Privacy Policy

Definitions

PRALESKA LTD, UIC 207029800 hereinafter referred to as PRALESKA.

"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations performed on personal data or on sets of personal data, whether or not this performance is done by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

"Third party" means a natural or legal person, public authority, agency or entity other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

"Consent of the data subject" means any freely expressed, specific, informed and unambiguous indication of the data subject’s will by which he or she, by a statement or by a clear confirmatory action, expresses consent to the processing of personal data relating to him or her.

Data collection

When you send us a request through our contact form or to our e-mails, PRALESKA collects personally identifiable information, which may include, but is not limited to, your name, telephone number (if provided), e-mail. Your personal data is required by PRALESKA in order to review your request. PRALESKA can also use your personal information to provide you with offers for services and products offered by PRALESKA.

Comments

When users leave comments on the website, PRALESKA collects the data displayed in the comments form, as well as the visitor’s IP address and the browser’s user-agent string, to help detect spam. Once your comment has been approved, it will be visible to the public in the context of your comment. The comment can be modified by PRALESKA administrators to reduce the information that can be considered as a private (PII, PHI, Financial Information), inappropriate or harassing. While only reviewed messages displayed on the portal, PRALESKA keeps both version: original and the one displayed on the portal (possible reduced because of the rules violations).

Principles in personal data protection

Personal data shall be processed lawfully, fairly and in a transparent manner with regard to the data subject.

Personal data shall be collected for specified, explicit and legitimate purposes and not processed further in a manner that is incompatible with those purposes.

Personal data shall be adequate, related to and limited to what is necessary in relation to the purposes for which the data is processed.

Personal data shall be accurate and, where necessary, kept up to date.

Personal shall be be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which said data is processed.

Personal data shall be be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Purpose and legal grounds for personal data protection

PRALESKA shall process personal data in compliance with its legal obligation to do so, or in connection with a contract to which the data subject is a party, or to take the steps necessary to complete a request of the data subject before concluding a contract, or in connection with an express consent of the data subject for the processing of their personal data for one or more specified purposes.

In compliance with its legal obligations, PRALESKA shall process your data for the following purposes:

• To provide information about the client and the services used by him / her on request / inquiry / inspection by a competent authority.
• To issue invoices for specific services.

PRALESKA shall collect and process your personal data on the legal basis of:

• Pre-contractual arrangements and conclusion of a contract.
• Consent (when an inquiry is made; to register an account).

Usage of the information gathered

PRALESKA shall automatically gatherer IP addresses and information about the use of the website by you. This information helps PRALESKA to rate the website usage by customers, including the number and frequency of visits to each web page, as well as the duration of visits.

PRALESKA shall use the gathered information for the following purposes:

• For the purposes for which you specifically provided the information.
• To send you e-mail notifications about new or already existing products and services, special offers or to contact you in another way.
• To customize the content that you and the other website visitors see based on personal characteristics or preferences.
• To improve the quality of services, to build more useful links, to analyze user trends and to survey specific user interests related to the website.
• To provide customers with fast and efficient service.
• To support the website’s operations, to resolve problems and disputes.

PRALESKA shall provide personal data to third parties only to the extent necessary for the performance of contracts or services.

Processing and storage periods

Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which said data is processed. Personal data shall be processed and stored for period as follows:

• For conclusion of a contract and other services – 5 years from the date of completion of the service.
• For accounting purposes – 10 years from the date of the end of the financial year.

At any time within these periods, the data subject shall have the right to obtain the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary declaration.

Marketing, direct marketing

PRALESKA shall send by e-mail personalized messages with offers for services, only in case a free consent of the data subject to receive such messages is given. The e-mail address itself does not constitute as personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament.

The data subject shall have the right to withdraw his / her consent for processing and storage of his / her e-mail address at any time, and for this purpose it is sufficient to submit an application electronically, via PRALESKA e-mail (privacy@praleska.eu).

When the personal data collected is no longer needed for the purposes mentioned, PRALESKA shall erase or otherwise destroy it.

Data subject rights

Each data subject shall have the right to obtain information on whether PRALESKA processes personal data related to the same subject, and if so, to acquire access to information on:

• The purposes of the processing.
• The recipients or categories of recipients to whom the personal data are or will be disclosed, in particular the recipients in third countries or international organizations.
• Where possible, the period for which the personal data will be stored, or, where that is not possible, the criteria used to determine that period.
• The existence of the right to request the rectification or erasure of personal data.
• The right to submit a complaint to a supervisory authority.
• In case the data is inaccurate, he / she shall have the right to obtain from PRALESKA, without undue delay, the rectification of inaccurate personal data.

Right of withdrawal of consent

When personal data is processed on the basis of given consent, the data subject may at any time withdraw the given consent. After the withdrawal of the consent, PRALESKA shall discontinue any activity of processing the personal data of the data subject.

Right to object to the processing

The data subject shall have the right to object to the processing of his / her personal data in cases where it is processed on the basis of public interest or on the basis of legitimate interests of PRALESKA, when he / she considers that in this case this processing is incompatible with the protection of the interests, the rights and the freedoms of the data subject. In such cases, if PRALESKA cannot prove that there are compelling legitimate grounds for the processing that override the interests, the rights and the freedoms of the data subject, or that the processing is necessary to establish, lodge or defend legal claims, the processing of this personal data shall be ceased.

Right of erasure of personal data

The data subject shall have the right to request from PRALESKA the erasure of his / her personal data without undue delay, and PRALESKA shall be obliged to erase this personal data without undue delay, on one of the following applicable grounds:

• The personal data is no longer needed for the purposes for which it has been collected or otherwise processed.
• The consent to data processing has been withdrawn.
• The data subject has objected to the processing and PRALESKA has no legitimate grounds for the processing which override the interests, the rights and the freedoms of the data subject.
• The personal data has been unlawfully processed.
• The personal data has to be erased for compliance with a legal obligation.

The data subject’s right to request the erasure of his / her personal data shall not apply, respectively PRALESKA shall have no obligation to erase the data in case the processing of personal data is necessary:

• For compliance with a legal obligation that requires processing, or for the performance of a task carried out in the public interest or in the course of the exercise of official powers conferred to PRALESKA.
• For the establishment, lodge or defense of legal claims.

Right of restriction of the processing of personal data

In the following cases, the data subject shall have the right to request from PRALESKA to cease any other processing of his / her personal data, except for its storage:

• When the accuracy of the personal data is contested by the data subject – for a period that allows PRALESKA to verify the accuracy of personal data.
• When the processing is unlawful but the data subject does not wish his / her personal data to be erased but instead seeks to restrict its use.
• When PRALESKA no longer needs personal data for processing purposes, but the data subject requires them for the establishment, lodge or defense of legal claims.

In the above-listed cases PRALESKA may process the relevant personal data, other than its storage, only with the express consent of the data subject or for the establishment, lodge or defense of legal claims or in order to safeguard the rights of another natural person or for important for the Republic of Bulgaria or for the European Union public interest grounds.

Right to lodge a complaint with a supervisory authority

In case the data subject shall consider that PRALESKA processes his / her personal data in violation of the provisions of the applicable law, including, but not limited to, the General Data Protection Regulation and the Personal Data Protection Act, the data subject shall have the right to lodge a complaint with the supervisory authority in the Member State of the European Union of his or her habitual residence, place of work or place of the alleged infringement. In the Republic of Bulgaria the competent supervisory authority is the Commission for Personal Data Protection.

Security measures

The personal data collected for you by PRALESKA shall be stored on servers with limited access. PRALESKA shall implement and maintain appropriate technical and organizational measures to ensure the security of these servers and of your personal information.

PRALESKA shall take the necessary technical and organizational security measures to protect the administered personal data against unauthorized or unlawful processing, accidental loss, destruction or damage, as may be required, given the technical development, common practice and legal requirements, including but not limited to:

• Use of secure websites, encryption, data masking.
• Reviewing practices for the collection, storage and processing of personal data, including physical security measures, in order to prevent unauthorized access to the systems used.
• Access to personal data within the organization shall have only persons whose job functions require access to the data in order to implement the activities for which the personal data has been collected and processed.
• Inclusion of confidentiality clauses in all employment contracts and agreements with third parties entrusted with the processing of personal data.

Contact information

Business name:

"Praleska" LTD

UIC:

207029800

Registered office and address:

Bulgaria, Sofia, akad. Vera Mutafchieva 7 str, entrance A, ap. AT5

Correspondence address:

Bulgaria, Sofia, akad. Vera Mutafchieva 7 str, entrance A, ap. AT5

Contact E-mail:

contact@praleska.eu

Website:

https://praleska.eu

Phone:

+359.88.655.6771