Privacy policy

Information about the company that processes your data:

 

Name: Ab limit Ltd.

 

UIC: 208271468

 

VAT No.: BG208271468

 

Seat and management address: bl. 284, entrance V, ground floor, Druzhba 2, 1582 Sofia, Bulgaria

 

Correspondence address: bl.284, entrance V, ground floor, Druzhba 2, 1582 Sofia, Bulgaria

 

Tel.: +359 888 793 456

 

E-mail: office@ablimit.com

 

Website: www.ablimit.com

 

Ab limit Ltd. (hereinafter referred to as the "Administrator" or the "Company") carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. This information is intended to inform you about all aspects of the processing of your personal data by the Company and the rights you have in relation to this processing.

 

Grounds for collecting, processing and storing your personal data


Art. 1. The Administrator collects and processes your personal data in connection with the provision of services and concluding contracts with the Company on the basis of Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), and in particular on the following grounds:

 

  • Explicit consent obtained from you as a client, business partner or job candidate;
  • Performance of the Administrator's obligations under a contract with you;
  • Compliance with a legal obligation applicable to the Administrator;
  • For the purposes of the legitimate interests of the Administrator or a third party;

 

Purposes and principles for collecting, processing and storing your personal data


Art. 2. (1) We collect and process the personal data that you provide to us in connection with concluding a contract with the Company and performing the services assigned under the contract, including for the following purposes:

 

  • creating a client profile, a business partner profile;
  • individualization of a party to the contract and provision of services;
  • accounting purposes;
  • statistical purposes;
  • protection of information security;
  • ensuring the performance of the contract for the provision of the relevant service;
  • when selecting personnel.

 

(2) We adhere to the following principles when processing your personal data:

 

  • lawfulness, good faith and transparency;
  • limitation of the purposes of processing;
  • relevance to the purposes of processing and minimization of the collected data;
  • accuracy and timeliness of the data;
  • limitation of storage in order to achieve the purposes;
  • integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.

 

(3) When processing and storing personal data, the Administrator may process and store personal data in order to protect the following legitimate interests:

 

  • fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.

 

What types of personal data does our company collect, process and store


Art. 3. (1) The company performs the following operations with the personal data provided by you for the following purposes:

 

  • Conclusion and performance of a contract with a client or business partner – the purpose of this operation is the conclusion and performance of a contract with a client – ​​a legal entity or individual, or a business partner and its administration.
  • Recruitment

 

(2) The Administrator processes the following categories of personal data and information for the following purposes and on the following grounds:

 

  • Your individualizing data (Personal Identification Number, number and information on/for an ID card, telephone number, e-mail, bank account details, date of birth and other personal data, which are determined by the type of specific service);
  • In personnel selection procedures - CV, diploma of completed education, certificates, work record book/statement, and other documents provided by you in connection with the selection procedure.


Purpose for which the data is collected:

 

  • establishing contact with the client - legal entity or individual, or the business partner and sending information to him;
  • for the performance of assigned services; and
  • for personnel selection procedures.


Grounds for processing your personal data:

 

  • explicit consent received from you as a client or partner;
  • request for a quote;
  • assignment of performance according to an order;
  • acceptance and conclusion of a written contract between the Administrator and you;
  • personnel selection procedure.

 

(3) The Administrator does not collect or process personal data that relates to the following:

 

  • reveal racial or ethnic origin;
  • reveal political, religious or philosophical beliefs, or trade union membership;
  • genetic and biometric data or data on health, unless the latter are necessary for the performance of the assigned services under a contract concluded with the client.

 

(4) Personal data are collected by the Administrator from the persons to whom they relate.

 

(5) The Company does not carry out automated decision-making with data.


Art. 4. (1) The Company performs the following operations with the personal data provided by you - as legal representatives or proxies of clients - legal entities or individuals, or business partners, for the following purposes:

 

  • Conclusion and execution of a contract. For the conclusion and execution of the contract with the Company, we process the following personal data: 1. for clients - legal entities and business partners - the three names of the legal representative or the person authorized by the Company, Personal Identification Number, date of birth, number and information on/for an ID card, telephone number, e-mail; 2. For clients - individuals - three names of the individual, Personal Identification Number, date of birth, number and information on/for an ID card, telephone number, e-mail, bank account details and/or other personal data, which are determined by the type of the specific service).
  • Implementation of personnel selection procedures.

 

2) The personal data are collected by the Administrator from the persons to whom they relate and from the Commercial Register and the Register of Legal Entities at the Registry Agency.

 

(3) The Company does not perform automated decision-making with data.


Art. 5. The Administrator may use the so-called "cookies" for the purposes of providing full functionality of the website, to improve the presentation, the services provided, for statistical analysis, easier access, etc., to which you agree by using our website. You can control and/or delete "cookies" at any time through the settings of the browser you use. "Cookies" do not constitute personal data and are not used to identify visitors and users of the online store.

 

Storage period of your personal data


Art. 6. (1) The Administrator stores your personal data in accordance with the terms specified in the applicable Bulgarian legislation, but not less than 5 years from the date of expiration or termination of the service contract. After deleting your account, the Administrator takes the necessary care to delete and destroy all your data without undue delay or to anonymize them (i.e. to render them in a form that does not reveal your identity).

 

(2) The Administrator will notify you in case the data storage period needs to be extended in order to fulfill a regulatory obligation or in order to pursue the legitimate interests of the Administrator or otherwise.


Art. 7 The personal data of candidates in personnel selection procedures are stored for 6 months from the completion of the selection procedure. With the explicit consent of the candidate, his/her personal data may be stored for a longer period for the purpose of participation in subsequent selection procedures, in which case the period of data storage depends on the consent of the candidate.

 

Transfer of your personal data for processing


Art. 8. (1) The administrator may, at its own discretion, transfer part or all of your personal data to personal data processors for the fulfillment of the processing purposes to which you have agreed, subject to the requirements of Regulation (EU) 2016/679 (GDPR).

 

(2) Personal data processors shall comply with all requirements for legality and security in the processing and storage of your personal data.

 

(3) The administrator shall not transfer your data to third countries.

 

(4) The Аdministrator shall notify you in case of intention to transfer part or all of your personal data to third countries or international organizations.


Your rights in the collection, processing and storage of your personal data


Art. 9 You have the following rights in the collection, processing and storage of your personal data:

1. Right of access to your personal data;

2. Right to correct or complete your personal data;

3. Right to delete ("be forgotten") your personal data:


The Аdministrator is not obliged to delete personal data if it stores and processes them:

 

  • to exercise the right to freedom of expression and the right to information;
  • to comply with a legal obligation which requires processing provided for in EU or Member State law to which the Administrator is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested to him/her;
  • for reasons of public interest in the field of public health;
  • for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes;
  • for the establishment, exercise or defence of legal claims.

 

4. Right to restriction of your personal data stored;

5. Right to data portability;

6. Right to obtain information about your personal data stored and processed;

7. Right to object to the storage and processing of your personal data.

 

All rights can be exercised freely by sending a request by email to: office@ablimit.com.

 

 

Information about the competent supervisory authority for personal data protection


Name: Commission for Personal Data Protection


Seat and management address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.


Correspondence address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.


Tel.: 02 915 3 518


Website: www.cpdp.bg