Privacy policy
I. General information.
For the purposes of its activity, "ISI - ARCH" LTD processes personal data of individuals in strict compliance with Regulation (EU) 2016/679 (General Data Protection Regulation) (GDPR), the Personal Data Protection Act and the Policy of " ISI - ARCH" LTD for personal data protection.
This Privacy Policy is applicable to you if you are a client or potential client of the services provided by "ISI-ARCH" LTD, an employee or a job candidate and aims to explain to you how and why we process your personal data.
According to the General Regulation, personal data is any information that relates to an individual and through which he can be directly or indirectly identified.
Processing of personal data is any operation or set of operations that may be performed on personal data by automatic or other means.
II. Administrator details:
ISI-ARCH" LTD, UIC 131317737
Headquarters and address of management: 1404 Sofia, g.k. "Lozenets", "Yakubitsa" 7B str., office 1
Email: office(at)isiarch.com
phone: +359 88 2 549 235
III. Our data processing policy?
In connection with the services provided by "ISI - ARCH" LTD, personal data is processed regarding the following natural persons:
1. Personnel - current and former employees of "ISI - ARCH" LTD.
2. Counterparties or potential counterparties of "ISI - ARCH" LTD and their employees.
3. Job applicants
IV. What personal data of yours do we process?
Depending on the specific goals and grounds, "ISI - ARCH" LTD processes all or some of the below personal data individually or in combination:
-
Identification data: three names, gender, nationality, social security number/other identifier, date and place of birth, data on an identity document.
-
Contact information: address, e-mail, telephone number.
-
Health data.
-
Data on education, professional qualification and work activity.
-
Data on marital status and family ties.
-
Data relating to convictions and offences.
-
Financial information, including bank accounts.
-
Other data required under the special laws that regulate labor relations, tax-insurance relations, accounting of activity, safe and healthy working conditions, as well as social issues.
V. Our purposes for processing your personal data.
"ISI - ARCH" LTD collects personal data only for specific and legitimate purposes and does not process them further in a manner incompatible with them.
"ISI - ARCH" LTD processes personal data for the following purposes:
-
Provision of design and consulting services in fulfillment of a contract.
-
Protection of legitimate interests of "ISI - ARCH" LTD, including:
- ensuring the normal functioning, maintenance and security of the Internet site and IT systems of "ISI - ARCH" LTD.
- implementation and protection of the rights and legal interests of "ISI - ARCH" LTD, including by court order.
-
To fulfill regulatory obligations:
- obligations stipulated in the Accounting Act, the Tax and Insurance Procedural Code and other related legal acts, in connection with keeping correct and lawful accounting.
- execution of orders of competent public authorities.
- fulfillment of the requirements of labor and social security legislation regarding employees.
-
Selection of employees by employment law.
In the event that we intend to process your personal data for purposes other than those stated above, you will be informed of the new purposes and provided with all necessary information prior to further processing of your personal data.
VI. Legal grounds for processing your personal data.
"ISI - ARCH" LTD processes personal data only in the presence of one of the alternative legal grounds under the General Regulation, and in particular:
-
Performance of a contract, including pre-contractual relations before its conclusion.
-
Legal obligations applicable to "ISI - ARCH" LTD.
-
The legitimate interests of "ISI - ARCH" LTD, insofar as they take precedence over the interests or fundamental rights and freedoms of the data subjects.
-
In some cases, we process personal data only after the prior consent of the data subject. Consent is a separate basis for processing your personal data, and the purpose of processing is specified therein and is not covered by the purposes listed in this privacy statement. Consent already given can be withdrawn by the individual at any time in the same way as it was given.
We do not perform automated decision-making activities, incl. profiling.
VII. Sources of information.
We collect the data we process directly from you or provided to us by your representative/proxy, before entering into a contractual relationship with you, as well as in the course of our relationship.
VIII. Data sharing.
The personal data of the clients/employees of "ISI - ARCH" LTD is provided to:
-
NRA (National Revenue Agency), NSSI (National Social Security Imstitute) and other public bodies for the purposes of the contract.
-
Competent authorities, which by virtue of a normative act have the authority to demand from "ISI - ARCH" LTD the provision of information, including personal data - court, supervisory/regulatory authorities, authorities with powers to protect national security and public order.
-
Other competent public bodies in fulfillment of an obligation provided for by law.
-
Processing personal data with a view to maintaining the IT systems of "ISI - ARCH" LTD, accounting companies, STM, etc. In these cases, the relations between "ISI - ARCH" LTD and the personal data processor are regulated by a contract or other legal act, which provides for appropriate measures to guarantee the security of personal data.
IX. Consequences of refusing to provide personal data.
In the event that the person does not provide the required information, including the necessary personal data, "ISI - ARCH" LTD will not be able to conclude a contract with him and accordingly will not be able to provide the requested service or information.
X. How long do we store your personal data?
The duration of storage of personal data depends on the processing purposes for which they were collected. We retain your personal data for as long as is reasonable and necessary to fulfill the purpose for which it was collected and to comply with applicable laws.
XII. Your rights.
According to the legislation, you have:
-
Right to information about whether we are processing your personal data (including information about the personal data that is being processed) and any available information about its origin, unless it is protected by law as a secret;
-
Right of access, including obtaining a copy.
-
Right to request that we correct any inaccuracies in your personal data.
-
Right to have your personal data deleted.
-
The right to request the restriction of the processing of your personal data for a certain period of time.
-
Right to object to processing.
-
Right to data portability.
In accordance with the Personal Data Protection Act, the above-mentioned rights can be exercised by submitting a written application on site at the office of "ISI-ARCH" LTD. An application can also be submitted electronically in accordance with the Law on electronic documents and electronic authentication services. When the requests of a data subject in connection with the exercise of the above-mentioned rights are clearly unfounded or excessive, "ISI - ARCH" LTD may impose a fee or refuse to act on the request. The application is made personally by the data subject or by a person expressly authorized by him. "ISI - ARCH" LTD shall rule on the data subject's request within 30 days of its submission.
When the requests of a data subject in connection with the exercise of the above-mentioned rights are clearly unfounded or excessive, "ISI - ARCH" LTD may impose the payment of a fee or refuse to take action on the request.
XIII. Protection of data subjects' rights.
In accordance with the Personal Data Protection Act and Regulation (EU) 2016/679, any natural person who considers that his right to the protection of his personal data has been violated may submit a complaint to the Commission for the Protection of Personal Data at : 1592 Sofia; “Prof. Tsvetan Lazarov" 2 Blvd.; website: www.cpdp.bg.