“Mihailov Commerce” Ltd. is a controller of personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament (General Data Protection Regulation).
In accordance with the requirements for information under Art. 13 and Art. 14 of the GDPR, this notice is intended to inform you about the activities performed by “Mihailov Commerce” Ltd. to process your personal data. The Company respects the right to privacy and processes your data lawfully, in good faith and in a transparent manner. Your personal data is collected for specific, explicit and legitimate purposes and is not further processed in a way incompatible with those purposes. “Mihailov Commerce” Ltd. processes your personal data in a way that guarantees an appropriate level of security, according to the statutory deadlines.
I. PERSONAL DATA PROCESSED BY “Mihailov Commerce” Ltd.
The personal data we process depends on the nature of our interaction with individuals – customers, suppliers, contractors and other individuals with whom we have a relationship or want to establish business contact.
We may collect various types of personal information about you, including:
physical identity data – names, name of the company you represent (customer, supplier)
contact information (eg. postal address and e-mail address, IP address, telephone number, data from the communication between you and us);
bank information: servicing bank, bank account number and SWIFT code;
data from video surveillance;
II. PURPOSE AND LEGAL GROUNDS FOR PROCESSING
“Mihailov Commerce” Ltd. processes your data for the following purposes:
identification of a person when making an inquiry through the contact form on our website or by e-mail;
identification of individuals visiting the company’s building;
fulfillment of obligations arising from contracts concluded with you or a company represented by you;
servicing and responding to customer complaints / inquiries / claims;
consideration of requests of individuals who have wished to exercise their rights within the meaning of Regulation (EU) 2016/679 before “Mihailov Commerce” Ltd. in its capacity as controller of personal data;
fulfillment of normative obligations that exist in the field of tax and accounting legislation;
fulfillment of our legal and regulatory obligations, for example to the Commercial Register to the Registry Agency, the National Revenue Agency, the Central Depository, the Financial Supervision Commission, the Bulgarian Stock Exchange, etc. We may provide information upon official request from a duly authorized public or judicial body;
When processing your personal data, we refer to Article 6, paragraph 1, letter (b), (c) or (f) of the GDPR.
In the event that we perform additional processing for purposes other than those listed above, we will inform you of this and, if necessary, we will ask for your consent.
III. RECIPIENTS OF PERSONAL DATA
In connection with the fulfillment of the above-mentioned goals and in compliance with the legal requirements, we may disclose your personal data to:
Processors of personal data (service providers) who provide services on our behalf, in the application of appropriate technical and organizational measures for data protection;
Judicial bodies, control administrative bodies, state agencies and other public bodies and organizations, upon request and to the extent permitted by law;
Some specialists from regulated fields of activity – for example, notaries, auditors, lawyers, in cases where it is necessary to exercise and / or protect our legal rights and interests;
Courier companies and postal operators – for the needs of correspondence with individuals – data subjects;
In exceptional circumstances, your personal data may be disclosed by “Mihailov Commerce” Ltd. in connection with the restructuring of the company, sale, transfer of assets, merger, acquisition or other form of transformation, or in another form of change in the structure of “Mihailov Commerce” Ltd. or the legal entities related to it. Such disclosure of personal data is carried out in compliance with applicable Bulgarian and European legislation.
IV. TRANSMISSION OF PERSONAL DATA OUTSIDE THE EEA
“Mihailov Commerce” Ltd. does not transfer your personal data outside the European Union or the European Economic Area. If in the future it is necessary to transfer your personal data outside the EEA, this will be done in accordance with applicable laws.
V. PERIODS OF STORAGE OF PERSONAL DATA
We store your data only if we have a valid legal basis to do so and will retain it for as long as necessary to fulfill our contractual or legal obligations or until we have your consent to keep it.
VI. YOUR RIGHTS REGARDING YOUR PERSONAL DATA
You have the right to receive clear, transparent and comprehensible information about the way we use your personal data and your rights.
Right of access – you have the right to receive confirmation whether your personal data is being processed and, if so, to gain access to your personal data;
Right of correction – you have the right to request from “Mihailov Commerce” Ltd. your personal data to be corrected if they are inaccurate or incomplete;
Right of erasion (right to be “forgotten”) – you have the right to request from “Mihailov Commerce” Ltd. your personal data to be deleted in the presence of any of the following grounds:
* personal data are no longer needed for the purposes for which they were collected;
* when you have withdrawn your consent;
* when you have objected to the processing,
* when the processing is illegal;
* when personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to us as a controller of personal data;
The right to erase data should not be exercised by the company insofar as the processing is necessary for:
* compliance with a legal obligation provided by the legislation, which requires data processing;
* the establishment, exercise or defense of legal claims
Right to limit the processing – you have the right to request from “Mihailov Commerce” Ltd. to limit the processing of your personal data, in which case the data will only be stored, but not processed. Our refusal to limit will be explicit only in writing, and we are obliged to motivate it with a legitimate reason;
Right to object to the processing – you have the right to withdraw your consent to the processing of your personal data at any time with a separate request addressed to the controller;
Right to data portability – you have the right to request from “Mihailov Commerce” Ltd. your personal data in a form convenient for transfer to another personal data controller, or to ask us to do so without being hindered by us;
Right of appeal to a supervisory authority:
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates applicable data protection legislation. The supervisory body in the Republic of Bulgaria is the Commission for Personal Data Protection, address: Sofia 1592, Blvd. “Prof. Tsvetan Lazarov ”№ 2 (www.cpdp.bg).
Changes to the privacy policy
“Mihailov Commerce” Ltd. reserves the right to change its privacy policy.