POLICY FOR PRIVACY AND PROTECTION OF PERSONAL DATA OF TREMOL SMD LTD.

About us
Tremol SMD ltd. is a commercial entity registered in the Bulgarian Commercial Register under UIN: 104666520 in Veliko Tarnovo, with business address: 10 Asti str., Veliko Tarnovo, telephone: 062/604880, www.smd.tremol.bg, e-mail: assembly@tremol.bg. It is represented by general managers: Dipl. Eng. Petar Yordanov Kolev and Ralitsa Tremol Koleva, together and separately.

Main objective of processing personal data
This policy aims at introducing an integrated approach to implementing the requirements of EC Regulation 2016/679.
We process your personal data for performance of employment and civil contracts and the realization of their lawful relations, including statutory imposed social security payments and benefits.

Security of the data you entrust us with it is of high importance to us. It is very important for the success of our business and for our public image. That is why we protect your data by applying all appropriate technical and organizational means at our disposal to prevent unauthorized access, unauthorized or malicious use, loss or premature deletion of information.

We collect and process personal data only according to the requirements of national and EU law. We understand that processing your data is for a specific reason and cannot be done without limitation.

The purpose of this privacy policy is to explain to you how and why we process your personal data.

Principles of processing personal data
Data processing is carried out in accordance with principles for protection of personal data in art. 5 of EC Regulation 2016/679.

Tremol SMD Ltd. applies the following principles when processing personal data:

How and why we process your personal data
Processing is necessary for the performance of labour and civil contracts to which you are a party or for undertaking actions upon your request before, during and after the conclusion of such a contract.
Processing is done with the purpose to:

the transfer of information is made under a contract, which ensures that the processing of personal data takes place in accordance with appropriate technical and organizational measures and provides protection for your rights.

Compliance with statutory obligations
We process your identifications and other personal data necessary to comply with obligations that are provided in a legislative act such as:

After consent has been granted for processing of personal data
In some cases, your personal data is processed after prior written or electronic consent. Consent is a separate ground for processing of your personal data with the purpose of processing specified therein and does not match the purposes stated in this policy.
In the event that you grant us consent, we will process your personal data for the stated purposes until it is withdrawn.
Consent that is given may be withdrawn at any time, and this will not affect the performance of the contractual obligations of Tremol SMD Ltd.
Upon the withdrawal of the consent for processing of personal data, Tremol - SMD Ltd will not use your personal data for the purposes for which it was once provided.
Withdrawal of consent does not affect the lawfulness of consent-based processing prior to its withdrawal.
Consent can be withdrawn in writing / electronically, by e-mail: assembly@tremol.bg  (signed by electronic signature), by mail, or otherwise.

Where processing is necessary for the purposes of legitimate interest
We may process your personal data when the processing is necessary for the purposes of our legitimate interests or for the legitimate interests of a third party except where your interests or your fundamental rights and freedoms are advantageous to such interests.

What kind of data we process
Identification data - full name, single citizen number / personal number of foreigner, permanent and current address. Other data - information about the type and content of the contractual relationship, as well as any other information related to the contractual relationship, including:

How we protect your personal information
To ensure adequate protection of personal data, we apply all necessary organizational and technical measures provided for in EC Regulation 2016/679 and the Law for the protection of personal data. Tremol SMD Ltd. will appoint a special officer for data protection, when circumstances require, and has created conditions to prevent abuses and security breaches.
For the purpose of achieving maximum security during processing, transfer and storage of personal data, we may use additional security mechanisms such as encryption, pseudonymisation, etc.

Erasure (right “to be forgotten”)
You have the right to request from Tremol SMD Ltd. erasure of personal data related to you, when:

Protection of personal data
Tremol SMD Ltd. discontinues use of your personal data after fulfilling the purposes for which it was provided; when it is not necessary to protect a legitimate interest; after termination of a contractual relationship or final settlement of all financial relations; or after expiry of the statutory obligations for data storage, such as:

Please note that we will not delete your personal data if it is necessary for pending legal, administrative or other proceedings, such as when there is an obligation to provide information to the court, competent state authorities and other reasons provided for in current legislation.

When and why we share personal data with third parties
Provision of personal data to partners and third parties, where there is a valid ground for doing so, is done under a contract that ensures that processing takes place via application of appropriate technical and organizational measures and provides protection for your rights.
We do not provide your personal data to third parties before making sure that all technical and organizational measures are taken to protect this data by striving to carry out strict controls to meet this goal.
Third parties to whom we provide personal data


Rights of the personal data subject

Right of information
You have the right to:

Right of rectification
You have the right to:

Right of objection
During any time:

Right to restriction of processing
You may request that we limit processing of your personal data if:

Right to portability
You have the right to receive your personal data in an organized, orderly, structured, widely used electronic format if:

The right to appeal
You have the right to appeal to Tremol SMD Ltd. in case you believe that processing of your personal data violates applicable legal requirements.
The complaint should be filed in writing personally or through an authorized person with a power of attorney certified by a notary.
The complaint may also be filed electronically, in accordance with the Law on electronic document and electronic signature.

E-mail: dpo@tremol.bg
Tel.: 0893340903
Data protection officer Nina Krasimirova

Tremol SMD Ltd. decides on your complaint within one month of filing it. If necessary, this period may be extended by a further month in order to collect additional information.

Update and policy changes
In order to apply the most current protection measures and to comply with the latest legislation, we intend to update this privacy policy regularly. If the changes we make are substantial, we may post a notice about the changes made to our website, our offices or other public places. We encourage you to review the current version of this privacy policy regularly in order to be informed about how we provide protection for the personal data we collect.

Policy for privacy and protection of personal data of Tremol SMD Ltd. is last updated 08.06.2018.

Final provisions
This policy is adopted with a decision of the General assembly of Tremol SMD Ltd. from 15.05.2018.