in the cases when the storage and the processing of your personal data is no longer needed for the purposes they were collected, processed and stored for; in the event that you have objected against the processing of your personal data and you have withdrawn your consent for their collection, processing and storage; in the event of established unlawfulness in collecting, processing and storage of your personal data; on other occasions as defined by the statutory framework and the legal provisions on personal data protection. In particular cases we are obliged by law to store your personal data. In those cases erasure of your personal data from our systems will not be possible.

When you find out about a violation of your rights, you may lodge a complaint with “Grenboel” AD with regard to the manner of reviewing of your request for access to the data, complaint about the manner of reviewing your requests and complaints, a complaint against any decision taken upon a submitted request/ complaint.   

For the purposes of your enquiries, requests and complaints with regard to the collection, processing and storage of personal data, we provide you with the following email address so that you can write us and receive necessary information about your personal data : This email address is being protected from spambots. You need JavaScript enabled to view it. You can address your enquiries also to the administrative address of the company: Sofia 1111, zh-k Yavorov, Block 72

You also have the right to lodge a complaint with the Commission on Personal Data Protection at:

Commission on Personal Data Protection:

Sofia 1592, 2 Prof. Tsvetan Lazarov blvd

Tel : +359 2 9153518

webpage: www.cpdp.bg

Your consent to alterations in the Declaration of confidentiality

We reserve the right to update the Declaration of confidentiality herein at any time in order to ensure optimum protection of your personal data and to provide complete information regarding your rights and any changes that have recently arisen.

Date of last update:  2020-11-03