“A G I ‐ B R E PARTICIPATIONS 3” EOOD, UIC 202342467, (“The Company”) with seat and address of management: 99, Tzarigradsko shosse, Slatina Municipal district, 1113, Sofia, phone number: +359 2 970 46 41 and email: email@example.com
The Company is owner of Mall Veliko Tarnovo Commercial Entertainment Center (“The Commercial Center”), with address 18, Oborishte Street, Veliko Tarnovo.
The Company being a personal data controller collects and process information about natural persons. Personal data are the information related to an identified or identifiable natural person. Personal data protection in the course of data processing is of foremost importance for the Company.
The present policy for personal data protection (“The Policy”) is part of “The rules and procedures for personal data protection” of the Company as it regulates the manner of processing and storage of personal data for compliance with the applicable legislation. Access to the full text of the rules, policies, instructions and registers can be gained at the registered office of the Company, from the Commercial Center’s administration or personal data processor, stated below.
The Company process personal data, collected in the course of managing the Commercial center (under relations with lessees, organizing advertising games and campaigns, inquiries by visitors of the Commercial center, relations with suppliers and subcontractors), as well as under signing of labor or mandate contracts with the employees/mandataries.
The rules of the applicable legislation for personal data protection are implemented by the Company whether data are processed electronically or on paper. For the compliance of the personal data processing with the applicable legislation, personal data are collected and used for a particular purpose, they are stored safely and the Company takes the necessary organizational and technical measures for preventing breach of the data security.
The Company process personal data for the following purposes:
Personal data are collected on paper or electronically. Prior to the collection or as of the moment of data receipt, the natural persons are notified for the provisions of the present Policy. The Company does not collect personal data of persons under the age of 16 years without the explicit consent of their parent/s.
Where the personal data are collected on the grounds of an explicit consent given by the data subject, the consent may be withdrawn in the manner in which the latter is given- by filling the sample for respond on the present web page with free-text request for termination of personal data processing for the purposes specified by the data subject (provided that the consent had been given via internet page), or by filling a sample for consent withdraw, which sample may be obtained from the Commercial center’s administrationО, provided that the consent had been given via written statement of consent.
The consent for processing of personal data (names, e-mail, etc.) disclosed in the contact form on the website shall be documented by pressing a check box in the contact form, as well as the user shall declare by pressing a check box that the latter is familiar with the data protection rules, the user is informed about the rights regarding the personal data protection and that the latter is an adult. The Company shall keep the data subjects’ consents for the processing of personal data in electronic form.
Each click in the web browser by the person transfers a particular information, stored by the Company in log files. This information is kept for short term for the purpose of detection of irregularities, as well as for security reasons. Log files, which are supported for evidentiary purpose, shall not be erased until the particular accident (an attempt for or breach of data security) is fully resolved, as they may be handed over to the investigative bodies. The Log files are used for the purpose of analytics, as well (without IP address or with shortened one).In the log files the following information is stored:
“Cookies” are small text files that are saved on the computer used by the data subject, when the latter visits a web site. If you have access to this web site at any other time, the browser sends back the content of the “cookies” to the respective offeror, thus allows re-identification of the device.
When the web sites of the Company are visited, the data subject is asked in the cookie layer pop up whether to allow the “cookies”, which are in the web site, or to block/deactivate them in the settings.
In the event that “cookies” are blocked, an opt out “cookie” is saved on the browser. This “cookie” serves only for the purpose of activating the objection of the data subject. Blocking/deactivating cookies may forbid individual features on the Company’s web site.
The Company uses the following “cookies”:
The Company collects statistical information on the use of its web sites in order to make them more accessible, as well as for market research. The profiles, created by these tools using analytical cookies or log files assessment, do not contain personal data. The tools either do not use users’ IP address, or make them concise immediately after their collection.
Tool providers process the data only in the capacity of personal data processors in accordance with the Company’s instructions, but not for their own purposes.
Provider of such tool is:
Google Analytics is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The Company uses Google Analytics along with the provided by Google additional function for anonymization of IP addresses.
Data subject have right to objection against collection and processing of his/her personal data by downloading and installing browser plug-in from the following link:
The web sites of the Company can contain links to web sites of third persons/legal entities.In case that data subject clicks on the link, the Company cannot influence the processing of personal data, which are sent by the data subject to the third person/legal entity, thereby the Company takes no responsibility for the processing of personal data by third persons/legal entities.
Personal data can be transferred to personal data processor in relation to accounting and legal service of the Company, data hosting, as well as for activities concerning security of the Company. All service providers are obliged to maintain their activities in strict confidence, to comply with the applicable legislation, as well as to apply the rules and the policies of the Company for personal data protection.
The Company does not transfer personal data to countries other than the Member States of the European Union.
The Company provides information to the data subjects in concise, easy to understand and easy accessible form, using clear and plain language. The Company provides information to the persons in written or other form, including electronically.
The Company provides the persons with free information about the actions undertaken in relation to their requests within one month as of the receipt of the requests. If necessary, this period may be extended by two months, taking into account the complexity and the number of requests. The Company shall notify the person of any such extension within one month as of the receipt of the request, indicating the reasons for the delay.
Should the Company refuse to act on the request, the latter shall notify the person within one month as of the receiving the request for the reasons of the delay, as well as for his/her right to complaint to the Commission of Personal Data Protection.
Where the requests of the person are manifestly unfounded or excessive, in particular due to their repetitive character, the Company may charge a fee upon the costs of providing information or communication or undertaking the requested actions.
The rights of the data subject are, as follows:
Data subject has the right of request to the Company for rectification of inaccurate personal data, related to him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
The Data subject has the right of request for his/her personal data erasure, unless the data erasure might breach rights and legitimate interests of other persons or legal entities, including the Company, or a statutory obligation prescribes the data storage.
Where the Company has made the personal data public and is obliged to erase them, the Company undertakes reasonable steps, including technical measures, to notify the personal data controllers and processors that the data subject concerned has made a request for erasure of all links, copies and replica of his/her personal data by those data controllers.
The objection to the direct marketing is unconditional and shall be applied by the Company without undue delay.
If personal data are processed only on the grounds of data subject’s consent, the latter have the right to withdraw his/her consent immediately. The lawfulness of the data processing prior to the withdraw remains unchanged.
The data subjects have the right to receive the personal data concerning him or her, which he or she has provided to the Company, in a structured, commonly used and machine-readable format or if it is technically feasible to request the Company to transmit these data to third persons/legal entities.
Data subject have the right to lodge a complaint before the Commission of Personal Data Protection at: Sofia 1592, 2 Professor Tsvetan Lazarov blvd., phone number: 02/91-53-518, Email: firstname.lastname@example.org.
The accounting and business information, as well as all other documents relevant to taxation and compulsory social insurance contributions are stored by the Company within the following terms:
Following the data storage expiry, the data shall be erased without undue delay by destruction of papers via shredding, as to the technical devices data shall be erased by deleting the relevant files from them.
The company reserves its right to change the security measures for personal data protection, if this is necessary due to technical development for the purpose of better data protection. The Company shall amend the policy of personal data protection accordingly and shall update the current version of notification related to personal data protection.