CONFIDENTIALITY POLICY
TEKRA LTD
WE CARE ABOUT PROTECTING YOUR PERSONAL DATA
Who are we?
„TEKRA“ Ltd, UIC 030432222, registered office and registered address: 1592 Sofia, Iskar district, Druzhba 1 residential complex, 35 Tsvetan Lazarov blvd., represented by the manager Petar Stefanov Polileev, tel.: 070011010, e-mail address: tekra@tekra.bg is a personal data controller in accordance with the provisions of the Personal Data Protection Act and Regulation (EU) 2016/679.
How to contact us?
Address: 1592 Sofia, Iskar district, Druzhba 1 residential complex, 35 Tsvetan Lazarov blvd., tel. 070011010, e-mail address: tekra@tekra.bg
How to contact our Data Protection Officer?
Address: 1592 Sofia, Iskar district, Druzhba 1 residential complex, &Bdquo;35 Tsvetan Lazarov blvd.“
Tel.: (02) 96 94 763
E-mail: elena.dimitrova@tekra.bg
„TEKRA“ Ltd owner and administrator of the following website:
www.tekra.bg
&bquo;Tekra“ Ltd respects your privacy.
Protecting your personal information throughout the data processing process, as well as the security of all business data, is an important issue for us. We process the personal data collected during your visit to our website confidentially and in accordance with national and European laws.
What is the Privacy Policy?
This Privacy Policy is intended to provide you with comprehensive information in clear and accessible language about what is done with the personal data you provide to „TEKRA“ Ltd (hereinafter referred to as „TEKRA“), including:
- What personal data do we collect about you?
- What is the purpose of collecting it?
- For how long do we keep the personal data provided?
- Who do we share your personal data with?
- How do we notify you of changes to our Privacy Policy?
- What are your rights regarding the personal data you provide?
With this Privacy Policy, TEKRA declares that it applies all technical and organizational measures for the protection of the personal data of individuals that are prescribed by law or other regulatory act at national and European level.
What is personal data?
Any information and data that can identify an individual, directly or indirectly.
For example, indirect identification is your mobile phone number. Direct identification is achieved when you provide a unique identifier, such as your personal identification number (PIN), foreigner’s personal identification number (FPIN), customer code, etc.
What personal data does TEKRA collect about you ?
In order to provide you with effective access to our products and services, TEKRA collects the following information about you:
- First name, last name, email address and phone number when completing the various forms posted on our website, including setting up an initial registration, subscribing to our newsletter, completing the form to provide feedback and/or comments, and completing the partner registration inquiry form;
- Technical data that is automatically sent to us when you use our website - IP address;
- Cookies - to identify your browser or device.
On what grounds does TEKRA process your personal data?
Personal data processing includes the collection, storage, destruction, transmission, correction, update, deletion, disposal and any other action that is performed on your personal data.
TEKRA collects your personal data in order to fulfil its contractual obligations under contracts entered into with you for the provision of products and services – on a contractual basis (such as training courses conducted by TEKRA Academy).
TEKRA collects personal data after obtaining your explicit, clear, free and unambiguous consent for the purposes of processing. For example, for marketing purposes and to receive promotional newsletters.
Consent to the processing of your personal data is provided when registering on our website, when filling in the message form, when registering to receive our e-newsletter or when requesting to register as a partner.
The consent you provide can always be withdrawn by visiting one of our offices, whose addresses can be found on our website under section „Contact“, and by emailing info@tekra.bg.
TEKRA also processes personal data in compliance with legal obligations and if necessary in order to protect the life and health of the data subject.
TEKRA may also process personal data where it has a legal (legitimate) interest, except where the interests of the data subject override those interests.
For what purposes do we collect your personal data?
The personal data we receive from you will be used to enable us to fulfil our obligations to you and to help you exercise your rights, including but not limited to:
- To respond to your enquiries, comments and recommendations, including partner registration enquiries;
- To provide you with access to our website directly through your account;
- To provide you with access to the information in the TEKRA Academy and Library sections;
- To prepare a personalized Certificate for successfully completed training at the TEKRA Academy;
- &To send you updates with our online newsletter.
In addition to the above, we have a legitimate interest in collecting your personal data because without it we cannot provide you with the product/information you are interested in.
How do we process your personal data?
In order to provide you with the necessary information, TEKRA processes (collects) the personal data you provide regarding your physical and social identity in the following ways:
- after registering on our website in one or more of the contact forms, the new partner registration enquiry form, registration for the provision of an online newsletter;
- by processing information about your visits to the TEKRA website;
- by processing information about IP addresses and cookies (bins).
How long do we store and process your data before destroying it?
Depending on the basis on which we process your personal data, the retention period varies.
Your personal data will be retained by us for a period of 2 years from the termination of our contractual basis if we are processing the personal data for the performance of contractual obligations to you. After this period and in the event that there is no legal basis for the continued storage of your personal data, your information will be destroyed. Records about you are permanently deleted from our system, and paper files containing your personal data are destroyed.
To whom can we pass the personal data you have provided?
TEKRA undertakes not to provide your personal data to third parties without your explicit consent, except where necessary for the performance of contractual obligations to you.
Use of Cookies
If you would like information about what cookies are used when you visit our Website, you can see ourCOOKIE POLICY.
Are there other occasions when we may share your personal data ?
Your personal data is also shared with third parties in the following cases:
- At the request of the individual who provided the data, the subject of the protection of personal data;
-At the request of competent authorities in accordance with the legislation in force in the Republic of Bulgaria and the European Union.
In all the above cases, the entities to which we provide your personal data have declared that they provide an adequate level of protection of your personal data, including foreign companies positioned within the EU and EEA. With regard to companies located outside the EU and EEA, on a case-by-case basis, the company concerned shall ensure that it provides an adequate level of protection of personal data in compliance with the requirements of European law.
Automated decision-making in the processing of personal data and profiling
In order to speed up the provision of information and/or products, TEKRA may use the technical possibility of automated decision-making pursuant to Article 22 of the Regulation. In the event that automated processing is applied to the processing of your personal data, we will inform you of this. The processing of personal data involving "profiling", which consists of any form of automated processing of personal data for the assessment of personal aspects, in particular the analysis or prediction of various aspects relevant to your economic situation, health, personal preferences or interests, well-being or behaviour, is carried out in full compliance with the provisions of the Regulation. In the automated processing/profiling of your personal data, we:
- use appropriate procedures to carry out the profiling;
- implement appropriate technical and organisational measures, ensuring that factors that lead to inaccuracies in personal data are corrected and the risk of errors is minimised;
- we protect personal data in a way that takes into account potential threats to your interests and rights and that does not have the effect of, or result in, discrimination on the grounds of race or ethnic origin, political opinion, religion or belief, trade union membership, genetic or health status or sexual orientation.
- the right, in any case of automated processing of the personal data provided by you, to indicate your wish to include human intervention for decision-making purposes;
- to express your opinion in view of the automated decision made;
- obtain an explanation for the automated decision by submitting an application;
- appeal the decision made by automated processing.
What are your rights regarding the personal data provided?
You may exercise the following rights, subject to Bulgarian and European legislation, including Regulation (EU) 2016/679 of the EU and of the Council (General Data Protection Regulation - GDPR) on the protection of personal data:
- The right to access and obtain a copy of the personal data TEKRA processes about you;
- The right to request rectification from TEKRA should you identify inaccuracies or the need to update your personal data by emailing info@tekra.bg;
- Right to request restriction of the processing of your personal data in the cases defined by law and the Regulation;
- Right to request erasure, i.e. erasure of your personal data from TEKRA, if the conditions for this are met.
- The right to object to the processing of your personal data for direct marketing purposes, using the link for „unsubscribe“ that we have placed in every email sent to you containing promotional information about our products;
- The right to object to the provision of your personal data to third parties by sending an email to info@tekra.bg, to the extent that such provision is not necessary for us to fulfil our obligations to you;
- The right, whenever you wish, to withdraw the consent you have given for your personal data to be processed for the purposes for which you have given consent, such as for marketing, by emailing to: marketing@tekra.bg;
- The right to request portability of your personal data in a structured, machine-readable format that is commonly used;
- The right to file a complaint or an application for the protection of your rights with the Data Protection Commission, if the prerequisites for this are present.
You may exercise all of the rights at any time during the processing of your personal data.
What does each of the above rights mean?
Right of access to personal data.
This right enables the data subject to obtain information as to whether personal data relating to him or her are being processed and, if so, to obtain access to the data and the following information: (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (d) where possible, the intended period for which the personal data will be kept and, if this is not possible, the criteria used to determine that period; (e) the existence of a right to require the controller to rectify or erase personal data or to restrict the processing of personal data relating to the data subject, or to file an objection to such processing (f) the right to complain to the CPDP (g) where the personal data are not collected from the data subject, any available information about their source; (h) the existence of automated decision-making, including profiling.
• Right to rectification and deletion („правото да бъдеш забравен“)
The data subject has the right to request the Controller to correct inaccurate personal data relating to him or her without undue delay. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by adding a declaration.
The data subject shall have the right to request from the Controller the erasure of personal data relating to him or her, and the Controller shall have the obligation to erase without undue delay personal data where one of the following grounds applies: a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b) the data subject has withdrawn his or her consent on which the processing of the data was based and there is no other legal basis for the processing; c) the data subject objects to the processing and there are no overriding legitimate grounds for the processing; d) the personal data have been processed unlawfully; e) the personal data must be erased for compliance with a legal obligation under Union law or Member State law to which the Controller is subject; f) the personal data have been collected in connection with the offering of information society services.
• Right to object
The data subject has the right to object to the processing of his or her personal data, including where the personal data are processed for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller, or for reasons relating to the legitimate interests of the Controller or of a third party.
The right to object also exists when processing personal data for the purposes of direct marketing and profiling.
• Right to portability
The data subject has the right to receive the personal data concerning him or her, which he or she has provided to the Controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, where:
a) the processing is based on consent or in performance of a contractual obligation; and (b) the processing is carried out by automated means.
• Right to file a complaint or request to the Personal Data Protection Commission
The data subject has the right to refer the matter to the Personal Data Protection Commission.
If your rights are violated, you have the right to appeal the actions and acts of the Controller through administrative or judicial proceedings. The court may not be seised if there are proceedings pending before the Commission for the Protection of Personal Data for the same infringement or a decision of the CPPD concerning the same infringement has been appealed and there is no final court decision in this respect.<
Do you have an obligation to provide us with your personal data?
In the event of your refusal to voluntarily provide the requested personal data, TEKRA will not be able to provide its products, respectively to conclude a contract / to continue the performance of an already concluded contract.
Changes to the Privacy Policy
An up-to-date version of the Privacy Policy can be found on TEKRA's website
This Privacy Policy has been adopted by TEKRA and is effective as of 29-01-2019.