Privacy policy and protection of personal data
Privacy policy and protection of personal data
1. General information
"GRAFITECH" Ltd, UIC: 201394977, with registered office and registered address. It is an administrator and processes personal data, and compliance with the legislation on personal data protection is a priority and ethical value for us. We take all necessary actions to ensure that your personal data is processed safely, securely and in accordance with the requirements of the applicable Bulgarian legislation and the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR).
With this Privacy Policy, we would like to inform you what personal data we collect and for what purposes, how we use and store it, the cases in which we provide it to third parties, who these third parties are, as well as the conditions for processing personal data, the organizational and technical measures we have taken to ensure its security and privacy.
"GRAFITEC Ltd reserves the right to amend and update this Privacy Policy to ensure compliance with Bulgarian and European legislation.
2. Principles and policies for collecting, processing and storing your personal data.
"GRAFITECH" Ltd are committed to the following policies and principles in the processing of personal data:
- Legality, fairness and transparency;
- Limitation of the purposes of processing;
- Accuracy and timeliness of data;
- Limitation of storage for the purpose of achieving the purposes;
- Integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.
3. Categories of personal data processed by "GRAFITECH" Ltd.
"GRAFITECH" Ltd. collects and processes only the personal data that is specifically necessary for the fulfilment of each of the purposes set out below and on the necessary grounds.
"GRAFITECH" Ltd may store and/or process the following types of personal data:
- Contact details when sending an enquiry: contact name and address, contact telephone number, e-mail;
- When you visit our website, our web servers record and store temporarily for security purposes the connection data of the computer that connects to our website, the web pages you visit on our website, the date and duration of the visit, the data identifying the type of browser and operating system used, and the website through which you connected to our website;
4. Grounds for collecting, processing and storing your personal data
"GRAFITECH" Ltd collects, processes and stores your personal data on the following grounds:
- Your explicit consent.
5. Purposes for collecting, processing and storing your personal data
"GRAFITECH" Ltd stores and processes your personal data for the following purposes:
The provision of your personal data, namely your email address, for processing for the purpose of responding to enquiries made on your initiative to the team of "GRAFITECH" Ltd. through the functionalities of the online system at https://graphitech-bg.com/, accessible at the following address: https://graphitech-bg.com/ or other websites of the company is treated as follows:
The provision of personal data by a person who is a user of the services of "GRAFITECH" Ltd, respectively has a user profile on the Website https://graphitech-bg.com/, is always voluntary, and the processing of the personal data provided is carried out for the purpose of the performance of the contract between "GRAFITECH" Ltd Ltd and the user to which the request is related.
The provision of personal data by a person who is not and has not been a user of the services of "GRAFITECH" Ltd. is always voluntary, and the processing of the personal data provided is carried out for the purpose of providing a response by the team of "GRAFITECH" Ltd., respectively - to take steps at the request of the person before concluding a contract, if the request is of this nature.
- To send you, with your consent, invitations to events or initiatives on the platform, etc.
6. Time limits for collection, processing and storage of your personal data
"GRAFITECH" Ltd stores and processes your personal data subject to the following time requirements:
Consent for marketing offers and other initiatives requiring your explicit consent is valid until explicitly withdrawn. If consent is withdrawn, user data will be deleted from the relevant databases;
7. Who has access to your data?
We may share your information when we collaborate with other companies, as well as with our partners or service providers, processing part or all of your personal data only to the extent necessary to perform the specific tasks assigned.
To the extent possible, we store your information on servers located within the European Union and/or the European Economic Area. When storing information on servers not belonging to "GRAFITECH" Ltd and/or located in other countries, "GRAFITECH" Ltd takes steps to encrypt all personal data in a manner that prevents access by unauthorised persons.
Some of these countries may have data protection legislation different from that of the European Union. In these cases, we take special care to ensure that such transfers of personal data comply with the applicable General Data Protection Regulation and take the same precautions with respect to the protection of your privacy, rights and freedoms as those proposed by the European Union (in particular by using the European Commission's Standard Contractual Clauses).
Last but not least, we may need to share your personal data with third parties if this is required in order to comply with a legal obligation or an administrative or judicial decision, namely:
- For accounting, legal or human resources services of a third party with whom "GRAFITECH" Ltd has entered into relevant contracts;
8. How we store your personal data
Taking into account the level of advances in communications and technology and regulatory requirements, "GRAFITECH" Ltd have taken the necessary technical and organisational security measures against unauthorised and unlawful processing, accidental loss, destruction or damage to personal data as may be required.
We organise and conduct training for our employees on the policies, principles and procedures for the protection of personal data and require their strict compliance with them.
9. Your rights
You have the following rights:
- the right to access your personal data - this means the right to obtain information from "GRAFITECH" Ltd. as to whether your data is being processed and on what basis this is happening, and where applicable, access to the data itself, which means obtaining a copy of your data;
- the right to rectification and the right to erasure/rectification - this means the right to request the rectification of inaccurate and/or incomplete data, and the erasure of data where this request is legitimate;
- right to restriction of processing - this means the right to request restriction or termination of processing where the request is legitimate;
- the right to portability - this means the right to receive data in a structured, commonly used and machine-readable format in order to transfer the data to another data controller;
- the right to object - this means the right to object to the processing of data where the request is legitimate, including the right to object to the sending of marketing information.
10. Contact us
If you have any questions, comments or queries about this Privacy Policy, please do not hesitate to contact us using the details below.
To exercise any of the rights set out in section 9, you may contact us, providing proof of your identity, by email at v.mitkov@graphitech-bg.com or by post at the following address. Sofia, Triaditsa district, Deyan Belishki № 52
If you are of the opinion that "GRAFITECH" Ltd. has in any way violated your rights in the area of personal data protection and does not offer you the necessary assistance to remedy this irregularity, you have the right to file a complaint or signal to v.mitkov@graphitech-bg.com . You also have the right to lodge a complaint with the relevant data protection supervisory authority. We encourage you to contact us before filing a complaint, and we will do our best to resolve any issue or concern you have.
Details of the supervisory authority.
Headquarters and registered office. Headquarters and registered office. "1592 Prof. No.: 2
Telephone: 02 915 3 518
E-mail: kzld@government.bg, kzld@cpdp.bg
Website: www.cpdp.bg