In connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EU (GDPR), “SINOPOINT” EOOD introduces the following changes to the Privacy Policy for personal data:
DATA ABOUT THE ADMINISTRATOR:
” SINNOPOINT ” EOOD, EIK 202382248, is a Bulgarian trading company registered under the laws of the Republic of Bulgaria.
CONTACT DETAILS FOR ” SINNOPOINT ” EOOD, EIK 202382248:
Office address: Bulgaria, Sofia (capital), Sofia Municipality, Sofia 1415, Vitosha district, Okolovrasten pat str. No 42, Butterfly office building, floor 1.
Phone: +359 883 909 797;
Email: office@samsungstore.bg;
Websites: samsungstore.bg; servicepoint.bg
Manager: Violeta Valentinova Sechkova.
THE PERSONAL DATA WE COLLECT AND PROCESS FROM YOU ARE:
- Personal identity type data: names, EGN/EGN, telephone number, address, email address;
- Others – bank information for payments by bank transfer or via a post terminal.
- Data from 24-hour automatic video surveillance (video images) for the movement of employees and visitors in SES stores The Mall – Sofia, The Mall, bul. Tsarigradsko shose No 115z, Ground floor; SES Paradise center store – Sofia, Paradise center, bul. “Cherni vrah” 100, floor 0, for physical security purposes.
We do not process special categories of data related to racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of trade unions, genetic data, biometric data, data concerning health or data concerning a person’s sex life or sexual orientation.
SOURCE:
The data is obtained from the data subject.
We declare that the personal data we collect will be used solely for the following purposes: for concluding and executing a contract / fulfilling an order/ with ” SINNOPOINT ” EOOD.
THE BASIS THAT GIVES US THE RIGHT TO PROCESS YOUR DATA IS:
conclusion and execution of a contract / fulfillment of an order/ and performance of our obligations under it in connection with accounting requirements and tax legislation – Art. 6, para. 1, let. “b” of the GDPR.
explicit consent provided by you to receive information about our services and products, beyond the scope of the concluded contract, newsletters, conducting surveys, etc. – Art. 6, para. 1, let. “a”, Art. 7 of the GDPR.
legitimate interest of “SINNOPOINT” EOOD, in connection with any claims that may be brought against us – Art. 6, para. 1, let. “f” of the GDPR.
ALL LAWFUL INTERESTS PURSUED BY US OR BY THIRD PARTIES WORKING FOR US ARE AS FOLLOWS:
Carrying out the subject matter of the company’s activities and providing services and products to customers.
THE FOLLOWING ORGANIZATIONS/PERSONS WILL RECEIVE YOUR PERSONAL DATA: The National Revenue Agency (NRA), other state and municipal authorities to which we provide them under specific and clear legal obligations, as well as other third parties authorized by us, such as our accounting department.
WILL YOU TRANSMIT AND SHARE MY PERSONAL DATA WITH OTHER ORGANIZATIONS OR PERSONS?
We will not provide your data to third parties, nor will we transfer it for the purpose of obtaining any benefit.
CONSENT:
In order to conclude a contract /order/ with us, you provide us with your personal data for processing, as without them we would not be able to provide our services and products. Your explicit consent is not required.
By accepting this Privacy Policy, you give us permission to process your personal data only for the purposes specified by us.
Explicit consent for the processing of your personal data is only required in cases where it serves to receive information about our services and products, beyond the scope of the concluded contract /order/, such as receiving newsletters, conducting surveys, etc.
Consent can be withdrawn at any time by letter in free form to the email address specified above, unless there is another legal basis that obliges us or gives us the right to continue processing the personal data of the individual.
If you encounter difficulties in exercising your rights, you can always contact the support contacts provided, including for obtaining the relevant form.
TRANSFER OF PERSONAL DATA TO A COUNTRY OUTSIDE THE EU OR TO AN INTERNATIONAL ORGANIZATION:
” SINNOPOINT ” Ltd. has no intention of transferring your personal data to third parties outside the EU.
DATA RETENTION PERIOD
” SINNOPOINT ” Ltd. will keep your personal data for no longer than:
for and upon conclusion of a contract /order/ and the documents related to its execution, as well as the data in these documents – 10 years, counted from 01.01. of the year following the year in which the contract /order/ was terminated or fulfilled;
for data in other accounting documents related to the Contract – 3 years, counted from 01.01. of the year following the year in which the documents were drawn up;
the data from the video surveillance of the Company’s premises are kept for a period of 7 days, unless circumstances necessitating longer data retention, such as incidents investigated by competent authorities, etc., are present.
In case a regulatory act establishes different deadlines than those mentioned above, the deadline established in the regulatory act is observed, and the Privacy Policy of ” SINNOPOINT ” Ltd. will be corrected as soon as possible.
YOUR RIGHTS AS A DATA SUBJECT ARE AS FOLLOWS:
At any time while we store or process your personal data, you have the following rights:
- You have the right to request a copy of your personal data from ” SINNOPOINT ” Ltd. and the right to access your personal data at any time.
- You have the right to request from ” SINNOPOINT ” Ltd. to correct inaccuracies in your personal data without undue delay, as well as data that is no longer up to date.
- You have the right to request from ” SINNOPOINT ” Ltd. the deletion of your personal data without undue delay in the presence of any of the following grounds:
- The personal data are no longer necessary for the purposes for which they were collected;
- When processing is unlawful;
- When personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State applicable to us as a data controller;
- We may refuse to delete your personal data for the following reasons:
- To comply with a legal obligation on our part or to perform a task carried out in the public interest,
- For reasons of public interest in the area of public health;
If we need to use your personal data for a new purpose not covered by this Privacy Policy, we will provide you with a new Privacy Policy and, where necessary, request your prior consent for the new processing.
All the above-mentioned requests will be forwarded, if there is a third party (recipient) involved in the processing of your personal data.
RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
You have the right to lodge a complaint directly with the supervisory authority if you believe that a violation has occurred, with the competent authority being the Commission for Personal Data Protection, address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2 (www.cpdp.bg).
If you wish to lodge a complaint regarding the processing of your personal data by “SYNOPOINT” Ltd., you can do so using the contact details provided by “SINNOPOINT” Ltd.
ALL THE RIGHTS LISTED ABOVE IN CONNECTION WITH THE PROCESSING OF YOUR PERSONAL DATA CAN BE EXERCISED BY SENDING AN EMAIL IN FREE FORM WITH YOUR REQUEST TO THE SPECIFIED EMAIL ADDRESS FOR CONTACT WITH “SINNOPOINT” Ltd. IN CASE YOU STILL ENCOUNTER DIFFICULTIES, YOU CAN REQUEST ASSISTANCE TO EXERCISE YOUR RIGHTS USING THE CONTACT DETAILS PROVIDED BY “SINNOPOINT ” Ltd.