DECLARATION OF PRIVACY
Data controller in the light of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL, hereinafter „the Regulation“, in terms of Members of the EU, along with relevant data protection legislation is:
Address: Sofia, „Petar Dertliev“ Bld. №42, fl.3, office 19
Phone: .+359 888809155
For questions regarding processing your personal data or for exercising data subject's rights pursuant to the Regulation, contact the Data protection officer of the Controller::
Name: Petar Rizov
While „RIZOV FLOATS" OOD conducting business activities, personal data processing is necessary not only for compliance with a legal obligation to which the controller is subject, but also for the right and complete performance of the offered services along with the subject of the contracts concluded. Without this personal data, „RIZOV FLOATS" OOD is not able to ensure right, complete and lawful execution of its obligations, as well as protect the interest of data subjects.
performance of rights and obligations set out in or in connection with a contract
Marketing purposes - (only after prior explicit consent given)
„RIZOV FLOATS" OOD does not perform automated decision-making, including profiling, consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements, as well as the significance and the envisaged consequences of such processing for the data subject.
Where there is a necessity to process your personal data for another purpose, not listed in this Declaration, an updated Declarion will be presented to you and if required you will be requested for a new consent prior the processing.
For collecting personal data the Controller uses the following sources:
In some cases, to fulfill the purpose outlined in Section 3, your personal data may be disclosed to:
Third parties that in specific cases may receive your personal data are legally binded to implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk pursuant to the Regualtion and Bulgarian data protection legislation.
The Controller declares that no personal data will be transfered to third parties outside EU. If such transfer is necessary, the transfer will take place pursuant to the Regulation and taking into account technical and organisational measures implemented by the Controller..
„RIZOV FLOATS" OOD will store your personal data no longer than the period set out by law or in the contract, but no longer than 5 years where no period is prescibed by law, as the personal data will be stored pursuant to the Regulation. Read more about the processing of personal data on our website: www.rizovfloats.com - where the Privacy policiy of the Controller is published, outlining the terms and conditions of processing personal data along with Privacy notices pursuant to Article 13 and 14 of the Regulation.
During the processing of your personal data, you have the following rights:
Erasure request shall be rejected:
All abovementioned requests will be forwarded in case of third party (recipients, including outside EU and international organisations) during processing your personal data.
Every time you desire to make a request based on the aforementioned data subject rights (Articles 15-22 of the Regulation) you shall contact the Data protection officer and send a data subject Request in writing.
Pursuant to the requirements of the Regulation the Controller provide information on action taken on a request to the data subject without undue delay and in any event within one month of receipt of the request. Keep in mind the following:
That period may be extended by 2 further months where necessary, taking into account the complexity and number of the requests. The controller informs the data subject of any such extension within 1 month of receipt of the request, together with the reasons for the delay.
Where the data subject makes the request by electronic form means (email, etc.), the information shall be provided by electronic means where possible, unless otherwise requested by the data subject..
If the controller does not take action on the request of the data subject, the controller informs the data subject without delay and at the latest within 1 month of receipt of the request of the:
reasons for not taking action and
the possibility of lodging a complaint with a supervisory authority
and seeking a judicial remedy.
Information provided under Articles 13 and 14 of the Regulation and any communication and any actions taken under Articles 15 to 22 and 34 of the Regulation are provided free of charge. Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either:
charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested, or
refuse to act on the request.
The controller bears the burden of demonstrating the manifestly unfounded or excessive character of the request.
Without prejudice to Article 11 of the Regulation, where the controller has reasonable doubts concerning the identity of the natural person making the request referred to in Articles 15 to 21 of the Regulation, the controller may request the provision of additional information necessary to confirm the identity of the data subject. In this case we may require to identify yourself with a document or by other means.
You have the right to lodge a complaint with a supervisory authority, as the competent supervisory authority is
Commission for Personal Data Protection
Address: Sofia 1592, Prof. Tzvetan Lazarov Bld. № 2 (www.cpdp.bg).
In case you'd like to lodge a complaint through „RIZOV FLOATS" OOD, you shall contacts us directly or contact our Data protection officer. (check contact details above).
Download - 3.3.REQUEST_OF_DATA_SUBJECT