Mencaura EOOD, UIC: 131318347, with address: Sofia, 3 Tsar Boris III Street, 8th floor, VAT No. BG131318347, tel.: 0888 813 610, which is the owner of the website mencaura.com, applies these General Terms and Conditions in its commercial relations with the Clients and users of the website mencaura.com, referred to in this text for brevity as the “Administrator”.
As a personal data administrator, Mencaura EOOD collects and processes certain information about individuals.
This Privacy Policy regulates how personal data is collected, processed and stored in order to meet the standards in the Administrator’s organization and to comply with legal requirements.
I. Legal basis
This Privacy Policy is issued on the basis of the Personal Data Protection Act and its subordinate legislation, and the General Data Protection Regulation (EU) 2016/679 (GDPR).
Bulgarian legislation and the GDPR provide rules on how organizations, including Mencaura EOOD, must collect, process and store personal data. These rules are applied by the Administrator regardless of whether it concerns data that is processed electronically, on paper or on other media.
The Administrator takes the necessary measures to ensure that the processed personal data is not subject to unlawful disclosure. The Administrator of Personal Data is familiar with and follows the principles provided in the GDPR:
– personal data is processed lawfully, fairly and transparently. The User voluntarily gives his consent to the processing of the personal data provided by him by checking the appropriate box, in order to send a request and/or an order for the performance of a service from the contact form created on the website mencaura.com.
– personal data are collected for specific, explicit and legitimate purposes and are not further processed in a manner incompatible with these purposes. The processing of personal data for advertising and marketing purposes occurs only with the voluntary consent of the user, in case the user has explicitly expressed a desire through the contact form on the mencaura.com website to receive offers and promotions, and can be terminated at any time, in case the user has notified Mencaura EOOD of this.
– personal data are appropriate, related to and limited to what is necessary in relation to the purposes for which they are processed. In order to send an inquiry and/or an order for the performance of a service through the contact form on the mencaura.com website, the client fills in their name, telephone number and e-mail address.
– each user is obliged to monitor the accuracy of the personal data they provide and, if necessary, to send a notification that there is a change in any of the personal data provided by them.
– personal data are stored in a form that allows the identification of the affected persons for a period not longer than necessary for the purposes for which the personal data are processed. Mencaura EOOD stores your personal data for a period not longer than necessary. The data of users who have made a request from the contact form on the mencaura.com website are stored for a period of 1 month from the date of sending the request, in order to enable additional communication between Mencaura EOOD and the customers, if necessary. The data of users who have made an order for the performance of a given service from the contact form on the mencaura.com website are stored for a period not longer than the performance of the service, as well as the announced warranty period of the service. The data storage period may be extended in order to fulfill the commitments that one or both parties have under the contract (order) for a period not longer than necessary for this;
– personal data are processed in a manner that ensures an appropriate level of security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by applying appropriate technical or organizational measures.
II. Objectives of this Privacy Policy
This Privacy Policy aims for the Administrator to:
– comply with applicable legislation regarding personal data and follow established good practices;
– establish the mechanisms for keeping, maintaining and protecting accounting registers;
– establish the obligations of officials processing personal data and/or persons who have access to personal data and work under the direction of the personal data processors, their liability in the event of failure to fulfill these obligations;
– protect the rights of staff, customers and partners;
– disclose how it stores and protects the personal data of individuals;
– establish the necessary technical and organizational measures to protect personal data from unlawful processing (accidental or unlawful destruction, accidental loss, unlawful access, alteration or dissemination, as well as from all other unlawful forms of personal data processing);
– be protected against the risk of violations.
III. Scope
This Privacy Policy applies to the processing of personal data of employees, managers, customers, suppliers, contractors, business contacts and other individuals with whom the Administrator has a relationship, wants to establish business contact or are users of the website mencaura.com
IV. Collection of personal dataI
Personal data is any information relating to an individual who is identified or can be identified directly or indirectly by an identification number or by one or more specific features. It includes data of any nature that alone or in combination with other data can lead to the unambiguous identification of a specific individual.
Purposes of data collection
The Administrator collects personal data in connection with the implementation of the following purposes:
- To perform activities related to:
– preparation of any documents;
– establishing contact with the contact person by phone, e-mail or in any other lawful manner;
– response to an inquiry sent from the contact form of the website mencaura.com in connection with services offered by Mencaura EOOD;
– performance of a given service requested from the contact form of the website mencaura.com
– keeping accounting records in connection with the performance of contracts to which the Administrator is a party;
– processing payments in connection with the contracts concluded by the Administrator;
– sending important information to the subjects in connection with changes in the rules, conditions and policies of the Administrator and/or other administrative information;
- For marketing purposes – after obtaining explicit consent from the subjects of personal data;
- For statistical purposes.
Data collection
Personal data for each person is provided voluntarily by the persons themselves and is collected by the Administrator in fulfillment of a regulatory obligation, in connection with a response to a request sent from the contact form of the site, in connection with the performance of a given service requested from the contact form of the site mencaura.com, in connection with the conclusion of a contract and/or the fulfillment of obligations under a concluded contract in accordance with the provisions of the Commercial Act, the Accountancy Act, the Obligations and Contracts Act, the Value Added Tax Act, etc. and the terms and conditions specified in a commercial contract with the relevant client via: paper – written documents (including powers of attorney, contracts, lien notices, bank information, etc.), by e-mail – provided in connection with the execution of a commercial contract.
V. Processing of personal data
The processing of personal data is any operation or set of operations which is performed on personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure to third parties for transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.
The Administrator collects and uses personal information to better understand the needs and interests of customers and to offer better service. In addition to the information that customers provide, mencaura.com may also collect information during the user session on the site through automatic information collection tools, which include cookies.
The data and personal information provided by users is used by Mencaura EOOD to manage orders, to fulfill and/or deliver services, to process payments, to communicate with users regarding orders, services and promotional offers.
The information that Mencaura EOOD collects to understand the needs and interests of its customers helps to make each user’s visit to the mencaura.com website consistent and personalized. For example, the Administrator may use the user’s personal data to:
- inform about services;
- provide services and support;
- notify about new services or other benefits;
- provide personalized promotional offers.
The data that users provide through the contact form created on the mencaura.com website are: name, phone number, e-mail address.
We highly value the privacy of our customers. All data required to send an inquiry and/or an order for the performance of a given service from the mencaura.com website contact form are confidential and are not provided to third parties. The data may be provided if legally requested by the police, prosecutor’s office or investigative services.
VI. Breaches. Notification of breaches
A data breach occurs when personal data for which Mencaura EOOD is responsible is affected by a security incident, as a result of which the confidentiality, availability or integrity of the personal data is compromised. In this sense, a data breach occurs when there is a security breach leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of data transmitted, stored or otherwise processed.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of natural persons, the Administrator (through the relevant employee), without undue delay and where feasible, no later than 72 hours after having become aware of it, shall notify the Personal Data Protection Commission of the breach.
The Administrator shall document each personal data breach, including the facts relating to the breach, its consequences and the actions taken to address it.
VII. Destruction
Accounting and commercial information, as well as all other information and documents relevant to taxation and mandatory social security contributions, are stored by the Administrator for the following periods:
– payroll – 50 years;
– accounting registers and financial statements – 10 years;
– tax and social security control documents – 5 years after the expiry of the limitation period for repayment of the public obligation to which they are related;
– all other media – 5 years.
After the expiry of the storage period, information media (paper or technical) that are not subject to transfer to the National Archives Fund may be destroyed.
After the end of the storage period, the data are destroyed as soon as possible by destroying the paper media by shredding, and the technical media – by deleting and erasing the relevant files from the Company’s computers.
VIII. Additional provisions
For the purposes of these internal rules:
- “Personal data administrator” is “Mencaura” EOOD, with UIC 131318347.
- If the above conditions are changed or supplemented, they will be published on this page without prior notice. After their publication, it is considered that customers are automatically familiar with them.
Please check the section on our personal data protection policy regularly.
Publication date: 21.05.2018