This Privacy Statement explains what information we collect about you, why and how we use the information, and your rights in relation to the information provided to us.

1. Who are we

UNIVERMAG LTD is a limited liability company, registered under the laws of the Republic of Bulgaria with UIC 202178516 in the Trade Register of the Registry Agency (hereinafter referred to as UNIVERMAG).

2. How to contact UNIVERMAG

Location: 47 Belasitsa St., Plovdiv, Bulgaria
Phone: +359 897 967828
Email: semkov@kapana.bg

3. Principles which we observe when we collect personal data

We at UNIVERMAG are aware of the responsibility we have for the security of your personal data. We always aim to process and manage your personal information in a transparent way for you, so we observe the following principles:

  • We process your personal data for the purposes stated in this Privacy Policy; or for specific purposes that we have explicitly shared with you; or for purposes for which you have given your consent;
  • We strive to collect the minimum amount of data needed;
  • We keep your personal data accurate and up to date;
  • When we no longer need your personal data, we delete or anonymise it so that we cannot identify you.

4. What is personal data

Under the General Data Protection Regulation, personal data is defined as:

“Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;”.

Therefore, personal data is not only your name, personal identification code, social security number, but also your home address, email, phone number, etc.

5. What personal data we collect and process

In the course of its business, UNIVERMAG processes various types of personal data according to the categories listed below. Depending on the specific products and/or services we provide you, UNIVERMAG processes some or all of the specified data.

5.1. Category of personal data about clients and counterparties:

  • full name and personal identification number (or other identification number, where applicable);
  • address, telephone and email for correspondence;
  • where applicable, bank account number or other bank and payment information in connection with bank payments to and from UNIVERMAG;
  • video surveillance of the working premises and entry to the UNIVERMAG work areas;
  • history and information about contractual relations with you.

Source: Data subjects.

5.2. Category of personal data about visitors of our web pages:

  • name (when sending a request);
  • email for correspondence (when sending a request);
  • information about your inquiries made through our web pages;
  • information about the end-use electronic device used, the type of device, the operating system used, the IP address when visiting a website maintained by UNIVERMAG, if cookies and similar technologies are used.

Source: Data subjects, as well as cookies and related technologies.

In all cases where we process your personal data, we undertake to comply with the rules set out in this Privacy Statement and the requirements of the applicable European and national data protection legislation.

6. We process personal data only for the following purposes

  • concluding and performance of contracts between you and UNIVERMAG;
  • preparing and sending the invoices and payment documents for the products and services provided;
  • administering websites maintained by UNIVERMAG;
  • correspondence about the products and services we provide you, sending notifications or responding to requests, complaints and questions submitted by you;
  • fulfillment of UNIVERMAG’s obligations under instructions and orders of state bodies or persons performing public functions (e.g. NRA, NSSI, courts, bailiffs, etc.);
  • fulfillment of UNIVERMAG’s obligations under the Accountancy Act, the Tax and Insurance Procedure Code, the Commercial Act, as well as the fulfillment of all other legal obligations of UNIVERMAG, arising from the applicable European and national law.

7. We process personal data on the following legal basis

7.1. Performance of contract

The processing of your personal data is necessary to take steps to conclude and perform the concluded contracts between you and UNIVERMAG.

7.2. Legal obligation

The processing of your data is also necessary in order to comply with the legal obligations of UNIVERMAG under the Accountancy Law, the Tax Insurance Procedure Code, the Commercial Law and other legislation containing legal obligations for UNIVERMAG.

7.3. Legitimate interest

In some cases, UNIVERMAG processes your personal data on the basis of its legitimate interests.

For example, the data collected from the cookies on our web pages is processed to improve the services we provide. Some documents with personal data (which are not subject to a specific data retention period) are kept until the expiry of the limitation periods laid down in the Bulgarian Obligations and Contracts Act, in view of UNIVERMAG’s legitimate interest for the establishment, exercise or defense of legal claims, as well and providing the necessary documents to clarify the legal dispute.

The data from the video surveillance is processed on the basis of the legitimate interests of UNIVERMAG. These interests are related to ensuring the rules on health and safety at work; the guarantee of labor discipline; and ensuring the security and protection of employees as well as the premises where personal data and confidential information are processed.

7.4. Consent

Based on your consent, we may provide you answers to inquiries, notifications, and news about the activities of UNIVERMAG.

8. The provision of your personal data to us is voluntary

UNIVERMAG processes your personal data in order to provide the products or services for which an agreement is about to be reached or has already been reached with you, as well as for the purposes for which your explicit consent has been obtained.

If you do not provide your personal data to us, we may not be able to enter into or perform a contract you have already concluded with us, respectively we may not be able to fulfil our statutory obligations. Upon withdrawal of consent to receive replies to inquiries, notifications, or news from UNIVERMAG, we will stop processing the data for these purposes.

9. Which third parties have the right to receive personal data processed by us

UNIVERMAG does not provide your personal data to external organizations / individuals before making sure that the processing is in compliance with applicable European and national data protection legislation. UNIVERMAG exercises rigorous control over whether the personal data is processed on an appropriate legal basis and whether the appropriate technical and organizational measures have been implemented.

We provide personal data to the following categories of recipients:

  • to bodies, institutions and persons to which we are obliged to provide personal data under the applicable legislation (NSSI, NRA, MI, FSC, courts, etc.);
  • our business counterparts who have committed to confidentiality, in compliance with applicable data protection legislation, including:
    • Bulgarian post service and other persons providing courier services;
    • persons providing accounting and auditing services;
    • persons providing security services (when visiting a UNIVERMAG office / workplace);
    • persons providing IT and telecommunication services;
    • persons providing legal services;
    • persons providing external consulting services in different areas;
    • notaries, bailiffs and other persons performing public functions on the basis of their competencies provided by law.
  • to banks, to the extent necessary to pay due remunerations;
  • to UNIVERMAG’s employees authorized to process documents containing personal data, only to the extent necessary for performance of their work duties.

10. Transfer of personal data outside of EU

UNIVERMAG does not provide your personal data to companies in non-EU countries.

If UNIVERMAG decides to transfer your personal data outside of the EU, you will be notified.

Each transfer will be made in accordance with the requirements of the General Data Protection Regulation: subject to a decision on the adequacy of the European Commission, subject to appropriate safeguards or binding corporate rules approved by a competent authority.

Apart from the above, UNIVERMAG may transfer your personal data to non-EU countries only to the extent that you have given your consent or transfer is necessary for the conclusion/performance of contracts between you and UNIVERMAG or contracts concluded in your interest.

11. Data retention period

UNIVERMAG processes your personal data only for the period necessary to achieve the purpose for which it was collected.

Once the purpose has been achieved, UNIVERMAG terminates the processing of the data. As an exception, UNIVERMAG keeps the data until the final settlement of all financial relations and/or expiration of the minimum statutory retention periods provided by the applicable legislation: the Labor Code, the Social Security Code, the Tax Insurance Procedure Code, the Accountancy Act, the Value Added Tax Act, the Private Security Act, the Law on Obligations and Contracts and other legislation which provide minimum data retention periods.

For example: Payrolls are kept for 50 years and tax control documents for 10 years. Certain documents with personal data for which no minimum statutory retention period is provided are kept until the expiry of the limitation periods specified in the Law on Obligations and Contracts (three or five years, depending on the type of claim) in view of UNIVERMAG’s legitimate interest for the establishment, exercise or defense of legal claims, as well as providing the necessary documents to clarify the legal dispute.

In case of amendments to the applicable legislation regarding the above mentioned retention periods, UNIVERMAG will comply with the applicable regulatory requirements.

12. You have the following rights as a data subject

At any time, while we store or process your personal data, you have the following rights:

12.1. Right of access

You have the right to request a copy of your personal data from UNIVERMAG and a right to access at any time your personal data.

12.2. Right to data portability

You have the right to request from UNIVERMAG your personal data in a form convenient to transfer to another data controller or to ask us to do so:

It is important to take into account that this right is only applicable when:

  • Processing is based on your consent;
  • The processing is connected with the performance of a contract;
  • Processing is carried out by automated means.

12.3. Right to rectification

You have the right to ask UNIVERMAG to correct without undue delay your inaccurate personal data as well as data that is not up to date.

12.4. Right to erasure (‘right to be forgotten’)

You have the right to ask UNIVERMAG for your personal information to be erased.

It is important to take into account that UNIVERMAG is obliged to erase the data only if one of the following grounds applies:

  • your personal data is no longer necessary for the purposes for which they were collected;
  • withdrawal of your consent and we no longer have any other legal basis for the processing of your personal data;
  • you object to the processing of your personal data for the purposes of direct marketing;
  • you object to the processing of your personal data for the purposes of UNIVERMAG’s legitimate interests and there are no overriding legitimate grounds (such as improving user experience on a website);
  • the personal data have been unlawfully processed;
  • your personal data must be deleted to comply with the law.

12.5.Right to restriction of processing

You have the right to ask UNIVERMAG to restrict the processing of your personal data, in which case the data will only be stored but not processed.

It is important to take into account that UNIVERMAG is obliged to restrict processing only if one of the following grounds applies:

  • the personal data which we process is not accurate and up to date;
  • the processing is unlawful, but instead of deleting, you want us to restrict the use of your personal data;
  • your personal data is no longer necessary for the purposes for which they were collected, but you require the data for the establishment, exercise or defense of legal claims;
  • you have objected to the processing of your personal data and you are awaiting confirmation that your interests in relation to such an objection override the legitimate grounds of UNIVERMAG for processing your data.

12.6. Withdrawal of consent

You have the right to withdraw your consent for the processing of your personal data at any time with a separate request addressed to the controller in case your data is processed only on the basis of consent.

12.7. Right to object

You have the right to object to certain types of processing, such as direct marketing (including against unsolicited advertising).

12.8. The right not to be the subject of automated decision making

You have the right to object to automated processing, including profiling.

Automated decision making (processing) means that certain decisions are taken automatically without human intervention.

If we intend to use such methods, we will inform you and give you the opportunity to express your objection to such processing in advance. In addition, you are free to contact us for further information about such processing.

12.9. Right to lodge a complaint with a supervisory authority

If you believe that we do not process your personal data lawfully, we ask you to contact us to clarify the matter. Of course, you have the right to lodge a complaint directly with the competent data protection supervisory authority, which for Bulgaria is the Commission for Personal Data Protection, and you also have the right to an effective judicial remedy.

The address for lodging a complaint to the Commission for Personal Data Protection is: Bulgaria, Sofia 1592, 2 Prof. Tsvetan Lazarov Boulevard.

13. How can I exercice my right

It is necessary to fill in an application in a form, which you will receive after submitting a request to the contact details of UNIVERMAG:

Location: 47 Belasitsa St., Plovdiv, Bulgaria
Phone: +359 897 967828
Email: semkov@kapana.bg

14. Cookie Statement

We may also collect data for you by using cookies and other technologies. This can happen when you visit our website or third party page. The use of cookies on the website is intended to provide you with more useful and interesting content.

In general, cookies do not collect personal information, but if they collect such, we will treat this data in accordance with this Privacy Statement.

We may collect the following data for you through cookies:

  • the time spent on the website and pages visited;
  • browser and operating system information for your device;
  • the IP address of the device you are using;
  • the links you click while using our page.

The functionality of our website depends on the use of cookies, but there are also cookies that you can refuse or block without affecting the functionality of the website.

14.1. Information about used cookies

From your browser settings, you can see all the cookies currently in use on our website, as well as information about when the cookie was created and when it will be deleted.

We may use the following type of cookies on our website:

14.2. Strictly necessary cookies

These cookies support the smooth operation of our webpage, because they allow you to browse the information in it and use its functions. For example: these cookies allow us to show you information on our website in the correct language, etc.

14.3. Functional Cookies

These cookies allow the website to remember choices you make and provide more personal features. For instance, a functional cookie can be used to remember the volume level you prefer to use when watching videos on our websites. This information is completely anonymous, is used for very limited purposes and is kept for a limited time.

14.4. Analytical cookies

Analytical cookies allow us to get information about how the users use our website, whether users are working with it easily, and what part of the content attracts the most interest. The information is used only for statistical purposes and is not intended to be used for personally identifying users. Analytical tools are provided by Google Analytics and Adobe Analytics, and the information gathered for your IP address is not associated with any other information stored by Google and Adobe.

14.5. Targeting Cookies

These cookies do not store personal information, but only collect information about how you used our website. They can be triggered by our advertising partners to show you relevant ads and information. They do not store personal information directly but are based on the unique ID of your browser and internet device

14.6. More information about cookie management

http://www.allaboutcookies.org/faqs/cookies.html is a useful resource with very detailed information about cookies and how to manage them.

14.7. Refusal to use Cookies

You can delete all the cookies already stored on your computer, and you can also set your browser to block them. However, if you do so, you may need to manually set up some settings each time you visit a site, and some services and features may not work.

If you wish to disable cookies, you can do so by deleting them from the settings of your own browser and by installing the Google Analytics Opt-out Browser Add-on.