Date last updated: 9 March 2023
When you use the services of EMBLEMA AD, UIC 206104417, having its seat and registered address in the city of Sofia, Izgrev region, 15D Tintyava Str., floor 3, you entrust us with your personal information. This Policy is intended to inform you what data we collect, why we collect it and what we do with it. If you have any questions regarding the privacy of your personal information, you may contact us atoffice@emblema.bg.
What personal information do we collect about you and what do we use it for?
In order to provide you with information and advice about our products and services that interest you, we collect and process the following personal data: your name, telephone number, email address. We also need this data in order to contact you and provide you with the information and/or assistance you require, as well as to send you a response to your enquiries in accordance with the set criteria.
For the purpose of identification prior to the conclusion of a preliminary and/or final sale purchase contract, we collect and process in addition to the above the following personal data: personal identification number, permanent and current address, other data from an identity document.
In order to assist you and to process the necessary documents prior to the conclusion of the contract, as well as for after-sales service purposes, we collect and process in addition to the above the following personal data: bank account number and other financial information, including mortgages, information about your income, information about your marital status. We collect these data when required by applicable law and to detect and prevent abuse.
We obtain the above personal data online or offline, primarily from you or from publicly available sources, and process it on the following grounds:
Who we share your personal information with?
Recipients of your personal information may be:
government bodies, institutions and persons to whom we are required to provide personal data by law;
other data controller(s) - only where necessary for the performance of the activities and purposes described above;
persons who, on assignment, maintain equipment or systems used by the Company to process personal data;
persons performing services in various fields, service providers - these may be lawyers, consultants, external specialists, others;
EMBLEMA AD does not transfer personal data to third countries within the meaning of Regulation (EC) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and repealing Directive 95/46/EC (General Data Protection Regulation).
How do we store your personal data?
We will only keep your data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of any legal or regulatory requirements applicable to us. To determine the appropriate retention period, we take into account the type, amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we are processing your personal data and whether we can achieve those purposes by other means, as well as taking into account applicable legal requirements. For more information about applicable data retention periods, please contact us at the contact details listed hereinabove.
Third party links
At our discretion, we may include or offer third party products or services on our Page. These third parties have separate and independent privacy policies. We are therefore not responsible for the content and activities of these linked pages.
Terms of Use and Cookie Policy
Please, also visit the section containing our Terms of Use governing the use of our Page, and read our Cookie Policy.
What are your rights?
Right of access and right to rectification
You have the right to obtain information about what personal data we process about you, for what purposes, the recipients or categories of recipients to whom the data has been disclosed, and other aspects of the processing of your data. You also have the right to request correction of inaccurate or incomplete personal data at any time.
Right to erasure (right to be forgotten)
You may request that your personal data be erased in the following specific circumstances: (i) you believe that the personal data is no longer necessary for the purposes for which it was collected, (ii) you have withdrawn the consent to processing on which the processing of your data is based and you believe that we have no other legal basis for continuing the processing, (iii) you believe that the processing is unlawful, or (iv) your personal data must be erased in order to comply with a legal obligation to which we are subject.
Right to object
You have the right to object to the processing of your personal data for certain purposes. However, even if you object to certain processing, we may continue that processing if it is permitted or we are obliged to do so, for example, so that we can comply with legal requirements applicable to us or contractual obligations owed to you.
Right to restriction of processing
You may request that the processing of your personal data be restricted if (i) you believe that your personal data is inaccurate and request that we verify its accuracy, or (ii) you believe that the processing is unlawful but you do not wish the data to be erased, or (iii) you have objected to the processing for the purposes of our legitimate interests, or (iv) you believe that we no longer need your personal data but you require it to establish, exercise or defend legal claims. We will restrict the processing of your personal data without erasing it where the accuracy of the personal data is contested by you and this cannot be verified, or where the retention of your personal data is necessary for evidentiary purposes.
Right to withdraw consent
If at any time you have provided your consent to the processing of your personal data for certain purposes, you can always withdraw that consent for future processing.
Please note that the withdrawal of consent does not affect the lawfulness of the processing of your personal data on any other valid legal basis, nor the lawfulness of the processing based on the consent given before its withdrawal.
Right to data portability
In certain cases, you have the right to receive your personal data that you have provided to us on the basis of a contract or with your explicit consent, in a structured, commonly used and machine-readable format, and possibly to request that we transfer this data directly to another controller where this is technically feasible.
Right to lodge a complaint with the supervisory authority
If you believe that the processing of your personal data is unlawful, you may lodge a complaint with the relevant supervisory authority. Use the following link to find the competent authority in the EU Member State where you are habitually resident, where you work or where you suspect the infringement has taken place:
http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
We advise you to address your claim to us first in order to obtain a quicker and more effective problem solution.
Please note that your right of access to the data may be limited in whole or in part, taking into account your fundamental rights and legitimate interests, in the cases provided for in the law. We may refuse to satisfy your request where the same is ungrounded and where it is necessary in order to protect the rights and freedoms of others. In any event, you will be promptly and properly informed of the decision and the reasons for it on any request for exercise of rights you addressed to us.
What to do of you want to exercise your rights or contact us for further information?
To exercise your rights and/or obtain further information about how we process your personal data, you can use the contact details listed hereinabove.
Compliance
We comply with and operate in accordance with the personal data protection law and Regulation (EC) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and repealing Directive 95/46/EC (General Data Protection Regulation).
This Policy is subject to review and revision by us on a regular basis in order to be clear, accurate and transparent to the maximum extent, to reflect changes in legislation or to cover new circumstances that may arise (if necessary). You can find out about these changes on our Page, or you can request the latest version of the Policy to be made available to you by other means.