Privacy policy

               The purpose of this Privacy Policy is following the information requirements under Art. 13 and Art. 14 of the GDPR to inform you about the activities performed by “eJeudi” Ltd., UIC 206033660 personal data processing activities, the purposes for which the data are processed, the measures and guarantees for the protection of the processed data, your rights and how they may be exercised, per the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter only “Regulation 2016/679” or “GDPR”) and other applicable acts of the European Union and the Republic of Bulgaria.

Administrator details and contact information.

“EJeudi” Ltd., UIC  206033660, hereinafter referred to as  “The company”, is a legal entity that carries out commercial activities on the territory of the Republic of Bulgaria. The headquarters and address of the management of “EJeudi” Ltd are Bulgaria, Sofia-city, Municipality of Sofia, Sofia  1421,  South Park  No 1, entr. V, at which address you can send by mail requests to the company as a data administrator.

The company is an administrator of personal data, which is processed on the occasion of the conclusion of a contract (written or oral) with third parties – art. 6, item 1, letters “b” and “e” of the regulation, based on your consent-article 6, item 1, the letter “a” of the regulation, as well as in the performance of normative obligations-art. 6, item 1, letter “v” of the regulation.

                By marking with a tick on the website of the company, with the conclusion of an agreement or by signing an explicit declaration, customers give their explicit consent their data to be collected and processed within the meaning and under the terms of EU Regulation (EU) 2016/679 of 27.04.2016 and this privacy policy.

By using the company’s services, when the policy is applicable and you have checked for consent, entered into a contractual relationship or given your explicit consent, you will be deemed to have read, understood and expressed your consent to the use of your data following the internal rules and this privacy policy.

You can send your requests to the e-mail address: admin@ejeudi.com, or send them in writing to the address: Bulgaria, Sofia-city, Municipality of Sofia, Sofia  1421,  South Park  No 1, entr. V

Contact details of the company’s Data Administrator.

You can approach the contact person of the administrator of personal data in the company – Milos Radivojevic on the e-mail address:  admin@ejeudi.com, and your message should specify the necessary data for your individualization and contact for feedback.

Purposes and grounds for the processing of personal data, categories of data processed.

The company carries out the powers assigned to it by counterparties on the occasion of contract or statutory obligations. The personal data collected from you is in the category of “ordinary” ones, where it processes the same in relation to the following main activities:

  • Carrying out of commercial activity – provision of services.
  • Proper accounting of payments to suppliers and receiving payments from customers.
  • Hiring employees and administering personnel.
  • Monitoring visits to its website.
  • Ensuring the order in the company’s office and business premises and labor discipline.

The company does not collect any special (sensitive) personal data.

In exercising its powers, the company processes personal data of applicants for employees, clients of the company, and other persons, mainly in compliance with their contractual or legal obligations – the basis for the processing of data under art. 6) of the regulation. In these cases, the data processed related to:

  • The physical identity of the subject-names, PIN, address, telephone numbers, e-mail address, photograph, ID card number, date of issue, driving license number, date of issue.
  • Economic identity.
  • Social identity.
  • Family identity-marital status.
  • Data on the judicial background-where applicable.
  • Health data.
  • Length of service data.
  • Educational data, additional qualifications, and competences, including the Copies of documents certifying completed education and acquired qualifications-diplomas, certificates, certificates.
  • Data on visits to the company’s website.
  • Video images

       The personal data thus collected shall be used solely for the purposes for which it is provided for in the contract or in the relevant normative act.

For the administration of staff and financial and accounting records, the company processes personal data on the grounds of art. 6, par. 1, item “v” and art. 9, par. 2, item “B” of the regulation of job applicants, employees, and natural persons, contractors, and representatives of legal entities – contractors. The categories of data processed related to physical and social, family, and economic identity data on the judicial past and the state of health of individuals.

Where the company processes data based on the person’s consent, personal data shall only be processed if the persons are freely, specifically, informed and unambiguously expressed their consent to the processing.

The processing of data is carried out for the purposes specified and strictly defined by law, as the data is being processed lawfully and in good faith and may not be further processed in a manner incompatible with those purposes.

The source of personal data is the subjects of the data – the clients of the company and its employees.

We declare that the personal data we collect will only be used for the following purposes:

  • To provide customers with the services offered by the company.
  • To check the orders and payments made by customers.
  • For checks on claims or at the customer’s request.
  • For accounting purposes.
  • To send messages to clients’ e-mail.
  • For contact with clients in case of necessity related to the provision of services.
  • Ensuring the order in the company’s office and business premises and labor discipline.

Categories of recipients of data outside the company.

The company does not disclose personal data to third parties and recipients unless there is a legal or contractual basis for obtaining the data or the data is generally available due to their inclusion in a public register.

Apart from the availability of data included in a public register, recipients of data in a specific case may be:

  • State authorities and bodies entrusted with public functions within the limits of their powers (NRA, NSSI, MOI, etc.);
  • Banks for payment of remuneration.
  • Courier companies and postal operators – for correspondence with the individuals-data subjects;
  • Accounting – processor of personal data under a contract, for the financial and accounting activities of the company
  • Lawyers and/or law firms – for the administrative and legal provision of the company’s activities

Data Retention Period

As a data administrator, the company processes data for a period of minimum duration according to the processing purposes and provided for in the applicable legislation following the retention limitation principle, and the data will be stored as follows: On a secure electronic medium – server or paper format.

For 50 years, data related to employment and social security relations are stored. The archive of decisions imposing disciplinary penalties shall be kept for 15 years and the remaining data of the clients shall be kept for 5 years after the provision of the service.

Rights of natural persons-data subjects.

The measures taken to protect personal data following the requirements of Regulation 2016/679 are aimed at securing the rights of the persons whose personal data are processed, and namely:

  • Right of access.
  • The right to rectify inaccurate or incomplete data.
  • Right to Erasure (Right to be forgotten), if the conditions of art. 17 of REGULATION 2016/679.
  • The right to restrict processing.
  • Right to data migration, if the conditions for portability under art. 20 of REGULATION 2016/679.
  • The right to object if the conditions of art. 21 of REGULATION 2016/679.
  • Right the data subject shall not be subject to a decision based solely on automated processing involving profiling.
  • You have the right to ask the company to restrict the processing of your available data, in which case the data will only be stored but not processed.

If the company needs to use your data for a new purpose that is not covered by the original or data protection declaration, you will be provided with a new data protection notice and, where necessary, your prior consent to the new processing will be required.

You may exercise the above rights by request to the company (in writing or by electronic means) in which you must specify your request. The request should be signed and sent to the address of the company in the order provided for in this privacy policy.

Right to complain to the Commission for personal data protection or to the court

If you believe that your rights under regulation 2016/679 have been violated, you may complain to the Commission for personal data protection or to the Administrative court-Sofia City.

Transfer of personal data to third countries or international organizations.

The company does not transfer the processed personal data to third countries or international organizations. 

Personal data protection measures introduced by the company.

With the company’s internal rules for personal data protection adopted by the manager, measures are in place to effectively protect the processed personal data and the possibility of exercising the rights of the data subjects provided for in REGULATION 2016/679, the full text of the internal rules can be found on the company’s website. The company has introduced the necessary technical and organizational measures to prevent unauthorized access, loss, or unauthorized use of your data. The collection and processing of them are in full compliance with the requirements of the Bulgarian and European legislation.

Further information on the data protection measures in the company can be obtained from the contact person of the administrator  of personal data –  Milos Radivojević by sending a request to the following e-mail address: admin@ejeudi.com.