Privacy policy

PRIVACY POLICY

GENERAL PROVISIONS

This privacy policy has been developed in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "Regulation (EU) 2016/679" or "GDPR").

We understand that your personal data and the protection of the information you share with us is extremely important. That is why our Privacy Policy describes how we process your data and what measures we take to protect it.

This policy applies to you if you provide us with personal data by telephone (by phone or SMS), in an online registration form, by mail or by courier, through social networks, on a corporate or promotional website, through a mobile application or otherwise. Our privacy policy is an expression of our desire to protect your personal data.

Information about the Data Controller

Article 1. (1)Olga Koleva is a data controller with:

Address: Sofia, Nadejda 3, bl. 313, ent. В, fl. 1, ap. 48

Phone: +359884045663

email:ok@olgakoleva.eu

(2) This policy aims to clarify and present information and settle the conditions for the exercise of the rights of individuals in connection with the protection of their personal data, which is processed by Olga Koleva in connection with her website: https://olgakoleva.eu/

(3) The policy aims to inform you about the activities involving the processing of your personal data, the purposes for which such data is processed, the data protection measures and guarantees, your rights and the way you can exercise them in accordance with the requirements of the GDPR and the relevant applicable legislation of the European Union and the Republic of Bulgaria.

(4) Pursuant to the Privacy Policy of Olga Koleva and the objectives of the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (PDPA), Olga Koleva processes your personal data in compliance with the following principles:

1. legality, good faith and transparency;

2. restriction of the purposes;

3. minimization of data;

4. accuracy;

5. restriction of storage;

6. integrity and confidentiality.

Information on the competent supervisory body

Art.2. In the event of a breach of your rights as stated above or under the applicable data protection legislation, you have the right to lodge a complaint with the Data Protection Commission as follows:

1. Name: Commission for Personal Data Protection

2. Headquarters and registered address: Sofia 1592, 2 "Prof. Tsvetan Lazarov” Blvd.

3. Mailing data: Sofia 1592, 2 "Prof. Tsvetan Lazarov” Blvd.

4. Phone: 02 915 3518

5. Email: kzld@government.bg, kzld@cpdp.bg

6. Website: www.cpdp.bg.

Art.3. For the purposes of this policy:

1. "Personal data" means any information relating to an identified or identifiable natural person, directly or indirectly, such as name, unique civil number, location data, online identifier or one or more features, specific to the physical, physiological, genetic, mental, intellectual, economic, cultural or social identity of that individual;

2. "Data subject" - a natural person who can be identified as a result of the processing of his personal data;

3. "Processing" means any operation or set of operations carried out with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmitting, distributing or otherwise making the data available, arranging or combining, restricting, deleting or destroying such data;

4. "Personal data processor" - is a natural or legal person, public authority, agency or other entity that processes personal data on behalf of Olga Koleva;

5. "Recipient" - means a natural or legal person, public authority, agency, or other entity to which Olga Koleva discloses personal data, whether being a third party or not. Public authorities which may receive personal data in the context of a specific investigation in accordance with the Union or Member-State law shall not be considered "recipients"; the processing of such data by those public authorities complies with the applicable data protection rules in accordance with the purposes of the processing;

6. "Consent of the data subject" means any freely expressed, specific, informed and unambiguous indication of the will of the data subject, by means of a statement or a clear confirmatory action expressing his consent to the processing of personal data relating to him;

7. "Data Breach" means a breach of security which results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data which is transmitted, stored or otherwise processed.

PERSONAL DATA

Art.4. In connection with our activity Olga Koleva processes personal data of the following categories of persons:

Visitors to our website;
Recipients of advertising messages;
Users of services.

Art.5. In order to establish and exercise your rights, Olga Koleva processes the following personal data:

1. Data about your identity - your name;

2. Your personal contact details - phone and e-mail address;

3. Other information: company, position, business sector, as well as any feedback you provide us by mail, telephone, email or messages on social networks;

4. Information about the device or devices you use or have used to access our site (eg., make and model of your device, operating system, browser, or IP address).

5. Details of the emails and other electronic messages you receive from us, including whether these messages have been opened and whether you have clicked on any of the links in them. We want to make sure that our messages are useful and important to you, so in case you don't open them and click on a link in them, we know we need to improve the information we send you.

6. Cookies, as well as other tracking devices

The so-called session (temporary) cookies are used to the extent necessary to ensure the safe and efficient operation of our website and its use. The storage of session cookies on end devices or user application software designed to view information resources (Web browsers) is entirely under the control of the user. The information related to cookies is stored by the server after HTTP sessions in the service logs no longer than the period required to complete the specific purpose being processed, or as provided by law.

7. We use Google Analytics as a monitoring tool (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies, which allow us to track the number of visitors to the website, their source and to analyze how often and how the content of the website is used. You can install an opt-out tool that prevents such information from being collected from your visit (https://tools.google.com/dlpage/gaoptout?hl=en)

8. Social media plug-ins

We use social media to promote the Olga Koleva's activities. Each social media platform has its own privacy policy and processes your personal data.

9.Facebook and Instagram

When you visit our website, Facebook (Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA) recognizes your profile and makes a direct connection between your browser and your Facebook and Instagram accounts. Thus, the Facebook platform receives information about your IP address from your visit to our website. For more information, you can find Facebook's privacy policy here: https://www.facebook.com/policy.php Other information that is processed by us and Facebook jointly is that provided to us in connection with our Facebook page. We have access to anonymous statistics on the activities that take place on our Facebook page, and we definitely cannot link or identify a specific profile through such data.

Art.6. (1)Olga Koleva doesnot collect or process personal data relating to the following:

1. reveal racial or ethnic origin;

2. reveal political, religious or philosophical beliefs, or membership in trade unions;

3. genetic and biometric data, health data or data on sexual life or sexual orientation.

(2) The personal data are collected by Olga Koleva from the persons to whom they refer.

(3) Olga Koleva does not perform automated decision making with your data.

(4) Olga Koleva does not process data for persons under 16 years of age, except with the explicit consent of their parents or representatives.

Art.7. Grounds for collecting, processing and storing your personal data

(1)Olga Koleva collects and processes your personal data based on the following:

1. You have agreed to the processing of your personal data for one or more specific purposes;

2. Processing is required for the performance of a contract to which you are a party or for taking steps at your request before concluding a contract between us;

(2)Olga Koleva is a data controller regarding your data as users of our services and user of our website: https://olgakoleva.eu/. Regarding the personal data that you process using our services, Olga Koleva acts as a data processor.

Art.8. Purposes for which we use the personal data you provide us:

1. To send you an answer to your inquiry sent through our website contact form;

2. To send you emails with news and suggestions;

3. To send you invitations to events we organize;

4. For statistical needs and analyzes;

5. To help us understand more about you as our user or customer, the products and / or services you use, the way you use them, and to provide you with better experience on our website;

6. To find ways to improve our products, services, applications or websites;

7. To create a profile on the site and ensure full functionality;

8. To subscribe for our articles published on the blog of our site;

9. To comment on products, services and our articles published on our blog.

RIGHTS OF INDIVIDUALS

Art.9. (1) As an individual whose data is processed by Olga Koleva, you have the following rights:

1. To receive information about your personal data being processed. You have the right to access your personal data that we process for the purposes set out above. If we process this data and receive a request from you (or from a third party authorized by you), we will provide this access free of charge. You also have the right to request a copy of your personal data that we process. Before providing access to the personal data to you or a person authorized by you, we may request proof of identity as well as details of your relationship with us or our partners, so that we can find the data that applies to you;

2. To request rectification of the data collected for you, if they are incorrect or have changed;

3. To request the deletion ("right to be forgotten") of the personal data collected for you, except in cases where Olga Koleva, processes your personal data in compliance with its obligations arising from the law. You have the right to request that we delete your personal data without undue delay if:

3a. the personal data are no longer necessary for the purposes for which they were collected;

3b. when you have withdrawn your consent;

3c. when you have objected to the processing, if it is illegal;

3d. where personal data must be deleted in order to comply with a legal obligation under the Union law or the law of a Member-State that applies to us as a personal data controller;

3e. when the personal data have been collected in connection with the offering of services to the information society.

Under certain conditions, we may refuse to delete your personal data in the cases provided by law.

4. To request a restriction on the processing of your personal data only for the purposes for which they were collected - in accordance with the requirements of the General Data Protection Regulation, the Personal Data Protection Act and their implementing acts (only in the cases provided for in the applicable regulations and insofar as this does not contradict our regulatory obligations for the processing of your personal data);

5. Right to portability of your personal data (only in the cases provided for in the applicable legislation and insofar as this does not contradict our regulatory obligations for the processing of your personal data);

6. To receive copies of the documents containing your personal data, after submitting a request;

7. You may object at any time to the processing of your personal data for the purposes of direct marketing carried out by Olga Koleva, by withdrawing your consent.

Art.10. (1) In case of violation of your rights under the General Data Protection Regulation, PDPA, you have the right at any time to file a complaint with the relevant supervisory body, namely the Commission for Personal Data Protection;

(2) You can appeal the actions and acts of Olga Koleva in court before the respective administrative court and before the Supreme Administrative Court.

Art.11. (1) The rights under art. 9 can be exercised by filling in a written "Request for the exercise of rights in relation to the protection of personal data" (the Request), which you can obtain from us upon request.

(2) The REQUEST can be sent personally or through your explicitly authorized proxy with a notarized power of attorney on paper in each of our offices, as well as electronically under the EDECSA. When the REQUEST is drawn up as an electronic document, it should be signed with a qualified electronic signature.

(3) If the REQUEST is submitted by an authorized person, you should attach to it the respective explicit power of attorney.

(4) In the cases where during the exercise of your rights under this chapter there is a possibility to disclose personal data for a third party, we will provide you with access only to the part of data that applies to you.

Art.12. (1) Within 30 (thirty days) from the receipt of your valid "REQUEST FOR EXERCISE OF RIGHTS IN CONNECTION WITH THE PROTECTION OF PERSONAL DATA", Olga Koleva, will provide you with written information in connection with our actions, such as:

1. In case you exercised the right of access to the personal data – we will provide you with information about: the purposes for which Olga Koleva processes your personal data; the categories of personal data it processes; the recipients or categories of recipients to whom your personal data are or will be disclosed, in particular recipients in third countries or international organizations - recipient to whom it provides data; where possible, the intended period for which your personal data will be stored and, if this is not possible, the criteria used to determine this period; the existence of the right to request from us the correction or deletion of personal data or the restriction of the processing of personal data relating to you, or to object to such processing, your right to appeal before the competent supervisory bodies; where your personal data has not been collected from you - any available information on its source, the existence of automated decision-making, including profiling, in accordance with the General Data Protection Regulation;

2. If you have exercised the right for deletion of your personal data - will delete your personal data without undue delay, provided that the prerequisites for exercising this right set out in the General Data Protection Regulation, the PDPA and the acts for their application are present and insofar as this does not contradict our legal obligations for the processing of your personal data;

3. If you have exercised the right to restrict the processing of your personal data – we will limit the processing of your personal data, in the cases provided for in the applicable regulations and insofar as this does not contradict our legal obligations to process your personal data without deleting them, and we will inform you before lifting the processing restriction.

4. If you have exercised the right to portability of your personal data – Olga Koleva will provide your personal data in a structured, widely used and machine-readable format and will transfer your data to another controller, in the cases provided for in the applicable regulations and insofar as this does not contradict our regulatory obligations for the processing of your personal data.

(2)Olga Koleva will inform you in writing of any refusal of access, deletion, right to restrict the processing of your personal data or request to exercise the right of portability, as well as the reasons for such refusal within the period under para. 1.

(3) When your personal data are deleted or their processing is restricted, Olga Koleva will notify their recipients, who are responsible for their respective deletion or restriction.

(4) Our obligation to provide the information under this article may be limited in whole or in part, taking into account your fundamental rights and legitimate interests and in the cases provided for by the applicable legal regulations.

(5)Olga Koleva has the right to extend the term under para 1 to 60 days, depending on the complexity and the number of the received requests in each individual case. Olga Koleva will notify you of any extension of the term, as well as the reasons for such extension of the term for response by us within 30 days from the receipt of your valid "REQUEST FOR EXERCISE OF RIGHTS RELATING TO PERSONAL DATA".

Art.13. (1) The right to request correction of your personal data can be exercised by filling in a written "REQUEST FOR CORRECTION OF PERSONAL DATA" (THE REQUEST), which we will provide upon request.

(2) The REQUEST can be sent personally or through a person explicitly authorized by you with a notarized power of attorney, on paper at our office, as well as electronically, based on the Electronic Document and Electronic Certification Services Act (EDECSA). When the REQUEST is drawn up as an electronic document, it should be signed with a qualified electronic signature.

(3) When submitting the REQUEST by an authorized person, you should attach to it the respective explicit power of attorney.

Art.14. (1) Within 30 (thirty days) from the receipt of your valid "REQUEST FOR CORRECTION OF PERSONAL DATA", Olga Koleva will correct without undue delay the inaccurate personal data related to you or will supplement your incomplete personal data.

(2)Olga Koleva will inform you in writing about any refusal to correct or supplement your personal data, as well as about the reasons for such refusal within the term under para 1.

(3) When your personal data is corrected or supplemented, Olga Koleva will notify its recipients, who are responsible for its respective correction or supplementation.

Art.15. (1) The right to object to the processing of your personal data for the purposes of direct marketing can be exercised by filling in a written "REQUEST FOR WITHDRAWAL OF THE CONSENT FOR THE PROCESSING OF PERSONAL DATA FOR THE PURPOSES OF THE DIRECT MARKETING" (The Request) which will be submitted to you upon request.

(2) The REQUEST can be sent personally or through your explicitly authorized proxy with a notarized power of attorney, on paper in each of our offices, as well as electronically, in accordance with the Electronic Document and Electronic Certification Services Act (EDECSA). When the REQUEST is drawn up as an electronic document, it should be signed with a qualified electronic signature.

(3) When submitting the Request through an authorized person, you should attach to it the respective explicit power of attorney.

Art.16.(1) Within 30 (thirty days) from the receipt of a valid "REQUEST FOR WITHDRAWAL OF CONSENT TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSES OF DIRECT MARKETING", Olga Koleva will the processing of personal provided by you for the purposes of direct marketing and will provide you with written information regarding these actions.

(2)Olga Koleva will inform you in writing about any refusal to respect the Request under para 1, as well as about the reasons for such refusal within the term under para 1.

(3) After Olga Koleva terminates the processing of the personal data provided by you, Olga Koleva will notify the recipients, who are responsible for the termination of their processing.

(5) Olga Koleva has the right to extend the term under para 1 to 60 days, depending on the complexity and the number of the received requests in each separate case. Olga Koleva will notify you of any extension of the term, as well as of the reasons for the extension of the term for providing response within 30 days from the receipt of your valid "REQUEST FOR WITHDRAWAL OF CONSENT FOR PROCESSING OF PERSONAL DATA FOR DIRECT MARKETING PURPOSES".

Term of storage of your personal data

Art.17. (1)Olga Koleva stores your personal data for a period not longer than the existence of your account on the website. After that, Olga Koleva takes the necessary steps to delete and destroy all your data without undue delay. In the general case, unless we specify otherwise, your data is stored for a period of 2 (two) calendar years from the date of its receipt.

(2) Olga Koleva notifies you in case the data retention period needs to be extended in order to fulfill the objectives, fulfill the contract, in view of the legitimate interests of Olga Koleva or for other reasons.

(3)Olga Koleva stores your data, provided on the basis of your consent, until its explicit withdrawal, and this does not affect the publications and comments made in order to preserve the semantic integrity of the comments.

(4)Olga Koleva stores the personal data, which it has to retain under the applicable legislation for the respective term, which may exceed the term of existence of your registration.

In case of personal data breach

Art. 18. (1) If Olga Koleva finds a breach of your personal data, which may pose a high risk to your rights and freedoms, we will notify you without undue delay of the breach and the measures taken or about to be taken.

(2) Olga Koleva is not obliged to notify you if:

1. it has taken appropriate technical and organizational protection measures with regard to the data affected by the security breach;

2. it has subsequently taken measures to ensure that the breach will not lead to a high risk to your rights;

3. such notification would require a disproportionate effort.

Persons to whom your personal data is provided

Art. 19.Olga Koleva does not transmit your personal data to third parties.

Art. 20. The controller does not transfer your data to third countries.

Data protection

Art. 21.Olga Koleva treats your personal data as strictly confidential. To protect them, a number of measures have been taken, including:

1. We restrict access to the premises in which we work, only to the people who must be there (for this purpose we use codes and access cards, passwords and other technologies related to restricting access to certain premises);

2. We also implement access control to our information technology systems using firewalls, identification number validation (ID), logical segmentation and / or physical separation of our systems and information;

3. We use methods such as encryption and pseudonymization of information;

4. We never ask you to send us your password;

5. We advise you never to enter an account number, password or other sensitive information in an email to us.

ADDITIONAL PROVISIONS

§1. This policy has been approved by Olga Koleva

§2. The General Data Protection Regulation, the Personal Data Protection Act and other legal regulations related to the activity of Olga Koleva shall apply to the issues not settled herein.

§3. Taking into account the current trends, this privacy policy may change. The revision date is indicated at the end of the document. Any changes to this Privacy Policy will be effective after their subsequent announcement.

Last updated: 28.02.2022. This policy has been prepared by theAdvocatus.bgteam.