Privacy Policy

Mandatory information on the rights of individuals regarding the protection of personal data (Privacy Policy)

General information

From May 25, 2018, a new regulation on the protection of personal data (General Data Protection Regulation), adopted by the European Union, comes into force. The regulation aims to guarantee the protection of data of individuals from all EU member states and to unify the regulations for their processing.

 

As a personal data administrator, Burgas divers LTD meets all the requirements of the new regulation, collecting only data of individuals to the extent necessary for the provision of the service, and keeping them responsibly and legally.

 

Information about the Administrator of personal data

1. Name Burgas divers LTD

2. UIC/BULSTAT: 205186048

3. Seat and address of management: Burgas, ZK Lazur 75

4. Correspondence details: Burgas, ZK Lazur 75

5. E-mail: info@burgasdivers.com

Information about the competent supervisory authority

1. Name: Commission for Personal Data Protection

2. Seat and address of management: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

3. Correspondence details: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

4. Telephone: 02 915 3 518

5. Email: kzld@government.bg, kzld@cpdp.bg

6. Website: www.cpdp.bg

 

Burgas divers LTD carries out its activities in accordance with the Personal Data Protection Act of personal data and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

 

Grounds for collecting, processing and storing your personal data

Art. 1. (1) Burgas divers LTD collects and processes your personal data on the basis of the following:

● Performance of Burgas divers LTD's obligations under a contract with you;

● Explicit consent obtained from you when making an inquiry via the Burgas divers LTD website https://www.burgasdivers.com

● For the purposes of Burgas divers LTD's legitimate interest.

 

Purposes and principles for collecting, processing and storing your personal data

Art. 2. (1) Burgas divers LTD collects and processes the personal data that you provide to us in connection with the use of our services and for concluding a contract with the company, as well as for making an inquiry via the Burgas divers LTD website, including for the following purposes:

● individualization of a party to the contract;

● accounting purposes;

● protection of information security;

● ensuring the performance of the contract for the provision of the relevant service;

 

(2) Burgas divers LTD complies with the following principles when processing your personal data:

● lawfulness, good faith and transparency;

● limitation of the purposes of processing;

● relevance to the purposes of processing and minimization of the collected data;

● accuracy and timeliness of the data;

● limitation of storage in order to achieve the purposes;

● integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.

(3) When processing and storing personal data, Burgas divers LTD may process and store personal data in order to protect its following legitimate interests:

● fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.

 

What types of personal data does Burgas divers LTD collect, process and store?

Art. 3. (1) Burgas divers LTD performs the following operations with personal data for the following purposes:

● Conclusion and execution of a commercial transaction with a client or partner

(2) Burgas divers LTD processes the following categories of personal data and information for the following purposes and on the following grounds:

● Data: Your individualizing data: Names according to ID card or passport, Personal Identification Number/Personal Identification Number, citizenship, ID card number/valid national identity document, address, email and telephone.

○ Purpose for which the data is collected: 1) execution of a contract with a business partner and its administration;;

○ Ground for processing your personal data – contractual basis

● Additional data provided by you – If you wish to make an inquiry via the Burgas divers LTD website: https://www.burgasdivers.com, you must fill out an online form that requires: name, surname, email and telephone.

○ Purpose for which the data is collected: Inquiry for information about the activities and services of Burgas divers LTD.

○ Grounds for data processing: By accepting the general terms and conditions and the privacy policy of the website, you expressly consent to your personal data being processed for the relevant purpose.

● Other data that Burgas divers LTD processes – When entering our website, Burgas divers LTD collects data about the IP address used.

○ Purpose for which the data is collected: Improving the security of the service and localization of the interface, statistical and marketing research.

○ Grounds for data processing: The IP address is collected on the basis of the legitimate interests of the administrator – Art. 6, para. 1, b. (f) of the GDPR;

● Your data for issuing an invoice to an individual – If you wish to be issued an invoice in your capacity as an individual, you should provide your unique civil registration number.

○ Purpose for which the data is collected: Issuing an invoice for making payments under a concluded contract for the provision of services.

○ Grounds for processing your personal data – Upon concluding a written contract, a contractual relationship is created between Burgas divers LTD and you, on the basis of which we process your personal data – Art. 6, para. 1, b. (b) GDPR.

(3) Burgas divers LTD does not collect and does not process personal data that relate to the following:

● reveal racial or ethnic origin;

● reveal political, religious or philosophical beliefs, or trade union membership;

● genetic and biometric data, data on health or data on sex life or sexual orientation.

(4) Personal data are collected by Burgas divers LTD from the persons to whom they relate.

(5) The company does not carry out automated decision-making with data.

 

Storage period of your personal data

Art. 4. (1) Burgas divers LTD stores your personal data for a period not longer than the requirements of the applicable legislation for the relevant period. After the expiry of this period, Burgas divers LTD takes the necessary care to delete and destroy all your data without undue delay.

(2) Burgas divers LTD will notify you in the event that the data storage period needs to be extended in order to fulfil the purposes, perform the contract, in order to pursue the legitimate interests of Burgas divers LTD or otherwise.

 

Transfer of your personal data for processing

Art. 5. (1) Burgas divers LTD may, at its own discretion, transfer part or all of your personal data to data processors for the purpose of processing in accordance with the requirements of Regulation (EU) 2016/679.

(2) Burgas divers LTD shall notify you in the event of an intention to transfer part or all of your personal data to third countries or international organizations.

 

 

Your rights in the collection, processing and storage of your personal data

 

Withdrawal of consent to the processing of your personal data

Art. 6. (1) If you do not wish all or part of your personal data to continue to be processed by Burgas divers LTD for specific or all processing purposes, you may withdraw your consent to the processing at any time by filling in an online form or by making a free text request.

(2) Burgas divers LTD may request that you verify your identity and identity with the person to whom the data relates.

 

Right of access

Art. 7. (1) You have the right to request and receive from Burgas divers LTD confirmation as to whether personal data relating to you are being processed.

(2) You have the right to access the data relating to you, as well as information relating to the collection, processing and storage of your personal data.

(3) Burgas divers LTD shall provide you, upon request, with a copy of the personal data processed relating to you, in electronic or other appropriate form.

(4) Providing access to the data is free of charge, but Burgas divers LTD reserves the right to impose an administrative fee in case of repetitive or excessive requests.

 

Right to rectification or completion

Art. 8. You may correct or complete inaccurate or incomplete personal data relating to you by submitting a request to Burgas divers LTD.

 

Right to erasure (“to be forgotten”)

Art. 9.(1) You have the right to request from Burgas divers LTD the erasure of personal data relating to you, and Burgas divers LTD has the obligation to erase them without undue delay where one of the following grounds applies:

● the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

● you withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;

● you object to the processing of personal data relating to you, including for direct marketing purposes, and there are no overriding legal grounds for the processing;

● the personal data have been processed unlawfully;

● the personal data must be erased for compliance with a legal obligation under EU law or the law of a Member State to which Burgas divers LTD is subject;

● the personal data were collected in connection with the provision of information society services.

(2) Burgas divers LTD is not obliged to erase personal data if it stores and processes them:

● for the exercise of the right to freedom of expression and the right to information;

● for compliance with a legal obligation which requires processing, provided for in EU or Member State law, to which the Administrator is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in it;

● for reasons of public interest in the field of public health;

● for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes;

● for the establishment, exercise or defence of legal claims.

(3) In order to exercise your right to be forgotten, you must submit a written request sent to Burgas divers LTD, as well as prove your identity and the identity of the person to whom the data relate by presenting your identity card on site for identification purposes

(4) Burgas divers LTD does not delete the data that it is legally obliged to store, including for the protection of legal claims against it or for the establishment of its rights.

 

Right to restriction

Art. 10. You have the right to request Burgas divers LTD to restrict the processing of data relating to you where:

● you contest the accuracy of the personal data, for a period that allows Burgas divers LTD to verify the accuracy of the personal data;

● the processing is unlawful, but you do not want your personal data to be deleted, but only to have their use restricted;

● Burgas divers LTD no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;

● You have objected to the processing pending verification of whether the legitimate grounds of Burgas divers LTD override your interests.

 

Right to portability

Art. 11. (1) You may at any time obtain the data stored and processed about you in connection with the use of the services of Burgas divers LTD by sending a request by email.

(2) You may request Burgas divers LTD to directly transfer your personal data to a controller designated by you, where this is technically feasible.

 

Right to information

Art. 12. You may request Burgas divers LTD to inform you of all recipients to whom the personal data for which rectification, erasure or restriction of processing has been requested have been disclosed. Burgas divers LTD may refuse to provide this information if this would be impossible or would involve a disproportionate effort.

 

Right to object

Art. 13. You may object at any time to the processing of personal data concerning you by Burgas divers LTD, including if they are processed for profiling or direct marketing purposes.

 

Your rights in the event of a breach of the security of your personal data

Art. 14. (1) If Burgas divers LTD becomes aware of a breach of the security of your personal data which may result in a high risk to your rights and freedoms, we will notify you without undue delay of the breach and of the measures that have been taken or are to be taken.

(2) Burgas divers LTD is not obliged to notify you if:

● it has taken appropriate technical and organisational measures to protect the data affected by the security breach;

● it has subsequently taken measures that ensure that the breach will not result in a high risk to your rights;

● notification would require disproportionate effort.

 

Persons to whom your personal data are provided

 

Art. 15. The administrator does not transfer your data to third countries.

 

Other provisions

Art. 16. In case of violation of your rights under the above or applicable personal data protection legislation, you have the right to file a complaint with the Personal Data Protection Commission, as follows:

1. Name: Personal Data Protection Commission

2. Registered office and address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. 3.

Correspondence details: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. 4.

Telephone: 02 915 3 518

5. Email: kzld@government.bg, kzld@cpdp.bg

6. Website: www.cpdp.bg

Art. 17. You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are not mandatory and you can make your requests in any form that contains a statement to this effect and identifies you as the data owner.

Art. 18. If the consent concerns a transfer, the Administrator shall describe the possible risks of the transfer of data to third countries in the absence of an adequate protection solution and appropriate remedies.