+359 882 278 646 Bulgarian Send Inquiry Stoyanov Enterprises

Privacy Policy

We provide you with information on the transparency of the personal data we process in accordance with Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation). Please review its contents. For your convenience, the information is structured in sections, should you wish to immediately access a specific part of it.

1. Administrator Details and Contact Information

he data controller is Luximmo Ltd., UIC 203012586, with its registered office and address at 19 Yakubitsa Street, 5th Floor, Lozenets District, Sofia 1164. You can contact the data controller not only at the above address but also via the following email address: [email protected] or by phone at +359 2 9 11 55.

2. Purposes of Processing, Legal Grounds, Categories of Data, Recipients, and Retention Periods

The information, which may include your personal data, is processed for one or more of the following purposes: Entering into and performing contracts within our scope of activity; Operation of our website; Direct marketing; Human resources. For your convenience, we present all the information regarding the processed categories of personal data, the legal grounds for processing, the categories of recipients, and the retention periods for each purpose of processing.

2.1. Entering into and Performing Contracts

Personal data processed for entering into and performing contracts, to which the company is a party, pertains to individuals with whom we enter into contracts or to representatives of legal entities and contact persons with whom we have contractual relationships. The legal basis for processing personal data is Article 6(1)(b) of Regulation (EU) 2016/679 – the performance of a contract or pre-contractual relationships initiated by the data subject. The processed personal data includes identification details of the contract parties, bank account information if payments are made, and other data depending on the subject matter of the specific contract, which are strictly necessary for its performance. Personal data may be provided to data subjects, other authorities, and persons only in legally established cases (e.g., the National Revenue Agency, law enforcement authorities). Accounting services may be used for the processing of this data. The retention period for personal data is determined based on the duration of the contract and the statute of limitations for any possible claims related to it.

2.2. Operation of Our Website

Please note that individuals can be identified through online identifiers such as IP addresses and cookies. To operate our website, we use cookies, for which we have provided the necessary information on our site at https://www.luximmo.bg/cookies.html. The nature of the data collected through cookies includes IP address, location, viewed page, and type of device. The basis for processing this data is your consent under Article 6(1)(a) of Regulation (EU) 2016/679. An exception applies to cookies necessary for providing a service explicitly requested by you, in accordance with Article 4a(4) of the Electronic Commerce Act. Categories of recipients may include law enforcement authorities in the execution of their duties. Data of registered visitors are deleted if the account is not used for 5 years or until the consent is withdrawn, respectively, until deletion by the individual themselves. Information on the storage of other cookies and how to disable them can be found in our cookie policy at the link provided above.

2.3. Direct Marketing

With your consent, we use your personal data to directly or indirectly promote our companys services, reputation, and initiatives, as well as to research customer satisfaction with the services provided. The legal basis for processing is the data subjects consent under Article 6(1)(a) of Regulation (EU) 2016/679. You have the right to withdraw your consent for the processing of your personal data for this purpose at any time. The categories of personal data we collect pertain to a limited amount of information needed to identify the person (such as name, email address) and the consent given, including the withdrawal of consent. Recipients of this information may only be law enforcement authorities in the performance of their duties. We do not transfer such data to third countries. Personal data for direct marketing purposes are retained until consent is withdrawn. After that, we keep only a limited amount of information to demonstrate that consent was given and subsequently withdrawn.

2.4. Human Resources

For the purposes of human resources management, we process personal data of job applicants, current and former employees, representatives, and shareholders of the data controller. Depending on the nature of the personal data, the legal bases for processing are Article 6(1)(c) and Article 9(2)(b) of Regulation (EU) 2016/679, which concern compliance with the legal obligations of the data controller. These obligations primarily arise from the Commercial Act and the Labor Code. The categories of personal data processed include identification details of individuals, educational and professional qualifications, health data, contact information, and other data required by labor and social security legislation, tax laws, accounting requirements, and occupational health and safety regulations. The collected data is used solely for the specified purposes and is shared with third parties only when legally required. In such cases, data may be provided to the National Revenue Agency, the General Labor Inspectorate, law enforcement agencies, and other public authorities, in accordance with their powers and competencies. Information is not stored outside the EU and the European Economic Area. The data controller ensures appropriate technical and organizational measures to protect your personal data throughout the retention period, which is determined according to labor legislation requirements: 50 years for payroll records, 3 years for sick leave certificates, 5 years after the termination of the employment relationship for the employment file, and 6 months for documents from job applicants with whom an employment contract was not signed. Activities related to ensuring occupational health and safety are regulated by contract with an occupational health service in accordance with Ordinance No. 3 of January 25, 2008, on the conditions and procedure for the activities of occupational health services.

3. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

Please note that member states of the European Union, the European Economic Area (Iceland, Liechtenstein, and Norway), and the Swiss Confederation are not considered third countries. All other countries outside this group are considered third countries. If it is necessary to transfer personal data to recipients in such countries, guarantees according to Article 44 and following of Regulation (EU) 2016/679 are applied. In cases where the European Commission has not made a decision regarding the adequate level of protection for a particular country, your personal data may be transferred if necessary for the performance of the contract with you or for the implementation of pre-contractual measures taken at your request. In all cases, when transferring personal data, the principles of Regulation (EU) 2016/679 are applied to ensure the protection of your rights and freedoms.

4. YOUR RIGHTS UNDER REGULATION (EU) 2016/679

The General Data Protection Regulation provides the following rights to individuals in relation to the processing of their personal data: The right to access your personal data that is being processed by the administrator; the right to correct inaccurate or incomplete personal data; the right to erasure (right to be forgotten) of personal data that is processed unlawfully or on grounds that no longer apply (such as expiration of the retention period, withdrawal of consent, fulfillment of the original purpose for which the data was collected, and others); the right to restrict processing when there is a dispute between the administrator and the individual regarding the legality or accuracy of the personal data being processed, until the matter is resolved and/or for the establishment, exercise, or defense of legal claims; the right to data portability when your personal data is processed by automated means based on consent or contract. In this case, the data will be provided in a structured, commonly used, and machine-readable format; the right to object to the processing of your personal data at any time on grounds related to your specific situation if your personal data is processed based on legitimate interests, public interests, or official authority; the right to object to the processing of personal data for direct marketing purposes. No justification is required; in all cases, we will comply with your objection made on this basis; the right not to be subject to solely automated decision-making, including profiling, which has legal consequences for you or significantly affects you. Our automated processing is not related to making solely automated decisions with significant legal or other consequences for you. The rights arising from Regulation (EU) 2016/679 can be exercised by submitting a written or electronic request to the data administrator. The request should include your name, ID number, address, and other details for identifying you as the data subject, describe what your request is, your preferred communication method, and actions to be taken regarding your request. It is necessary to sign your request, include the date of submission, and provide the correspondence address. These requirements stem from Articles 37b and 37c of the Personal Data Protection Act. You may use the contact details of the administrator to send your request. It is important to note that even after you delete your profile or request the deletion of your data, copies of certain information from your profile may remain visible under certain circumstances, for example, if you have shared information with social media or other services, or if retaining such copies is necessary to comply with legal obligations or for legal protection. Due to the nature of information caching technology, your profile may not become immediately inaccessible to others.

5. Right to Lodge a Complaint with the Data Protection Commission

If you believe that your rights under Regulation (EU) 2016/679 have been violated, you have the right to file a complaint with the Data Protection Commission at Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2, fax 029153525, [email protected].

6. Significance of Providing Your Personal Data

When we process your personal data for the purposes of concluding and performing contracts with you, providing the personal data is a necessary condition for entering into the contract. Failure to provide them prevents us from taking steps regarding requests that are anonymous. With your consent, we process personal data when you voluntarily choose to subscribe to our offers, promotions, current news, and market research. If you do not provide consent for this, we will not be able to know what offers you are interested in and to provide you with services specifically tailored to you.

7. HOW WE PROCESS YOUR PERSONAL DATA

Personal data is processed both automatically and manually, and is protected through appropriate security measures, taking into account the state of technological progress, implementation costs, as well as the nature, scope, context, and purposes of the processing. The company implements suitable administrative, technical, personnel, and physical measures to safeguard the personal data it holds from loss, theft, and unauthorized use, disclosure, or alteration.

8. Sources from Which We Obtain Your Personal Data

We obtain the personal data we process directly from you as data subjects. If necessary, we may also access publicly available registers, such as property or commercial registers. However, we would not take such actions unless we have pre-contractual or contractual relationships with you.

9. Links to Other Websites

This privacy policy does not cover any references on our site to other websites. We recommend that you read the privacy policies or statements of any other websites you visit.

10. Updating This Privacy Policy

The company reserves the right to amend or update this Privacy Policy. Any changes to this Privacy Policy will be announced in advance by publishing on the company’s website.

The information has been successfully sent.