This policy enters into force on May 25, 2018.
"Galaximatic Ltd., registered in the Commercial Register with Unified identification code 204363307, with headquarters and management address in Bulgaria, Sofia - 1000, Oborishte District, 21B Moskovska Street, 3rd floor, represented by Lena Marinova - Manager."
We perform the following activities: information technology services, hardware and software development, high technology consulting, marketing, management, internet marketing, research and development, brokerage, representation, import and export of goods and services, so we daily use personal data in our work. Since our registration to the present we process these data with care, discretion and at high level of security.
The type and amount of information we collect and the way we use it depends on the reason why you provide it to us.
According to the legislation in the field of data protection, certain types of personal information are more sensitive. These are the so-called "e;sensitive"e; or "e;special categories"e; of personal data that include information revealing racial or ethnic origin, religious or philosophical beliefs and political opinions, trade union membership, genetic or biometric data, health or sexual health information, or sexual orientation of a person. Sensitive information shall only be collected when needed. In the event that we collect and process such information, we will provide you with clear notices, indicating what information is required and why.
We strongly believe in protecting the privacy of children's personal data. In line with this belief, we deliberately do not collect or process personal information for individuals under the age of 14years old, and no part of the website is targeted to individuals under the age of 14 years. If you are under the age of 14 years, please do not use the website in any way. We will take appropriate steps to erase any personal information of persons under the age of 14 years.
We collect information in the following ways:
It is possible to provide us with your personal data for the purpose of signing a service contract or to communicate with us.
Like most websites, we use "cookies" that help us to make our site - and the way you use it - better. "Cookies" are small text files that are downloaded and stored on your device when you visit a website. "Cookies" are widely used by website owners to provide you with a good internet experience and also to provide information that can help them to improve the websites.
Our website uses "cookies" with the following purpose:
We do not use "cookies" to:
Most internet browsers automatically accept "cookies" unless you change your browser settings. If you want to restrict, block, or erase cookies set by websites, you can usually do so through your browser settings. These settings are usually found in the "options" or "favorites" menu of your internet browser. Please note that if you set your Internet browser preferences to block all "cookies", you may not have access to all or part of our website. Unless you have not adjusted your internet browser settings to block "cookies", our site will use "cookies".
We will use your personal information for the following purpose:
We will not do anything with your information beyond the scope of your legitimate expectations.
According to the legislation in the field of personal data protection, it should be a "e;legal basis"e; for the use of personal information. The legal grounds are set out in the General Regulation on the Personal Data Protection (Regulation 2016/679) and the relevant national data protection legislation.
There is consent when we ask you whether we can use your information for a specific purpose and you agree with it.
We have a legal basis to use your information when processing is necessary to comply with a statutory or regulatory obligation.
We have reasons to use your personal information when we are in the process of entering into a contract with you or performing a contractual obligation. For example, when you use any of our services or apply to work with us.
We may use your personal information where the processing is necessary to protect the interests of life and health. For example, if there is a case where we need to contact someone unexpectedly or share his or her information with Emergency Service.
We have reason to use your personal information when it is reasonably necessary for us (or a third party) to do so in our (or a third party) "legitimate interest" (provided that the purpose for which the information is used is fair and does not have an unjustified impact on your rights). We believe that our legitimate interests include all the day-to-day activities that Galaximatic Ltd. performs with personal information.
We rely on legitimate interests only when we believe that any potential impact on you (positive and negative), its degree of privacy impact, and your rights under personal data protection laws have no precedence over our (third party) interest in using your information in this way.
When we use sensitive personal information, we require an additional legal basis in accordance with the legislation on the personal data protection, so we will do on the grounds of your explicit consent or other means at our disposal for the use of this type of information (for example, if you have made it publicly available, if we have to process it for employment, social security or social protection purposes, for your vital interests or, in some cases, if it is of public interest in doing so).
Galaximatic Ltd. applies specific criteria to determine how long your information will be stored, specified on the basis of legal and operational considerations, taking into account the guidelines of the Commission for Personal Data Protection. The principle is that we store it for a period no longer than is necessary for the purposes for which it was collected.
We store your collected personal information, when we have an ongoing legitimate business need for that (for example, to provide you with a service you have requested or to comply with the applicable legal, tax or accounting requirements). When we do not have a legitimate business need to process your personal information, we will erase or anonymize it, and if this is not possible (for example, because your personal information has been stored in backups), then we will securely store your personal information and will isolate it from any other processing until erasure become possible.
We will only use your information for the purposes for which we have collected it. Under no circumstances will we sell or share your personal information with any third party for its purposes, and you will not receive marketing communications from any other organization as a result of sharing your data with us.
We will only share your data for the following purposes:
When we use external data processing companies on our behalf, we perform a complete comprehensive verification of these companies and conclude a contract that sets out our expectations and requirements, especially with regards to the way they manage the personal data collected or to which they have access.
In some cases, we may decide to use the services of a supplier outside of the European Economic Area (EEA), which means that your personal information is transferred, processed and stored outside the EEA. You should be aware that in general the legal protection of personal information in non-EEA countries may not be equivalent to the level of protection granted in the EEA. However, we undertake steps to introduce appropriate precautionary measures to protect your personal information when processed by the provider, such as using the standard contractual clauses approved by the European Commission. By providing us your personal data, you agree to this transfer, storage or processing outside EEA.
Wherever possible, we use publicly available sources to keep your personal data up-to-date. We would be grateful if you inform us in the case of change of your contact details.
The legislation in the field of Personal Data Protection entitles you to request access to the personal information that Galaximatic Ltd. has for you as well as to request rectification of possible inaccuracies.
If we collect and process your personal information on the basis of your consent, you have the right at any time to withdraw your consent. The withdrawal of your consent does not affect the lawfulness of the consent-based processing prior to its withdrawal or the processing of your personal information on any other legal basis.
You have the right to request the erasure of personal data relating to you, restriction of the processing or to object to the processing of your personal data.
If you wish to exercise any of your rights, please to fill out a special form (provided on request) and send it together with copies of two different ID documents that provide photo identification and confirm your address, such as passport, driver's license and more. In addition, please to provide additional information about the nature of your relationship with us as this will help us to determine the location of your personal data. You can send us the documents by post to: Bulgaria, Sofia - 1000, Oborishte District, 21B Moskovska Street, 3rd floor, Lena Marinova. As an alternative way of contacting us, you can send a copy of the completed form, along with the scanned copies of the two IDs described above, to the following email: firstname.lastname@example.org. We will respond to you within 30 days of receipt of your written request and copies of the identity documents.
You may also lodge a complaint regarding the processing of your personal data to the Commission of Personal Data Protection (www.cpdp.bg) - the Bulgarian Supervisory body on the compliance with the legislation on personal data protection.
If you have questions, comments or suggestions, you can inform us about them on: email@example.com