Privacy Policy
Details the ways in which we collect, process and share users' personal data to ensure maximum protection and transparency.
1. INTRODUCTION
1.1. Jump.BG OOD, entered in the commercial register at the Registration Agency with EIK 201416377, with registered office and address of management: city of Sofia, 70 Tsaribrodska St., floor 4, Office 7, hereinafter referred to for brevity The Company / We is responsible for compliance with the provisions of the General Data Protection Regulation Data 2016/679.
1.2. This Privacy Policy aims to inform natural persons what personal data processes the Company in the capacity of an administrator and for what purposes, to whom it provides them, what are the rights of natural persons in relation to their processed personal data and how they can exercise them.
1.3. The Company is the controller of personal data with respect to the data for which it determines the purposes and the means of their processing. Regarding the personal data that the Company's customers process on their Internet pages, the Company, in its capacity as a server service provider, is a processor. Any customer who manages platform on which it processes personal data must draw up its own Privacy Policy, whatever it may be in accordance with Bulgarian and European legislation.
2. CATEGORIES OF PERSONS WHOSE PERSONAL DATA ARE PROCESSED THROUGH THE WEBSITE AND INTERNET PROFILES IN SOCIAL MEDIA SOCIETY NETWORKS
2.1. In connection with the management and maintenance of the Internet page and the business carried out through it activity, on the one hand, as well as with the provision of information resources in the corporate profiles/pages in social networks and with the implementation of communication with anyone who comes into contact with the Company, on the other hand, we we could process personal data of the following categories of natural persons:
- Visitors of the Internet page and users of the information resources;
- Clients of the Company, incl. registered users;
- Persons making inquiries, requests and reports to us or carrying out other correspondence with us, regardless of the communication channel used;
- Third parties whose information is contained in an inquiry, request, signal or other correspondence addressed to us regardless of the communication channel used;
- Persons who are subscribed to receive a newsletter;
- Persons interacting with our corporate profiles/pages in the various social networks.
3. PERSONAL DATA AND CATEGORIES OF PERSONAL DATA WE PROCESS
Data automatically collected or generated in connection with the use of the website.
3.1. Every time you open our website and the various menus on it, we receive information in the form of an information protocol, which may have the following content:
- Website that referred you to us;
- IP address;
- Date and duration of access;
- Information about the browser and operating system you use;
- Geo location;
- Logs for performing factual actions and legal statements, e.g. confirming familiarity with the Policy for privacy, Terms and Conditions, etc.
Data required to create and maintain user profiles
3.2. This Website provides a registration facility that provides you with many functionalities and ability to purchase services. For registration purposes, you must provide the following personal information data:
- Name and Surname;
- Email address;
- Telephone number;
- Address;
- Invoicing data, if one is requested;
- Password (encrypted);
- Logs for performing factual actions and legal statements, e.g. confirming familiarity with the Policy for privacy, Terms and Conditions, etc.
3.3. Any visitor who has a profile on the social networks Facebook and Google can use these profiles in order to create an automatic registration in this Internet page, by extracting the necessary data.
3.4. In their profiles, registered users have access to additional information, in connection with actions carried out by them on the Internet page, such as information about the order history, information about the used ones services, the possibility of entering data from a bank card for automatic payment of services, etc.
Data of persons processed when sending inquiries, requests and signals or carrying out other correspondence with us
3.5. When you contact us, we may process the following types of personal data relating to next to you:
- First and last name;
- Email address;
- Telephone number (optional);
- Other information contained in the message that constitutes personal data, including and to third parties.
Data of individuals who subscribe to a newsletter
3.6. When you subscribe to receive a newsletter, current news and special offers, we will we process the personal data you provide to us in connection with this subscription. Such data could be:
- Name;
- Email address;
- Confirmation that you are over 16 years of age and give your consent to the processing of personal data for the purposes of ballot when one is given.
3.7. In addition to the above information, we also keep information proving the fact that you subscribed, etc. log. files – IP address, date and time when the subscription statement was made.
Data of individuals interacting with corporate profiles in social networks
3.8. In order to promote our business and the services we provide, we may maintain corporate profiles/pages in various social networks (so-called Facebook, Instagram, YouTube, etc.)
3.9. Social networks are not supported by us and their processing of personal data is not under our control. The persons who maintain the respective social networks have their own general conditions and policies for the protection of the personal data we encourage you to familiarize yourself with.
Cookies and similar technologies
3.10. In connection with the management and maintenance of the website, we may use “cookies“ and other similar technologies to ensure its proper functioning and to analyze the its use. Similar information about the use of different types of “cookies” You can receive from the Cookie Policy page.
4. FOR WHAT PURPOSES AND ON WHAT BASIS DO WE PROCESS YOUR PERSONAL INFORMATION
4.1. The company processes personal data for purposes necessary to fulfill legal obligations:
(1) provision of information to the competent administrative and judicial authorities, or rendering of assistance where applicable;
(2) responding to and fulfilling customer inquiries and requests;
(3) accounting of commercial operations;
4.2. The Company processes personal data for purposes related to the steps taken by you to conclude contract:
(1) creating user profiles;
(2) conclusion and execution of contracts for the services offered by the Company.
4.3. The company processes personal data for purposes related to its legitimate interest:
(1) managing the website and analyzing the way it is used;
(2) ensuring the normal functioning of the Internet page and preventing cyber attacks and other malicious activities;
(3) ensuring the possibility of communication through various channels (incl. the contact form on the website, email correspondence, etc.);
(4) establishing relationships with the Company's corporate profiles in social networks, in t.c. and communication through them;
(5) exercise and protection of legal rights and interests before administrative and judicial authorities, when this is applicable.
4.4. The Company processes personal data for purposes for which express consent is required. This a circumstance is always indicated in the form by which consent is sought. For example, it is based on consent the processing of personal data when subscribing to the newsletter.
5. DISCLOSURE OF PERSONAL INFORMATION
Disclosure of Personal Data to Personal Data Processors
5.1. In certain cases, the Company may disclose certain personal data to strategic partners – subcontractors who work for him by providing services that he needs in the performance of his commercial activity. The personal data that the Company provides to its partners is in a volume that is necessary to perform the assigned work.
Disclosure of Personal Data to Other Personal Data Controllers
5.2. In certain cases, it is possible for the Company to provide personal data to other administrators of personal data. In these cases, the Company always requires other administrators to strictly comply with the provisions of Bulgarian and European legislation in the field of personal data protection.
Disclosure of personal data to competent administrative and judicial authorities
5.3. Disclosure of personal data is also possible when this is necessary to fulfill a legal obligation of the Company or to protect its legal interests or the interests of third parties. Usually like that disclosure of personal data is carried out before the competent administrative and judicial authorities.
6. TRANSFER OF PERSONAL DATA TO THIRD PARTIES
6.1. The company does not transfer personal data to third countries outside the European Union.
7. PROTECTION OF PERSONAL DATA
7.1. The Company takes precautions, including physical, personal and documentary protection, in order to protect your personal data from loss, theft and misuse, as well as from unauthorized access, disclosure, alteration or destruction.
7.2. All employees of the Company are obliged to protect the confidentiality of your personal data, as and comply with applicable organizational and technical measures for their protection. The Company's employees' access to Your data is limited to the extent necessary to perform their duties.
8. PERIOD OF STORAGE OF PERSONAL DATA
8.1. The Company processes your personal data for a period that is necessary to fulfill the purposes set out in this Policy, unless it is required to process them for a longer period. According to the data type and the purposes for which they were collected, a storage period has been set, after which the information is deleted final.
Storage of personal data in order to comply with legal obligations
8.2. Personal data related to and/or contained in documents for which there is a statutory regulated storage periods will be stored for periods provided for in current legislation, unless this Policy does not provide for a longer storage period.
Storage of personal data necessary for the conclusion and execution of contracts
8.3. The personal data necessary for the conclusion and execution of contracts are stored throughout period of validity of a contract and up to 5 years, counted from its termination or execution, unless it is not in law provided for a longer storage period.
Storage of personal data contained in correspondence with the Company
8.4. In cases where there is no statutory period for storing personal data contained in correspondence conducted with the Company, personal data are stored for a period of up to 5 years, counted from the end of the corresponding correspondence and the relations related to it, respectively.
Storage of personal data when processed on the basis of consent
8.5. The Company processes personal data collected on the basis of explicit consent provided, which data are processed until the final achievement of the purposes for which they were collected, or until the withdrawal of consent, which of the two occurred first. You may withdraw your consent at any time.
Storage of cookies
8.6. Detailed information on the storage periods of the various cookies it uses The Company, you can obtain from the Cookie Policy, which is published on the Internet page.
Other terms for processing personal data
8.7. In the event of a legal dispute or proceeding requiring data retention, and/or in the event at a corresponding request from a competent state authority, it is possible to retain data for a period longer than those indicated above terms, until the final conclusion of the dispute or proceedings before all instances and for a period of up to 5 years after its final completion.
9. YOUR RIGHTS
9.1. If you have provided your personal data to the Company, you have the following rights, which you can exercise anytime:
- Right to information – You have the right to receive information about the processed by The Company Your personal data. This Policy is intended to provide you with detailed information about the processing of your personal data during your use of the website.
- Right of Access – if you are a registered user, you can check in your user profile, what your personal data is collected and stored on the website. Also, you you have the right to make corrections to the data included in your profile. Regardless of whether you are registered user or not, You have the right to request and receive information from the Company regarding what your personal data is being processed, and how to access this data.
- Right of correction – You have the right to request correction (change or addition) of your personal data provided.
- Right of erasure – You have the right to request the deletion of your personal data when it is the conditions for this provided for in the Regulation.
- Right to limited processing – You have the right to request restriction of processing of your personal data, in case any of the hypotheses provided for in the Regulation are present.
- Right to data portability in a structured, widely used and machine-readable format format – You have the right to receive your personal data processed by the Company in a structured, broad format used and machine-readable format. You also have the right to request the transfer of your personal data from the Company to another administrator, in case this is technically feasible.
- Right not to be subject to a decision based solely on automated processing, including profiling.
- Right to object – You have the right to object at any time to the processing of your personal data. In the event that you make such an objection, the Company will consider it and terminate the processing, if the objection is justified. In case the objection is unfounded, the Company will inform you about it circumstance.
- Right to withdraw consent for personal data processing – You have every right time to withdraw the consent you have provided when the processing of personal data is carried out on the basis such consent. When consent is withdrawn by you, we will stop processing personal data for the purposes for which the same was provided. Withdrawal of consent does not affect the legality of the processing of your personal data back in time, i.e. until the time of submission of the withdrawal request.
- Right of appeal to the supervisory authority – You have the right to file a complaint with the supervisory authority, c in case you believe that your rights to the protection of personal data have been violated.
If you wish to exercise your rights in relation to the protection of your personal data, you may contact the Company via completing the Request Form from an Individual here and/or by sending an email to the following email address: gdpr@jump.bg.
You can exercise your rights mentioned above completely free of charge. In case your requests are obvious unfounded or excessive, the Company may impose a reasonable fee or refuse to take action on the request.
10. SUPERVISORY AUTHORITY
10.1. The Personal Data Protection Commission (PCPD) is the independent state body that carries out the protection of individuals in the processing of their personal data and in the access to this data, as well as control of compliance with the Personal Data Protection Act on the territory of the Republic of Bulgaria.
10.2. In case of doubt that your rights related to the protection of your personal data have been violated, you can report to CPLD at:
- Address: Sofia 1592, Blvd. “Prof. Tsvetan Lazarov” No. 2
- E-mail: kzld@cpdp.bg
- Web page: www.cpdp.bg
11. COMPANY CONTACT DETAILS
11.1. If you have any questions or concerns about the processing of your personal data or wish to exercise any of your rights, you can contact the Company at the specified contact details: gdpr@jump.bg.
12. VALIDITY AND UPDATE OF THE PRIVACY POLICY
12.1. The Company reserves the right to change and update its Policy. When changing in this Policy, a message will be published on the website, as well as the updated “Policy for privacy“.
These general terms and conditions were adopted by Jump.BG OOD on 01.09.2023 and come into force as of 02.10.2023