PRIVACY NOTICE OF PERSONAL DATA PROCESSED IN THE BEST EMPLOYERS BULGARIA SURVEY
Date of last update: 20.10.2023
1. Data for the administrator.
We, “A R S Bulgaria” EOOD, EIK 205294860; with headquarters and management address: city of Sofia, Oborishte district, 64 Knyaginya Maria Luiza Blvd. and contact details: address: city of Sofia, Sitnyakovo Blvd No. 48, floor 6, office 609, telephone : +359 895 569 102 and e-mail: bestemployersbulgaria@arsbulgaria.com (also referred to in the document as “the Company”), we consider that it is important for you to understand how we collect, store and share the personal data processed when performing our business activity.
2. Who is the Notice for?
This Privacy Notice is intended for all individuals whose personal data we process in conducting the Best Employers survey. Such persons may be our website visitors; the persons who made an inquiry through the form and/or contact details; the participants in the Best Employers survey.
3. What personal data do we process, for what purposes and on what basis?
We process personal data only for the purpose for which it was collected and do not reuse it for incompatible purposes. Further processing is only permitted for the establishment, exercise or defense of legal claims.
The type of personal data we process depends on the purpose for which we need it and the activities for which we receive the data.
3.1 Visiting the Website.
When you visit our website, we register in the so-called log files the following data: IP address; date and time of the visit; type of browser and type of device used. We process this information to ensure the establishment of a connection to the website; to analyze system security, and for other administrative purposes. The basis for the processing of this information is to guarantee our legitimate interests, which consist of increasing the visibility of our activity and, accordingly, increasing the number of our customers.
When you visit the site, we create data that we store on your end device, which only includes information about your chosen language version of our website. The information is saved until the end of your user session. The basis for the processing of this information is the protection of our legitimate interests, which consist of maintaining a convenient and easy-to-use website through which we provide information about our activities. You can object to this by deleting, blocking or restricting cookies through your browser settings (you can learn more here).
3.2 Conducting the survey.
The participation of our clients’ employees in the survey is voluntary and anonymous. In order to provide you with information about the conducted survey and other campaigns we organize, which you requested through the contact form on our website, we need certain personal data – names, role/position in your organization and e-mail. If you wish, you can provide us with the name of your organization and your contact phone number. We only use this data to contact you in relation to the specific survey or campaign for which you have requested information. We will use the contact details to provide you with other information, including information about the services we offer, if you have agreed to receive such information. You can withdraw your consent at any time by contacting us at the indicated email address to exercise your rights.
3.3 Administration of the contract for participation in the study.
To administer a contract to participate in the “Best Employers” survey and to fulfill our legal obligations, we process the following personal data:
- for persons representing legal entities: the physical identity of the person: names; contact details: address and contact numbers, e-mail; Position; authorization data (only for proxies), etc.;
- for the employees of our clients, with whom the interaction takes place during the conclusion and execution of the contract: names, position, contact details: e-mail, contact phone number.
4. How long do we store data?
We retain personal data only for as long as is necessary to achieve the purposes for which it was collected or as required by law. Storage periods depend on the type of specific information. According to the requirements of the regulations, the data on our commercial activity obtained in connection with the administration of the contract is kept for a maximum period of 10 years. We keep the data created when visiting the site and received through the contact form for a period of 5 years.
5. Who do we share your personal data with?
We process your data primarily within our organization. We provide data to the competent state authorities whenever this is provided for by law.
In certain cases, we may provide access to data to providers who support our operations. As our processors, they are required to ensure a high level of security, and we control the processing activities they carry out.
Our chosen provider of hosting services is “SuperHosting.BG” Ltd. You can familiarize yourself with the conditions for carrying out personal data processing activities: superhosting-gdpr.pdf.
To send commercial correspondence, we use the Mailchimp service provided by The Rocket Science Group LLC. You can familiarize yourself with the conditions for carrying out personal data processing activities: https://mailchimp.com/legal/data-processing-addendum/.
We do not transfer personal data to third countries or international organizations without providing a reliable mechanism to protect your rights during this exchange. We share name and email information in the US when using the Mailchimp services based on the standard contractual clauses signed between us and approved by the European Commission.
We do not transmit personal data to third countries or international organizations.
6. Is your data protected?
“A R S Bulgaria” EOOD undertakes reasonable physical, technical and organizational security measures designed to protect all personal data from loss, misuse, alteration, destruction or damage, in accordance with the requirements of the legislation. We determine these measures based on the risks we identify, periodically review the measures in place, and update them as necessary.
7. What rights do you have?
When processing personal data, “A R S Bulgaria” EOOD conscientiously applies the legal requirements for exercising the rights of data subjects.
As a data subject, you have the right to request: •
- to provide you with access to your personal data, subject to the rights of third parties;
- to remove inaccurate personal data (including the right to have incomplete personal data completed);
- to delete personal data. It is applicable only in the following cases:
- the personal data are no longer necessary for the purposes for which they were processed;
- you withdraw your consent and there is no other basis for the processing;
- you object to processing based on our legitimate interests, and we cannot prove that our interests override your rights;
- o personal data were processed illegally;
- the deletion is necessary to comply with a legal obligation under Union law or the law of a Member State that applies to the controller.
- to limit the processing of personal data to storage only when:
- the accuracy of the personal data is disputed;
- the processing is illegal but you object to the deletion of the personal data;
- we no longer require the personal data but you still need it to establish, exercise or defend a legal claim.
- withdraw your consent at any time;
- to exercise your right to portability – for the data processed on the basis of a contract or consentwhen their processing is carried out in an automated manner.
You have the right to object to data processing based on our legitimate interests at any time and on grounds related to your particular situation.
If you have any questions or concerns regarding the processing of your personal data or wish to exercise any of your rights, please contact us at the following email address: bestemployersbulgaria@arsbulgaria.com.
You should include your names in your request to exercise your rights. Specify what your request is. Indicate the address for correspondence with you (physical address, electronic address), according to the preferred form of communication, and sign your request.
In order to process your request, we need to identify you. It is therefore necessary to send us your request via the e-mail through which we have already communicated (e.g. when communicating via the contact form). If you are using an email other than the one you have already provided us with, please sign the sample request or email with a qualified electronic signature. If necessary, at our discretion, we may request additional identification data as well as an identity document. We will inform you about the reasons that require the provision of additional information.
If you consider that the processing of personal data is illegal or violates your rights, you can file a complaint with the Commission for the Protection of Personal Data, address: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2, with electronic address: https://www.cpdp.bg/ or with the competent court.
