Personal data protection

Personal data protection
1. GMP Consult OOD, UIC 203745236, address: Varna, 11A Andrey Saharov Str., with trade name GMP Consult Ltd. (hereinafter referred to as “the Company” or “the Administrator”) and its team comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter referred to as the GDPR).

Personal data administrator
2. In this regard, the Company informs its Clients that the administrator of personal data is: GMP Consult Ltd. with UIC 203745236, address: Varna, 11A Andrey Saharov Str., E-mail address: office@gmpconsult.bg, website owner: https://gmpconsult.bg (hereinafter referred to as “Site/the Site”).

What personal data is collected
3. The Company collects and processes the following categories of personal data: identity data: name, surname and family name, PIN, date of birth, citizenship; contact details: e-mail address, telephone number, place of residence; technical data: IP address, type of browser, time zone and location, types and versions of browser plug-ins, operating system and platform and other technology of the devices that the Client uses to access the Site and the services of the Company; comments on the Blog page of the Site, as well as information about the date of the comment and about the username chosen by the Client; data for feedback with the Client: e-mail addresses, opinions about the services of the Company, answers to surveys; data about the use of the Site: how the Site and the services of the Company are used; aggregated data: statistical or demographic information for any purpose.

How personal data is collected
4. The company collects personal data in the following ways:
• In direct contact with the Client in person;
• When using the content of the Site and the services of the Company;
• Upon inquiry through the Contact form on the Site;
• When communicating with the Client by phone, e-mail or through a social media;
• Upon concluding a contract between the Company and the Client for the provision of a certain service;
• When visiting the profile of the Company in the social networks by the Client;
• When leaving a comment on the Site or on a Company’s profile in the social media by the Client.

Purposes of personal data processing

5. The Company collects and processes personal data of the Client in order to provide its services and administer the Site, no matter if the Client has used the Site to find information, contact the Company, and make an inquiry or for any other reason. No matter how the Client uses the Site, the Company aims to communicate with the Client as easily and quickly as possible.

6. Other purposes for personal data processing are the following: to contact the Client; to settle the legal relations between the Company and the Client regarding the services’ providing; for participation in surveys, requesting and publishing Client’s opinions on the Site, receiving new articles, advertising and other content concerning the Site’s use and the Company’s profiles on social media; to protect the activity of the Company and the information on the Site (including data analysis, testing, system maintenance, data reporting, SEO analysis and optimization); to use the data analysis for improving the Site, the Company’s services and the relations with the Clients.

7. The Company does not sell, rent or distribute and disclose data about its Clients to third parties. The Company will share personal information without the Client’s permission only if the law requires it or requires assistance from a specific authority.

8. In case the Client refuses to provide his personal data for the purposes described above, the Company may refuse to enter into a contract with him for the performance of a certain service.

Time period for which personal data is collected
9. Personal data is collected only to the extent necessary for the performance of the service provided by the Company, as well as for the performance of the other purposes under item 6 above, including for legal, accounting or reporting purposes. After the expiration of this period, the relevant data is deleted and/or destroyed by the Company.

Legal basis for processing of personal data
10. Personal data is processed on the basis of:
• Art. 6, paragraph 1, letter “b” of the GDPR – where it is necessary for the performance of a contract with the Client or to take steps upon Client’s request before concluding a contract, for example in case of an inquiry about the Company’s services;
• Art. 6, paragraph 1, letter “f” of the GDPR – where it is necessary for our legitimate interests of the Administrator or those of a third party. The legitimate interest includes the business interests of the Company, the management of the business, the prevention of fraud, as well as for the purposes of direct marketing.

Rights of personal data subjects
11. The rights of personal data subjects are as follows:
• You have the right to obtain from the Company confirmation as to whether or not Personal Data concerning you are being processed, and, where that is the case, access to the Personal Data;
• You have the right to obtain from the Company without undue delay rectification of inaccurate Personal Data concerning you and you have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement;
• You have the right to be forgotten, i.e. obtain from the Company the erasure of Personal Data concerning you without undue delay and the Company shall have the obligation to erase Personal Data without undue delay;
• You have the right to obtain from the Company restriction of processing of your Personal Data where one of the following applies:
– the accuracy of the Personal Data is contested by you, for a period enabling us to verify the accuracy of the Personal Data;
– the processing is unlawful and you oppose the erasure of the Personal Data and requests the restriction of their use instead;
– the Company no longer need the Personal Data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
– you have objected to processing pending the verification whether the legitimate grounds of the Company overrides those of the data subject.
• You have the right, upon your request, to be informed regarding rectification or erasure of Personal Data or restriction of processing, i.e. the Company shall communicate any rectification or erasure of Personal Data or restriction of processing carried out to each recipient to whom the Personal Data have been disclosed, unless this proves impossible or involves disproportionate effort;
• You have the right to data portability, i.e. to receive the Personal Data concerning you, which you have provided to the Company, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the Company;
• You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless:
– the decision is necessary for entering into, or performance of, a contract between the you and the Company;
– the decision is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard the your rights and freedoms and legitimate interests; or
– the decision is based on the your explicit consent;
• You have the right to object, on grounds relating to your particular situation, at any time to processing of Personal Data concerning you, including profiling. In this case, the Company shall no longer process the Personal Data unless the Company demonstrates compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. Where your Personal Data are processed for direct marketing purposes, you have the right to object at any time to processing of Personal Data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the Personal Data shall no longer be processed for such purposes. Where Personal Data are processed for scientific or historical research purposes or statistical purposes, you, on grounds relating to your particular situation, have the right to object to processing of Personal Data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
• You have the right to file a complaint to the competent supervisory authority in Bulgaria – Commission for Personal Data Protection, address: Sofia 1592, Blvd. 2, “Prof. Tsvetan Lazarov”, official website: https://www.cpdp.bg/.
Last updated: July 14, 2021