\r\nThis document describes the responsibilities of COOLSPED LTD and the privacy and personal data protection policy.\r\nIn its daily activities, COOLSPED LTD uses a large volume of various data through which persons can be identified, including:\r\n\u2022 current, past and future employees;\r\n\u2022 job candidates;\r\n\u2022 customers;\r\n\u2022 users of the organization’s website;\r\nDue to the collection and use of this information, COOLSPED LTD is the addressee of numerous legal provisions, which regulate the methods for carrying out the data processing activities and the precautionary measures that should be provided.\r\nThe purpose of this policy is to describe the actions that COOLSPED LTD has taken to achieve compliance with the requirements.\r\nThe control under this policy extends to all units, persons and processes within the organization’s information systems, including management bodies, directors and management bodies, staff, suppliers and other third parties that have access to the organization’s systems.\r\nThis procedure should be read and modified in the context of the following documents, which provide additional information on the scope, objectives, resources, roles and responsibilities to ensure compliance with the requirements of the GDPR:\r\n\u2022 Procedure for liability in case of data security breach\r\n\u2022 Internal regulations for personal data in the Human Resources Department\r\n\u2022 Policy for archiving documents in Act Logistics AD\r\n1. General Data Protection Regulation (GDPR)\r\nThe General Data Protection Regulation (GDPR) is one of the most important pieces of legislation governing data processing. Through this policy, COOLSPED LTD strives to ensure, maintain and demonstrate compliance with the requirements of the GDPR and legislation at all times.\r\n2. Legal definitions\r\nThe definitions listed below have the following meanings:\r\n“Personal data”\r\nany information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is an identifiable person, directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or one or more features specific to the natural, the physiological, genetic, mental, intellectual, economic, cultural or social identity of that individual;\r\n“Processing”\r\nany operation or set of operations carried out with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, distribution or otherwise by which the data becomes accessible, arranged or combined, restricted, deleted or destroyed;\r\n“Personal Data Administrator”\r\na natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means for the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller or the specific criteria for its determination may be laid down in Union law or in the law of a Member State.\r\n3. Basic principles in the processing of personal data:\r\nPersonal data is processed on the following principles:\r\n\u2022 Legitimate, conscientious and transparent;\r\n\u2022 Personal data is collected for specific, well-defined and legitimate purposes and is not further processed in a way incompatible with those purposes;\r\n\u2022 Minimization of data;\r\n\u2022 Accuracy – Personal data is accurate and updated as necessary\r\n\u2022 Storage restriction – Personal data are deleted or corrected when they are found to be inaccurate or disproportionate to the purposes for which they are processed.\r\n\u2022 Integrity and confidentiality\r\nCOOLSPED LTD guarantees that it respects and observes the cited principles, both in the use of the current data processing methods and in the development of new ones (eg new software solutions).\r\n4. Rights of the data subject\r\n\u2022 the right to be informed;\r\n\u2022 right of access;\r\n\u2022 right to correct existing data;\r\n\u2022 right to erase data (“right to be forgotten”);\r\n\u2022 the right to restrict the processing of data.\r\n\u2022 right to data portability.\r\n\u2022 right to object.\r\n\u2022 rights in connection with automated data processing and profiling.4.\r\nLegality of processing.\r\n5. Grounds for processing\r\nDepending on the specific circumstances, COOLSPED LTD processes data only on the indicated grounds, depending on the case, documenting the connection between the ground and the circumstances, in accordance with the GDPR. The options are briefly described below.\r\n5.1. Consent\r\nIf necessary for purposes recognized by the GDPR, COOLSPED LTD will seek to obtain the express consent of the data subjects in order to collect and process their data. In the case of children’s data, the consent of a parent \/ guardian is also required. Full information on the data processing policy and on the use of their data will be provided to the subjects at the time of requesting their consent. They will be further explained the rights they receive in connection with the given consent, such as the right to withdraw it at any time. If the data are not received directly from the data subject, this information shall be communicated to him within a reasonable period of time, but not later than one month after receipt of the data.\r\n5.2. Execution of contract\r\nWhere the data collected and processed are necessary for the performance of a contract with the data subject, explicit consent is not required. This ground is applicable in cases where the data provided are vital for the performance of the contract (eg the delivery cannot be made without the person’s address).\r\n5.3. Legal obligation\r\nWhen personal data are collected and processed in order to fulfill a legal obligation, explicit consent is not required. This ground is applicable in the field of labor, tax and, in general, public law.\r\n5.4. Vital interests of the data subject\r\nIt is lawful to receive and process personal data if it is necessary to protect the vital interests of the data subject or another individual. COOLSPED LTD will process personal data on this basis only in the event that vital interests are really affected, and the circumstances will be documented in detail so that it can be proven.\r\n5.5. Execution of a task of public interest\r\nWhen COOLSPED LTD has to perform a task that it believes is in the public interest or is part of an official duty, the consent of the data subject will not be required. The assessment of whether it is a matter of public interest and \/ or official duty is documented and can serve as evidence if necessary.\r\n5.6. Legitimate interest\r\nCOOLSPED LTD may process data for the protection of a legitimate interest, in case the rights and freedoms of the data subjects are not significantly affected. In this case, too, the assessment of whether an interest is legitimate and of the extent to which the rights and freedoms of data subjects are affected should be documented.\r\n6. Protection at the design stage\r\nCOOLSPED LTD respects the principle of protection at the design stage. The planning and construction of any new or substantially modified existing systems that collect, store or process data will be assessed in the light of possible security concerns. For each project, a data protection impact assessment will be carried out and appropriate safeguards will be taken.\r\n7. Contracts involving the processing of personal data\r\nCOOLSPED LTD will guarantee that all contracts it concludes and which covers the processing of personal data will contain the necessary information and general conditions required by the GDPR.\r\n8. Disclosure and transfer of personal data\r\nThe transfer of data outside the European Union will be carefully considered before it is actually implemented to ensure that it falls within the limits set by the GDPR. Each case is considered on a case-by-case basis, as it depends on the European Commission’s assessment at the moment of the level of security that the third country provides with regard to personal data.\r\n9. Data protection officer\r\nThe GDPR obliges any public organization that processes a large amount of personal data or collects \/ stores “sensitive” data to have a data protection officer. In accordance with the requirements set by the regulation, COOLSPED LTD must not engage a data protection official.\r\n10. Notification of data security breach\r\nIn case of a breach in data security, COOLSPED LTD takes the necessary actions to warn the affected persons. Actions should be proportionate to the infringement, and the principle of transparency should be respected. The GDPR obliges the organization, in the event of a breach that could jeopardize the rights and freedoms of individuals, to notify the supervisory authority (Data Protection Commission) within 72 hours of learning. The notification is made in accordance with a specific procedure prescribed by COOLSPED LTD .\r\n11. Achieving compliance with the GDPR\r\nThe following actions have been taken by COOLSPED LTD in order to achieve full compliance with the requirements of the GDPR:\r\n\u2022 The legislation in the field of personal data is analyzed;\r\n\u2022 Employees involved in the processing of personal data understand their duties and responsibilities for compliance with the policies and procedures for personal data protection of the organization;\r\n\u2022 The staff is instructed on the required level of data protection;\r\n\u2022 The rules for consent of data subjects are observed;\r\n\u2022 Opportunities are provided for the exercise of rights by data subjects and their requests are managed effectively;\r\n\u2022 Periodic reviews are performed in order to update the policies \/ procedures regarding personal data protection;\r\n\u2022 The principle of protection at the design stage for all new or drastically changed systems and processes is observed\r\n\u2022 The following documentation for the processing activities is kept:\r\n\u2022 Register of activities – administrator;\r\n\u2022 Register of activities – Processing personal data\r\nThese documents should be periodically reviewed as part of the overall data protection audit carried out by the governing bodies.\r\n12. Storage of personal data\r\nOur general approach is to keep the personal data of our employees, suppliers, customers, and contractors, as well as third parties, for the minimum necessary period of time – until the fulfillment of the purpose for which they were collected by us or provided by you, including the applicable legal term.\r\n13. Security of your personal data\r\nWe take reasonable physical, technical, and administrative security measures designed to protect your personal information from loss, misuse, alteration, destruction, or damage, as required by our national law.\r\nYou also play an important role in protecting the security of your personal data and you need to be careful about who you disclose personal data to and how you protect your communications and devices.\r\n14. Contact Us\r\nIf you have any questions or concerns regarding the processing of your personal data or wish to exercise any of your rights, please send us an email at: office@cooslped.bg\r\nInformation about the Personal Data Administrator:\r\n\u2022 Name: COOLSPED LTD , a trade company registered in 2019\r\n\u2022 Headquarters and address of management: Plovdiv 4006 Plovdiv, 5 Archaritsa Str\r\n\u2022 Address for correspondence: Plovdiv 4006 Plovdiv, 5 Archaritsa Str\r\n\u2022 E-mail: office@coolsped.bg\r\n\u2022 Contact phone: +359 889 4444 99<\/p>\r\n","protected":false},"excerpt":{"rendered":"
Privacy policy This document describes the responsibilities of COOLSPED LTD and the privacy and personal data protection policy. In its daily activities, COOLSPED LTD uses a large volume of various data through which persons can be identified, including: \u2022 current, past and future employees; \u2022 job candidates; \u2022 customers; \u2022 users of the organization’s website; Due to the collection and use of this information, COOLSPED LTD is the addressee of numerous legal provisions, which regulate the methods for carrying out the data processing activities and the precautionary measures that should be provided. The purpose of this policy is to describe the actions that COOLSPED LTD has taken to achieve compliance with the requirements. The control under this policy extends to all units, persons and processes within the organization’s information systems, including management bodies, directors and management bodies, staff, suppliers and other third parties that have access to the organization’s systems. This procedure should be read and modified in the context of the following documents, which provide additional information on the scope, objectives, resources, roles and responsibilities to ensure compliance with the requirements of the GDPR: \u2022 Procedure for liability in case of data security breach \u2022 Internal regulations for personal data in the Human Resources Department \u2022 Policy for archiving documents in Act Logistics AD 1. General Data Protection Regulation (GDPR) The General Data Protection Regulation (GDPR) is one of the most important pieces of legislation governing data processing. Through this policy, COOLSPED LTD strives to ensure, maintain and demonstrate compliance with the requirements of the GDPR and legislation at all times. 2. Legal definitions The definitions listed below have the following meanings: “Personal data” any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is an identifiable person, directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or one or more features specific to the natural, the physiological, genetic, mental, intellectual, economic, cultural or social identity of that individual; “Processing” any operation or set of operations carried out with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, distribution or otherwise by which the data becomes accessible, arranged or combined, restricted, deleted or destroyed; “Personal Data Administrator” a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means for the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller or the specific criteria for its determination may be laid down in Union law or in the law of a Member State. 3. Basic principles in the processing of personal data: Personal data is processed on the following principles: \u2022 Legitimate, conscientious and transparent; \u2022 Personal data is collected for specific, well-defined and legitimate purposes and is not further processed in a way incompatible with those purposes; \u2022 Minimization of data; \u2022 Accuracy – Personal data is accurate and updated as necessary \u2022 Storage restriction – Personal data are deleted or corrected when they are found to be inaccurate or disproportionate to the purposes for which they are processed. \u2022 Integrity and confidentiality COOLSPED LTD guarantees that it respects and observes the cited principles, both in the use of the current data processing methods and in the development of new ones (eg new software solutions). 4. Rights of the data subject \u2022 the right to be informed; \u2022 right of access; \u2022 right to correct existing data; \u2022 right to erase data (“right to be forgotten”); \u2022 the right to restrict the processing of data. \u2022 right to data portability. \u2022 right to object. \u2022 rights in connection with automated data processing and profiling.4. Legality of processing. 5. Grounds for processing Depending on the specific circumstances, COOLSPED LTD processes data only on the indicated grounds, depending on the case, documenting the connection between the ground and the circumstances, in accordance with the GDPR. The options are briefly described below. 5.1. Consent If necessary for purposes recognized by the GDPR, COOLSPED LTD will seek to obtain the express consent of the data subjects in order to collect and process their data. In the case of children’s data, the consent of a parent \/ guardian is also required. Full information on the data processing policy and on the use of their data will be provided to the subjects at the time of requesting their consent. They will be further explained the rights they receive in connection with the given consent, such as the right to withdraw it at any time. If the data are not received directly from the data subject, this information shall be communicated to him within a reasonable period of time, but not later than one month after receipt of the data. 5.2. Execution of contract Where the data collected and processed are necessary for the performance of a contract with the data subject, explicit consent is not required. This ground is applicable in cases where the data provided are vital for the performance of the contract (eg the delivery cannot be made without the person’s address). 5.3. Legal obligation When personal data are collected and processed in order to fulfill a legal obligation, explicit consent is not required. This ground is applicable in the field of labor, tax and, in general, public law. 5.4. Vital interests of the data subject It is lawful to receive and process personal data if it is necessary to protect the vital interests of the data subject or another individual. COOLSPED LTD will process personal data on this basis only in the event that vital interests are really affected, and the circumstances will be documented in detail so that it can be proven. 5.5. Execution of a task of public interest When COOLSPED LTD has to perform a task that<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\n