(+359-2) 9434773 office@prescriptia.com

Privacy policy

“PRESCRIPTIA” EOOD

(Notice regarding the processing of personal data)

Personal data administrator:

  1. Name: PRESCRIPTIA EOOD
  2. UIC: 131235474
  3. Headquarters and management address: Sofia, 28 Hristo Botev blvd., fl. 5, apartment 8
  4. E-mail address: XXXXXXXXXXXXXX
  5. Website: www.prescriptia.com

PRESCRIPTIA EOOD (the “Company” or the “Administrator”) operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in in relation to the processing of personal data (“General Data Protection Regulation” or the “Regulation”).

This “Privacy Policy” (“Privacy Policy” or “Policy”) is intended to inform each User (as defined below) of the Company regarding the processing of data by which the particular User is identified or can be identified.

For the purposes of the Policy, “User” is any natural person, user of the Company’s website, accessible on the Internet at the electronic address: www.prescriptia.com, as well as a director, manager, representative, proxy, employee, partner, shareholder, beneficial owner of a legal entity or other legal entity using the website.

What personal data do we process?

The Company processes, as a personal data administrator, the following groups of personal data of Users:

  • Physical identity – names, telephone, e-mail address;

Personal data is collected by the Administrator from the persons to whom it relates.

How we collect personal data

We collect personal data:

  • When carrying out correspondence with the User, which may include communication in written form, including electronic form and oral form;
  • Through “cookies” when using or browsing our website.
  • In some cases, we may also collect information from third parties or from public sources.

Our website collects data in log files. This information contains data about your IP address, Internet provider, the browser you use, your operating system, when you visited our website, the pages visited.

Our website uses cookies. “Cookies” are small files with information that the website sends to the visitor’s browser. The browser stores this information in a text file on the user’s end device. They help us make our website work better for you. You can read more information about the use of “cookies” in our Policy on the use of cookies, published on our website – XXXXXXXXXXXX

Do we process special categories of personal data?

The Company does not process special categories of personal data of Users.

For what purposes do we process personal data?

The Company processes the personal data of Users for the following purposes:

  • Providing information and assistance that you have requested from us;
  • Signing of contracts for the services offered by the Company;
  • Individualization and contact with users and representatives of legal entities
  • For all activities related to the existence, modification and termination of the relationship between the Company and the User;
  • Offering and promoting additional services;
  • Compliance with regulatory requirements;
  • Implementation of defense in the event of a dispute and cooperation with regulatory authorities to the extent required by law.

On what legal basis do we process personal data?

Users’ personal data is collected, processed and used on the basis of several grounds for processing:

  • For the performance of a contract or for entering into pre-contractual relations;
  • For compliance with a legal obligation that applies to the Company;
  • For the purposes of the legitimate interests of the Company or of a third party, when the rights and interests of the data subjects do not prevail over them – to resolve disputes; to prevent, detect, investigate fraud, violations or other illegal conduct; for the establishment, exercise or defense of legal claims;
  • Subject to voluntary consent, when required by applicable law.

How long do we store personal data?

The company stores the personal data during the contractual relationship and until the claim under the contract is settled and during a transition period (e.g. to comply with the obligations related to archiving and storage of accounting data). If legal or other action is initiated, personal data may be retained until the end of such action, including any possible appeal periods, and will then be deleted or archived as permitted by applicable law. More specifically, the various carriers of accounting and tax information containing personal data are stored for s a term of 10 years, starting from January 1 of the accounting period following the accounting period to which they refer.

In cases where your personal data is obtained and processed on the basis of your consent, we will only process your personal data to the extent that we have your consent to process your personal data.

Who do we share personal data with? Do we share them in third parties?

The Company may, at its own discretion, transfer part or all of the personal data to processors of personal data for the fulfillment of the purposes of processing, subject to compliance with the requirements of the Regulation.

The Company shares personal data with:

  • Third parties – service providers engaged by us to perform functions or activities on our behalf;
  • Third parties: regulatory, tax, financial, judicial, administrative and law enforcement authorities, all in accordance with applicable law.

This list is not exhaustive and there may be other lawful purposes for storing, disclosing or otherwise processing your personal data.

The Company shall notify the subject of personal data in case of intention to transfer part or all of his personal data to third countries or international organizations.

Is personal data protected?

The Company provides and maintains appropriate technical and organizational measures to protect personal data against unauthorized access or illegal use of personal data and/or against their accidental loss, modification, disclosure, access and/or damage or copying. These measures are intended to ensure the continued protection and privacy of personal data. The company reevaluates the measures regularly in order to achieve permanent security of your personal data.

Do we perform automated decision-making?

The Company does not perform automated data decision making.

What are the rights of Users in relation to the protection of personal data?

Any User may proceed to exercise the rights specified below by written notice to the Company.

  • Withdraw consent for personal data processing

When the processing of a User’s personal data is based on the User’s consent to the processing of his personal data, the User has the right to withdraw his consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent given prior to its withdrawal.

  • Right of access

Each User has the right to receive confirmation from the Company whether their personal data is processed by the Company. This includes the right of access to the personal data, the right to obtain a free copy of the data (except in cases of excessive and repetitive inquiries), unless otherwise provided in the applicable rules for the protection of personal data, as well as the right of the User to be provided with a description of the basic information related to the processing of his personal data.

The Company provides free of charge to the User a copy of his personal data, which is in the process of processing, but reserves the right to impose an administrative fee in case of repetitive or excessive requests.

  • Right to rectification

Each User has the right to correct or request the Company to correct, without undue delay, inaccurate, incomplete or outdated personal data relating to him.

  • Right to erasure (right to be forgotten)

Each User has the right to request from the Company the erasure of his/her personal data without undue delay, when any of the following grounds apply:

(i) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

(ii) The User withdraws his consent on which the processing of his data is based and there is no other legal basis for the processing;

(iii) User has objected to the processing as set out below;

(iv) The User’s personal data has been processed unlawfully; or

(v) The User’s personal data must be deleted in order to comply with a legal obligation under EU law, the law of a Member State or the law of another country;

(vi) the personal data were collected in connection with the provision of information society services.

The Company may refuse to erase the User’s personal data to the extent that their processing is necessary:

(i) to exercise the right to freedom of expression and the right to information;

(ii) to comply with a legal obligation that requires processing provided for in EU law or Member State law that applies to the Administrator or for the performance of a task in the public interest or in the exercise of official powers conferred on him;

(iii) for reasons of public interest in the field of public health

(iv) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;

(v) for the establishment, exercise or defense of legal claims.

  • Right to restrict processing

Every User has the right to request the Company to limit the processing of his personal data in the following cases:

(i) When disputing the accuracy of the personal data as provided by the User and processed by the Company (the limitation is for a certain period that allows the Company to verify the accuracy of the personal data);

(ii) When the processing is illegal, but the User does not want the personal data to be deleted, but instead requires the restriction of its use;

(iii) When the Company no longer needs the personal data for the purposes of processing, but the User requires them to establish, exercise or defend legal claims;

(iv) When the User has objected to the processing and expects the Company to verify whether the Company’s legal grounds for the processing of personal data take precedence over the interests of the User.

  • Right to object

Every User has the right at any time, on grounds related to his specific situation, to object to the processing of personal data concerning him.

A user can exercise the right only in relation to the processing of his personal data, which is carried out by the Company for the purposes of the legitimate interests of the Company.

In case the objection is well-founded, the Company will stop processing the personal data concerning the objected User, unless the Company proves that there are convincing legal grounds for the processing that take precedence over the interests of the User.

  • Right to data portability

This right includes the following possibilities:

(i) to obtain the personal data in a structured, widely used and machine-readable format in order to transfer it to another controller, or

(ii) obtain a direct transfer of the personal data to another controller, if technically feasible.

  • Right to appeal

Every User has the right to submit a complaint regarding the processing of his personal data by the Company to the Commission for Personal Data Protection, which is the competent supervisory authority.

Commission for Personal Data Protection

Address: city of Sofia, p. k. 1592, “Prof. Tsvetan Lazarov” No. 2,

phone (02) 91 53 519, fax: (02) 91 53 525

email: kzld@cpdp.bg

website: www.cpdp.bg

How can you exercise your rights?

Any User may submit an application to exercise rights to the protection of personal data as follows:

  1. An application for the exercise of personal data protection rights can be submitted in one of the following ways:
  • Electronically in accordance with the Law for the Electronic Document and Electronic Signature, to the following email address: xxxxxxxxxxxxxx
  • On site at the Company’s office;
  • By mail to the address of xxxxxxxxxxxx
  1. The application should contain the following information:
  • Identification of the person – name and UCN, customer number;
  • Contacts for return communication – address, telephone, e-mail;
  • Request – description of the request;
  • Signature, date of submission of the application and address for correspondence.

The application is made personally by the User or by a person expressly authorized by him, unless a special law provides otherwise. When an application is submitted by an authorized person, the corresponding notarized power of attorney is attached to the application.

The company provides information on the actions taken in connection with the application for exercising rights to protect personal data within 1 (one) month of receiving the application. If necessary, this term can be extended by another 2 (two) months, taking into account the complexity of the submitted application. The Company shall notify of any such extension of the term within one month of receipt of the application.

The Company is not obliged to respond to a submitted application if it cannot identify the person who submitted it. The Company may request the provision of additional information necessary to confirm the identity of the User when there are reasonable concerns regarding the identity of the natural person submitting the application.

What happens if you do not provide us with your requested personal data?

The Company processes personal data of Users based on the above-mentioned grounds, and their collection only for a few explicitly listed purposes requires the consent of this person for their provision. In most cases, the company processes personal data for the fulfillment of legally established obligations or in connection with the conclusion or performance of a contract.

If the User refuses to provide the personal data required by him, the Company will not be able to fulfill its legally established obligations, including it may not be able to provide its products and/or services.

What happens in case of change?

In case of a significant change in the way the Company processes the personal data of Users and/or in the types personal data it processes and/or in any other aspect of the subject of this notice, the Company will notify Users of the relevant change immediately by issuing and giving Users an updated version of the notice.