• Home »
  • Notification regarding the personal data processing of the visitors of the 'zografov and son' ltd website
Notification regarding the personal data processing of the visitors of the 'zografov and son' ltd website

Effective from 25 May 2018, Regulation (EU) 2016/679 of 27 April 2016 of the European Parliament and the Council shall be applied on the protection of individuals with regard to the processing of their personal data and on the free movement of such data and repealing Directive 95/46/EC ('General Data Protection Regulation', GDPR), which shall significantly change the existing legal data protection regime.

In their capacity as a personal data controller, ZOGRAFOV shall process personal data in accordance with the GDPR and its implementation acts, as well as with the current national legislation and internal rules, procedures, policies and data protection impact assessments. This notification has been drawn up by ZOGRAFOV specifically for the visitors of the ZOGRAFOV website, in accordance with Art. 13 of the GDPR and contains information about:

  • the controller responsible for the personal data processing
  • the categories of personal data processed
  • the conditions under which personal data shall be processed
  • the purposes and legal grounds for the processing
  • storage periods and data security measures applied
  • the rights of the clients as data subjects within the meaning of GDPR,
  • as well as in which cases and in what order we shall disclose your data to third parties.

 

WHO SHALL BE RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

 

The responsibility for the processing of your personal data shall lie with:

'ZOGRAFOV & SON' OOD, UIC: 202988840, seat and registered address: 428A Tsar Boris III Blvd, Sofia, represented by Lyubomir Zografov, herein referred to as ZOGRAFOV.

In the event that you wish to receive more information or a copy of the archive with your personal data processed by ZOGRAFOV or to exercise your rights under the GDPR, as well as if you suspect that your data is being used in an unregulated manner, you can email us at: office@zografovart.com

 

WHY SHALL WE COLLECT YOUR DATA?

 

NEXT BASKET shall process the personal data of the visitors to the Website (hereinafter collectively referred to as 'the data subjects'), in order to identify them, to maintain contact with them, to allow interaction by the data subjects with the corporate profiles of ZOGRAFOV in the various social networks, to send marketing messages, newsletters, etc., as well as to fulfil the legal obligations of ZOGRAFOV, in their capacity as the controller of these personal data.

 

WHAT KIND OF DATA SHALL WE COLLECT?

 

ZOGRAFOV shall process the following categories of personal data for you:  If you do not order anything from ZOGRAFOV (detailed information here), when you visit our website, we shall collect the following personal data for you: email, in cases where you subscribe to receive advertising or informative messages from us, as well as information proving the fact of your subscription (log files - IP address; time when the subscription statement was made); information technologically necessary for the functioning of the Website (date and time of access; IP address from which the connection is made; server and system logs; logs for making legal statements); any other information constituting personal data collected or created in connection with the processing. In connection with the management and maintenance of the Website, ZOGRAFOV may use 'cookies' and other similar technologies, for which you can find more information here.

 

ON WHAT LEGAL GROUNDS SHALL WE PROCESS YOUR DATA?

 

In accordance with the GDPR, ZOGRAFOV shall process personal data only with a valid legal basis. ZOGRAFOV shall process your data on the following legal grounds:

  • Data processing shall also be necessary to protect the rights and interests of ZOGRAFOV, as a party to a correspondence, for example in the event of a legal dispute.
  • The consent of the individual.

 

WHAT KIND OF MEASURES SHALL WE TAKE TO PROTECT THE DATA COLLECTED?

 

The protection and security of your data is important to us. In order to prevent the loss, misuse or unauthorised access to your data, we shall apply all reasonable measures and means of protection, including providing for an obligation of confidentiality from all ZOGRAFOV's employees and contractors, implementing technical measures to protect the computers and systems through which personal data is processed, as well as conducting data protection training of our employees. If you suspect any kind of violation, please contact us immediately using the contact details provided.

 

HOW LONG SHALL WE STORE YOUR DATA FOR?

 

ZOGRAFOV shall store the personal data related to the data subjects' visits to the Website and corporate social networks for a period not longer than necessary and/or due according to the requirements of the applicable law and the specifics of the relevant correspondence. Except when the storage of the data is not necessary for the fulfilment of obligations stipulated by the legislation applicable to our activity, the data about the persons shall be stored for a period of 1 (one) year, counted from the termination of the relevant interaction.

 

WHAT RIGHTS SHALL YOU HAVE WHEN YOUR DATA IS PROCESSED BY US?

 

The GDPR provides a number of options for the protection of individuals in connection with the collection and processing of their data, and namely:

  • right to information about the ways and timing of the processing of your data and the types of data processed, incl. a copy of the data we store.
  • right to object to the activities carried out based on the legitimate interest of the company; if the objection is upheld, the activities shall be suspended.
  • right to rectification of inaccurate data about you, reflected in the documents stored by ZOGRAFOV;
  • right to request 'to be forgotten' when the storage period has expired and the processing is no longer necessary or is initially unlawful.
  • regardless of the exercise of the above rights, you shall have the right to lodge a complaint with the supervisory authority (see more below).

 

HOW SHALL WE SHARE YOUR DATA WITH THIRD PARTIES?

 

We may provide your data to the following third parties:

  • competent state authorities upon inspection or when required by applicable law.
  • subcontractors of ZOGRAFOV, as well as accountants, lawyers or other consultants.
  • In the event of team changes, mergers or acquisitions, your data may be shared with the new partner(s) and consultant(s), for which you shall be notified.

In any event, your data shall not be shared with persons located outside the EEA (EU, Norway, Iceland and Liechtenstein), unless the same is expressly permitted by local law and adequate safeguards are in place.

 

HOW CAN YOU CONTACT THE COMPETENT SUPERVISORY AUTHORITY?

 

Regardless of the above, in case of complaints, you shall have the right to contact the Personal Data Protection Commission (PDPC):

  • in person at: 2 Prof. Tsvetan Lazarov Blvd, Sofia
  • by mail: 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592
  • via fax: 029153525
  • Email: kzld@cpdp.bg
  • Via the website of the Personal Data Protection Commission: https://www.cpdp.bg/.