Privacy Policy

General information

From May 25, 2018. a new General Data Protection Regulation adopted by the European Union enters into force. The regulation aims to ensure the protection of data of individuals from all EU Member States and to harmonize the regulations for their processing.

As a controller of personal data as a commercial company, Diktech Ltd. meets all the requirements of the new regulation, collecting only personal data to the extent necessary for the execution of the request, and keeps them responsibly and legally.

Information about the Personal Data Administrator

1. Name "Diktech" Ltd.
2. UIC / BULSTAT: 205683018
3. VAT No .: BG205683018
4. Gabrovo, Zornica 19 str.
5. Accountable person: Iliya Dikov
6. E-mail: info@diktech.bg
7. Tel. +359 889 22 00 57

Information on the competent supervisory authority

1. Title: Commission for Personal Data Protection
2. Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
3. Correspondence data: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
4. Phone: 02 915 3 518
5. Email: kzld@government.bg, kzld@cpdp.bg
6. Website: www.cpdp.bg

Diktech Ltd. operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Grounds for collecting, processing and storing your personal data

Art. 1. (1) Diktech Ltd. collects and processes your personal data in connection with commercial activities and concluding contracts on the basis of Art. 6, para. 1, Regulation (EU) 2016/679, and in particular on the basis of the following:

• Explicit consent received from you as a customer;
• Fulfillment of the obligations of Diktech OOD under a contract with you;
• Compliance with a legal obligation that applies to Diktech OOD;
• For the purposes of the legitimate interest of Diktech Ltd.

(2) Diktech Ltd. is an administrator of personal data regarding your data as users of our services and buyers of our products.

Goals and principles in the collection, processing and storage of your personal data

Art. 2 (1) Diktech Ltd. collects and processes personal data that you provide to us as our customers and by concluding a contract with the company, including for the following purposes:

• individualization of a party to the contract;
• accounting purposes;
• statistical purposes;
• protection of information security;
• ensuring the execution of the contract for the execution of the respective order;
• sending information messages, messages about changes in the portfolio of offered products and services, recommendations for improving the use of the website, new and upgraded subscription plans, etc.
• improving and individualizing the services by offering suitable for you product offers, events and other products and services that may be of interest to you;

(2) Diktech Ltd. observes the following principles in the processing of your personal data:

• legality, good faith and transparency;
• restriction of processing purposes;
• relevance to the purposes of processing and minimizing the data collected;
• accuracy and timeliness of data;
• limitation of storage in order to achieve the objectives;
• integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.

(3) In the processing and storage of personal data, Diktech Ltd. may process and store personal data in order to protect its following legitimate interests:

• fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal bodies.

What types of personal data does Diktech Ltd. collect, process and store? ?

Чл. 3. (1) Diktech Ltd. performs the following operations with personal data for the following purposes:

• Conclusion and execution of a trade transaction with a client or partner - the purpose of this operation is the conclusion and execution of a contract with a trade partner or client and its administration;
• Sending information messages - the purpose of this activity is to administer the process of sending messages to customers, which relate to improvements or changes in the product range, exceeded parameters, and expiring services, according to the contract.
• Sending a newsletter (newsletter) - the purpose of this operation is to administer the process of sending newsletters to customers who have stated that they wish to receive.

(2) Diktech Ltd. processes the following categories of personal data and information for the following purposes and on the following grounds:

• Data: Your personal data (name and surname, e-mail, telephone, address)
  • Purpose for which the data are collected: 1) Making contact with the user; delivery of ordered products and sending information and documentation to it, including if desired - to send newsletters and advertising messages;
  • Grounds for processing your personal data - By ordering products to Diktech Ltd. you create a contractual relationship on which basis we process your personal data - Art. 6, para. 1, p. (b) GDPR.
• Other data that Diktech Ltd. processes - Upon entering our website, Diktech Ltd. collects data on the IP address used.
• Your details for issuing an invoice to an individual - If you wish to be issued an invoice in your capacity as an individual, you should provide your unique civil number.
  • Purpose for which the data are collected: Issuance of an invoice for making payments under a concluded contract for the provision of services.
  • Grounds for processing your personal data - By ordering products to Diktech Ltd. you create a contractual relationship on which basis we process your personal data - Art. 6, para. 1, p. (b) GDPR.

(3) Diktech Ltd. does not collect or process personal data relating to the following:

• reveal racial or ethnic origin;
• disclose political, religious or philosophical beliefs, or trade union membership;
• genetic and biometric data, health data or data on sexual life or sexual orientation.

(4) Personal data are collected by Diktech Ltd. from the persons to whom it relates.

(5) The company does not perform automated data decision making.

Term of storage of your personal data:

Art. 4 (1) Diktech Ltd. stores your personal data for a period not longer than necessary to fulfill the contractual relationship. After the expiration of this period, Diktech Ltd. takes the necessary care to delete and destroy all your data without undue delay.

(2) Diktech Ltd. notifies you in case the data storage period needs to be extended in order to fulfill the objectives, fulfill the contract, in view of the legitimate interests of Diktech Ltd. or otherwise.

(3) Diktech Ltd. keeps the personal data that it is necessary to keep by virtue of the applicable legislation for the respective envisaged term, which may exceed the term under the contractual relations between the parties.

Transfer your personal data for processing

Art. 5. (1) Diktech Ltd. may, at its discretion, transfer part or all of your personal data to personal data processors for the purposes of processing in compliance with the requirements of Regulation (EU) 2016/679.

(2) Diktech Ltd. notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations.

Your rights in the collection, processing and storage of your personal data

Withdrawal of consent for the processing of your personal data

Art. 6. (1) If you do not want all or part of your personal data to continue to be processed by Diktech Ltd. for specific or all purposes of processing, you can at any time withdraw your consent to processing by request in free text.

(2) Diktech Ltd. may ask you to verify your identity and identity with the person to whom the data relates.

(3) By withdrawing the consent for processing of personal data, which are obligatory for the fulfillment of the commercial commitment, Diktech OOD has the right to refuse execution.

Right of access

Art. 7. (1) You have the right to request and receive from "Diktech" Ltd. confirmation whether personal data related to you are processed.

(2) You have the right to access data related to it, as well as information related to the collection, processing and storage of your personal data.

(3) Diktech Ltd. provides you, upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.

(4) Providing access to the data is free of charge, but Diktech Ltd. reserves the right to impose an administrative fee in case of recurrence or excessive requests.

Right of correction or completion

Art. 8. You can correct or fill in the inaccurate or incomplete personal data related to you by sending a request in free text to "Diktech" Ltd.

Right to delete ("to be forgotten")

Art. 9.(1) You have the right to request from Diktech OOD the deletion of the personal data related to you, and Diktech OOD has the obligation to delete them without undue delay when there is any of the following reasons:

• personal data are no longer needed for the purposes for which they were collected or otherwise processed;
• You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
• You object to the processing of your personal data, including for direct marketing purposes, and there are no legal grounds for processing to take precedence;
• personal data have been processed illegally;
• personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to Diktech OOD;
• personal data have been collected in connection with the provision of information society services.

(2) Diktech Ltd. is not obliged to delete personal data if it stores and processes them:

• to exercise the right to freedom of expression and the right to information;
• to comply with a legal obligation requiring processing provided for in EU law or the law of a Member State applicable to the Administrator or for the performance of a task in the public interest or in the exercise of official powers conferred on him;
• for reasons of public interest in the field of public health;
• for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
• for the establishment, exercise or defense of legal claims.

(3) In order to exercise your right to "forget", you should submit a written request sent to Diktech OOD, as well as verify your identity and identity with the person to whom the data provided to Diktech OOD refers.

(4) Diktech Ltd. does not delete the data that it has a legal obligation to store, including for protection in connection with court claims against him or proof of their rights.

Right of restriction

Art.10 You have the right to request from Diktech Ltd. to limit the processing of data related to you when:

• challenge the accuracy of personal data for a period that allows the accuracy of personal data to be verified;
• the processing is illegal, but you do not want your personal data to be deleted, only their use to be restricted;
• Diktech Ltd. no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or protection of your legal claims;

Right of portability

Art. 11. (1) You can at any time download the data that is stored and processed for you in connection with trade relations with "Diktech" Ltd. with a request by email.

(2) You can ask Diktech Ltd. to directly transfer your personal data to an administrator specified by you, when this is technically feasible.

Right to receive information

Art.12 You can ask Diktech Ltd. to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested have been disclosed. Diktech Ltd. may refuse to provide this information if this would be impossible or would require a disproportionate effort.

Right to object

Art.13 You can object at any time to the processing of personal data by Diktech Ltd., which relates to you, including if it is processed for the purposes of profiling or direct marketing.

Your rights in the event of a breach of the security of your personal data

Art. 14. (1) If Diktech Ltd. finds a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, we will notify you without undue delay of the breach, as well as of the measures that have been taken or are to be taken.

(2) Diktech Ltd. is not obliged to notify you if:

• has taken appropriate technical and organizational protection measures with regard to the data affected by the security breach;
• has subsequently taken steps to ensure that the breach does not lead to a high risk to your rights;
• notification would require a disproportionate effort.

Other provisions

Art. 15 In the event of a breach of your rights under the above or applicable data protection legislation, you have the right to lodge a complaint with the Data Protection Commission as follows:

1. Title: Commission for Personal Data Protection
2. Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
3. Correspondence data: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
4. Phone: 02 915 3 518
5. Email: kzld@government.bg, kzld@cpdp.bg
6. Website: www.cpdp.bg

Art. 18 You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are optional and you can submit your requests in any form that contains a statement to that effect and identifies you as the data holder.

Art. 19 If the consent relates to a transfer, the controller shall describe the possible risks for the transfer of the data to third countries in the absence of a decision on adequate protection and appropriate means of protection.

Art. 20(1). When you assign Diktech OOD to process personal data of a third party for commercial purposes, Diktech OOD acts as a processor of personal data.

(2). In the cases under par. 1, Diktech Ltd. acts only on your instructions. Diktech Ltd. has no control and is not responsible for the nature and content of the data that you as a user of the service choose.