Logo

I. GENERAL PROVISIONS.

Art.1.(1) In order to carry out its activity, Got a Tech Team (the website) processes data of natural persons in accordance with this Policy.

(2) When processing personal data, the site complies with all applicable data protection regulations, including the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 year on the protection of natural persons in connection with the processing of personal data and on the free movement of such data.

II. DEFINITIONS.

Art. 2. This Policy uses the following definitions of the terms arising from Art. 4 of the Regulation:

  1. “Regulation” – General Data Protection Regulation 2016/679 of April 27, 2016, replacing Directive 95/46/EC on data protection. It has direct effect and implies a change in the legislation of the member countries in the field of personal data protection. Its purpose is to protect the “rights and freedoms” of individuals and to ensure that personal data is not processed without their knowledge and, where possible, is processed with their consent.
  2. “Personal data” – can be any information that can be linked to a natural person who is identified or a natural person who could be identified, directly or indirectly, through the use of one or more specific signs or identifiers , related to this individual. From the point of view of the nature of the information, the concept of “personal data” includes any kind of statement about an individual. It includes “objective” information and “subjective” information, opinions or evaluations. With respect to the form or medium in which such information is contained, the term “personal data” includes information in any form, whether alphabetic, numerical, graphic, photographic or acoustic. For example, it includes information stored on paper as well as information stored in computer memory.
  3. “Special (sensitive) categories of personal data” are a special category of personal data due to the specific nature of the information they reveal about the individual. In particular, this information discloses racial or ethnic origin, religious and philosophical beliefs, political views, trade union (or professional) membership, health data of the individual, biometric data for the sole purpose of identifying the individual.
  4. “Personal data administrator” is the site that determines the purposes and means of personal data processing.
  5. “Processing of personal data” means any operation or set of operations performed on personal data, such as collection, recording, organization, structuring, storage, modification, use, disclosure by transmission and provision of access, arrangement, deletion or destruction. In practice, any activity involving the use of personal data in any form may constitute processing of personal data.
  6. “Data subject” – any living natural person who is the subject of the personal data stored by the Administrator.

III. CATEGORIES OF DATA SUBJECTS.

Art. 3. In connection with its activities, the site processes information about the following Data Subjects:

  • Visitors to the Website;
  • Job applicants;
  • Individuals who have made inquiries (including by calling), requests, signals, complaints or other correspondence;
  • Natural persons, information about which is contained in inquiries (including by calling), requests, signals, complaints or other correspondence.
  • Other categories of natural persons whose personal data are processed in the course of the site’s activity.

IV. PERSONAL DATA PROCESSED.

Art. 4. The site processes the following types of personal data:

  • Data provided by submitting a CV or cover letter, including but not limited to:
    • Identification data (e.g. three names, date and place of birth, nationality, photograph, permanent address, correspondence address, contact telephone number, etc.);
    • Social identity (e.g. education, qualification, work activity, resumes, previous work experience, languages, scientific/academic degree, etc.).
  • Data provided in connection with correspondence, complaints and alerts, namely: data for communication with users, provided in the feedback form on the Website (name, phone number, e-mail), as well as any other information that the person voluntarily provides when the submission of your inquiry, including personal data provided during calls or when sent by regular or e-mail;
  • The website may store information about the visit (date, time and IP address).

V. PURPOSES AND METHOD OF PROCESSING.

Art. 5. The site collects, uses and processes the information described above for the following purposes:

(1) To carry out selection for vacant posts.

(2) To protect and enforce the legitimate interests of the site. These are goals related to legitimate interests of the aforementioned company and/or third parties such as other users, companies, etc. These goals include:

  • Ensuring the normal functioning and use of the Website by you and other users, maintenance and administration of services, resolution of disputes, detection and prevention of malicious actions.
  • Detecting and resolving technical or functionality issues, developing and improving the Website.
  • Communicating with you, including electronically.
  • Receiving and processing received signals, complaints, requests and other correspondence;
  • Implementation and protection of the rights and legal interests of the website, including by court order, and providing assistance in the implementation and protection of the rights and legal interests of other users of the Website and/or affected third parties.

For these purposes, it may be necessary to process some or all of the above types of personal data.

(3) Purposes for which you have given your express consent. Your data may be processed on the basis of your express consent, and the processing in this case is specific and to the extent and scope provided for in the relevant consent.

(4) For the fulfillment of legal obligations, which include the fulfillment of the obligations provided for in the law to preserve or provide information upon receipt of a relevant order from competent state or judicial authorities, when providing an opportunity to exercise the control powers of the competent state authorities, etc. . For these purposes, it may be necessary to process some or all of the above types of personal data.

(5) To respond to your inquiries and to deal with your complaints. In order to resolve submitted complaints, signals, disputes, inquiries, requests or other issues addressed in communication to Us, received through communication from the Website, through calls, through sending by regular or e-mail, We store and process this information, as well as the result of this processing.

(6) For statistical purposes such as analyzing the performance of applications on the Website and to understand how visitors use them.

(7) The use of cookies is necessary for the functioning of the Website. You can find a detailed description of the cookies used and their purpose in the Cookie Policy published on the Website.

(8) The Website may use logs related to security, technical support, development, etc., for the following purposes:

  • To ensure reliable operation and to identify technical problems;
  • To ensure security and detect malicious actions;
  • To develop and improve the Website;
  • To measure the attendance and usability of the Website;
  • Logs required by law.
  • Server logs, logs of security protection devices (Web Application Firewalls), etc. devices falling into this category. These logs are necessary to diagnose technical problems, detect malicious actions, etc. of the above objectives. They are stored for a period of up to 1 (one) year. Logs can contain the following information: date and time, IP address, URL, browser and device information.

Art. 6. The functionalities provided on the Website are not intended for the storage and processing of special categories of personal data within the meaning of Art. 9 and Art. 10 of the Regulation.

(2) In connection with the previous paragraph, the User undertakes not to transmit any confidential and/or sensitive information (racial or ethnic origin, political views, religious or philosophical beliefs or membership in trade unions, genetic data, biometric data, health data or data about sex life or sexual orientation) until a formal relationship is established. Please note that all other messages containing confidential and/or sensitive information will be deleted promptly / at the time of entry into our system and will not receive a response.

Art. 7. The Website does not collect or process personal data of children under the age of 16 or under, except with parental consent in accordance with applicable local law. If we learn that a child’s personal data has been accidentally collected, we will promptly delete the data in question.

VI. EXPIRATION DATE.

Art. 8. The website stores your personal data for the periods necessary to achieve the purposes for which they were collected. Once the respective purposes have been achieved, your personal data will be destroyed immediately, except in cases where we are required by law to process it for a longer period of time.

Art. 9. (1) Personal data contained in the documents provided by you when applying for a position are stored within 6 (six) months of selection for the relevant position, after which they are deleted, unless you have explicitly given your consent to process such data for a longer period than indicated (e.g. to process for the purposes of suitable future positions).

(2) After the expiration of the above-mentioned period, we will destroy the collected personal data, except in the cases in which, according to the legal provisions, we are obliged to process them for a longer period of time.

(3) The site has the right to store personal data of participants in a selection procedure for a period of 3 (three) years according to Art. 52 of the Anti-Discrimination Act.

Art. 10. In certain circumstances, the site has the right to anonymize your personal data for research, statistical or other purposes, in which case the site may use this information for an unlimited period of time without further notice to you.

Art. 11. In the event that the site does not need your data, it will be deleted or anonymized, removing all details that identify you. In the absence of legal grounds for processing your personal data and in the event that you withdraw your consent to the processing of the same, the site will delete your personal data within a reasonable time.

Art. 12. In cases where we process your personal data based on your consent, including but not limited to marketing purposes, the same is processed and stored until we receive a request from you to delete it.

Art. 13. In the event of a legal dispute or proceeding requiring the retention of data and/or a request from a competent state authority, it is possible to retain data for longer than the specified terms until the final conclusion of the dispute or proceeding before all instances. The stated terms may be changed in the event that a different requirement to retain the information is established under current legislation.

VII. THIRD PARTIES.

Art. 14. Your personal data may be provided to third parties in the following cases:

  • when this is provided by law;
  • if duly requested by a competent government or judicial authority;
  • where we have received your express consent to do so;
  • when this is required to protect the rights and legitimate interests of the site and/or other users.

Art. 15. In the cases of Article 14, the site introduces contractual agreements and security mechanisms, with the aim of both protecting your personal data and complying with current data protection, privacy and security standards.

Art. 16. Personal data stored by the site may be transferred to:

  • Third parties and/or organizations that provide us with applications and/or functionalities, IT services or services related to data processing.
  • Third parties who assist us, e.g the delivery and management of our internal IT systems. For example, information technology providers, cloud service providers, identity management, website hosting and management, data analysis, data backup, security and storage services. The servers that power and facilitate this cloud infrastructure are located in secure data centers around the world, and personal data may be stored in any of them;
  • Third parties/organizations that assist us in providing services or information in other ways;
  • Auditors and other professional advisers;
  • Law enforcement, other governmental and regulatory agencies or other third parties as required by and in accordance with applicable law;

VIII. RIGHTS OF DATA SUBJECTS

Art. 18. The Regulation provides for the following rights:

  • Right to information.
    This Policy aims to inform you in detail about the processing of your personal data in connection with the use of the Website.
  • Right of access
    You have the right to receive confirmation as to whether your personal data is being processed, access to it and information about its processing and your rights in this regard. You can access this at any time.
  • Right to rectification.
    You have the right to correct your personal data if it is incomplete or inaccurate.
    You have the possibility to correct Your data at any time by requesting Us.
  • Right to deletion You have the right to request the deletion of data, except in cases where there is a substantial reason and/or legal obligation for their processing.
    The data is deleted after the specified period has expired. In the meantime, the same can only be provided in due course to the competent state authorities in the exercise of their control powers or to a competent court in the event of legal proceedings arising in which they are concerned. In the event of a legal dispute or proceeding requiring the retention of data and/or a request from a competent state authority, it is possible to retain data for longer than the specified terms until the final conclusion of the dispute or proceeding before all instances.
  • Right to restriction of processing.
    The regulation provides for the possibility to limit the processing of your personal data if there are grounds for this provided for in it.
  • Right to notify third parties. If applicable, you have the right to request the Administrator of your personal data to notify the third parties, when he has provided your data, regarding the correction, deletion or restriction of the processing of your personal data .
  • Right to data portability.
    You have the right to receive your personal data in a structured, widely used, machine-readable format, and to use this data for another administrator at your discretion.
  • Automated decision making.
    You have the right not to be subject to automated decision-making involving profiling that gives rise to legal consequences for you or similarly significantly affects you, unless there are grounds for doing so provided for in applicable personal data protection legislation and provided for adequate guarantees to protect your rights, freedoms and legitimate interests.
    The Website does not use technologies that fall into this category.
  • Right to withdraw consent.
    You have the right, at any time, to withdraw your consent to the processing of personal data based on your consent. Such withdrawal does not affect the lawfulness of the processing based on the consent given until the time of its withdrawal.
  • Right to object.
    You have the right to object to the processing of your personal data based on public interest, official authority or legitimate interest. In the event of such an objection, We will consider Your request and, if justified, We will comply with it. If we consider that there are compelling legal grounds for the processing or that it is necessary for the establishment, exercise it or the defense of legal claims, we will inform you about it.
  • Right to file a complaint.
    You have the right to file a complaint with a supervisory or judicial authority if you believe that the processing of personal data concerning you violates applicable data protection legislation. The supervisory authority in the Republic of Bulgaria is the Commission for the Protection of Personal Data, with address: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2.

IX. ACCURACY OF INFORMATION.

Art. 19. The site is not responsible for the accuracy of the data provided by you, does not carry out checks in this sense and does not guarantee the actual identity of the individuals who provided the data. In all cases of doubt on your part, of suspected or established fraud and/or abuse, please notify us immediately. You undertake, when providing any information on the Website, not to violate the rights of other persons in connection with the protection of their personal data or their other rights.