Mandatory information on the rights of individuals under the protection of personal data
General information
From May 25, 2018, a new regulation on the protection of personal data (General Data Protection Regulation), adopted by the European Union, is in force. The regulation aims to guarantee the protection of data of individuals from all EU member states and to unify the regulations for their processing.
MTS BULGARIA LTD meets the requirements of the regulation and only collects data of individuals to the extent necessary for the provision of various services, and keeps them legally.
Information about MTS BULGARIA LTD
Name MTS BULGARIA LTD
UIK/BULSTAT: 207969737
Head office and management address: Primorski district, PETAR RAICHEV str., bl 36, ent. I, fl.2
Correspondence details: Primorski district, PETAR RAICHEV str., bl 36, ent. I, fl.2
E-mail: office@mtsbulgaria.com
Telephone: +359 899 981 100
Information about the competent supervisory authority
Name: Personal Data Protection Commission
Head office and address of management: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd
Correspondence details: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd
Telephone: 02 915 3 518
Email: kzld@government.bg, kzld@cpdp.bg
Website: www.cpdp.bg
MTS BULGARIA LTD carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
Grounds for collecting, processing and storing your personal data
Art. 1. (1) MTS BULGARIA LTD collects and processes your personal data in connection with the provision of services, booking appointments, sending messages about current discounts, selling prepaid cards on the basis of Art. 6, para. 1, Regulation (EU) 2016/679, and in particular on the basis of the following: Explicit consent received from you as a client;
Performance of MTS BULGARIA LTD's obligations under a contract with you;
Compliance with a legal obligation applicable to MTS BULGARIA LTD;
For the purposes of the legitimate interest of MTS BULGARIA LTD.
(2) With respect to the personal data that you provide using our services, MTS BULGARIA LTD acts in its capacity as a personal data processor.
Purposes and principles for collecting, processing and storing your personal data
Art. 2. (1) MTS BULGARIA LTD collects and processes the personal data that you provide to us in connection with the use of our services and for concluding a contract with the company, as well as for registering for participation in our events, including for the following purposes: creating a profile and ensuring full functionality in the provision of our services;
individualization of a party to the contract;
registration of a participant in an event;
accounting purposes;
statistical purposes;
delivery of physical products;
ensuring the performance of the contract for the provision of the relevant service;
sending information messages, messages about changes in the service, new and improved services, etc. improving and individualizing the service by offering suitable offers, events and other products and services that may be of interest to you;
(2) MTS BULGARIA LTD adheres to the following principles when processing your personal data:
lawfulness, good faith and transparency;
limitation of the purposes of processing;
relevance to the purposes of the processing and minimization of the collected data;
accuracy and timeliness of the data;
limitation of storage in order to achieve the purposes;
integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.
(3) When processing and storing personal data, MTS BULGARIA LTD may process and store personal data in order to protect its following legitimate interests:
fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.
Personal data that MTS BULGARIA LTD collects, processes and stores?
Art. 3. (1) MTS BULGARIA LTD performs the following operations with personal data for the following purposes: Registration of a user on the website and execution of a contract for providing access to services;
Conclusion and execution of a commercial transaction with a client or partner - the purpose of this operation is the conclusion and execution of a contract with a commercial partner or client;
Sending information messages – the purpose of this activity is to administer the process of sending messages to customers that relate to improvements or changes in services, innovations and changes in price lists. Sending an information bulletin (newsletter) – the purpose of this operation is to administer the process of sending newsletters to customers who have stated that they wish to receive them;
Concluding contracts for business relations and brand representation
– the purpose of this operation is to conclude and execute a contract with a business partner for the purpose of authorized representation of a trademark.
(2) MTS BULGARIA LTD processes the following categories of personal data and information for the following purposes and on the following grounds:
Data: Your individualizing data (name and surname, e-mail, country, telephone)
Purpose:
1) User registration;
2) Establishing contact with the user and sending information to him, including, if desired, for sending newsletters and advertising messages;
3) For purchasing products and services.
Ground: By accepting the general terms and conditions and registering on the website and purchasing a service, a contractual relationship is created between MTS BULGARIA LTD and you, on the basis of which we process your personal data - Art. 6, para. 1, b. (b) GDPR. Additional data provided by you - In some cases, additional data such as interests, geolocation, professional qualifications, etc. are required.
Purpose: Supplementing information about the user and personalizing the services provided.
Grounds: By accepting the general terms and conditions and registering on the website and purchasing a service, a contractual relationship is created between MTS BULGARIA LTD and you, on the basis of which we process your personal data – Art. 6, para. 1, b. (b) GDPR.
Other data that MTS BULGARIA LTD processes – When entering our website, MTS BULGARIA LTD collects data on the IP address used.
Purpose: Improving the security of the service and localization of the interface, statistical and marketing research.
Grounds: The processing is necessary for the performance of a contract to which the data subject is a party – Art. 6, para. 1, b. (b) GDPR. The IP address is collected on the basis of the legitimate interests of the company – Art. 6, para. 1, b. (f) GDPR;
Your data for issuing an invoice to an individual – If you wish to be issued an invoice in your capacity as an individual, you should provide your unique civil registration number.
Purpose: Issuing an invoice for making payments under a concluded contract for the sale of products and/or provision of service(s).
Ground: By accepting the general terms and conditions and registering on the website, or upon concluding a written contract, a contractual relationship is created between MTS BULGARIA LTD and you, on the basis of which we process your personal data – Art. 6, para. 1, b. (b) GDPR. (3)
MTS BULGARIA LTD does not collect and does not process personal data that relate to the following:
reveal racial or ethnic origin;
reveal political, religious or philosophical beliefs, or membership in trade unions;
genetic and biometric data, data on health or data on sex life or sexual orientation.
(4) Personal data is collected by MTS BULGARIA LTD from the persons to whom it relates.
(5) The company does not carry out automated decision-making with data.
Period of storage of your personal data
Art. 4. (1) MTS BULGARIA LTD stores your personal data for a period not longer than the existence of your profile on the website. After the expiration of this period, MTS BULGARIA LTD takes the necessary care to delete and destroy all your data without undue delay.
(2) MTS BULGARIA LTD will notify you in case the period of storage of the data needs to be extended in order to fulfill the purposes, perform the contract, in order to comply with the legitimate interests of MTS BULGARIA LTD or otherwise.
(3) MTS BULGARIA LTD stores the personal data that it is required to keep under applicable law for the relevant stipulated period, which may exceed the period of existence of your registration.
Transfer of your personal data for processing
Art. 5. (1) MTS BULGARIA LTD may, at its own discretion, transfer part or all of your personal data to processors for the fulfillment of the processing purposes in compliance with the requirements of Regulation (EU) 2016/679.
(2) MTS BULGARIA LTD shall notify you in case of intention to transfer part or all of your personal data to third countries or international organizations.
Your rights in the collection, processing and storage of your personal data
Withdrawal of consent to the processing of your personal data
Art. 6. (1) If you do not want all or part of your personal data to continue to be processed by MTS BULGARIA LTD for specific or all processing purposes, you may withdraw your consent to processing at any time by sending an email request in free text.
(2) MTS BULGARIA LTD may request that you verify your identity and identity with the person to whom the data relates.
(3) By withdrawing your consent to the processing of personal data that is mandatory for using the services, your access to them will be terminated.
Right of access
Art. 7. (1) You have the right to request and receive from MTS BULGARIA LTD confirmation of whether personal data relating to you are being processed.
(2) You have the right to access the data relating to it, as well as the information relating to the collection, processing and storage of your personal data.
(3) MTS BULGARIA LTD provides you upon request with a copy of the processed personal data relating to you, in electronic or other appropriate form.
(4) Providing access to the data is free of charge, but MTS BULGARIA LTD reserves the right to impose an administrative fee in the event of repetitiveness or excessiveness of requests.
Right to rectification or completion
Art. 8. You may correct or complete inaccurate or incomplete personal data relating to you by sending a free text request to MTS BULGARIA LTD.
Right to erasure (“to be forgotten”)
Art. 9.(1) You have the right to request from MTS BULGARIA LTD the erasure of personal data relating to you, and MTS BULGARIA LTD has the obligation to erase them without undue delay where one of the following grounds applies:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
You object to the processing of personal data relating to you, including for direct marketing purposes, and there are no overriding legitimate grounds for the processing;
The personal data have been processed unlawfully;
The personal data must be erased for compliance with a legal obligation under EU law or Member State law to which MTS BULGARIA LTD is subject;
(2) MTS BULGARIA LTD is not obliged to erase personal data if it stores and processes them:
For the exercise of the right to freedom of expression and the right to information;
For compliance with a legal obligation which requires processing under EU law or Member State law to which the company is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in it;
For reasons of public interest in the field of public health;
For archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes;
For the establishment, exercise or defense of legal claims.
(3) In order to exercise your right to be “forgotten”, you must submit a written request sent to MTS BULGARIA LTD, as well as verify your identity and identity with the person to whom the data relates to MTS BULGARIA LTD by presenting your ID card on site for identification purposes and, if necessary, entering your login details into the profile of the person to whom the data relates to an employee of MTS BULGARIA LTD.
(4) MTS BULGARIA LTD does not delete data that it is legally obliged to store, including for protection in connection with legal claims made against it or proving its rights.
Right to restriction
Art. 10. You have the right to request MTS BULGARIA LTD to restrict the processing of data relating to you where:
You contest the accuracy of the personal data, for a period that allows MTS BULGARIA LTD to verify the accuracy of the personal data;
The processing is unlawful, but you do not want your personal data to be deleted, but only to have their use restricted;
MTS BULGARIA LTD no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
You have objected to the processing pending verification of whether the legitimate grounds of MTS BULGARIA LTD override your interests.
Right to portability
Art. 11. (1) You may at any time obtain the data stored and processed for you in connection with the use of the services of MTS BULGARIA LTD, by sending a free text request by email.
(2) You may request MTS BULGARIA LTD to directly transfer your personal data to a controller designated by you, where this is technically feasible.
Right to receive information
Art. 12. You may request MTS BULGARIA LTD to inform you about all recipients to whom the personal data for which rectification, erasure or restriction of processing has been requested have been disclosed. MTS BULGARIA LTD may refuse to provide this information if this would be impossible or would involve disproportionate effort.
Right to object
Art. 13. You may object at any time to the processing of personal data by MTS BULGARIA LTD that concerns you, including if it is processed for profiling or direct marketing purposes.
Your rights in the event of a breach of the security of your personal data
Art. 14. (1) If MTS BULGARIA LTD becomes aware of a breach of the security of your personal data that may result in a high risk to your rights and freedoms, we will notify you without undue delay of the breach and of the measures that have been taken or are to be taken.
(2) MTS BULGARIA LTD is not obliged to notify you if:
Appropriate technical and organizational measures have been taken to protect the data affected by the breach;
Measures have subsequently been taken to ensure that the breach will not result in a high risk to your rights;
Notification would require disproportionate effort.
Persons to whom your personal data is provided
Art. 15. In order to transport purchased products/services and upon your request, MTS BULGARIA LTD shall transmit the necessary information to the respective courier company, which processes your data as an administrator for the purposes of delivering and receiving the products/services purchased by you.
Art. 16. MTS BULGARIA LTD does not transfer your data to third countries.
Other provisions
Art. 17. In case of violation of your rights under the above or applicable legislation on personal data protection, you have the right to file a complaint with the Personal Data Protection Commission, as follows:
Name: Personal Data Protection Commission
Headquarters and registered office: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence details: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. Telephone: 02 915 3 518
Email: kzld@government.bg, kzld@cpdp.bg
Website: www.cpdp.bg
Art. 18. You can exercise all your rights regarding the protection of your personal data in any form that contains a statement to that effect and identifies you as the data owner.
Art. 19. If the consent concerns a transfer, MTS BULGARIA LTD describes the possible risks of the transfer of data to third countries in the absence of an adequate protection solution and appropriate means of protection.
Art. 20(1). When you assign MTS BULGARIA LTD to process personal data of a third party for the purposes of using the service, MTS BULGARIA LTD acts as a processor of personal data.
(2). In the cases under para. 1, MTS BULGARIA LTD acts solely on your instructions as a user of the service and only to the extent that it may have control over the personal data that you process.
MTS BULGARIA LTD has no control over the content and data that you as a user of the service choose to upload to the service (including whether or not such data includes personal data).
In this case, MTS BULGARIA LTD has no role in the decision-making process as to whether the user uses the service for processing personal data, for what purposes and whether the same are protected. Accordingly, the responsibility of MTS BULGARIA LTD in this case is limited to
1) compliance with the instructions of the service user in accordance with the contract and general terms and conditions and
2) provision of information about the service and functionalities.