Privacy Policy

I. What this Privacy Policy regulates and the legal grounds

On 25 May 2018 the General Data Protection Regulation (GDPR) entered into force in Bulgaria. It was adopted by the European Union to unify member states' policies on the collection and use of personal data. Among the requirements that "Strive 4BG" Ltd. applies are:

1. To inform you what personal data we use;
2. To inform you why we use it;
3. To seek your approval for its use where we provide additional services based on that data;
4. To allow you to modify your consent for different purposes through this site;
5. To secure your right to ask for correction of your data, its deletion, and your right to be "forgotten". In addition we can provide your data for download or their transfer once you notify and identify yourself appropriately. Anything that allows identifying a user is deemed personal data — e-mail, names, mobile number, address, IP address.

II. Administrator

The "Administrator" under the GDPR is "Strive 4BG" Ltd., UCN 202430216, a company registered and existing under the laws of the Republic of Bulgaria, entered in the Commercial Register, having its registered seat and address at Ovcha Kupel II, block 43, Entr. B, app. 23, Sofia, Bulgaria, represented by Petio Miltonov Tankov. You can contact us at: office@strive4.bg

III. What data do we collect

"Strive 4BG" Ltd. collects the following information from its users: name and family name; contact telephone; e-mail; your preferences in relation to your enquiries; IP address; and information from cookies.

IV. How do we use your personal data

1. To process your enquiry;
2. To provide offers, appoint meetings, etc.;
3. As far as you have given explicit consent — to send you news and offers related to "Strive 4BG";
4. When you visit our website — for direct-marketing purposes based on our legitimate interest, with your right to object at any time.

V. On what grounds do we process your personal data

"Strive 4BG" Ltd. processes your personal data based on Art. 6(1)(a) of the GDPR — your explicit, unambiguous, informed and specific consent — and on Art. 6(1)(b) — to undertake steps at the data subject's request prior to entering into a contract.

VI. To whom we disclose your personal data

1. To our employees, contractors, advisors and consultants;
2. To competent state authorities — upon lawful requests under applicable law.

VII. Protection of the information

Your personal data is stored on digital media — on servers with the appropriate technical protection measures (anti-malware, encryption and physical protection) — and on paper — in metal drawers with restricted access available only to duly authorised officers.

VIII. Data transfer

We do not send the personal data you provide to third countries outside the European Union and the European Economic Area, except where an adequacy decision exists. For more information, please review the privacy policies of our partners.

IX. How long do we store the information

We store your personal data only for the period necessary to achieve the purposes for which it was collected, after which we erase or destroy it securely. Where applicable legislation provides for mandatory minimum retention periods, we comply with them. The specific retention periods are:

1. Data processed on the basis of your consent (enquiries, marketing communications) — stored until you withdraw your consent, and if not withdrawn — for up to 24 months from your last active contact with us, after which the data is erased.
2. Data relating to pre-contractual relations and concluded contracts — stored for the duration of the contractual relationship and until expiry of the applicable limitation periods, which under the Bulgarian Obligations and Contracts Act are up to 5 years (general limitation period), and longer in certain cases.
3. Accounting and tax documents containing personal data — per the Accountancy Act and the Tax and Social Insurance Procedure Code: accounting registers and financial statements — 10 years; tax/social-insurance control documents — 5 years after expiry of the limitation period; payroll and social-insurance records — 50 years. These periods run from 1 January of the reporting period following the period to which the documents relate.
4. Website visit data (IP address, cookie data) — up to 12 months, unless a shorter period is stated in the Cookie Policy.

Upon expiry of the relevant period, the personal data is erased or destroyed in a manner ensuring its irrecoverability and confidentiality. Where the same data falls within more than one legal ground, the longer applicable period applies.

X. The rights of data subjects under the GDPR

1. Right of access to your personal data.
2. Right to correction of inaccurate data.
3. Right to erasure (the right to be "forgotten").
4. Right to restriction of processing.
5. Right to object to processing.
6. Right to data portability in a machine-readable format.
7. Right to lodge a complaint with the Commission for Personal Data Protection (www.cpdp.bg).

XI. Withdrawal of consent

As far as the processing of your personal data is based solely on your consent, you may withdraw it at any time, in which case we will immediately terminate the relevant processing.

XII. Profiling

When rendering our services we do not carry out profiling.