Privacy Policy
The security and correct use of personal data is of utmost importance to us. Our personal data policy does not regulate rights and obligations, but aims to explain to users what personal data we process in connection with the provision of goods and services, why and how we process them, including when it is necessary to disclose personal data to third parties. It also provides information on the rights users have in relation to the processing of personal data by SOZI EOOD.
For the purpose of greater clarity and for the convenience of users, in many places in this Personal Data Policy, examples are given that illustrate why and/or how SOZI EOOD processes users' personal data.
These examples are not part of this Privacy Policy and are not exhaustive.
Basic principles in processing personal data
We process personal data lawfully, in good faith and in a transparent manner;
We process personal data collected for specific, explicitly stated and legitimate purposes and are not further processed in a manner incompatible with those purposes;
The personal data processed are appropriate, related to and limited to what is necessary in relation to the purposes for which they are processed ("data minimization");
The personal data processed may be kept up-to-date at all times by us taking all reasonable measures to ensure the timely deletion or correction of inaccurate personal data, taking into account the purposes for which it is processed ("accuracy").
The personal data processed by us are stored in a form that allows the identification of the data subject for a period no longer than is necessary for the purposes for which the personal data are processed ("storage limitation");
Personal data processed by us is stored in a way that ensures an appropriate level of security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by applying appropriate technical or organizational measures ("integrity and confidentiality" );
Personal data administrator
Personal data administrator is:
SOZI EOOD
EIK: 207336685
Headquarters: 9000 VARNA STREET TSANI GINCHEV 17 AP. 3
If you have any questions about privacy at SOZI EOOD or want to contact us regarding a matter related to the protection of personal data, you can contact us at the following email: sozi.traffic.bg@gmail.com.
This Privacy Policy may be changed in accordance with national and European legislation. Any change is effective from the moment of publication on this page. We advise you to check our website frequently to see the latest changes.
Our privacy policy will not be changed in a way that allows for less protection of the personal data of our customers and users without their written consent.
What personal data is processed
We collect your personal data to enable us to provide our goods and services and to continuously improve them. Here are the types of information we collect:
Information you provide to us:
We receive and store any information you provide in connection with the services and products of SOZI EOOD, such as:
information relating to searches on the platform;
orders placed by you;
login details in your customer profile (if any);
e-mail if necessary to contact you;
phone number if necessary to contact you;
address if necessary to contact you;
fields filled in from a contact form or an e-mail message sent for the purpose of enquiry;
requests for access to personal information, etc.
Automatic Information:
We automatically receive and store certain types of information when you use the SOZI EOOD site, such as: information about your use, including your interaction with the content and services available through the site.
Like many websites, we use cookies and other unique identifiers and receive certain types of information when your web browser or device accesses the site, such as:
the Internet Protocol (IP) address used to connect your computer or other device to the Internet;
email and encrypted password (computer, device and connection information, such as device type and application version or browser type, browser plug-in types and versions, operating system or time zone setting;
the location (village, city or regional city) of your device or computer from which the website is accessed;
content interaction information, such as content downloads, streams and playback details, including duration and number of simultaneous streams and downloads, and network data about streaming and download quality, including information about your internet service provider;
device metrics, such as when a device is in use, util at any time and we will stop processing your data for this purpose. If the processing is necessary for another lawful purpose, however, we may continue to process them.
Categories of persons to whom we disclose users' personal data
Information about our customers is an important part of our business and we do not share it with third parties. SOZI EOOD may share customers' personal information (or part of it) only as described below and with third parties that follow practices that are at least as protective as those described in this Privacy Policy.
SOZI EOOD may share personal information of its customers with third parties who process personal data. Personal data processors are persons who process personal data on behalf of and on behalf of SOZI EOOD based on a written agreement. They do not have the right to process the personal data provided to them for purposes other than the performance of the work assigned to them by SOZI EOOD. Processors are obliged to comply with all instructions of SOZI EOOD.
SOZI EOOD
undertakes the necessary measures to ensure that the engaged processors strictly comply with the legislation for the protection of personal data and the instructions of SOZI EOOD, as well as that they have taken appropriate technical and organizational measures for the protection of personal data.
Examples of personal data processors are:
Courier service providers;
Providers of information systems implementation and/or maintenance services that sometimes need to access personal data that is processed in the respective systems for the purposes of providing the services;
Law firms, accounting firms or other providers of consulting services;
Hosting service providers
SOZI EOOD
may share personal information of its customers with banks and payment institutions. In connection with the service of payments to users, made by bank or through a payment institution, it is necessary to exchange data between SOZI EOOD and the relevant bank or payment institution.
Third parties in connection with a transformation (eg merger or acquisition) or transfer of an enterprise. In case of conversion of SOZI EOOD, as well as in case of transfer of assets in accordance with the applicable legislation, it is possible that the personal data of the users administered by SOZI EOOD, will be provided to a third party - legal successor.
Competent authorities. The legislation of the Republic of Bulgaria requires SOZI EOOD to store certain personal data for users for a certain period. In the presence of prerequisites established by law, these personal data processed by SOZI EOOD should be provided to the competent authorities.
What methods do we use to protect your personal information?
We work hard to protect the security of your information during transmission by using a Secure Sockets Layer (SSL) certificate that encrypts the information you enter.
In addition to the above, we maintain physical, electronic and procedural safeguards in relation to the collection, storage and disclosure of your personal data. Our security procedures mean that we may sometimes ask for proof of identity before disclosing personal information to you.
Devices on which your personal data are stored offer security features to protect them from unauthorized access and data loss. It is important to protect yourself against unauthorized access to your password and to your computers and devices. Remember to sign out of your account when you're done using a shared computer.
How long we store your personal data
SOZI EOOD
stores users' personal data for as long as necessary to achieve the purposes set out in this Privacy Policy or to comply with legal requirements.
In order to fulfill our obligations arising from tax and accounting legislation, data about a given user is stored for a period of 11 years, counted from the termination of his last contract, as long as the user has no unpaid debts to SOZI EOOD. After the expiration of the terms for processing personal data, they are anonymized or deleted/destroyed, unless:
are necessary for pending judicial, arbitration, administrative or executive proceedings, or in the event of a complaint from the relevant user, which should be considered by SOZI EOOD; or
the relevant user has exercised the right to request the restriction of the processing of personal data concerning him/her;
SOZI EOOD makes efforts to ensure that the processed personal data for users is updated (and if necessary corrected), and that no data is stored that is not necessary to achieve the goals described above.
General information about the rights of natural persons
SOZI EOOD
act on a request by an individual to exercise a right under this section only if it is able to identify the individual concerned.
Opportunity to exercise do and according to this section only persons who can be identified by SOZI EOOD. If the purposes for which SOZI EOOD processes personal data do not or no longer require the identification of a natural person, SOZI EOOD has no obligation to maintain, acquire or process additional information to identify the individual for the sole purpose of taking action based on at the request of that person.
SOZI EOOD
notifies individuals of the actions taken within a period of up to one month from receiving a request under this section, and in certain cases this period can be extended by up to two months.
SOZI EOOD shall provide individuals with information regarding the actions taken in connection with their requests to exercise rights under this section without undue delay and in any case within one month of receipt of the request. If necessary, this period can be extended by another two months, taking into account the complexity and number of requests. SOZI EOOD informs the relevant person of any such extension within one month of receiving the request, indicating the reasons for the delay.
If a request is refused, SOZI EOOD notifies the relevant individuals of their rights.
If SOZI EOOD does not take action on the request of a natural person, SOZI EOOD notifies him without delay and at the latest within one month of receiving the request of the reasons for not taking action, as well as of the possibility of filing a complaint with the Commission for protection of personal data and seeking legal protection.
In certain cases, SOZI EOOD may request additional information to confirm the identity of individuals
In the event that SOZI EOOD has reasonable concerns regarding the identity of the individual submitting a request under this section, SOZI EOOD may request the provision of additional information necessary to confirm the identity of the individual.
Actions taken by SOZI EOOD upon and in connection with submitted requests to exercise rights under this section are completely free of charge for individuals, unless their requests are clearly unfounded or excessive. When a person's request is clearly unfounded or excessive (for example, due to its repetition), SOZI EOOD has the right, at its discretion: (a) to refuse to fulfill the request; or (b) require the payment of a reasonable fee, determined based on the administrative costs necessary to provide the requested information or to take the requested action.
Users have the right to access their personal data
Users have the right to receive from SOZI EOOD information on whether personal data related to them is being processed. If so, users have the right to access the relevant data.
Correction of inaccurate or out-of-date personal data
In the event that the personal data processed by SOZI EOOD are inaccurate or out of date, users have the right to request SOZI EOOD to correct them.
Erasure of my personal data ("Right to be forgotten")
Users have the right to ask SOZI EOOD to delete their personal data in the following cases:
the personal data are no longer necessary for the purposes for which they were collected or processed;
the user has withdrawn his consent, on which the processing of personal data is based, and there is no other legal basis for the processing of the same;
the user has objected to the processing of personal data, which is based on a legitimate interest of SOZI EOOD, unless there are other legitimate grounds for the processing that take precedence over the interests, rights and freedoms of the user, or the processing of data is necessary for the establishment, exercise or the defense of legal claims;
the user has objected to the processing of personal data for the purposes of direct marketing and there are no other legal grounds for the processing of such data;
the personal data relating to the relevant user have been processed unlawfully;
personal data must be deleted by SOZI EOOD in order to comply with a legal obligation arising from the law of the Republic of Bulgaria or the law of the European Union.
Restricting the processing of my personal data
As of May 25, 2018, users have the right to request SOZI EOOD to limit the processing of their personal data in the following cases:
the accuracy of the personal data is disputed by the user, for a period that allows SOZI EOOD to check the accuracy of the personal data;
• the processing is unlawful, but the user does not want the personal data to be deleted, but instead requires the restriction of their use;
• SOZI EOOD no longer needs the personal data for the purposes of processing, but the user requires them to establish, exercise or defend legal claims;
• the user has objected to the processing of personal data based on a legitimate interest of SOZI EOOD, pending verification of whether the legal grounds of SOZI EOOD have priority over the interests of SOZI EOOD.
Portability of my personal data
As of 25.05.2018, users have the right to receive from SOZI EOOD the personal data provided by them in a structured, widely used and machine-readable format, as well as to transfer this data to another administrator without hindrance from SOZI EOOD , insofar as:
SOZI EOOD
processes this data for the purposes of concluding or executing a contract with the user, or on the basis of consent given by the latter;
• the processing of the relevant data is carried out in an automated manner.
Users have the right to ask SOZI EOOD to transfer their personal data directly to another controller when this is technically feasible.
Objection to the processing of personal data
Users have the right, at any time and on grounds related to their specific situation, to object to the processing of personal data concerning them when SOZI EOOD processes their data for the protection of its legitimate interests. In certain cases, this right is unconditional and SOZI EOOD will always stop data processing if an objection is made by users. These are the cases in which SOZI EOOD processes personal data for the purposes of direct marketing.
In other cases, depending on the nature of the objection and the circumstances presented by the relevant user, SOZI EOOD will carry out an internal investigation regarding the objection and will rule on it in accordance with this section, by: (a) notifying the user that it will cease processing of his/her personal data; or (b) reasonedly refuses to stop the processing of his/her personal data, if there is a legal basis for doing so.
You can exercise the right to access your personal data, correct it, delete it, restrict its processing and transfer it by sending a message to the administrator at sales@profisbg.com
Right of appeal to a supervisory authority
Users have the right to submit complaints or reports to the Commission for the Protection of Personal Data (PCPD) if, in their opinion, SSOZI EOOD violates the legislation on the protection of personal data. Instructions for submitting complaints are published on the CPLD website https://www.cpdp.bg
After 25.05.2018, users can also submit complaints to other supervisory authorities on the territory of the European Union, as provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and for the repeal of Directive 95/46/EC (General Data Protection Regulation) or also called "GDPR".
