Privacy Policy
Mandatory information on the rights of data protection persons (Privacy notice)
Information about the Personal Data Administrator
Name Direkt.BG EOOD
UIC / BULSTAT: 175413462
Headquarters and address of management: 1309 Sofia 7/1 Raina Knyaginya Str
E-mail: office@direct.bg
Phone: 02 928 98 98
Information on the competent supervisory authority
Title: Commission for Personal Data Protection
Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
Correspondence data: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
Phone: 02 915 3 518
Email: kzld@government.bg , kzld@cpdp.bg
Website: www.cpdp.bg
Direkt.BG EOOD operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
Grounds for collecting, processing and storing your personal data
Art. 1. (1) Direct.BG EOOD collects and processes your personal data in connection with the provision of transport and courier services when concluding contracts with the company pursuant to Art. 6, para. 1, Regulation (EU) 2016/679, and in particular on the basis of the following:
Explicit consent received from you as a client;
Fulfillment of the obligations of Direct.BG EOOD under a contract with you;
Compliance with a legal obligation that applies to Direct BG EOOD;
For the purposes of the legitimate interest of Direct.BG EOOD.
(2) Direct.BG Ltd. is an administrator of personal data regarding your data as users of our services. Regarding the personal data that you provide using our services, Direct.BG EOOD acts as a processor of personal data.
Goals and principles in the collection, processing and storage of your personal data
Art. 2. (1) Direct.BG Ltd. collects and processes personal data that you provide to us in connection with the use of our services, including for the following purposes:
creating a profile and providing full functionality in providing our services
individualization of a party to the contract;
accounting purposes;
statistical purposes;
protection of postal security;
ensuring the implementation of the assigned courier or transport service and more precisely the information provided for the sender and recipient of your shipment;
sending information messages, recommendations for improving the use of the platform, etc.
improving and individualizing the service by offering you suitable renewal offers and other products and services that may be of interest to you;
(2) Direct.BG Ltd. observes the following principles in the processing of your personal data:
legality, good faith and transparency;
restriction of processing purposes;
relevance to the purposes of processing and minimizing the data collected;
accuracy and timeliness of data;
limitation of storage in order to achieve the objectives;
integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.
(3) When processing and storing personal data, Direkt.BG EOOD may process and store personal data in order to protect the following legitimate interests:
fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal bodies.
What types of personal data does Direct.BG EOOD collect, process and store?
Art. 3. (1) Direct.BG EOOD performs the following operations with personal data for the following purposes:
Registration of a user on the website regarding the assignment of a courier or transport service - the purpose of this operation is to create a profile to be associated with the service used and to manage the content of the service through the client panel, according to your personal wishes.
Assignment of a single order for execution without a user profile - the purpose of this operation is to conclude and execute a one-time execution contract. The contract is considered concluded with the delivery of the postal item to the courier.
Sending information messages - the purpose of this activity is to administer the process of sending messages to customers that relate to improvements or changes in services.
Sending a newsletter (newsletter) - the purpose of this operation is to administer the process of sending newsletters to customers who have stated that they wish to receive;
Location data - if you are an executor of an order from the system, your location will be shared with the person in charge of your administrator, as well as with the contracting authority whose order you are executing.
(2) Direct.BG EOOD processes the following categories of personal data and information for the following purposes and on the following grounds:
Data: Your personal data (name and surname, address, e-mail, telephone)
Purpose for which the data are collected: 1) User registration; 2) Making contact with the user and sending information to him, including if desired - to send newsletters and advertising messages; 3) Carrying out the commercial activity of the company, namely taking a shipment from the exact address from a specified contact person and telephone number, as well as for the delivery to a specific recipient.
Grounds for processing your personal data - Carrying out its legal commercial activities in accordance with current legislation, including as an operator providing non-universal postal services, by accepting the general conditions and registration on the website and awarding a contract for execution, between Direkt.BG EOOD and you create a contractual relationship, on what basis we process your personal data - art. 6, para. 1, p. (b) GDPR.
Additional data provided by you - When ordering a specific order, if you wish, you can add information that you consider necessary and important for the correct execution of the order and the bill of lading to it.
Purpose for which the data are collected: Supplementing the information for the correct execution of the delivery or documenting the correct design of the bill of lading.
Grounds for data processing: By accepting the general conditions, registration on the website and awarding an order for execution, a contractual relationship is created between Direct.BG EOOD and you, on which basis we process your personal data - Art. 6, para. 1, p. (b) GDPR.
Other data that Direct.BG EOOD processes - We do not collect or process your other personal data.
Your data on the issuance of an invoice to an individual - If you want to be issued an invoice in your capacity as an individual, you must provide your unique civil number.
Purpose for which the data are collected: Issuance of an invoice for making payments under a contract for the provision of courier or transport services.
Grounds for processing your personal data - With the acceptance of the general conditions and registration on the website, or when awarding a contract for execution, between Direct.BG EOOD and you a contractual relationship is created, on which basis we process your personal data - Art. 6, para. 1, p. (b) GDPR.
(3) Direct.BG EOOD does not collect or process personal data that relate to the following:
reveal racial or ethnic origin;
disclose political, religious or philosophical beliefs, or trade union membership;
genetic and biometric data, health data or data on sexual life or sexual orientation.
(4) The personal data are collected by Direct.BG EOOD from the persons to whom they refer.
(5) The company does not perform automated data decision making.
Term of storage of your personal data
Art. 4. (1) Direkt.BG EOOD stores your personal data for a period not longer than the existence of your account on the website. After the expiration of this period, Direct.BG Ltd. takes the necessary care to delete and destroy all your data without undue delay.
(2) Direct.BG EOOD notifies you in case the data storage period needs to be extended in order to fulfill the objectives, fulfill the contract, in view of the legitimate interests of Direct.BG EOOD or other.
(3) Direct.BG EOOD stores the personal data that it is necessary to keep by virtue of the applicable legislation for the relevant period, which may exceed the period of existence of your registration.
Transfer of your personal data for processing
Art. 5. (1) Direkt.BG EOOD may, at its own discretion, transfer part or all of your personal data to personal data processors for the purposes of processing in compliance with the requirements of Regulation (EU) 2016/679.
(2) Direkt.BG EOOD notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations.
Your rights in the collection, processing and storage of your personal data
Withdrawal of consent for the processing of your personal data
Art. 6. (1) If you do not want all or part of your personal data to continue to be processed by Direct.BG Ltd. for specific or all purposes of processing, you can at any time withdraw your consent to processing by filling out the form in your profile or by request in free text.
(2) Direkt.BG EOOD may ask you to verify your identity and identity with the person to whom the data relates.
(3) By withdrawing the consent for the processing of personal data, which is mandatory for the creation and maintenance of your registration for the use of the services, your account will become inactive.
Right of access
Art. 7. (1) You have the right to request and receive from Direkt.BG EOOD confirmation whether personal data related to you are processed.
(2) You have the right to access data related to it, as well as information related to the collection, processing and storage of your personal data.
(3) Direct.BG Ltd. provides you, upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.
(4) Providing access to the data is free of charge, but Direct.BG EOOD reserves the right to impose an administrative fee in case of repetitive or excessive requests.
Right to correct or complete
Art. 8. You can correct or fill in the inaccurate or incomplete personal data related to you directly through your profile on the website or by making a request to Direct.BG EOOD.
Right to delete ("to be forgotten")
Art. 9. (1) You have the right to request from Direct.BG EOOD the deletion of the personal data related to you, and Direct.BG EOOD has the obligation to delete them without undue delay, when there is any of the following reasons:
personal data are no longer needed for the purposes for which they were collected or otherwise processed;
You have withdrawn your consent on which the data processing is based and there is no other legal basis for the processing;
You object to the processing of personal data related to you, including for the purposes of direct marketing, and there are no legitimate grounds for processing to take precedence;
personal data have been processed illegally;
personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State, which applies to Direct.BG EOOD;
(2) Direct.BG EOOD is not obliged to delete personal data if it stores and processes them:
to exercise the right to freedom of expression and the right to information;
to comply with a legal obligation requiring processing provided for in EU or Member State law applicable to the Administrator or for the performance of a task in the public interest or in the exercise of official powers conferred on him or her;
for reasons of public interest in the field of public health;
for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
for the establishment, exercise or defense of legal claims.
for the protection of postal security regarding assistance in detecting violations and crimes committed against or through the postal network.
(3) In order to exercise your right to "forget", you should submit a request through the option in your profile or a written request sent to Direkt.BG EOOD, as well as to verify your identity and identity with the person to whom the data relates to Direct. BG EOOD by presenting your ID card on the spot for identification purposes and, if necessary, enter your login details in the profile of the data subject to an employee of Direct.BG EOOD.
(4) Direct.BG EOOD does not delete the data that it has a legal obligation to store, including for protection in connection with court claims against it or proof of their rights.
Right of restriction
Art. 10. You have the right to request Direct.BG EOOD to limit the processing of data related to you when:
dispute the accuracy of personal data for a period that allows Direct.BG EOOD to verify the accuracy of personal data;
the processing is illegal, but you do not want your personal data to be deleted, only its use to be restricted;
Direct.BG EOOD no longer needs personal data for the purposes of processing, but you require them for the establishment, exercise or protection of your legal claims;
You have objected to the processing pending verification of whether the legal grounds of Direct.BG EOOD take precedence over your interests.
Right of portability
Art. 11. You can at any time download the data stored and processed for you in connection with the use of the services of Direct.BG EOOD, directly through your account or by request by email.
Right to receive information
Art. 12. You can ask Direct.BG EOOD to inform you about all recipients to whom personal data have been disclosed. Direct.BG EOOD may refuse to provide this information if this would be impossible or would require a disproportionate effort.
Right to object
Art. 13. You can object at any time against the processing of personal data by Direkt.BG EOOD, which relates to you, including if processed for the purposes of profiling or direct marketing.
Your rights in the event of a breach of the security of your personal data
Art. 14. (1) If Direkt.BG EOOD finds a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, we will notify you without undue delay of the breach, as well as the measures that have been taken or are to be taken.
(2) Direct.BG EOOD is not obliged to notify you if:
has taken appropriate technical and organizational protection measures with regard to data affected by the security breach;
has subsequently taken steps to ensure that the breach does not pose a high risk to your rights;
notification would require a disproportionate effort.
Persons to whom your personal data is provided
Art. 15. For delivery and after a request submitted by you, Direct.BG EOOD transmits the necessary information to the executing officer or subcontractor, who has the right to provide this information to a third party when necessary in connection with the execution of the order and only when this shall be required of him by the third party to the contract.
Art. 16. The administrator does not transfer your data to third countries.
Other provisions
Art. 17. In the event of a breach of your rights under the above or applicable data protection legislation, you have the right to lodge a complaint with the Data Protection Commission as follows:
Title: Commission for Personal Data Protection
Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
Correspondence data: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
Phone: 02 915 3 518
Email: kzld@government.bg , kzld@cpdp.bg
Website: www.cpdp.bg
Art. 18. You can exercise all your rights regarding the protection of your personal data through any form that contains a statement to that effect and identifies you as the owner of the data.
Art. 19. If the consent relates to a transfer, the controller shall describe the possible risks of data transfer to third countries in the absence of a decision on adequate protection and appropriate remedies.
Art. 20 (1). When you assign Direct.BG EOOD to process personal data of a third party for the purposes of using the service, Direct.BG EOOD acts as a processor of personal data.
(2). In the cases under par. 1, Direct.BG EOOD acts only on your instructions as a user of the service and only to the extent that it can have control over the personal data that you process. Direkt.BG EOOD has no control over the content and data that you as a user of the service choose to upload to the service (including if this data includes or does not include personal data). In this case, Direct.BG EOOD has no role in the process of deciding whether the user uses the service for processing personal data, for what purposes and whether they are protected. Accordingly, the responsibility of Direct.BG EOOD in this case is limited to 1) compliance with the instructions of the user of the service according to the contract and the general conditions and 2) providing information about the service and functionalities through its interface.
DATA PROTECTION OFFICER
Personal Data Protection Officer: Kiril Bedrozh, address: 1309 Sofia, 7/1 Raina Knyaginya Str., email: office@direct.bg,
tel .: 0878789898