Personal Data Protection Policy

NOTIFICATION FOR CONFIDENTIALITY AND PROTECTION OF PERSONAL DATA

„ASSOCIATION OF OPERATORS FOR WASTE AND ANIMAL BY-PRODUCTS DISPOSAL INSTALLATIONS”, registered in Commercial register and register of non-profit legal entities with the Registry Agency to Ministry of justice of the Republic of Bulgaria, with Unified identification code 206390484, is a non-profit legal entity, an association established in compliance with the provisions of the Non-profit Legal Entities Act.

The association will carry out public benefit activities and is represented by the Chairman of the Board of management, Ventzislav Atanassov.

contact phone:+359889328188

e-mail: info@ association-owabpdi.eu

is a controller of personal data within the meaning of Regulation 679/2016 of the EU and the Personal Data Protection Act in force in the Republic of Bulgaria.

Person responsible for the protection of personal data:Ventzislav Atanassov, the Chairman of the Board of management, е-mail: info@ association-owabpdi.eu

Information on the competent data protection supervisory authority

Name: Commission for personal data protection

Headquarters and address of management:: Sofia 1592, Bulgaria, 2 Proff Tzvetan Lazarov Blv.

Address for correspondence: Sofia 1592, Bulgaria, 2 Proff Tzvetan Lazarov Blv.

Phone: + 359 2 915 3 518

Internet page: www.cpdp.bg

„ASSOCIATION OF OPERATORS FOR WASTE AND ANIMAL BY-PRODUCTS DISPOSAL INSTALLATIONS” (hereinafter referred to as the "Association") operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. This information is intended to inform you about all aspects of the processing of your personal data by the Association and the rights you have in connection with this processing.

Grounds for collecting, processing and storing your personal data:

The Association collects and processes your personal data in connection with the use of the website www.association-owabpdi.eu and concluding contracts with the Association on the grounds of art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), and in particular on the following grounds:

explicit consent obtained from you as a user of the website;

fulfillment of the obligations of the association under a contract with you;

compliance with a legal obligation that applies to the association;

for the purposes of the legitimate interests of the association or of a third party.

  1. Collection of personal data and purposes

2.1. „ASSOCIATION OF OPERATORS FOR WASTE AND ANIMAL BY-PRODUCTS DISPOSAL INSTALLATIONS”, collects personal data of:

natural persons or representatives of legal entities - providers of specific services, the relations with which are regulated by a contract;

natural persons - members and / or official representatives or contact persons of the legal entities - members of the association;

donors, volunteers and partners of the association;

users of services provided by the association.

for the purposes of:

concluding an employment contract with the employee, according to art. 62, para. 7 of the Labor Code and Ordinance № 4 on the documents required for concluding an employment contract;

concluding a civil or other contract for the provision of various services, including services for third parties and persons on behalf of the „ASSOCIATION OF OPERATORS FOR WASTE AND ANIMAL BY-PRODUCTS DISPOSAL INSTALLATIONS”,, starting, action and termination of membership of the association;

receiving and making donations, receiving voluntary work or public awareness partnerships, as well as any voluntary cooperation for which both parties have formal or informal correspondence and confirmation;

protection of the rights of the individual, mediation for the protection of the rights of the individual.

2.2. The personal data collected and processed by the Association „ASSOCIATION OF OPERATORS FOR WASTE AND ANIMAL BY-PRODUCTS DISPOSAL INSTALLATIONS”, shall be stored for a maximum short period of time after the grounds for their processing have ceased to exist. After the grounds for data processing cease to exist, the latter shall be destroyed in accordance with the procedure provided for in the internal rules for processing the personal data of the association.

.2.3. The personal data processed by the „ASSOCIATION OF OPERATORS FOR WASTE AND ANIMAL BY-PRODUCTS DISPOSAL INSTALLATIONS”, might be disclosed to the following categories of recipients:

the natural persons to whom the data relate;

persons for whom the right of access is provided in a normative act, such as public bodies, institutions, etc.

donation of the association - these persons are provided only with statistical data from the processing of personal data (statistics by sex, diagnosis, age, place of residence) in the presence of at least one of the following prerequisites:

explicit consent of the data subject;

statutory obligation of the personal data controller;

protection of a vital interest;

when necessary for the purposes of criminal prosecution.

Goals and principles in the collection, processing and storage of your personal data on the website www.association-owabpdi.eu 

3.1. We collect and process the personal data you provide to us in connection with the use of the website for the following purposes:

submit a signal / complaints / inquiries on your part through a form for this in the pages www.association-owabpdi.eu

statistical purposes;

protection of information security;

sending an information bulletin if you wish;

inclusion in campaigns at your request

3.2. We follow the following principles when processing your personal data:

legality, good faith and transparency;

restriction of processing purposes;

relevance to the purposes of processing and minimizing the data collected;

accuracy and timeliness of data;

limitation of storage in order to achieve the objectives;

integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.

3.3. In the processing and storage of personal data, the association may process and store personal data in order to protect its following legitimate interests: fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.

3.4. Through its website www.association-owabpdi.eu, the association does not collect and process personal data that relate to the following: reveal racial or ethnic origin; disclose political, religious or philosophical beliefs, or trade union membership; genetic and biometric data.

3.5. The association does not perform automated data decision making.

3.6. The association uses the so-called Cookies for the purpose of providing full functionality of the website, improving the user experience, statistical purposes, easy access, etc., which you agree to by using our website. You can control and / or delete cookies at any time through the settings of the browser you use. Cookies do not constitute personal data and are not used to identify visitors and users of the website.

Term of storage of your personal data

4.1. The Association stores the personal data that it is necessary to keep under the applicable law for the relevant period.

4.3. The Association stores the personal data of the legal representatives of its business partners for the term of the contract, for compliance with the legitimate interests and legal obligations of the association, and this term may exceed the term of the contract.

Transfer of your personal data for processing

5.1. The Association may, in its sole discretion, transfer some or all of your personal data to personal data processors for the fulfillment of the processing purposes with which you have agreed, subject to the requirements of Regulation (EU) 2016/679 (GDPR).

5.2. The Association notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations.

Withdrawal of consent

6.1. Withdrawal of consent to the processing of your personal data - in case you do not want the personal data provided by you to be processed for marketing purposes and receiving a newsletter, you can withdraw your consent to processing at any time by filling out a withdrawal form. consent or by request in free text, and send it to us by email.

6.2. Upon receipt of your request, we will send you an email to the email you provided, with detailed instructions for verifying you as a recipient of newsletters and a data subject for whom withdrawal of consent has been requested. 

6.3. The withdrawal of consent does not affect the legality of the processing of personal data, which the association has carried out so far.

Right of access

7.1. You have the right to request and receive confirmation from the association whether personal data related to you are processed by sending a request in free text by e-mail or filling in a form.

7.2. You have the right to access data related to you, as well as information related to the collection, processing and storage of your personal data.

7.3. Upon receipt of your request, we will send you an email to the email you have provided with detailed instructions for verifying you as a data subject to whom access has been requested.

7.4. After the verification, the association provides you, upon request, a copy of the processed personal data related to you, in electronic or other appropriate form. 

7.5. Providing access to the data is free of charge, but the association reserves the right to impose an administrative fee in case of repetitive or excessive requests.

Right of correction or completion

You can correct or fill in inaccurate or incomplete personal data related to you by sending a request to the association by email, using a form or by request in free text, sent by e-mail to info@ association-owabpdi.eu  .

Right to delete ("to be forgotten")

8.1. You have the right to request the association to delete part or all of the personal data related to you, and the association has the obligation to delete them without undue delay when there is any of the following reasons:

personal data are no longer needed for the purposes for which they were collected or otherwise processed;

You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;

You object to the processing of personal data relating to you, including for direct marketing purposes, and there are no legal grounds for processing to take precedence;

personal data have been processed illegally;

personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State applicable to the association;

personal data have been collected in connection with the provision of information society services.

8.2. The Association is not obliged to delete personal data if it stores and processes them:

to exercise the right to freedom of expression and the right to information;

to comply with a legal obligation requiring processing provided for in EU law or in the law of a Member State applicable to the association or for the performance of a task in the public interest or in the exercise of official powers conferred on it;

for reasons of public interest in the field of public health;

for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;

for the establishment, exercise or defense of legal claims.

8.3. In order to exercise your right to be "forgotten", you need to send by e-mail a request to delete your personal data that the association processes by filling out a form or by request in free text, after which the association will send to the e-mail you used for registration, a letter with detailed instructions for your verification as a user and subject of personal data for which deletion has been requested.

8.4. Once we have verified the identity of the person requesting and the data subject in accordance with the instructions sent to you, we will delete all data we process about you.

Right of restriction

9.1. You have the right to ask the association to limit the processing of data related to you by sending us a request in free text by email when:

challenge the accuracy of personal data for a period that allows the association to verify the accuracy of personal data;

the processing is illegal, but you do not want the personal data to be deleted, only their use to be restricted;

The Association no longer needs the personal data for the purposes of processing, but you require them to establish, exercise or defend your legal claims;

You have objected to the processing pending verification of whether the legal grounds of the association take precedence over your interests.

9.2. Upon receipt of your request, we will send you an email with detailed instructions on your verification as a user and subject of the personal data requested to restrict processing.

Right of portability

10.1. If you have given your consent for the processing of your personal data or the processing is necessary for the performance of the contract with the association, or if your data is processed in an automated way, you can:

to ask the association to provide you with your personal data in a readable format and to transfer them to another administrator;

to ask the association to directly transfer your personal data to an administrator specified by you, when this is technically possible. 

10.2. You can exercise the right of portability by sending us by e-mail a completed form or a request in free text, after which the association will send to the e-mail you specified, a letter with detailed instructions for your verification as a user and subject of personal data portability request.

10.3. After performing the verification according to par. 2, the association sends to the e-mail specified by you the data processed for you.

Right to receive information

 You have right to ask the association to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested have been disclosed. The Association may refuse to provide this information if this would be impossible or would require a disproportionate effort.

Right to object

You have right to object at any time to the processing of personal data by the association relating to it, including if it is processed for profiling or direct marketing purposes.

Your rights if a personal data breach has occurred

11.1. If the association finds a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, it notifies you without undue delay of the breach, as well as of the measures that have been taken or are to be taken. 

11.2. The Association is not obliged to notify you if:

has taken appropriate technical and organizational protection measures with regard to the data affected by the security breach;

has subsequently taken steps to ensure that the breach does not pose a high risk to your rights;

notification would require a disproportionate effort.

Persons to whom your personal data is provided

12.1. For the purposes of processing your personal data, to respond to complaints / alerts and inquiries and services, including through the sites www.association-owabpdi.eu and in view of your interests, the association may provide the data to the following persons who are data processors. : state and municipal authorities, judicial bodies, structures responsible for the protection of individual rights. 

12.2. The processors of personal data comply with all requirements for legality and security in the processing and storage of your personal data.

12.3. The Association does not transfer your data to third countries. 

12.4. In the event of a breach of your rights under the above or applicable data protection legislation, you have the right to lodge a complaint with the Data Protection Commission as follows:

Title: Commission for Personal Data Protection.

Headquarters and address of management:: Sofia 1592, Bulgaria, 2 Proff Tzvetan Lazarov Blv.

Address for correspondence: Sofia 1592, Bulgaria, 2 Proff Tzvetan Lazarov Blv.

Phone: + 359 2 915 3 518

Internet page: http://www.cpdp.bg

13.5. You entitle to use all your rights regarding the protection of your personal data through the form attached to this information. Of course, this form is optional and you can submit your requests in any form that contains a statement to that effect and identifies you as the data holder.