DECLARATION OF CONFIDENTIALITY OF HYDROENERGY GROUP OOD
- CONFIDENTIALITY POLICY
“HYDROENERGY GROUP” LTD strictly monitors the protection of the security and integrity of all personal data collected by our clients. We pay close attention to the processing of personal data in a lawful, conscientious and transparent manner. The data we collect and process only for specific, explicit and legitimate purposes and do not process further in a way incompatible with those purposes. The data we collect and store is minimized and related and limited only to what is necessary to meet the purposes for which we have collected them. We make every effort within our organization to ensure that your personal data is always accurate and up-to-date, and we also rely on you if you find data inaccurate to remove it in confidence. We never store your data for a period longer than what is required for the purposes for which it is being processed. We give you the opportunity at any time and without giving you any reason to withdraw your consent to process your data, as well as to delete it if you notify us of your wish. At the same time, it is our priority to process the process in such a way as to ensure the appropriate level of security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage. We have taken the necessary and prescribed technical and organizational measures in the applicable legislation to ensure the protection and security of our customers’ personal data.
HYDROENERGY GROUP Ltd. is an administrator of personal data and as such complies with the provisions of the applicable legislation (General Regulation on the Protection of Personal Data – Regulation (EC) 2016/679, Personal Data Protection Act, etc.)
DEFINITIONS
“PERSONAL DATA” is any information related to an identifiable natural person or an individual who can be identified. Personal information includes name, personal ID, email address, telephone, postal address, and more.
“PROCESSING” means any operation or set of operations performed with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, dissemination or trafficking in which data becomes available, arranged or combined, restricted, deleted or destroyed.
Our Privacy Policy also describes the opportunities we provide you for accessing, updating or otherwise taking control of your personal data we process. If you have questions about our practices or any of your rights described below, you can contact our team at office@hydroenergy.bg. This mailbox is actively monitored and managed.
- WHAT INFORMATION WE COLLECT – PERSONAL DATA, OBJECTIVES AND GROUNDS FOR WHICH HYDROENERGY GROUP LTD PROCESSES IT
“HYDROENERGE GROUP” Ltd. collects and processes your personal data in connection with the taking of steps for conclusion of contracts, their conclusion and execution, and in particular the following personal data in view of the following purposes:
- Data to receive an offer – names and email
Purpose for which data is collected – Making a connection with the user and sending a bid for the services we provide;
Reason for processing this personal data – Explicitly obtained consent from you as a customer; taking steps to sign a contract (sending a bid);
- Data needed to conclude a contract – names, PIN, address, telephone, email.
Purpose for which the data is collected: Full names, single citizenship number and address are part of the minimum content of each contract. In the event of a refusal to grant them, HYDROENERGE GROUP OOD will not be able to conclude a contract. In the process of signing the contract, an identity document may also be processed to verify the validity of the ID, which is intended to prevent any attempted fraud and / or misuse of personal data. In order to be able to execute the contracts we have to process the personal data of the persons with whom we concluded them. Otherwise, it will be impossible to comply with our contractual commitments. We process personal data whenever necessary to exercise our rights under concluded contracts as well as when necessary for the settlement of legal disputes. We process personal data where, under applicable law, we are obliged to provide information to competent authorities.
Reason for this personal data – fulfillment of the obligation of the administrator to provide the purchased service / good.
- Data for issuing an invoice for the purchase of services / goods offered by us – names, PIN, address, email;
Purpose for which we collect the data: we process these personal data to fulfill obligations arising from accounting and tax legislation – tax and accounting legislation in the Republic of Bulgaria requires that certain accounting and commercial information be created, including the storage of this information for a specified period , as well as any other information and documents relevant to taxation. In fulfilling this obligation, the relevant information and documents that contain personal data are kept for the periods provided for in the respective laws.
Reason for processing this personal data – Compliance with a legal obligation that applies to the company;
- Data to receive a newsletter – names and email
Goal for which data is collected – For sending a newsletter.
Reason for processing your personal data – your explicit consent
III. SHARING / TRANSFER OF PERSONAL DATA
Hidroenergie Group Ltd. does not share, sell, assign, trade or transfer personal information gathered by its clients.
There are exceptions when your personal information may be disclosed to third parties in the following way:
It may be transferred as an asset in connection with a merger or sale of a business either as part of our business or as part of a corporate reorganization or other changes in corporate governance.
It can be provided to service providers who assist us in delivering our goods – couriers, accountants. No provider may access personal data stored by HYDROENERGY GROUP OOD without the prior agreement of data confidentiality and which entitles HYDROENERGY GROUP OOD to verify compliance with the obligations assumed by the agreement. The collected personal information is transmitted only to our trusted partners, together with whom we carry out the organization and the provision of our products and services. Before any such data transmission, we check that these providers provide sufficient assurance that they apply appropriate technical and organizational measures in such a way that the processing complies with the requirements of the General Data Protection Regulation (Regulation (EC) 2016/679), the Law for the protection of personal data, the secondary legislation on its implementation, and our privacy policy, and to ensure the protection of data subject’s rights. In accordance with the principle of minimizing data that is being processed, these providers receive only the personal information they need to perform their functions.
Service providers are not allowed to retain general data for their own or for their own benefit, and to keep them for longer than is necessary to perform the specified service.
We share personal information with the vendor when we have your express permission or if there is another legitimate reason.
Lastly, personal data may be made available to public authorities (such as control bodies and their subdivisions, bodies for the detection and prevention of offenses and violations) only when provided for by law and under the conditions set out therein.
HYDROENERGY GROUP Ltd. does not transmit / share your personal data with administrators and processors in non-EU countries.
- TERM AND DURATION OF PERSONAL DATA PROCESSING BY HYDROENERGY GROUP OOD
HYDROENERGY GROUP Ltd. keeps your personal data received in order to provide you with our offer for the term of validity of the offer or for the period for which you have explicitly allowed us. After the expiration of the offer or the withdrawal of your consent, HYDROENERGY GROUP LTD takes the necessary care to erase and destroy all your data without undue delay or to anonymize them (ie to bring them in a form that does not reveal your personality ).
“HYDROENERGY GROUP” Ltd. keeps your personal data provided in connection with a contract with us for a period of 5 years after the execution of the contract for the purpose of protecting the legal interests of HYDROENERGY GROUP OOD in legal or administrative disputes such as the accounting documents shall be kept for the relevant statutory period.
HYDROENERGY GROUP LTD informs you if the period for storing the data needs to be extended in order to meet a statutory obligation or in view of the legitimate interests of the Administrator or otherwise.
- YOUR RIGHTS WITH REGARD TO PERSONAL DATA PROVIDED
- Right to information
You have the right at any time to request information about whether your personal data, the purposes for which it is processed, the categories of personal data processed, the recipients to whom the personal data are disclosed, the time limit for which it is stored, whether you have an automated claim decisions and profiling of data.
- Right of withdrawal
If you have agreed to use your data, you may withdraw it at any time by acting in the future without the need to state reasons.
Your request with withdrawal of your consent, you can send us:
– by email: office@hydroenergy.bg
- Right of rectification
If you find that your data stored by us is inaccurate, you can contact us to correct them.
- Right to delete data
You may request to delete your data without undue delay. We will erase them within a reasonable time as soon as we are satisfied that there are no other grounds for their processing / storage.
Once you delete your data, it is no longer possible to provide information.
- Right to Restrict Processing
In certain cases – for example, in the case of contesting the accuracy of the data, checking the grounds for the storage, etc., you have the right to request that we limit the processing of your personal data. During the limitation, we can only store the personal data and the other processing activities are only possible with your consent.
- Data portability
In the event of a request from you, we will transfer or transfer the data to you or another administrator in a structured, widely used and machine readable format. Direct data transfer is only possible if it is technically feasible.
- Right of objection
You may, at any time and without giving any reason to object to the processing of your personal data for the purposes of direct marketing, including profiling, and in cases where your data is processed on the basis of a public interest task, or the processing is necessary for the purposes of our legitimate interests.
- Right not to be the subject of a decision based solely on automated data processing, including profiling.
HIDROENERGE GROUP Ltd. does not carry out such data processing.
- Right to appeal
You have the right to file a complaint against the processing of your personal data before the competent control body (in Bulgaria – the Personal Data Protection Commission or the Court) if you believe that your data protection rights have been violated.
The Commission for Personal Data Protection
Sofia – 1592, “Prof. 2 Tsvetan Lazarov
Center for Information and Contacts – tel. 02 / 91-53-518
E-mail: kzld@cpdp.bg
Website: www.cpdp.bg
Contacts of “HYDROENERGY GROUP” Ltd. and data for the responsible data protection officer:
HYDROENERGY GROUP LTD
Sofia, 1415, 36, Okolovrasten pat St., fl. 3,
Katia Aleksandrova Georgieva – phone 02 / 90-55-080
Electronic mail: office@hydroenergy.bg
Website: www.hydroenergy.bg
Please note that when you contact us through the above email, the information you provide (your email, possibly your name and your phone number) is handled by us in order to answer your questions and resolve the problem. We undertake to delete the retained data in this regard, once processing is no longer required or will restrict the processing if there are legal obligations to store.