NEOPOLIS LTD.
I. GENERAL INFORMATION
As an administrator of personal data “NEOPOLIS” Ltd. (“Neopolis” or “the Company”) strictly adheres to the laws and regulatory provisions on the collection and processing of personal data. The satisfaction of our customers in all its aspects is a priority for us, especially when it comes to your data. Therefore, we consider our duty to exercise due care in the processing of your personal data and to take all possible measures to protect them from illegal actions.
We hereby provide you with information about the processing of Your personal data, rights related to the protection of such data, and provide you with information on/under art. 13 and art. 14 of Regulation (EC) 2016/679 of the EUROPEAN PARLIAMENT and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Regulation on data protection ).
Our goal is through recognized standards and high-tech solutions to provide innovative and reliable solutions to our customers, as well as protecting the information and data that You trust us.
II. DETAILS ABOUT THE ADMINISTRATOR
„Neopolis“ Ltd, VAT: BG102909436
Ahtopol, Veleka str. 11
Website: www.neopolis.bg
III. PURPOSES FOR WHICH WE COLLECT AND PROCESS YOUR DATA
In the course of carrying out our business, we collect and process data for the following main purposes:
A.Selection and management of human resources
B.For the conclusion and implementation of contracts with our partners and suppliers
C.On the conclusion and implementation of contracts and provision of services commissioned by our customers
D.For marketing activities
A.Selection and management of human resources
Selection of human resources
We collect and process data necessary for the selection of staff, if You apply for a job with us. Usually this is data and information which you assume that you wish to provide us with.Such data is concerning your education, professional experience, as well as hobbies, interests, if You consider it necessary.
We store the data collected for a period of up to 6 months from the completion of the selection procedure you participate in. In case we would like to keep your data for a longer period (for a possible future need in the presence of a vacant position), we will ask for your explicit consent at the time of the selection, and will inform you of the storage period.
In case during the selection procedure you have provided us with copies or originals of certain documents, we store the latter for a period of up to 6 months and then we destroy them. You have the right to request within that period to bring them back to you.
Human resources management
In the common case, the data to be collected and stored for employees of Neopolis are those referred to in the Bulgarian labour and employment law. This also includes the processing of special categories of data such as health data. In certain cases, we may collect and process data for our legitimate interest - for example, security and property management.Time limits for storage, measures for their protection, as well as other important details concerning the data of employees are detailed in the accessible for each of our employees Internal Privacy Notice.
B.Conclusion and performance of contracts with our partners and suppliers
In case you are a partner or supplier, and in connection with the creation and development of our business relationship, we shall collect certain information from you. Within this activity, the data is limited to identifying information, contact information, information concerning your employees we work with. These are usually names, personal ID number (if required for the particular purpose), address and telephone (e-mail).
The data is stored for a period not exceeding the maximum limitation period as of the end of the performance of a certain contract, in order to protect both your and our interests.
C.Conclusion and implementation of contracts and provision of services commissioned by the side of our customers
In the performance of the contract which we made to you, and to take steps before the conclusion of the contract, we collect and process most of all identifiable information and contact details. This can be your name, social security number, address, telephone number (e-mail).
If we assign the performance of a particular service to you, we collect the data required by law, so that the service assigned to be valid – for example, in the case of authorization by your side, you are collecting the data necessary for the preparation and any notary certified power-of-attorney.
Such data is collected and processed only for the purpose of fulfilling the object of the contract, which includes, but is not limited to, sending notices about implementation, notices of any important changes occurred in the process of implementing the contract, and to protect both Your and our rights, if necessary.
The data is stored for a period not exceeding the maximum limitation period as of the end of the performance of a certain contract, in order to protect both your and our interests.
D.For marketing activities
If you are already in the role of a customer, supplier or partner, in this case within our legitimate interest, it is possible to contact you via email in order to provide you information about our new projects and/ or services. In the present case, our interest is connected to our right and the development efforts of our products and services.
In case you do not want to receive letters containing the afore information, you can always object (opt-out of) the receiving of marketing information by sending us a short e-mail.
IV. REASONS FOR PROCESSING AND CONSENT
We collect and process data from you only in accordance with the requirement of lawfulness and fairness.
In general, we collect and process your data on one of the following legal grounds:
- within the framework of our relations or pre-contractual information in order to make and fulfil certain contract;
- on a legal basis;
- due to our legitimate interest, as the latter is connected with the development of our activities, management and protection of property.
Considering the business activity of our company and data processing activities, consent appears to а ground for data processing which is applicable in limited situations.
In any case and in case that for the performance of a certain activity we need your consent for data collection and processing, we will inform you and will strictly require the receipt of such consent.
Automated solutions and profiling
We do not perform automated activities, including decision-making and profiling.
V. SOURCES OF INFORMATION
We collect the data we process directly from you or such data is provided by your representative before entering into contractual relationship with you, as well as in the course of our relationship.
We also process information we have obtained from publicly available sources (such as the records kept by the Registry Agency), media, published official lists of persons subject to penalty action, etc.
VI. DATA SHARING
Neopolis shares your data only with individuals/ bodies with whom we are legally obliged to share them and only after these authorities have duly authorized that they have the respective powers.
Besides State bodies and institutions, there is a possibility for persons who provide Neopolis with certain services such as, for example, maintenance of computer systems, to access your data. These providers/individuals are carefully selected and they, like us, have the same obligations in order to protect your privacy.
Neopolis does not perform data transfer outside the European Union.
VII. YOUR RIGHTS AS A SUBJECT OF DATA PROCESSING
Our company provides with care and attention the personal data and complies with all your rights guaranteed by the applicable legislation.
Under the legislation, you have:
- the right to information whether we process your personal data (including information about personal data which is being processed) as well as any available information with regard to the source of the data, unless it is a secret protected by law;
- the right of access;
- the right to request to correct any inaccuracies in your personal data;
- the right to delete your personal data;
- the right to request a restriction of the processing of your personal data for a certain period of time;
- the right to oppose the data processing;
- the right to data portability.
Exercising of some of these rights depends on the conditions of processing of the data itself. On this regard, it would not be possible for us to delete your data in case the time limit for storage has not expired.
In any case, we are committed to returning feedback to you on any request within no more than one month. If an extension is required, we will contact you further and give you the reason for the extension, which will not be longer than two months.
VIII. RIGHT OF COMPLAINT AND CONTACT DETAILS WITH THE CPDP
In the event you consider that our company violates your rights, you can contact us in order to discuss the matter at any time.
Despite the latter, you have the right to submit a complaint to the supervisory body - the Commission for personal data protection (CPDP).
IX. ADDITIONAL INFORMATION
Am I obliged to provide personal data?
Within our business relations you are incumbent to provide the personal data required for the initiation, implementation and termination of the relationship with Neopolis and for the performance of contractual obligations or applicable legal requirements.
In the event that you do not provide the necessary data and documents, we will not be able to enter into a contractual relationship with you or to continue such relations that have been already started.
This policy shall be revised and updated by us on a regular basis, in order to be maximally clear, accurate and transparent and to cover newly emerging changes (if necessary).
