Personal data security policy

PERSONAL DATA SECURITY POLICY

This document contains the Personal Data Security Policy for Individuals (“Policy”) and forms an integral part of the Terms and Conditions. Unpleasantly, if you do not agree to the Terms and Conditions, you may not use http://vab.bg/ /. If the Policy changes, the changes will be posted here.

Update date: 25 May 2018

PERSONAL DATA SECURITY POLICY

Your privacy is extremely important to us. This security policy discloses what personal data we collect from you through our relationship and how we use that data.
The http://vab.bg/
website is designed to provide services in the field of agricultural equipment, in particular grain storage silos, transport equipment and irrigation systems and trailers. Behind http://vab.bg/ is its founder Vitaly Nikolayevich Kurdoglo, who is the data controller in respect of information collected when viewing and using the Site.

In processing personal data, Vitaly Nikolayevich Kurdoglo complies with all applicable data protection legislation, including but not limited to Regulation (EU) 2016/679 (“Regulation”) and the Data Protection Act, because the security of our users’ personal data is of paramount importance to us.

Partners and third parties who work with or for Vitaly Nikolayevich Kurdoglo, and who have or may have access to personal data, will be expected to read, understand and comply with this policy. No third party may have access to personal data stored by Vitaly Nikolayevich Kurdoglo through http://vab.bg/ without first entering into a data confidentiality agreement that imposes on the third party obligations no less onerous than those that the administrator of http://vab.bg/ has undertaken, and which entitles Vitaly Nikolayevich Kurdoglo to carry out checks on compliance with the obligations imposed by the agreement.

Under the Regulation, personal data is any information relating to you by which you can be identified or are already identified.

Processing of personal data (“Processing”) means any act or set of acts which may be performed upon personal data, whether or not by automatic means.

Categories of subjects whose personal data WE process:

In connection with the Services provided, as detailed in the Terms and Conditions of http://vab.bg/, we process information about the following Data Subjects:

(a) individuals using the Site without registration;

(b) individuals using the Site by registering as users/customers/partners;

(c) individuals who have made inquiries (including by calling), requests, signals, complaints or other correspondence to Vitaly Nikolayevich Kurdoglo and http://vab.bg/;

(d) individuals whose information is contained in inquiries (including by call), requests, signals, complaints or other correspondence addressed to Vitaly Nikolayevich Kurdoglo and http://vab.bg/;

This policy applies to all employees/workers (and stakeholders) of http://vab.bg/ as external suppliers. Any breach of the General Regulations will be treated as a breach of employment discipline and, in the event that there is an allegation that a criminal offence has been committed, the matter will be referred as soon as possible to the relevant government authorities for consideration.

Personal data we process:
Which you provide:

We are unable to provide the services described in our Terms and Conditions or, in certain cases, to enter into contracts with you unless you provide us with information. In this regard, we require certain information from you. It is up to you to decide whether and how to use our Services and or enter into a contract with http://vab.bg/ and its Administrator . In the forms through which personal data is entered, we clearly indicate the mandatory or voluntary nature of the provision of data. The data that are mandatory to fill in are those without which it is impossible to provide the relevant Service or part thereof / or to conclude the relevant contract. These are the following fairly simple things:

three names
preferred contact form
photo
address for correspondence
phone

In the event that you provide your personal data to Vitaly Nikolayevich Kurdoglo or http://vab.bg/ via Viber, Skype, Facebook or any other social network, we inform you that these websites have their own privacy policies and that we accept no responsibility or liability for these policies. In this regard, we recommend that you check these rules before sending us your personal data via these websites/apps.

In order to respond to enquiries made in communication to http://vab.bg/ via electronic forms on the Site or by sending regular or email, We may also store and process additional information (beyond the above) specified by You in the enquiry itself or as a result of such processing. You should note that You may also, by means of a comment made by You on the Site, provide Us with additional information (beyond that referred to above) which may also be subject to processing by http://vab.bg/

In addition, we collect information from your computer, phone, tablet or other device that you use for our Services provided on the Site. This information includes

your IP address- the
browser you use-
your language settings- your
date and time settings
information from your computer, phone, tablet or other device that you use for our Services provided on the Site. This information may include your IP address, the browser you are using and your language, date and time settings.

Processing of comments and publications

If you leave a post or comment on this website, your IP address will be saved. This is for the safety of the website operator: if your text breaks the law, it would like to be able to trace your identity.

Correspondence, complaints and signals

In order to resolve any complaints, signals, disputes, inquiries, requests or other issues raised in communications to Atanas Todorov Zgurev and http://vab.bg/ received through electronic forms on the Site, by sending regular or email, We store and process this information, as well as the result of this processing.

Subscriptions

The Site allows you to subscribe and receive notifications to your email address of new listings/promotions/collections posted on the Site, with criteria of your choice or from models/websites/shops of your choice. The service can be used with or without registration. In case you use the service without registration, it is necessary to provide an email address to which you wish to receive the subscription. The subscription can be terminated at any time.

Special categories of (sensitive) data

The functionalities provided on the Site are not intended for the storage and processing of special categories of data within the meaning of Articles 9 and 10 of the Regulation. (NB! Read Article 9 and Article 10 of the Regulation here)

Which are related to the process of using the Site

In addition, we collect information from your computer, phone, tablet or other device you use. This information may include the following:

the identifier of the device you are using, the type of that device, an advertising ID and a unique token for that device.
location information, including location information from your mobile device. Note that most mobile devices allow you to control or disable the use of location services from any application on your mobile device in the device settings menu.
computer and connection information, such as page view statistics, traffic to and from the Sites, referrer URL, advertising data, IP address, browsing history, information about your web log, and language, date and time settings.

Which we receive from third parties:

There are situations where we receive information from our other partners or automatically collect other information. We supplement the personal information we collect directly from you with information collected from third parties and add it to your account information.

If you provide us with personal information about someone else, you must do so only with that person’s authorization. You must inform them how we collect, use, disclose and store personal information in accordance with this Personal Information Security Policy.

Quick links to repeat previous searches allow you to repeat your searches instead of typing them in each time. The functionality can be used with or without registration. When you use the Site, a cookie with a randomly generated number is stored in your browser, enabling the Site to show you quick links to repeat previous searches. The Site stores and displays the last 10 searches associated with that browser, which you can save and use in your account when you log in. In case you use the Service with registration, the last 10 searches are stored in your account.

The site also uses logs related to security, technical support, development, etc. for the following purposes:

To ensure the reliable operation of the Services and to identify technical problems;
To secure the Services and detect malicious activity;
To develop and improve the Services on the Site;
To measure Site traffic and usability;
Logs where required by law (such as logs of electronic wills).
Login log. This log allows unauthorized attempts to access accounts to be detected and automatically blocked. It is maintained for a period of up to 1 /one/ year, and contains the date and time of login, status, whether the login is via mobile version, app or desktop browser, IP address.
Server logs, security logs (Web Application Firewalls) and other devices that fall into this category. These logs are necessary for detecting technical problems, detecting malicious activities, etc. for the purposes mentioned above. They are stored for a period of up to 1 /one/ year. The logs may contain the following information: date and time, IP address, URL, browser and device information. In addition, some devices may use cookie-based security technology.

Biscuits

The use of cookies is necessary for the functioning of the Site. In this regard, a Cookie Policy has been adopted.

III. For what purposes we process your personal data:

The main purpose for which WE process your personal data is generally related to the provision of services through the Site – http://vab.bg/ . We also use your personal information to provide and improve our Services, to provide you with a personalized experience on our Site, to contact you about your account and our Services, to provide you with customer service, to provide you with personalized advertising and marketing tailored to your interests, and to detect, mitigate and investigate fraudulent or illegal activities.

Vitaly Nikolayevich Kurdoglo / http://vab.bg/ collects, uses and processes the information described above for the purposes set out in this Policy, which may relate to:

protect and enforce the legitimate interests of other users of the Services, third parties and http://vab.bg/;
the fulfilment of legal obligations http://vab.bg/ ;
performance of contractual obligations;
informing you about products and services you want us to send you information about by email, post, mobile phone and/or other digital means (depending on your stated preferences), including social media platforms;
the provision of services you request from us;
your registration on the website (in which case We will also use your personal information to maintain and update your account (such as changing your address or changing your marketing preferences);
website administration;
analyze and improve your use of our website, App and retail, (including using information about how you navigate our website, App and/or stores; )
measuring and analysing our advertising;
making suggestions and recommendations to you based on the information you share with us;
keeping our website, app and network secure and safe;
contact you about your account, troubleshoot problems with your account. When we contact you by phone to ensure efficiency, we may use automated or prerecorded calls and text messages.
provide you with location-based services (such as advertising, search results and other personalised content)

Our legitimate interest in the processing of your personal data arises from the need to ensure the protection and safeguarding of the legitimate interests of http://vab.bg/ and/or third parties, which is related to:

ensure the normal use of the Site by you and other users, resolve disputes, identify and prevent malicious activity.
detecting and resolving technical or functionality problems, developing and improving the purpose of the Site.
communicating with you, including electronically, on important matters relating to our services.
targeting our marketing, updating services and offering you promotional offers based on your preferences.
receiving and processing signals, complaints, requests and other correspondence;
enforce and protect the rights and legitimate interests of http://vab.bg/, including in court, and assist in enforcing and protecting the rights and legitimate interests of other users of the site and/or affected third parties.

For these purposes, it may be necessary to process some or all of the above categories.

Our statutory obligations include the performance of statutory duties to preserve or provide information upon receipt of an appropriate order from competent state or judicial authorities, in enabling the exercise of the control powers of the competent state authorities, in the performance of obligations under the Data Protection Regulation relating to notifying you of various circumstances relating to your rights, the Services provided to you or the protection of your data, and the like. For these purposes, it may be necessary to process some or all of the above categories.

Your data may be processed on the basis of your explicit consent, in which case the processing shall be specific and to the extent and scope provided for in the relevant consent.

How long do we keep your personal data?

When storing data, WE apply the general principle of storing data in the minimum volume and for no longer than necessary to provide the Services and perform the contracts, ensuring their security and reliability and the requirements of the law.

Data types	Storage period	Explanations
Registration details (such as first name, last name, email address) and information about registration and acceptance of the Terms (date, time, IP address)	For the entire period of maintaining the account on the Site and up to 1 /one/ year from termination of registration	The data identifies you as a party to a Maintenance Agreement or use of the website. In order to resolve any disputes that arise or become known after termination of the Website Use Agreement and in connection with the WEEDUU (see below), this data is retained for up to 1 /one/ year after termination of the account.
Projects, files, photos or other documents and information stored in your account	Until deleted by you or until your registration is terminated	With respect to documents created through and/or stored in your account (resumes, files, photos, etc.), Vitaly Nikolayevich Kurdoglo / http://vab.bg/ is a provider of a third-party information storage service (hosting) and control over the storage of this information in your account is entirely yours. Under the Electronic Commerce Act (ECA), Vitaly Nikolayevich Kurdoglo has no obligation to check or monitor for unlawful content or activities in relation to this data. However, in the event that Vitaliy Nikolayevich Kurdoglo is notified of the commission of such unlawful activity or of such unlawful content, or receives an appropriate order from a competent government authority, an obligation may arise for Vitaliy Nikolayevich Kurdoglo to retain the relevant content regardless of its eventual deletion or the deletion of your account (Article 16 of the CET Act).
A log verifying the sending of queries, administrator, users	For a period of 1 /one/ year. Due to the requirements of the WEEDEU Act, the log is kept for a period of 1 /one/ year incl. upon account closure.	Because the sending of [what] comments, inquiries constitutes the sending of an electronic statement by you to the Site, the administrator, user, under the ECDEA we have an obligation to maintain a log of the fact of sending the statement (without its content) for a period of 1 /one/ year.
Subscriptions to notifications of new listings with selected criteria or from selected companies (email address, criteria)	For the period for which the subscription is active, until termination and/or cancellation of the account	The Site allows you to subscribe and receive notifications to your email address of new listings posted on the Site with criteria of your choice (such as location, business category, keywords, etc.) or from Employers of your choice. The service can be used with or without registration. In case you use the service without registration, it is necessary to provide an email address to which you wish to receive the subscription. The subscription can be terminated at any time.
Automatic input	For a period of up to 6 /six/ months from the last login to the Site	This option enables you to automatically log into the Site from a computer on which you have chosen to do so. You should not use this option if anyone other than you has access to that computer.
Quick searches	Until you delete them; until your registration is terminated; or for up to 6 /six/ months if you use this functionality without registration.	This option allows you to repeat your searches instead of entering them each time. The functionality can be used with or without registration. Quick links are stored to repeat the last 10 searches.
Settings	Until they are deleted by you or your registration is terminated. If they are stored in a cookie, up to 6 /six/ months from the last use	Settings such as language selection, etc. fall under this category.
Information stored in a mobile app	For the period of its use (until uninstalled)	Information necessary for the technical provision of the Services (such as settings, etc.)
Login log (contains date and time of login, status, whether login is via mobile, app or desktop browser, IP address)	For a period of up to 1 /one/ year from the last login or until the account is closed	This log allows unauthorized attempts to access accounts to be detected and automatically blocked.
System logs (may contain information such as: date and time, IP address, URL, browser version and device information)	For a period of up to 1 /one/ year	Server logs, security logs (Web Application Firewalls) and other devices that fall into this category. These logs are necessary to identify technical problems and/or detect malicious activity.
Correspondence, complaints and signals, requests, incoming telephone calls	Correspondence, complaints and signals are kept for a period of up to 5 /five/ years. In order to ensure the reliability of the service, incoming telephone calls are stored for up to 3 /three/ months.	In order to resolve any complaints, signals, disputes, inquiries, requests or other issues raised in communications to Us received via electronic forms on the Site, by calling the switchboard at http://vab.bg/ ], by sending regular or email, We store and process this information and the result of this processing. Given the limitation periods under Bulgarian law for the purpose of resolving disputes, this information is stored for a period of up to 5 /five/ years.
Biscuits	Up to 6 /six/ months from the last use of the Services	For a description of the cookies used, see “Cookie Policy”

In the event of contact with customer service, we will retain this data for as long as necessary to resolve your request and for a short period after the request is closed.

If we are legally obligated or if reasonably necessary to comply with regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms, we may also retain some of your personal information for a limited period of time, even after you have closed your account.

We will retain information relating to any job application for as long as it takes to process your application and, if unsuccessful, for a further period of approximately 6 months. If your application is successful, your information will be retained in accordance with our staff privacy policy.

We will retain your information for a short time after the specified retention period to allow for review of the information and possible deletion.

In the event of a legal dispute or proceeding requiring the retention of data and/or a request from a competent government authority, it is possible to retain data for longer than the specified periods until the final conclusion of the dispute or proceeding before all instances. These time limits may be modified in the event that a different retention requirement is established under applicable law.

Backup. In order to ensure the reliability of the Services and prevent data loss for technical reasons, the Site applies a data redundancy policy. The maximum update period (including data deletion) for all backups is 30 days.

Do we share your personal data with third parties?

Vitaly Nikolayevich Kurdoglo and http://vab.bg/ does not provide your personal data to third parties in any other way except as described in this Policy and as provided by law. We try to minimize the personal data we disclose, as this is always directly related and necessary to achieve the stated purpose. We do not sell, rent or otherwise disclose your personal information to third parties for their marketing and advertising purposes without your consent.

In order to provide you with the best contractual terms with our partners, WE provide your personal data to:

a competent governmental or judicial authority, if duly requested, in order to detect, investigate, mitigate and prevent potentially fraudulent and unlawful acts against data security.
persons for whom we have your explicit consent to provide your personal data
third parties in order to protect the rights and legitimate interests of [company] and/or other users of the Site
our third-party advertisers in order to provide personalised advertising
search engine and web analytics providers

In dealing with the above categories of persons to whom we provide your personal data, WE require them to strictly comply with our instructions in accordance with this Policy.

In the event of a merger, acquisition or sale of assets affecting the processing of personal data, you will be notified in advance.

We may also disclose your personal data where we are subject to a legal obligation to do so in connection with the prevention or detection of crime, in order to establish, exercise or defend our legal rights, or where we believe we have received a valid request for disclosure. This includes sharing information with other companies and organisations to protect fraud and reduce credit risk.

You should be aware that if we are asked by the police or any other regulatory or government body investigating suspected illegal activities to provide your personal information or other information we obtain about you, we have the right to do so.

Our website and app may also contain links to and from third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we accept no responsibility or liability for these policies. Please check these policies before submitting information to these websites.

Our site uses YouTube LLC, represented by Google Inc. to integrate videos. Typically, when you visit an embedded video page, your IP address will be sent to YouTube and cookies will be installed on your machine. However, our YouTube videos are integrated in an extended privacy mode (in this case, YouTube is still in contact with the DoubleClick service from Google, but personal data in accordance with Google’s privacy policy is not used). As a result, YouTube does not store any visitor information unless you watch the video itself. If you click on the video, your IP address will be sent to YouTube and YouTube will know that you watched the video. If you are logged into YouTube through your user profile, this information will also be associated with your user profile (you can prevent this by logging out of YouTube before clicking on the video to view it). We have no information about the possible collection and use of your data by YouTube. For more information, please see YouTube’s Privacy Statement at www.google.com/intl/bg/policies/privacy/.

Your rights regarding personal data

Under the General Data Protection Regulation you have the following rights:

Right to information.

This Policy is intended to inform you in detail about the processing of your personal data in relation to the processing of your personal data.

Right of access.

You have the right to confirm whether your personal data is being processed, to access it and to obtain information about how it is being processed and your rights in relation to it. You can access it at any time by emailing : office@vab.bg

Right to rectification.

You have the right to correct and complete your personal data in case it is incomplete or inaccurate. You have the possibility to correct your data at any time by email : office@vab.bg

Right to erasure (right to be forgotten).

You have the right to request erasure of data, except where there is a substantial ground for processing and/or a legal obligation.You can do this by requesting via email : office@vab.bg

Closing an account.

Should you wish to do so, you have the option to close your account at any time via the functionality provided for this purpose, as well as by submitting a request via email : office@vab.bg

After closing the account, all data that is part of the account is deleted. In connection with our obligations, responsibilities and the requirements of the law for a period of up to 1 /one/ year are stored for the purpose of resolving possible disputes that arose or became known after the closure of the account. See the section “How long do we keep your information?”.

In order to ensure the reliability of the services and to prevent data loss for technical reasons, the Site applies a data redundancy policy. The maximum period for updating (deleting data) from all backups is 30 days.

Right to restriction in relation to data processing.

The General Data Protection Regulation provides for the possibility to restrict the processing of your personal data if there are grounds for doing so provided for therein. To exercise this right, please contact us by email : office@vab.bg

Right to notify third parties.

Where applicable, you have the right to request the Controller of your personal data to notify third parties, where he has provided your data, regarding the rectification, erasure or restriction of the processing of your personal data.

Right to data portability.

You have the right to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format and have the right to transfer that data to another controller without hindrance from us, if the processing is based on consent or a contractual obligation or the processing is carried out in an automated manner. To exercise this right, please contact us by email : office@vab.bg

Important: The responsibility for the storage of data exported from the Site, as well as for any consequences of providing it to other administrators is entirely yours.

The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless there are grounds for doing so under applicable data protection law and appropriate safeguards are provided to protect your rights, freedoms and legitimate interests.

No technologies falling into this category are used in the provision of the Services on the Site.

Right to withdraw consent.

You have the right, at any time, to withdraw the consent you have given in relation to the processing of personal data on the grounds – your consent. Such withdrawal shall not affect the lawfulness of the processing on the basis of the consent given up to the time of withdrawal. To exercise this right, please contact us by email : office@vab.bg

In the case of services such as the subscription to email advertisements, the subscription to which is based on your wish (consent), there is an option to terminate the subscription at any time (withdrawal of consent).

Right to object.

You have the right to object to data processed on the basis of legitimate interest.

In the event that such an objection is received, We will consider Your request and, if justified, comply with it. If we consider that there are compelling legitimate grounds for the processing or that it is necessary for the establishment, exercise or defence of legal claims, we will inform you of this. To exercise this right, please contact us by email : office@vab.bg

Right of appeal to a supervisory authority.

You have the right to lodge a complaint with the supervisory authority if you consider that the processing of personal data concerning you violates applicable data protection law. The supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection, whose address is. 1592 Sofia Blvd. “1595 Prof. 2.

In the event that you exercise these rights manifestly unreasonably or excessively, in particular because of its repetitive nature, http://vab.bg/ reserves the right to charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested, or to refuse to act on the request.

VII. Accuracy of information

http://vab.bg/ is not responsible for the accuracy of the data you provide, does not carry out any checks in this regard and does not guarantee the true identity of the individuals who have provided the data. In all cases of suspicion on your part, of fraud and/or abuse detected, please notify us immediately. You undertake that when providing any information on the Site, you will not violate the rights of others in relation to the protection of their personal data or their other rights.

VIII. How we protect your personal data

In order to ensure the best possible protection of the data of the company and its customers/users/contractors, WE apply all necessary organizational and technical measures provided for in the General Data Protection Regulation and the Data Protection Act, as well as best practices from international standards.

The Company has adopted the necessary rules and procedures relating to the lawful processing of your personal data, including. Data Breach Action Plan, has established structures to prevent misuse and security breaches, and has appointed a Data Protection Officer to assist in the lawful processing, protection and security of your data.

For maximum security in the processing, transmission and storage of your data, we may use additional security mechanisms such as encryption, pseudonymization, etc.

Cookie Policy

As an integral part of this Privacy Policy http://vab.bg/ has adopted a Cookie Policy. To read the Cookie Policy.

X.Contacts

Questions and requests related to the exercise of your rights to the protection of your personal data can be addressed to Vitaly Nikolaevich Kurdoglo and http://vab.bg/ by email: office@vab.bg