LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
General Data Protection Regulation (EU) 2016/679 (GDPR) and GDPR.
Personal Data - means any information relating to an identified natural person or an identifiable natural person ("data subject").
Register of personal data - means any structured set of personal data, access to which is carried out according to certain criteria.
Processing of personal data – means any operation or set of operations performed on personal data or a set of personal data by automatic or other means.
Personal data administrator – means a natural or legal person, public body, agency or other structure that alone or jointly with others determines the purposes and means of personal data processing.
Personal data processor – means an employee of the personal data controller, public authority, agency or other structure that processes personal data on behalf of the controller.
Third party – means a natural or legal person, public body, agency or other body other than the data subject, the controller, the personal data processor and the persons who, under the direct supervision of the controller or the personal data processor, have the right to process the personal data.
Registers and Categories of personal data we process
Job applicants - you provide us with simple personal data (your resume).
Individuals representing customers (Companies registered under Bulgarian or European legislation) - you provide us with ordinary personal data, which is a mandatory attribute before and when contractual relations between us arise.
Individuals representing service providers - you provide us with ordinary personal data that is a mandatory attribute before and when a contractual relationship between us arises.
Own staff and leased staff - you provide us with ordinary personal data and sensitive personal data (health document, criminal record, sick sheets).
For all categories, there are scheduled internal procedures and stages with the sequence of collection and processing of personal data, in which the processors of personal data are specified. The protection of personal data applies to all categories of personal data and only an authorized person has access to it.
DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
For job applicants - When you apply for a job and voluntarily provide us with your resume, we, as a Recruitment Agency, provide your resume to the employer you are applying for.
For natural persons representing clients (Companies registered under Bulgarian or European legislation) – Your personal data are provided to the accounting firm that serves the company, as well as to all state institutions that by law have the right to access this personal data.
For individuals representing companies - service providers - Your personal data is provided to the accounting firm that serves the company, as well as to all government institutions that by law have the right to access this personal data.
For own staff and leased staff – Your personal data is provided to Expert TRZ and the accounting firm that serves the company, as well as to all state institutions that by law have the right to access this personal data.
YOUR RIGHTS AS AN INDIVIDUAL PROVIDING PERSONAL DATA
You, as a Data Subject, have the right, at any time, to correct and delete your personal data, as well as to object to the processing of personal data concerning you, in the event that you have not voluntarily provided your personal data to a third party uses your personal data without your consent, or data is processed under Article 5, paragraph 1 of the GDPR. The objection must be submitted in writing and by registered mail to the address: Ruse, Dragan Tsankov Street 19