PERSONAL DATA SECURITY POLICY
Your privacy is extremely important to us. This security policy discloses what personal data we collect from you through our joint relationship or through our relationship with your data controller and how we use that data.
For the purpose of concluding and executing employment contracts between us and our employees, as well as for the purpose of executing service contracts concluded between us and you or between us and our clients - Personal Data Controllers, DiZi Cont Investment Ltd („WE“), UIC: 206806889, with registered office address: r. Sofia (1505), Oborishte district, Oborishte Blvd. Madrid 52, E-mail: [email protected], processes data of natural persons („Data Subjects“/„You“/„Your“) in accordance with this Policy.
In processing personal data, DiZi Cont Investment Ltd complies with all data protection legislation applicable to its activities, including but not limited to Regulation (EU) 2016/679 („Regulation“) and the Data Protection Act, because the security of the personal data of our employees, customers and our customers„ co-conspirators is of paramount importance to us.
According to the Regulation, personal data is any information relating to you by which you can be identified or are already identified. Processing of personal data (”Processing”) means any act or set of acts which may be performed upon personal data, whether or not by automatic means.
I. Categories of subjects whose personal data WE process:
1.1. In connection with the conclusion and performance of employment contracts between us and our employees, as well as for the purpose of performance of the service contract concluded between us and you or between us and our customers - Data Controllers WE process information about the following Data Subjects:
individuals using the Site without registration.
individuals who have made inquiries (including by calling), requests, signals, complaints or other correspondence to DiZi Connect Investment Ltd.
individuals, information about whom is contained in inquiries (including by call), requests, signals, complaints or other correspondence addressed to DiZi Connect Investment Ltd.
individuals with whom WE contract for services.
individuals whose personal data is processed by our clients as controllers.
II. Personal data we process:
2.1. It is impossible for us to enter into a contract with you and to perform it, to provide our services to you or to our clients who are the administrators of your personal data, if you do not provide us with information. In this regard, we require certain information from you. It is up to you to decide whether and how to use our services and/or service contract options. The personal data that we process are those without which it is impossible to provide the respective service or part thereof and/or to conclude the respective contract. These are quite simple things like:
- three names,
- EGN,
- address for correspondence.
- email address,
- Phone,
- banking information,
- your health condition.
2.2. Further, for the purpose of responding to inquiries, requests or other questions made in communications to DiZi Cont Investment Ltd. received through electronic forms on the Site: https://dizicont.com, through calls to DiZi Cont Investment Ltd.„s telephone switchboard, by sending regular or electronic mail, We store and process this information and the result of this processing.
2.3. „DiZi Cont Investment Ltd may also process other personal data about you where you voluntarily provide such data by completing the relevant consent form sent to us on paper or electronically.
III. For what purposes we process your personal data:
3.1. The main purpose for which WE process your personal data relates, generally speaking, to the conclusion and performance of employment contracts between us and our employees, as well as for the purpose of performing service contracts concluded between us and you or between us and our customers - Data Controllers. We also use your personal data to contact you.
3.2. „DiZi Connect Investment Ltd collects, uses and processes the information described above for the purposes set out in this Policy, which may relate to:
-
- the conclusion of a contract between you and DiZi Cont Investment Ltd or between the Controller of your personal data and DiZi Cont Investment Ltd;
- performance of the contract so entered into, you should note that we may retain your data for a reasonable period of time after termination of the contract in order to meet any contractual obligations such as refunds, warranties, etc., and to meet any legal obligations to retain transaction data;
- preparation of the necessary documents required by our clients under the Accounting Act, the Tax and Social Insurance Procedure Code, the Value Added Tax Act, the Corporate Income Tax Act, the Personal Income Tax Act, the Local Taxes and Fees Act, etc.;
- preparation of the necessary documents required by our clients in connection with the registration of companies;
- protecting and enforcing the legitimate interests of other users of the services of DiZi Connect Investment Ltd;
- the fulfilment of legal obligations of DiZi Cont Investment Ltd.
3.3. Our legitimate interest the processing of your personal data is due to the need to ensure the protection and safeguarding of the legitimate interests of DiZi Cont Investment Ltd and/or third parties, which is related to:
-
- communicating with you, including electronically, on important matters relating to the conclusion and performance of employment contracts, as well as for the purpose of performing service contracts concluded between us and you or between us and our clients - Data Controllers.
- receiving and processing enquiries, requests and other correspondence;
- to exercise and protect the rights and legitimate interests of DiZi Cont Investment Ltd, including through legal proceedings, and to assist in exercising and protecting the rights and legitimate interests of other users of the website and/or third parties affected.
For these purposes, it may be necessary to process some or all of the above categories.
3.4. Our legal obligations include fulfillment of statutory requirements to preserve or provide information upon receipt of an appropriate order from competent state or judicial authorities, when ensuring the possibility of exercising the control powers of the competent state authorities, when fulfilling obligations provided for in the General Data Protection Regulation related to notifying you of various circumstances related to your rights, the Services provided or the protection of your data, etc. similar. For these purposes, it may be necessary to process some or all of the above categories.
3.5. Your data may be processed on the basis of Your explicit consent, in which case the processing shall be specific and to the extent and scope provided for in the relevant consent.
IV.How long do we keep your personal data?
4.1. When storing data, WE apply the general principle of storing data in the minimum volume and for a period no longer than necessary for the provision of services or the performance of contracts concluded by us, ensuring their security and reliability and the requirements of the law.
|
Data types |
Storage period |
Explanations |
|
The data described in point 2.1 |
For the entire term of the contract with us and up to 1 / one / year from the termination of the contract. |
The data identifies you as a party to a contract with us. |
|
Correspondence, complaints and signals, inquiries, requests, incoming telephone calls |
Correspondence, complaints and signals are kept for a period of up to 5 /five/ years. |
In order to resolve complaints, signals, disputes, responses to inquiries, requests or other issues made in communication to Us received through electronic forms on the Site, through calls to the telephone switchboard of DiZi Connect Investment Ltd, by sending regular or e-mail, We store and process this information and the result of this processing. In view of the limitation periods under Bulgarian law for the resolution of disputes, this information is stored for a period of up to 5 /five/ years. |
|
Biscuits |
Up to 6 /six/ months from the last use of the Services |
For a description of the cookies used, see “Cookie Policy” |
4.2. In the event of a legal dispute or proceeding requiring the retention of data and/or a request from a competent government authority, it is possible to retain data for longer than the specified periods until the final conclusion of the dispute or proceeding before all instances. These time limits may be modified in the event that a different retention requirement is established under applicable law.
V.Do we share your personal data with third parties?
5.1. „DiZi Cont Investment“ Ltd. does not provide your personal data to third parties in any other way except as described in this Policy and as provided by law. In order to provide you with the best terms and conditions under our contracts with our partners, WE provide your personal data to:
-
- our employees.
- a competent governmental or judicial authority, if duly requested.
- persons for whom we have your explicit consent to provide your personal data.
- third parties in order to protect the rights and legitimate interests of DiZi Cont Investment Ltd.
5.2. In dealing with the above categories of persons to whom we provide your personal data, WE require them to strictly comply with our instructions in accordance with this Policy.
5.3. In the event of a merger, acquisition or sale of assets affecting the processing of personal data, you will be notified in advance.
5.4. You should be aware that if we are asked by the police or any other regulatory or government body investigating suspected illegal activities to provide your personal information or other information we obtain about you, we have the right to do so.
5.5. Our website and app also contains links to and from third party websites - Facebook, Google+, Twitter. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we accept no responsibility or liability for these policies. Please check these policies before submitting information to these websites.
VI.Your rights in relation to personal data
6.1. Under the General Data Protection Regulation, you have the following rights, which you can exercise by sending an e-mail to [email protected] with an attached request to that effect:
-
- Right to information.
This Policy is intended to inform you in detail about the processing of your personal data in relation to the processing of your personal data.
-
- Right of access.
You have the right to confirm whether your personal data is being processed, to access it and to obtain information about how it is being processed and your rights in relation to it.
-
- Right to rectification.
You have the right to rectify and supplement your personal data if it is incomplete or inaccurate.
-
- Right to erasure (right to be forgotten).
You have the right to request the erasure of data, except where there is a substantial ground for processing and/or a legal obligation.
-
- Right to restriction in relation to data processing.
The General Data Protection Regulation provides for the possibility to restrict the processing of your personal data if there are grounds for doing so set out therein.
-
- Right to notify third parties.
Where applicable, you have the right to request the Controller of your personal data to notify third parties, where he has provided your data, regarding the rectification, erasure or restriction of the processing of your personal data.
-
- Right to data portability.
You have the right to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format and have the right to transfer that data to another controller without hindrance from us, if the processing is based on consent or a contractual obligation or the processing is carried out in an automated manner.
-
- The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless there are grounds for doing so under applicable data protection law and appropriate safeguards are provided to protect your rights, freedoms and legitimate interests.
No technologies falling into this category are used in the provision of the Services on the Site.
-
- Right to withdraw consent.
You have the right, at any time, to withdraw the consent you have given in relation to the processing of personal data on the grounds - your consent. Such withdrawal shall not affect the lawfulness of the processing on the basis of the consent given up to the time of withdrawal.
-
- Right to object.
You have the right to object to data processed on the basis of legitimate interest.
In the event that such an objection is received, We will consider Your request and, if justified, comply with it. If we consider that there are compelling legitimate grounds for the processing or that it is necessary for the establishment, exercise or defence of legal claims, we will inform you of this.
-
- Right of appeal to a supervisory authority.
You have the right to lodge a complaint with the supervisory authority if you consider that the processing of personal data concerning you violates applicable data protection law. The supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection, whose address is. 1592 Sofia Blvd. „1595 Prof. 2.
6.2. In the event that you exercise these rights manifestly unreasonably or excessively, in particular because of its repetitive nature, D&C Investment Ltd reserves the right to charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested, or to refuse to act on the request.
VII. Accuracy of information
„DiZi Connect Investment Ltd. is not responsible for the accuracy of the data provided by you, does not carry out checks in this regard and does not guarantee the true identity of the individuals who provided the data. In all cases of suspicion on your part, of fraud and/or abuse detected, please notify us immediately. You undertake not to violate the rights of others in relation to the protection of their personal data or their other rights when providing us with any information.
VIII. How we protect your personal data
In order to ensure the best possible data protection for the company and its employees and customers, WE apply all necessary organizational and technical measures provided for in the General Data Protection Regulation and the Data Protection Act, as well as best practices from international standards.
The Company has adopted the necessary rules and procedures relating to the lawful processing of your personal data, including. It has established structures to prevent misuse and security breaches, which support the processes of lawful processing, protection and security of your data.
IX.Cookie Policy„
As an integral part of this Policy on the security of personal data of individuals, DiZi Cont Investment Ltd. has adopted a Policy on the use of cookies.
X.Contacts
Questions and requests relating to the exercise of your rights to the protection of your personal data may be addressed to DiZi Cont Investment Ltd:
- Address for correspondence. Sofia (1505), Oborishte district, bul. 52 Madrid
- Имейл: [email protected]
- Tel: 0895 603 828
