Privacy policy

Policy for confidentiality and protection of personal data collected and processed during the performance of ET KASIOPES-Georgi Stefanov activities

I. INTRODUCTION

ET "KASIOPES - Georgi Stefanov", EIK 814122118, with management address Pavlikeni 5200, Buzludzha Street No 20 ("CASIOPES"/"we"/"us") perform services and production according to our subject of activity on the territory of the whole country.

We have entered into partnership agreements with individual companies as our distributors.

If necessary, we use the services of subcontractors in order to carry out our activities.

II. CONCEPTS

​1. PERSONAL DATA
Is any information relating to an identified natural person or to an identifiable natural person - directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or by one or more characteristics specific to the physical, physiological, genetic, psychic, mental, economic, cultural or social identity of that natural person. In other words, it's any information that can identify you, such as your names, Social Security number (SIN), email, phone, and the like.

2. SUBJECT OF THE PERSONAL DATA
These are you, the users of our services, as well as other individuals specified below in this policy with whom we interact or who interact with us in connection with our services or for any other reason.

3. PROCESSING OF PERSONAL DATA
This is any action we take or may take with your personal data, including but not limited to its collection, storage, analysis or destruction.

4. ADMINISTRATOR OF PERSONAL DATA
Regarding the services we offer it is us, KASSIOPES. We determine the purpose of processing your data, on one of the grounds provided for by law. We also determine the means by which this processing takes place – for example, the creation of standards and work instructions, the technical infrastructure and applications with which the processing takes place. Obligations regarding the security and protection of your personal data arise for us.

5. PERSONAL DATA PROCESSOR
This is a third party that processes your personal data on our behalf, where KASIOPES has strictly determined the purpose of the processing, the means by which it takes place and checked whether the person meets the requirements of the General Regulation on the Protection and Security of Personal Data ( General Data Protection Regulation - "GDPR"). Such a processor is, for example, our distributor in your installation area, to whom we will transfer your order.

III. PURPOSE

We are obliged to protect the privacy and ensure the security of the personal data of visitors and users of our services. This privacy and data protection policy aims to present in a clear and understandable way information about the processing of your personal data by us, in accordance with Regulation 2016/679 (General Data Protection Regulation Regulation -"GDPR") and the applicable legislation for the protection of personal data.

IV. TYPES OF PERSONAL DATA

The personal data we collect and process is determined by the nature of the different types of services we provide and the way you interact with us.

We collect and process the following personal data:

VOICE DATA
– when you visit a KASIOPES office or contact us by phone, conversations are recorded and stored temporarily, for security purposes and to improve the quality of our service;

PICTURES OF PEOPLE
– when you visit a KASIOPES site, your image is recorded and stored temporarily, for security purposes and to improve the quality of service.;

SPECIFIC IDENTIFIERS
– name, address, national identity number (EUN), phone number, e-mail; ID data. We need this data to identify you, including when you use our services remotely, to perform the requested service, to compile the necessary documents related to the execution of your order, to contact you at any time, if this is necessary for the successful, high-quality and timely performance of the assignment, to answer your inquiries, to consider your complaints and other requests; to draw up an accounting or other document, where the legislation requires the indication of a unique social security number (SIN) or other data from the client's identity document. In some cases, you may need to show an employee of ours an identity document to verify that you are indeed the person who is to receive the relevant service.;

BANK ACCOUNT DETAILS and OTHER PAYMENT DETAILS
– we collect and process such data when the service or the legislation applicable to our activity requires it;

DATA FOR CORRESPONDENCE WITH US
– when you send us inquiries, requests, signals, complaints, complaints or other correspondence, or otherwise come into contact with KASIOPES, we store and process this information, as well as information about the status of the correspondence and the final result of this processing. Correspondence may contain personal data that you choose to include in it and that may relate to you or third parties.

We process personal data for the following data subjects:

• individuals – customers of KASIOPES to whom we provide our services;
• third parties - for the purposes of providing our services, it is sometimes necessary to receive from you data of third parties - We cannot control how you obtained this data and what your relationship is with the third parties whose data you provide to us. It is your responsibility to ensure that this data is held by you and provided to us in accordance with applicable laws. In addition, you undertake to familiarize the persons whose data you provide us with the contents of this policy;
• individuals, who send inquiries, requests, reports, complaints or other correspondence to KASIOPES or otherwise come into contact with us (whether in a personal capacity or on behalf of another person);

 

If you are acting on behalf of a legal entity, we will process the data described above to the extent necessary to provide the relevant service, as well as information on which legal entity you are acting on behalf of and in what capacity (for example, legal representative, attorney, employee and similar ones).

V. WHAT WE USE YOUR PERSONAL DATA FOR

We process your personal data for the following purposes and on the following legal grounds:

1. To comply with our legal obligations, we process your data for the following purposes:

• Financial and accounting activities in connection with the fulfillment of tax, accounting and other legal obligations;
• Handling complaints in relation to the services we provide;
• Fulfillment of obligations under the anti-money laundering legislation;
• Other activities related to the fulfillment of other legal obligations of KASIOPES;
• Storage, provision and reporting of information to the competent public authorities;
• Responding to requests and assisting in inspections by the competent authorities.

 

2. On the basis of the contract concluded with you, we process your data for the purposes of providing services requested by you.
The personal data you provide in connection with our services is necessary to respond to your need or requested service that we provide. In order to provide quality services, we need your identification data, the scope of which varies depending on the type of service requested and the legal requirements applicable to it. The processing of your personal data in these cases will be necessary, regardless of whether we provide the service to you in person at a CASIOPES facility, through our website or through other software providing our services.

3. The purposes for which we require your consent are specified in the relevant consent form (for example, for marketing activities).​

VI. WHAT HAPPENS IF YOU DON'T PROVIDE US WITH YOUR DATA

The provision of some of the above categories of data is a requirement necessary for the conclusion of a contract or, accordingly, is a contractual requirement necessary for the existence and performance of the contract for the provision of our services. Failure or refusal to provide the minimum data required to enter into the contract may result in our inability to enter into a contract with you and provide you with the service you have requested.

VII. WHICH THIRD PARTIES CAN ACCESS YOUR PERSONAL DATA AND FOR WHAT PURPOSE

To achieve the purposes set out in this policy, your personal data may be disclosed by us to:

• Public bodies such as the Ministry of Foreign Affairs (MIA), the National Security Agency (DANS), the Prosecutor's Office, the Court, the National Revenue Agency (NAA), the Customs Agency;
• Auditors.
• Our trusted suppliers, subcontractors and partners as necessary to provide our services to you and to ensure additional security and quality of our services. The transfer of data to such persons is only to the extent and volume necessary to provide the relevant service. Relations with such persons are regulated in accordance with the requirements of the applicable legislation for the protection of personal data. When working with subcontractors and suppliers who process personal data on our behalf and on our behalf ("personal data processors" within the meaning of the General Data Protection Regulation - "GDPR") we require from that our instructions are strictly followed, and that the processing is in accordance with this policy.

 

The following recipients, if this is necessary to protect the rights or legitimate interests of CASIOPES or third parties such as our employees, managers, partners and the like:

• public bodies;
• public and private bailiffs;
• lawyers;
• recipients of receivables transferred by KASIOPES (assignees);
• notaries (e.g. for delivery of notarial invitations).

 

Where the processing of your data is based on consent, the specific recipients/categories of recipients of your data are shown in the specific consent form.

Apart from the above, personal data can be disclosed by KASIOPES only in other cases provided by law.

VIII. RIGHTS OF THE PERSONAL DATA SUBJECT

You, as a data subject, have rights in relation to their processing by us in accordance with the General Data Protection Regulation (GDPR) and the applicable legislation on the protection of personal data. KASIOPES shall consider and respond to requests to exercise these rights without delay, within up to 30 days of their submission.
Your right to be informed about the processing of your data, including but not limited to its purpose, term and basis, about the recipients and categories of recipients of your personal data, about the rights you have under the General Regulation on the Protection and Security of Personal Data ( General Data Protection Regulation -"GDPR") and others is ensured through this policy, which aims to inform you about this processing.

Information about what data we collect and process when you interact with us through our website www.kasiopes.com is contained in the Cookies page at https://www.kasiopes.com (available at https://www.kasiopes.com/biskvitki).

Pursuant to the General Data Protection Regulation (GDPR) and applicable data protection legislation, you have the right to:

• access – the right to receive confirmation as to whether your personal data is being processed, as well as to access it and information about its processing and your rights in this regard;
• correction - the right to request the correction or completion of your personal data if it is inaccurate or incomplete;
• deletion - the right to request the deletion of your personal data, if there are grounds for this provided for in the General Data Protection Regulation (GDPR);
• restriction of processing - the possibility to limit the processing of your personal data, if there are grounds for this provided for in the General Data Protection Regulation (GDPR);
• notification to third parties – require us to notify the third parties to whom your personal data has been disclosed of any rectification, deletion or restriction of the processing of your personal data unless this is impossible or requires a disproportionately large effort on our part;
• data portability – to receive the personal data that you have provided to us and that relate to you in a structured, widely used and machine-readable format and to transfer this data to another controller without hindrance on our part. The right to data portability applies when the following two conditions are simultaneously met: (1) the processing is based on consent or a contractual obligation; and (2) the processing is performed in an automated manner. If technically feasible, you have the right to obtain a direct transfer of personal data from us to another controller. The right to data portability can be exercised in a way that does not adversely affect the rights and freedoms of others.
• objection - the right at any time and on grounds related to your specific situation, to object to the processing of your personal data, which is based on public interest, exercise of official authority or the legitimate interests of KASIOPES or a third party. In the event that such an objection is received, we will consider your request and, if justified, comply with it. If we believe that there are compelling legal grounds for the processing or that it is necessary for the establishment, exercise or defense of legal claims, we will inform you of this. Right not to be subject to an automated decision based solely on automated processing (i.e. processing without human intervention), including profiling, which gives rise to legal consequences for you or similarly affects you to a significant extent unless the provided in the General Regulation for the protection and security of personal data (General Data Protection Regulation - "GDPR") grounds for this and appropriate guarantees are provided for the protection of your rights, freedoms and legitimate interests. We do not use such technologies in the processing of personal data subject to this policy.
• withdrawal of consent – where the processing of your personal data is based on your consent, you have the right to withdraw it at any time. Such withdrawal does not affect the lawfulness of the processing based on the consent given until the time of its withdrawal.

 

You can exercise your rights related to the protection of your personal data by sending a corresponding written request (including by electronic means) to the Data Protection Officer (DPO) of CASIOPES in accordance with the procedure provided for in the applicable legislation.

IX. CHANGES IN THE PRIVACY AND PROTECTION OF PERSONAL DATA POLICY

KASIOPES reserves the right to change this privacy and personal data protection policy, and users can familiarize themselves with any change through the website https://www.kasiopes.com