PRIVACY POLICY
of clients and contractors of BTECH Electronics Ltd. and visitors to the company’s website – www.btech-electronics.com
This privacy policy provides information on how your personal data is processed by BTECH Electronics Ltd, UIC 205337361, registered office and registered address. registered office and registered address: Apostol Karamitev № 10, as a customer of BTECH Electronics Ltd. or a visitor to the website www.btech-electronics.com.
For BTECH Electronics Ltd. the protection of your privacy and the security of your personal information are a top priority. This means that we are responsible for the decisions we make about the storage and use of your personal data. We have a duty under data protection legislation to provide you with the information contained in this policy.
Our contact details are set out below.
For the purposes of this Policy, terms used shall have the following meanings:
- DPA – Data Protection Act.
- CPPD – Commission for Personal Data Protection.
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April
2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- Data Protection Officer – a person who is an employee of the Company or performs functions on its behalf, who is entrusted with the duties in relation to the protection and processing of personal data governed by these Rules.
The principal activities of the controller or processor shall not consist of processing operations which, by their nature, scope and/or purposes, require regular and systematic large-scale monitoring of data subjects or large-scale processing of special categories of data and of personal data relating to convictions and offences. In view of this circumstance, the Company has no obligation to appoint a data protection officer, and the Company should not be deemed to have appointed such a person or that the person responsible for the personal data has the obligations and should meet the requirements of a data protection officer within the meaning of Article 37 et seq. of the GDPR.
- Data Controller – a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. In this Policy, “controller” means the Company.
- Data Processor – an employee of the Company to whom data processing functions are assigned or a person or organisation which, on the basis of a contract, processes personal data provided by the Company for the agreed purposes.
- Data Protection Notices – individual notices containing information provided to data subjects at the point at which the Company collects information about them. These notices can be either general (e.g. addressed to employees or notices on the organisation’s website) or relating to processing for a specific purpose.
- Processing – any activity that involves the use of personal data. This includes:
receiving, recording, storing, performing an operation or series of operations on the data such as e.g. organising, redacting, recovering, using, making available, erasing or destroying. Processing also includes the transfer of personal data to third parties.
- Consent – any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by means of a statement or a clear affirmative action, which consents to the processing of personal data relating to him Data that may be collected.
We will process personal data, including personal data of Customers, suppliers and contractors in accordance with applicable data protection laws and regulations.
We may collect certain personal data in respect of Customers, suppliers and contractors, for example: first name, surname, last name, contact details (email address, telephone number and correspondence address, Skype), date and place of birth, identification number and permanent address, in the case of an individual or company name, business address, company telephone number, surname and contact details of the company’s employees, country of incorporation and tax identification number, including bank account details, site address for service performance and product delivery, and any other related information in accordance with applicable law.
The aforementioned personal data is also collected in any case in which a request for a quotation is made, including a request for a quotation made on the company’s website – www.btech-electronics.com
Special categories of sensitive personal data require a higher level of protection and an additional basis for their collection, storage and use.
We may process special categories of personal data in the following situations:
1. in limited cases, with your explicit written consent.
2. to comply with legislation.
3. where the processing is for the protection of the public interest.
In rarer cases, we may process sensitive data where it is necessary to defend a legal dispute or to protect your interests or those of someone else and you are unable to give valid consent, or where you have disclosed that sensitive information in the public domain.
Use of personal data of customers, suppliers and contractors.
We will use the personal data of Customers, suppliers and contractors in the course of our business to provide the services we perform and/or contract for services provided to us. We may also use the personal data of Customers, suppliers and contractors to communicate with them and inform them of updates to the services we provide. For example, the provision of personal data by a customer may be necessary to enable us to provide the requested services to that Customer, necessary to fulfil the contractual relationship with that Customer and for other purposes as set out in this notice where it is consistent with our legitimate interests. We may also require the Personal Data in order to meet, legal and regulatory requirements.
Personal data is processed on the basis of at least one of the legal grounds set out in Article 6 of the GDPR, namely: a legal obligation, the subject’s consent, a contract, the public interest, a legitimate interest of the controller or a third party, the protection of the vital interests of the subject or of another natural person.
Principles of processing
When processing personal data, we comply with the following principles:
- lawfulness – when collecting, processing and storing your data, we comply with the provisions of applicable Bulgarian and European legislation.
- fairness and transparency – we process the data we collect and in accordance with this privacy policy, which is accessible to any user.
- relevance of processing to the purposes and minimisation of data – the types of data we collect are minimised according to the purposes for which they are processed. The purposes for which your data is processed are those for which we have obtained your consent.
- storage limitation – we process and store the data we receive, for a period of time, according to the purposes for which it is needed and according to your consent.
Users’ consent to data processing – when you send a request to BTECH Electronics Ltd, you give your consent to BTECH Electronics Ltd, to store and process the personal data provided by you for the purposes of the request made.
Disclosure of information to certain third parties.
The personal data of Customers, suppliers and contractors is processed exclusively for the purposes set out above and will only be shared on a strictly need-to-know basis, subject to any legal data protection requirements with:
- other group companies and service providers.
- government fraud prevention and law enforcement authorities.
- courts, governmental and non-governmental regulators, tax authorities and the ombudsman.
- a third party acquires or has an interest in acquiring all or part of our business, whether by merger, acquisition, reorganization or otherwise.
- disclosure required or permitted by law, including pursuant to an administrative order or similar legal process or a request by a governmental authority, or where we believe in good faith that disclosure is legally required, or we have a legitimate interest in making the disclosure when necessary to protect our rights and property.
Transfer of personal data – transfer In cases where your personal data is transferred to companies and/or to authorised third parties located outside your country (including outside the European Economic Area), we take organisational, contractual and legal measures to ensure that your personal data is only processed for the purposes mentioned above and that appropriate levels of protection are applied to safeguard your personal data.
These measures include European Commission approved transfer mechanisms to third countries in countries that are not considered to provide an adequate level of data protection, as well as any additional local legal requirements.
Security and Retention Period. We will take reasonable steps to protect Customer Personal Data against loss or theft and against unauthorised/unauthorised access, disclosure, copying, misuse or modification regardless of the form in which it is stored.
We will not retain information about you longer than reasonably necessary to fulfill the specific purposes for which it was collected and for which you are notified herein.
We will only keep personal data for the period for which it is necessary for us to fulfil the purposes for which we collected it, including to comply with accounting legislation. Personal data will be kept for a period of: 5
years after termination of the relationship and 10 years for accounting records.
In all cases, information may be retained for a) a longer period where there is a legal or regulatory reason to do so (in which case it will be deleted once it is no longer necessary for the legal or regulatory reason) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a lawful reason to retain it.
Rights of Customers, suppliers and contractors of
BTECH Electronics Ltd.
At all times while we are storing or processing your personal data, you – the customers, suppliers and contractors (in the terminology of the law – the data subject) have the following rights:
- have the right to request a copy of your personal data and the right to access your personal data at any time, including to request confirmation as to whether data relating to him/her is being processed, to be informed of the purposes of such processing,
the categories of data and the recipients of the data, and the purposes of any processing of personal data relating to him.
- you have the right to request your personal data in a form convenient for transfer to another data controller, or to request that we do so without being prevented by us;
- you have the right to ask us to rectify, without undue delay, inaccurate personal data about you and data that is no longer up to date.
- you have the right to ask us to erase your personal data, subject to legal restrictions and requirements to do so, and to restrict processing.
- you have the right to withdraw your consent to the processing of your personal data at any time by a separate request to the controller, for cases where your personal data is processed on the basis of a legal ground of consent.
- you have the right to object to certain types of processing, such as direct marketing (unsolicited advertising messages);
you have the right to lodge a complaint where you consider that your rights as a data subject have been infringed, which complaint you can address to the local supervisory authority for the protection of personal data, namely: the Data Protection Commission (www.cpdp.bg).
To exercise the above rights, please send a message/request to (DPO)
The request/request must include full details of the data subject, the type of personal data, the purpose for which the personal data was provided and any other information that will help the controller to locate and identify your personal data. The DPO may request additional information, including information relating to the identification of the data subject, the type of personal data or
the processing activities to which the request relates. You have the right to receive a response within 1 month of making the request (except in the case of a request for erasure where the controller is obliged to respond to you without undue delay), which may be extended to two months at the discretion of the DPO
Is your data being transferred?
We do not share, transfer, distribute or disclose your personal data to third parties without your explicit consent, unless required by law or necessary to protect our rights and legitimate interests.
Company (after a proper assessment of whether the same overrides your rights and interests) or is necessary for the purposes of legal process. As the data controller, we will do our utmost to ensure that your personal data is protected and treated as strictly confidential
Contact us
If you have any questions about this policy and your rights regarding your personal data, please contact us: e-mail: contact@btech-electronics.com;
Data Protection Officer
Our principal activities do not consist of large-scale processing operations which, by their nature, scope and/or purposes, require regular and systematic large-scale monitoring of data subjects or large-scale
processing of special categories of data and of personal data relating to convictions and offences. In view of this circumstance, we have no obligation to appoint a data protection officer.
If you require any further information, please contact BTECH Electronics Ltd. at the following address: contact@btech-electronics.com