General Data Protection Regulation

• • To take steps at your request to sign a contract if you are a candidate for work with us;
  • To execute a contract or take steps to conclude a contract with a trading partner.
  • To conclude a contract for the supply of electricity
  • Compliance with a statutory duty applicable to the Administrator;
  • For the legitimate interests of the Administrator or a third party;
  • You explicitly obtained your consent when requesting the form of the website www.energysupply-bg.com;
  • To perform duties and exercise of special rights of the administrator under labor and social security law for the processing of special categories of personal data; ulfilling its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.andatory information on the rights of individuals to protect personal dataInformation about the company processing your data: 
    

    Name	Energy Supply EOOD
    EIK/Bulstat	175392783
    Headquarters and management address	Sofia 1000, Gr. Ignatiev Str. 2, Fl. 3
    Mailing address	Sofia 1000, Gr. Ignatiev Str. 2, Fl. 3
    Phone	+ 359 2 984 8785;
    Email address	office@energysupply-bg.com
    Website	www.energysupply-bg.com

    Information on the competent supervisory authority for the protection of personal data

    Name	Commission for Personal Data Protection
    Headquarters and management address	Sofia 1592 Prof. Tsvetan Lazarov Blvd., 2
    Mailing address	Sofia 1592 Prof. Tsvetan Lazarov Blvd., 2
    Phone	02 915 3 518
    Website	www.cpdp.bg

     Reason for collecting, processing and storing your personal data

    Art. 1. Energy Supply EOOD collects and processes your personal data in connection with the conclusion and execution of contracts with the Company on the grounds of Art. 6, para. 1 and Art. 9, para. 2, Regulation (EC) 2016/679 (GDPR), and in particular on the following grounds:

  Goals and principles of collecting, processing and storing your personal data

  Art. 2. (1) Upon conclusion of a contract with a trading partner or a client we collect and process personal data about the names of the legal representative of the legal person – a party to the contract, for the purposes of individualization of the party to the contract and its execution.

  (2) The contact details of the legal representative or contact person shall be official information and as such shall not be considered as personal data.

  (3) Upon conclusion of a contract with a partner or a natural person, we collect and process personal data about the full names, address by identity card and telephone number for the purposes of individualizing the party to the contract and its execution and making an official correspondence.

  Art. 3. (1) We collect and process the personal data you provide to us by applying for employment with Energy Supply EOOD, including for the following purposes:

  • individualisation of the applicant;
  • making contact with you and conducting communication;
  • selecting candidates.

  (2) We keep your personal data you have provided to us for the entire duration of the job announcement, and in the event that we would like to continue storing your data after this period for the purpose of further communication with you, we will send you by email, to give your explicit consent that your data will continue to be stored.

  Art. 4. We comply with the following principles when processing your personal information:

  • legality, good faith and transparency;
  • limitation of processing goals;
  • relevance to processing goals and minimization of collected data;
  • accuracy and timeliness of the data;
  • Restriction of storage in order to achieve the objectives;
  • integrity and confidentiality of the processing, and ensuring an adequate level of security of personal data.

  Art. 5. When processing and storing personal data, the Administrator may process and store personal data to protect its legitimate interests:

What kind of personal data collects, processes and stores our company

Art. 6. (1) Energy Supply EOOD performs the following operations with the personal data provided by you as job applicants for the following purposes:

• Conclusion and performance of an employment or civil contract – the purpose of this operation is to make a selection for the appointment of employees or persons under a civil contract, the conclusion of the relevant contract and its administration and execution by the company.

(2) The administrator does not collect or process personal data of the job applicants, which concern the following:

• reveal racial or ethnic origin;
• disclose political, religious or philosophical beliefs, or membership of trade unions;
• genetic and biometric data or data on sexual life or sexual orientation.

(3) The administrator shall not collect and process health data of the candidates for employment, except after a selection for the purpose of concluding an employment contract and determining suitable working conditions.

(4) The personal data are collected by the Administrator from the persons to whom they refer.

(5) The administrator does not perform automated decision making with data.

Art. 7. (1) Energy Supply EOOD  performs the following operations with the personal data provided by you as legal representatives or proxies of legal persons – commercial partners / clients, including as natural persons – partners / clients, for the following purposes:

• Conclusion and execution of a trade deal with a client or a partner – the purpose of this operation is to conclude and execute a contract with a trading partner or a client and its administration.

(2) The personal data are collected by the Administrator from the persons to whom they refer also from the Commercial Register to the Registry Agency.

(3) The administrator does not perform automated decision making with data.

Art. 8. (1) Energy Supply EOOD performs the following operations with the personal data provided by you as representatives or proxies of clients:

• Conclusion of a contract for the supply of electricity to a natural person or the legal representative of a legal entity.

(2) The personal data are collected by the Administrator from the persons to whom they refer.

(3) The administrator does not perform automated decision making with data.

Art. 9. (1) Energy Supply EOOD performs the following operations with the personal data provided by you as persons who have made a request through the website of the Company www.energysupply-bg.com

• Processing queries sent through the form of the website

www. energysupply-bg.com  – The purpose of this operation is to contact the requestor by email for purposes of responding to the requestor, identifying the data subject as an applicant and sending a response to a query or offer.

(2) The personal data are collected by the Administrator from the persons to whom they refer.

(3) The administrator does not perform automated decision making with data.

Terms of storage of your personal data

Art. 10. (1) Energy Supply EOOD keeps your personal data as a candidate for work for a period not longer than the availability of a current job offer. After the expiration of the notice or the completion of the selection, Energy Associate Ltd takes the necessary care to erase and destroy all your data without undue delay or to anonymize them (i.e. to bring them in a form that does not reveal your personality) unless you give your explicit consent that your data will continue to be stored and processed for the future.

(2) Energy Supply EOOD keeps the personal data of the legal representatives of the legal entities – parties to the contract or the natural persons – partners or clients under contract with the company indefinitely, for the purpose of preserving the legitimate interest of Energy Supply EOOD and the fulfillment of the legal its obligations to state bodies and institutions.

(3) Energy Supply EOOD keeps the personal data of the persons who have made a request through the website of the Company – www.energysupply-bg.com, until the explicit withdrawal of the given consent by the individual.

(4) The Administrator shall notify you in case the period for storing the data needs to be extended in order to fulfill a statutory obligation or in view of the legitimate interests of the Administrator or otherwise.

(5) The administrator shall store the personal data that he / she needs to keep under the applicable legislation for the envisaged term, which may exceed the term of the contract.

Transmitting your personal data for processing

Art. 11. (1) The administrator may, at its own discretion, transmit all or part of your personal data to processors for the fulfillment of the processing goals you have agreed to, subject to the requirements of Regulation (EC) 2016/679 (GDPR) .

(2) The Administrator notifies you in case of intent to transfer some or all of your personal data to third countries or international organizations.

Your rights in collecting, processing and storing your personal data

Withdrawal of consent to process your personal data

Art. 12. (1) If you do not wish all or any of your personal data to continue to be processed by Energy Supply EOOD for any or all processing purposes, you may at any time withdraw your consent to processing by sending a request in free text or filling in the form in Appendix 1.

(2) The Administrator may ask you to certify your identity and identity with the person to whom the data relate by requesting you to present an identity document on site.

(3) Withdrawal of consent does not affect the merits of processing the personal data you provide until the withdrawal of the consent.

(4) Energy Supply EOOD may continue to process part or all of your data if there is a legal obligation for this or for the purpose of protecting its legitimate interests.

(5) Regarding legal representatives and persons-partners or clients under a contract with the company shall apply par. 4.

Right of access

Art. 13. (1) You have the right to request and obtain from the Administrator a confirmation that personal data relating to you is being processed.

(2) You have the right to access the data relating to you as well as information relating to the collection, processing and storage of your personal data.

(3) The Administrator shall provide you, upon request, with a copy of the processed personal data relating to you in electronic or other appropriate form.

(4) The provision of access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of repeatability or excessive demand.

Right of correction or completion

Art. 14. You have the right to ask the Administrator to:

• correct inaccurate personal data associated with you;
• fill in the incomplete personal data associated with you.

Right to delete (“to be forgotten”)

Art. 15. (1) You have the right to ask the Administrator to delete any or all personal data related to you and the Administrator has the obligation to delete them without undue delay when any of the following reasons exists:

• personal data is no longer needed for the purposes for which it was collected or otherwise processed;
• You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
• You object to the processing of personal data related to you, including for direct marketing purposes, and there are no legitimate grounds for the processing that will take precedence;
• personal data has been tampered with;
• personal data must be deleted to comply with a legal obligation under EU law or the law of a Member State that applies to the Administrator;
• personal data have been gathered in connection with the provision of information society services.

(2) The administrator is not obliged to delete the personal data if he / she keeps them and processes them:

• exercising the right to freedom of expression and the right to information;
• to comply with a legal obligation that requires treatment provided for under EU law or the law of the Member State that applies to the Administrator or for the performance of a public interest task or the exercise of official authority;
• for reasons of public interest in the field of public health;
• for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
• for the establishment, exercise or protection of legal claims.

(3) In the event that you exercise your right to be forgotten, the Company will delete all your data, except your three names as a candidate for employment, for reporting purposes.

(4) The data of legal representatives and natural persons-partners / clients under a contract with the company shall continue to be stored and processed, despite a request for forgotten, on the grounds of observance of a legal obligation of the company, observance of the legitimate interest and establishment, the protection of legal claims.

(4) In order to exercise your right to be forgotten, it is necessary to send a request in free text or to fill in the form in Appendix 2 and to identify yourself with an identity document on the spot.

Right of limitation

Art. 16. You have the right to request from the Administrator to limit the processing of related data when:

• contest the accuracy of personal data for a period that allows the Administrator to verify the accuracy of the personal data;
• the processing is illegal, however you do not want to delete the personal data, but only to limit its use;
• The administrator no longer requires personal data for the purposes of processing, but you require them to establish, exercise or protect your legal claims;
• You have reproached the processing pending verification that the legal grounds of the Administrator have an advantage over your interests.

Right of portability

Art. 17. (1) If you have consented to the processing of your personal data or the processing is necessary for the execution of the agreement with the Administrator, or if your data is processed in an automated manner, you can, after you have been identified by the Administrator:

• ask the Administrator to provide you with your personal data in a readable format and transfer it to another Administrator;
• ask the Administrator to transfer your personal data directly to an administrator you provide when it is technically feasible.

(2) You may exercise your right of portability by sending a request in free text or by completing the form in Appendix 3.

Right to receive information

Art. 18. You may request the Administrator to inform you of all recipients to whom personal data for which correction, deletion, or limitation of the processing has been requested has been disclosed. The administrator may refuse to provide this information if this would not be possible or would require disproportionate effort.

Right of objection

Art. 19. You may object at any time to the processing of personal data by the Administrator that relates to you, including if it is being processed for profiling or direct marketing purposes.

Your rights to violate the security of your personal information

Art. 20. (1) If the Administrator detects a breach of security of your personal data that may pose a high risk to your rights and freedoms, he shall notify you without undue delay of the violation as well as of the measures taken or to be taken .

(2) The administrator is not obliged to notify you if:

• has taken appropriate technical and organizational measures to protect the data affected by the breach of security;
• has subsequently taken measures to ensure that the violation will not lead to a high risk for your rights;
• Notification would require disproportionate efforts.

Individuals to whom your personal information is provided

Art. 21. For the purpose of processing your personal data and performing the contract, Energy Supply EOOD may provide your data to third parties who process personal data that comply with all legal and security requirements for the processing and storage of your personal data.

Art. 22. The administrator does not transfer your data to third countries.

Art. 23. In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows:

Art. 22. You may exercise all of your rights to protect your personal data through the forms enclosed with this information. Of course, these forms are not mandatory and you can make your claims in any form that contains a statement about it and identifies you as the data holder.

Energy Supply EOOD ensures that it will refer to this Mandatory Information with a link to its website, by indicating or otherwise appropriately ensuring that you have the opportunity to become familiar with its content.

ANNEX 1

WITHDRAWAL OF CONSENT FOR PROCESSING PURPOSES 

Your name*:

Your contact details (email address, phone)*: 

To

☐ I withdraw my consent to collect, process and store the following personal data provided by me:

☐ Any personal data I provide

☐Only the following personal data …………………………………………………………….

For the following purposes:

☐The following purposes: …………………………………….

………………………………………………………….

☐All purposes

☐ I declare that I am aware of the company’s terms of service after the withdrawal of the consent.

In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows:

Signature:………………………….

ANNEX 2

REQUEST “TO BE FORGOTTEN”

Your Name*:

Feedback data (e-mail, phone) *:

To

Please delete from your databases all personal data you collect, process and store provided by me or by third parties that are related to me.

I declare that I am aware that some or all of my personal data may continue to be processed and stored by the controller for the purpose of performing its legal obligations.

In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows:

Signature:………………………….

ANNEX 3

REQUEST FOR PORTABILITY OF PERSONAL DATA

Your name*:

Your contact details (e–mail, phone)*:

To

I ask that all personal data relating to me that are collected, processed and stored in your databases be sent to:

☐e-mail:

☐Administrator – data recipient:

Please personify my personal data in the following format:☐XML

☐JSON

☐CSV

☐Other:

I wish my personal data in the selected format to be passed on to me / by the administrator I specified:

☐The specified email or API ……… ..

☐The physical optical or electronic media (CD, DVD, USB) of your address

In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows:

Signature:………………………….

ANNEX 4- REQUEST FOR DATA CORRECTION

Your Name :

Contact details (e-mail, phone *):

To

Please provide the following personal data you collect, process and store provided by me or third parties that are related to me to be corrected as follows:

Details to be corrected:

………………………………………………………..

Please to be corrected as follows:

………………………………………………………..

In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows:

Signature:………………………….