1. Information about the data controller
BENEFIT SYSTEMS BULGARIA EOOD, registered in the Bulgarian Commercial Register under UIC: 203418971, with headquarters in Sofia 1612, Krasno Selo, 11, Junak 11-13 street, contact phone +359 2 820 57 70 or + 359 879 280 284, info@benefitsystems.bg
2. Personal data controller and main purpose of data processing
2.1. For contact with data controller:
BENEFIT SYSTEMS BULGARIA EOOD
11-13 Yunak str., fl.1, Sofia,
phone +359 2 820 57 70 or + 359 879 280 284
dpo@benefitsystems.bg
3. Data we process
3.1. We process your following personal data: three names, address, email address, telephone number, education information, education level, previous employer information and occupation, and other data included in your resume.
4. Purposes and basis for data processing
4.1. In order to be able to assess to what extent you are eligible for the relevant position for which you apply, we collect the following personal data: three names, address, email address, telephone number, date of birth, education information, educational qualification, previous employers and occupied positions, as well as other data that is included in your resume.
4.1.1. For preliminary evaluation: CV /CV submitted by you, three names, email, telephone number, date of birth, information on completed education, education, information about previous employers and occupations;
4.1.2. After a positive evaluation in order to make contact with you for an interview: three names, address, email address, phone number.
4.1.3. Preparation of an individual offer: three names, e-mail address, telephone number. Benifit Systems Bulgaria treats the data listed in this point on the basis of its legally recognized (legitimate) interest in choosing the most suitable persons who have applied for a particular position, meeting the criteria we have set.
4.2. With your consent
After consent, if you are not employed by Benifit Systems Bulgaria EOOD for the position you are applying for, we process your following personal data: three names, address, email address, telephone number, date of birth, completed information education, education, information about previous employers and job positions, and other data that are included in your CV that you transmit to us, as the data is stored by Benefit Systems Bulgaria EOOD for a period of one year after being provided to be used for participation in selection for other positions within the company which are free during this period and to contact you for such positions at the discretion of Benifit Systems Bulgaria EOOD.
The consent given may be withdrawn at any time. If you withdraw your consent for the processing of personal data for some or all of the data described above, Benefit Systems Bulgaria EOOD will not use your personal data and information for the purposes set out above. Withdrawal of consent does not affect the legality of consent-based processing prior to its withdrawal.
Consent can be withdrawn as it is stated in writing to : dpo@benefitsystems.bg.
5. Data processing on its own or through third parties, data transfer
5.1. Benefit Systems Bulgaria EOOD process your personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, itself or through third parties handling personal data. If the Benefit Systems Bulgaria EOOD uses third parties who process your personal data, it is done by assigning upon which all due care for the protection of personal data is provided and Benefit Systems Bulgaria EOOD remains solely in charge for the protection of the data.
5.2. If Benefit Systems Bulgaria EOOD uses third party processing your personal data, which is located outside the European Union, it will be done after explicit decision of the European Commission or after having appropriate safeguards for adequate protection of your personal data.
5.3. Personal data may be provided to the following categories of recipients:
5.3.1. Persons processors an award from the Benefit Systems Bulgaria EOOD including:
a) postal operators with a view to sending consignments containing contracts, supplementary agreements and other documents and the need to certify the identity at the time of service;
b) companies which, through procurement, maintain equipment and software and hardware used for the processing of personal data;
c) persons employed on civil contract of Benefit Systems Bulgaria EOOD supporting processes and work organization in the company and others.
5.3.2. Persons processing data in their own name
a) Authorities, institutions and persons to whom the controller is required to provide personal data under current legislation (such as NRA, NSSI, Labor Inspectorate, Personal Data Protection Commission or similar).
6. Erasure of Data
6.1. As a rule, we erase your personal data you have provided us with to apply for a position after the selection process, unless you have given us the explicit consent in item 4.3. above or the statutory deadline for storing the data has not expired.
6.2. Your data can also be anonymised . Anonymisation is an alternative to data erasure. In case of anonymization, all personal identifiable elements / elements that allow your identification / are irreversibly deleted. For anonymized data, there is no regulatory obligation to delete as it does not constitute personal data.
6.3. In order to achieve maximum security when processing, transferring and storing your data, we may use additional security mechanisms such as encryption, pseudonymisation, and more.
7. How do we protect your personal data?
To ensure adequate data protection for the company and its customers, we apply all necessary organizational and technical measures provided by the Personal Data Protection Act.
The company has established structures to prevent security breach, had appointed a Data Protection Officer, that supports the security and security processes of your data.
In order to acheive maximum security when processing, transferring and storing your data, we may use additional security mechanisms such as encryption, pseudonymisation, and more.
8. Why and how we use automated algorithms
We do not use automated algorithms to process your data.
9. Your rights in relation to the processing of your personal data
9.1. Right to information: You have the right to ask us whether and to what extent we process your personal data.
9.2. Right of Correction: If you process incomplete or incorrect / incorrect data, as well as any change you have, you may at any time ask us to correct or supplement them.
9.3. Right to Erasure: You may request the erasure of personal data relating to you in the event that we process this data without a legal basis. Please note that there may be reasons why erasing should not occur immediately due to the availability of a regulatory requirement for data retention.
9.4. Right to restrict processing: You can request a limitation of the processing customizable data if:
a) you dispute the correctness of the data for the period in which we must verify its accuracy; or
b) the processing of the data is without legal basis, but instead of deleting it, you want its limited processing; or
c) we no longer need these data (for the intended purpose), but you need them for the establishment, exercise or protection of legal claims; or
d) you have filed an objection to processing the data, pending verification that the legal grounds of the controller.
9.5. Right to data portability: You may ask us to provide the personal data you have entrusted to our care in an organized, orderly, structured, generally accepted electronic format if:
a) process the data under the contract and based on the declaration of consent that may be withdrawn or a contractual obligation; and
b) processing is carried out automatically.
9.6. Right of objection: If we handle data about goals / tasks, a task of public interest or the exercise of official authority that has been provided to us, or we have indicated that we are processing the data of our legitimate interest, you can object to the processing of the data.
9.7. Right to appeal: If you believe that we are in violation of Bulgarian or European law, please contact us to clarify the matter. Of course, you have the right to complain to the regulatory bodies within the EU and the Republic of Bulgaria in the institutions responsible for the protection of personal data.
10. Competent authorities for the protection of personal data:
Commission for Protection of Personal Data, Sofia, 1592, 2 Prof. Tsvetan Lazarov Blvd., tel .: + 3592 / 91-53-518, E- Mail : kzld@cpdp.bg
In case you want to exercise any of these rights, please contact us through the contacts provided in item 2 of this document.
11. Updates and changes to the Policy
In order to apply the most up-to-date protection measures and to comply with current legislation, we will regularly update this policy.
We invite you to regularly review the current version of this policy to be constantly informed about how we take care of the protection of the personal data we collect.
The policy was last updated on 25.05.2018.
