INTRODUCTION

RSGARCH EOOD (“RSGARCH”) considers the importance of the confidentiality and protection of your personal data processed during and on the occasion of the performance of the services provided by us and is committed to these personal data in compliance with applicable legal requirements and established standards and principles, in full in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC ( General Data Protection Regulation), Bulgarian legislation and good practices. With this Privacy Policy (the "Policy"), we want to let you know how we collect, use, transfer and protect your personal data when you interact with us, including through our website or through its mobile version. This Policy may be periodically updated to reflect any changes to the way we process your personal data or changes in the legal requirements for the collection, processing and storage of your personal data. In case of such changes, we publish the revised version of the Policy on our website and therefore, we kindly ask you to check its content periodically.

If you have any questions about the Policy, you can contact us by sending an inquiry by email or by calling us at:

ABOUT US

RSGARCH is a commercial company registered in the Commercial Register at the Registration Agency with EIC ................, with headquarters and management address in the city of Sofia, ....... ......... and website: www.rsgarch.com. RSGARCH is engaged in: construction design, design services in the field of structural planning and investment design, pre-investment studies, copyright supervision during construction, as well as any other activity not prohibited by law.

RSGARCH is a personal data controller within the meaning of the General Data Protection Regulation and the Personal Data Protection Act.

WHAT IS PERSONAL DATA?

According to the General Data Protection Regulation, personal data is any information relating to an identified natural person or an identifiable natural person ("data subject"); a natural person who can be identified, directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or by one or more characteristics specific to the physical, physiological, genetic, mental, mental, economic , the cultural or social identity of that natural person.

Data that cannot be linked or associated with a specific natural person is not "personal data".

WHAT PERSONAL DATA DO WE COLLECT AND WHY?

The personal data we process includes:

• Basic information, such as your name (including prefix), the organization you represent or work for, and the job title you hold.
• Contact information, such as postal address, email address, telephone number, IP address.
• Technical information, such as data that is generated as a result of the use of our website or an application integrated into it (application, plug-in, etc.), as well as information related to materials and correspondence that we receive from you or send to you by electronic path.
• Information related to business meetings and information you provide to us in connection with your participation in business seminars, conferences and other similar events of a commercial nature organized by us or any of our related businesses.
• Other personal data that you have provided to us or that is provided to us on your behalf, or that is generated in connection with the preparation and execution of the order that you have placed with us, such as order or payment history.

The methods of collecting personal data that RSGARCH EOOD uses are as follows:

1. Personal data that you provide to us directly

Some of the personal data we collect and process is provided to us directly by you (e.g. when you register on or use one of the electronic pages operated by us or contact us by phone or online for the purpose of finding a job or to obtain information about the goods and services offered by us or about the status of the fulfillment of your order).

The personal data you provide directly to us in particular includes:

• Identification data, such as your name, date of birth, permanent address, delivery or correspondence address, telephone number and e-mail address, password and username, in cases where you register your own customer profile on any of the electronic pages we operate ( insofar as the relevant website supports such functionality);
• In some cases, the personal data you provide to us may include age, gender, interests or industry membership;
• Personal data, which it is contained in an electronic communication you have sent to us, such as the data contained in an email message addressed to us, our employee or sales representative;
• Data created by you in the context of placing and executing orders that you have placed using an electronic page operated by us or otherwise, such as order history, incl. data on the date of award and/or acceptance of orders and their implementation status; property identification data - notarial deed and other documents related to the property and construction on the property; identification data of the other participants in the construction - the technically competent persons within the meaning of Art. 163a of the Law on Territorial Planning (ZUT); The technical manager within the meaning of Art. 163, para. 2 of the ZUT; The consultant (FL or the representative of the legal entity);
• Data that you generate when you use a certain social plug-in, such as the Facebook "like" or "follow" plug-in, in order to express your attitude towards certain material or content that we have published on any of our electronic pages or our social network pages , which we maintain;
• Other data that you have provided to us at our request, where we are required or legally entitled to collect such data for the purpose of identifying you or confirming information we have received;
• In certain cases, where permitted by law, we collect data related to convictions and offences. For example, if the law obliges us not to employ in a certain position persons who have been convicted of specific crimes, we will process the data provided by you to the extent necessary for the fulfillment of our obligation imposed by law.

2. Personal data we collect automatically

Some of the personal data we process is collected by us automatically when you register or use an electronic page we operate to contact us or to place an order. This information is provided by the devices (e.g. your personal or business computer, smartphone or tablet, etc.) that you use to access our electronic pages, our social network pages or the applications and other online services we offer, such as for example, a device ID or unique identifier associated with the device or browser you are using, location data, the type of device or the browser you are using.

We collect data about your interaction with our electronic and social media pages that you use, such as location and IP address information. We may use cookies and other similar technologies, such as pixel tags and web beacons, to collect statistical information that allows us to better understand the behavior of users of our services and to evaluate the effectiveness of our online advertising, such as information about which of the electronic pages we operate you have visited, as well as which of the links published on the electronic pages you have visited.

We do not perform automated decision-making, including profiling, as a result of automated processing of personal data.

3. Personal data we collect from other sources

In addition to the personal data we collect directly from you or from the device you use, we also collect information from other sources. For example, in certain cases we collect information related to your credit history, as well as other similar information provided by credit bureaus or licensed credit or financial institutions with which you have maintained or maintain a financial or business relationship, in cases where the law does not prohibit this.

Personal data provided by third parties includes the data contained in your public social network profile, which we access when you choose to connect with us using your social network account, such as Facebook or LinkedIn. Be aware that much of the data you post on your social media profiles, such as your public profile, location or locations data, language, public postings and comments, is publicly available, which entails certain privacy responsibilities and risks of your personal space. You control what data is shared with us through the settings of the relevant social network site, as well as the consents you provide to us in relation to the processing of your data stored by the social network sites.

The data we collect for these persons is in the minimum necessary content and in accordance with the regulatory requirements, listed in the relevant special laws and by-laws on their implementation.

The data collected in relation to the persons mentioned above is processed by us on a "need to know" basis.

Collection and processing of personal data relating to persons under the age of 18

We understand the importance of taking additional measures to protect the personal data of children who access our products and services, including the websites we operate. We do not collect personal data from children under 18 years of age or data relating to children under 18 years of age.

We do not allow children under the age of 18 to create their own customer profiles on the electronic pages we operate or otherwise provide us with their personal data.

If we become aware that we have collected from or are processing a child's personal data, we will take steps to destroy that information without undue delay.

THIRD PARTIES TO WHOM WE MAY PROVIDE YOUR PERSONAL DATA

Protecting your personal information is important to us. RSGARCH EOOD uses your data only for the purposes for which they are collected. In processing your inquiries and when you use the services on our site, we may disclose your personal information to any of the following persons:

1. To persons processing data on behalf of the Company

We may entrust the processing of your personal data to third parties - subcontractors who assist us in the processing of this data. These third parties process your data on our behalf and in accordance with our instructions for all or some of the purposes set out in this Policy. We do not allow third parties - subcontractors to use your personal data for their own purposes, including direct marketing purposes.

We require all third parties who process your personal data on our behalf to process this data in accordance with the law, as well as to ensure its security, including by taking the necessary technical and organizational measures to protect personal data. The categories of recipients that process personal data on our behalf are:

• Accounting and auditing companies that process personal data for the purposes of accounting and auditing our financial statements, as well as for the fulfillment of our statutory obligations in the field of labor, tax and insurance legislation;
• Persons who provide services to the information society, including hosting services, and/or information and technical services related to the maintenance, security and development of our information and communication infrastructure and resources;
• Licensed postal operators and transport or forwarding companies, in cases where we send you products, documents or other information ordered by you, licensed payment service providers for the purposes of processing payments from/to you;
• Security companies holding a license to carry out private security activities for the purpose of guaranteeing the security and access regime in the buildings and premises that we own or that we use on a legal basis;
• To state and local bodies and institutions to which we are legally required to provide your personal data, such as courts or, administrative bodies carrying out regulatory, supervisory or other similar functions (e.g. Consumer Protection Commission, Personal Data Protection Commission , the Commission for the Protection of Competition and other competent authorities that are legally allowed to collect and process personal data);
• To third parties - subcontractors when assigning them certain activities, including, but not limited to, project activities, contact with state and local authorities and institutions, the preparation of certain documentation and materials related to the products and services provided by us.

2. To protect our legitimate interests

In certain cases where our legitimate interests dictate, we may disclose your personal data to third parties, such as:

Our legal advisors and legal representatives, persons in connection with obtaining legal advice or preparing and organizing our defense of a current or potential legal dispute, including for the purposes of our participation in a mediation or other voluntary dispute resolution procedure;
Persons who have acquired part or all of our enterprise or activity as a result of our reorganization (eg merger, infusion, etc.), a transaction concluded by us (eg sale, exchange) or an act of a competent authority.
To persons for whom we have received your express consent, such as:
Businesses that may provide you with information or offers about their own products and services.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We store your personal data for as long as is necessary or permitted in view of the purposes for which we process it. After these purposes have been achieved, or after our legitimate interest or legal basis for processing the data ceases (eg when consent to the processing of certain data is withdrawn), we will delete the personal data without undue delay.

The criteria on the basis of which the period of storage of your personal data is determined include: (a) the period during which we maintain commercial relations with you and provide you with our services, (b) period 

the data storage conditions provided for in the laws applicable to us, and (c) the period for which it is necessary to store the data in connection with our participation and the protection of our rights and legitimate interests in judicial and administrative proceedings and the expiry of the relevant limitation periods .

Also, we store personal data contained in our accounting documentation for the periods stipulated in the Accounting Act.

YOUR RIGHTS

At any time during the processing of your personal data by us, you have certain rights which are set out below.

Right of access and information

You have the right to request and receive: 1) information about the purposes of processing your personal data, what categories of personal data we process and who are the recipients or categories of recipients to whom your personal data is or will be disclosed, as well as any information about the source of your personal data; 2) a copy of your personal data that we process, in electronic or other appropriate form.

Right of correction and addition

In case you find that the personal data processed by us is inaccurate and/or incomplete, you can ask us to correct and/or supplement it.

Right to object

When we process your personal data based on our legitimate interest, you have the right to object to such processing. We will stop this processing without undue delay and delete your data, unless we provide justified reasons for continuing to process your data that outweigh your rights and legitimate interests or the processing of your personal data is necessary to establish, the exercise or defense of legal claims. In addition, you have the right to object at any time to the processing of your personal data for marketing and advertising purposes. We will stop such processing without undue delay as soon as we receive your objection.

Right to restriction of processing

You have the right to ask us to restrict the processing of your personal data in the future when: 1) you believe that the personal data we are processing is inaccurate and you require us to correct it, for the time that we check the accuracy of your data and until we make the necessary correction ; 2) it is established that for some reason we are unlawfully processing your personal data, but you do not want your data to be deleted, but instead you want us to process part of your data; 3) we no longer need your personal data, but you require us to retain this data in order to exercise rights or defend against third-party claims; 4) you have objected to the processing of your personal data (when such processing is based on our legitimate interest), if this is necessary to check whether we have an interest or a legal obligation to process your personal data.

Right to erasure (Right to be forgotten)

You have the right to ask us to delete your personal data, and we are obliged to delete them without undue delay when: 1) your personal data are no longer necessary for the purposes for which they were collected or otherwise processed; 2) you have withdrawn your consent to the processing of personal data, when the data was processed based on your consent and there is no other legal basis for the processing; 3) you have objected to the processing and we have no legitimate grounds for this processing that take precedence over your interests, rights and freedoms; 4) your personal data has been processed unlawfully; 5) personal data must be deleted in order to comply with our legal obligation; 6) the personal data were collected in connection with the provision of information society services.

Right to withdraw your consent

In cases where we process your personal data on the basis of your consent, you have the right to withdraw this consent with immediate effect. In this case, we will stop processing your personal data for the future.

Portability of your data

In cases where we process your personal data on the basis of your consent or to fulfill our contractual obligations towards you, insofar as this does not impair the rights and freedoms of other persons, you have the right to receive the data you have provided to us in a structured, frequently used and machine readable format or – if technically feasible – to request that we transfer this data to a third party.

PURPOSE OF PERSONAL DATA PROCESSING AND USE

We collect, store and process personal data insofar as this is not contrary to the law and in accordance with our own privacy policies. We process personal data for various business purposes, and this processing is carried out on various legal grounds. By law, we must have a legal basis to process your personal data. Depending on the basis on which we process your personal data, you have certain rights. More information about your rights can be found in the "YOUR RIGHTS" Section. 

In particular, we process the personal data we collect on the legal grounds set out below for one or more of the following purposes:

• In connection with the conclusion and performance of contractual relations with you.
• For the purposes of concluding and executing a contract with you, as well as in cases where, at your request, we take certain steps before concluding a contract.

We process your personal data to fulfill the statutory obligations we have under the legislation of the European Union and EU member states. We may collect and process your personal data with your consent.

In certain cases, after we receive your consent for a certain way of processing your personal data, we may use that data:

• For the purposes of direct marketing of products and services offered by us or our affiliates, which marketing may take the form of telephone calls, the sending of letters or short text messages or emails.
• For the purposes of your participation in various surveys, polls, events and events of a commercial or non-commercial nature, e.g. parties organized by us or any of our related businesses;
• To fulfill specific obligations towards you arising from law or contract, insofar as the processing of relevant personal data (eg health information or other sensitive personal data) is not prohibited by law.

You have the right to withdraw your consent to the processing of your personal data at any time.

COOKIES

What are cookies

The website of RSGARCH EOOD uses "cookies" in order to improve functionality. These are small text files that your browser saves on your hard drive - temporarily or for a longer period of time, depending on the type of "cookie". "Cookies" perform certain functions, including distinguishing you from other users of a particular website, facilitating your access to the information you need, or storing certain information related to you, such as your preferences. Each "cookie" is unique to your web browser and contains certain (anonymous) information, such as the domain name it comes from, the "lifetime" of the "cookie" and a numeric code (usually in the form of a randomly generated number).

Controlling cookies

In accordance with legal regulations, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, you have the right to decide whether to delete them or save them on your computer. If you remove or refuse the use of cookies on this website, its functionality will not be significantly affected, but your removal or refusal may make some features of the site unavailable or cause difficulties in your navigation. Disabling a cookie or cookie category will not delete an existing cookie from your browser, but you can do this manually through your browser options.

Cookies used

Necessary cookies help make the website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

(Here you can specify the cookies you use)