Privacy Policy

General

This instruction regulates the terms and conditions for keeping personal data registers, the minimum level of technical and organizational measures for their protection, as well as the exercise of control over the processing of personal data in GERA Ltd.

What is personal data?

Personal data within the meaning of Art. Article 4 (1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 shall mean any information relating to an identifiable natural or legal person (‘data subject’); identifiable natural person is a person who can be identified directly or indirectly by an identifier such as name, identification number, location data, online identifier, or one or more physical, physiological, genetic, mental , mental, economic, cultural or social identity of that individual.

Objectives and legal bases for the processing of personal data:

We process your credentials, traffic data, and other personal data to provide the products and services you have requested and which you use to respond to inquiries received through the contact or email form through the GERA website, as well as to perform our contractual and pre-contractual obligations and to benefit from the rights under the contracts concluded with you. Correct:
When executing a contract for:
• Identify a customer when: • signing a new or changing an existing contract for purchases and / or used services;
• Managing and executing your requests for products and services; performance of product and service contracts; • Providing information and clarifications on products and services;
• Preparation of an account / invoice for the used products / services; •
Service and response to customer complaints / inquiries / complaints;
• Technical assistance to access the website
• Product warranty and service;
• Processing by processors – assignment, reporting, acceptance, payment;
To fulfill statutory obligations, such as:
• providing information to the Commission for the Protection of Consumers or Third Parties, provided for in the Consumer Protection Act;
• Provision of information to the Commission for the protection of personal data in relation to obligations under the legislation on the protection of personal data – Personal Data Protection Act, Regulation (EC) 2016/679 of 27 April 2016, etc .;
• Obligations stipulated in the Accountancy Act and the Tax Insurance Procedure Code and other related normative acts in relation to the conduct of correct and lawful accounting;
• Providing information to the court and third parties, in proceedings before a court, in accordance with the requirements of procedural and substantive legal acts applicable to the proceedings;

What personal data we process
Depending on the specific purposes and reasons, we process the data below separately or in combination:
• three names, PIN or personal ID of a foreigner, address, telephone and / or e-mail address to contact you or a contact person you specify;
• Customer ID, code or other identifier created by us to identify subscribers / users;
• product or service number, customer number;
• emails, letters, information about your requests for troubleshooting, complaints, petitions, complaints;
• other feedback we receive from you;
• personal contact details – contact address, phone number and contact information (email, phone number) ………………………………………………………………………… ……………………….
• data about the terminal electronic communication device used, the type of the device, the operating system used, the IP address when visiting our website;

Processing of the personal data
The processing of personal data respects the following principles:
1. lawfulness, good faith and transparency – the data are processed in a lawful, conscientious and transparent manner with regard to the data subject;
2. limitation of objectives – data are collected for specific, explicit and legitimate purposes and not processed in a way inconsistent with these purposes;
3. minimizing data – only data necessary for the purposes for which they are processed are collected;
4. accuracy – the data must be accurate and kept up-to-date, taking all reasonable steps to timely erase or correct inaccurate personal data;
5. storage limitation – kept for a period no longer than is necessary for the purposes for which the personal data are processed;
6. integrity and confidentiality – processed in a way that guarantees their security and protection against unauthorized or unlawful processing or loss, destruction and damage .;
7. Accountability – the controller is responsible for observing the principles listed in point

Third-parties that access and process your personal information

• Competent authorities which, by virtue of a statutory instrument, have the power to require the provision of information, including personal data, such as a Bulgarian court or a court of another country, different supervisory / regulatory bodies – the Consumer Protection Commission, the Regulatory Committee the communications, the Commission for the Protection of Personal Data, bodies with powers to protect national security and public order;

Personal Data Administrator Personal data manager is GERA Ltd., UIC 117621354, with headquarters and management address: Rousse, Al. Hadjiruset “2, ent. 4, floor 2. ………………………………………………………………………………………….

Rights of individuals to process personal data pertaining to them
Any natural person whose personal data will be processed by the controller should be notified of:
1. the data identifying the controller;
2. the purposes of the processing of personal data and the legal basis for the processing;
3. the categories of personal data relating to the individual concerned;
4. the recipients or categories of recipients to whom the data may be disclosed;
5. the term of storage of the personal data;
6. information on the right of access and the right of rectification, erasure (the right to be forgotten) or limitation of the processing of the data collected, the right of objection and the right of portability under Regulation (EC) 2016/679 – data protection;
7. right of withdrawal of consent at any time when the processing of personal data is based on the consent of the person;
8. the right of appeal to a supervisory body – for the Republic of Bulgaria the Commission for the Protection of Personal Data;
9. the source of the data;
10. existence of automated decision making, including profiling. Right to appeal: If you believe that we are violating the applicable legal framework, please contact us to clarify the matter. Of course, you have the right to complain to the Commission for Personal Data Protection and to a regulatory body within the EU.

………………………………………………………………………………………….

“Clients”
The personal data of the individuals – clients shall be processed in the register in order to:
1. exercise of the rights and fulfillment of the obligations under the contracts concluded with them;
2. fulfillment of the statutory requirements of the Accountancy Act, the Law on Income Taxes of Natural Persons, the National Archival Fund Act, etc .;
3. use of data collected for the persons concerned for official purposes:
(a) for all activities relating to the existence, modification and termination of the contractual relationship; …………………………………………………………………………………………
c) to establish contact with the person by phone …………………………………………………………………………………………

Categories of personal data processed in the “Clients” registry In the “Clients”
the following categories of personal data are processed: physical identity: names and passports (Personal Identification Number, address, contact telephones ……………… .., etc.); …………………………………………………………………………………….

Provision of personal data to third parties Data from the register can be provided to state institutions in order to fulfill a statutory obligation (NSSI, NRA, MI, bodies of the judiciary). …………………………………………………………………………………………. In relation to the use of courier services – acceptance, transport and delivery and addressing of shipments to individuals, we provide the following data: three names, address, district, zip code and name of the settlement, mobile or fixed telephone.

Confirmed: …… / n / ………………. / manager /