Mandatory information on the rights of persons about personal data protection
Information about the Company that processes your data:
Name: SSARM LTD.
Registered office and address of management: Sofia city, Strelbishte district, building 93, entrance A, apt. 51
Address for correspondence: Sofia city, 87 Alexander Malinov Blvd., 2nd floor, office 1
Telephone number: +359 2 474 43 03;
Office email address: firstname.lastname@example.org
Information about the competent supervisory authority for the protection of personal data
Name: Commission for Personal Data Protection
Registered office and address of management: 1592 Sofia city, 2 Prof. Tsvetan Lazarov Blvd.
Address for correspondence: 1592 Sofia city, 2 Prof. Tsvetan Lazarov Blvd.
Telephone number: 02/ 915 3 518
Grounds for the collection, processing, and storage of your personal data
Article 1. SSARM Ltd. collects and processes your personal data in connection with the conclusion and execution of contracts with the Company based on Art. 6, para. 1 and Art. 9, para. 2, Regulation (EU) 2016/679 (GDPR), and more specifically on the following grounds:
Purposes and principles in the collection, processing, and storage of your personal data
Article 2. (1) When concluding a contract with a commercial partner or a Contracting Party under the Public Procurement Act, we collect and process personal data about the name of the legal representative of the legal entity – party to the contract, for the purposes of individualizing the party to the contract and its execution.
(2) The contact information of the legal representative or contact officer are business information and as such are not considered personal data.
Article 3. (1) We collect and process the personal data that you provide us when you apply for a job at SSARM Ltd., including for the following purposes:
SSARM EOOD (hereinafter referred to as “Administrator” or SSARM Ltd.) carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27th, 2016 on the protection of natural persons with regard to the processing of personal data and regarding the free movement of such data. This information is intended to inform you about all aspects of the processing of your personal data by the Company and the rights you have in relation to this processing.
(2) We keep your personal data that you have provided to us for the entire duration of the job offer, and if we would like to continue to store your data after this period for the purposes of future communication with you, we will send you an inquiry by email to request your express consent for the continuation of your personal data storage.
Article 4. We observe the following principles when processing your personal data:
Article 5. When processing and storing personal data, the Administrator may process and store personal data to protect his legitimate interests in connection with:
Article 6. (1) SSARM Ltd. performs the following operations with the personal data provided by you as job applicants, for the following purposes:
Conclusion of the impact assessment: Given the small number of staff employed and the limited volume of personal data being processed, it is not necessary to carry out an impact assessment for the current personal data processing operation.
Article 7. (1) SSARM Ltd. carries out the following operations with the personal data provided by you as legal representatives or proxies of legal entities – business partners/clients, including as natural persons – partners/clients, for the following purposes:
Conclusion of the impact assessment: Given the limited scope of the collected personal data and the fact that some of it is collected from publicly available sources, it is not necessary to carry out an impact assessment.
Conclusion of the impact assessment: Given the limited scope of personal data collected, carrying out an impact assessment is not necessary to conduct an impact assessment of the operation.
Storage period of your personal data
Article 9. (1) SSARM Ltd. stores your personal data as a job candidate for a period not longer than the availability of the actual job offer. After the expiration of the job offer period or the end of the selection process, SSARM EOOD takes the necessary care to delete and destroy all your data without unnecessary delay or to anonymize them (namely to reduce them to a form that does not reveal your identity), except if you do not give your explicit consent for your data to continue to be stored and processed in the future.
Transferring of your personal data for processing
Article 10. (1) The administrator may, at its own discretion, transfer part or all your personal data to administrators of personal data for the fulfillment of the processing purposes to which you have agreed, subject to the requirements of Regulation (EU) 2016/679 (GDPR).
(2) The administrator notifies you in case of intention to transfer part or all your personal data to third parties or international organizations.
Your rights in the collection, processing, and storage of your personal data
Withdrawal of consent to the processing of your personal data
Article 11. (1) If you do not want all or part of your personal data to continue to be processed by SSARM Ltd. for specific or all processing purposes, you can withdraw your consent to processing at any time by sending a request in free text.
Right of access
Article 12. (1) You have the right to request and receive confirmation from the Administrator as to whether personal data related to you is being processed.
Right to correction or completion
Article 13. You have the right to ask the Administrator to:
Right to deletion (“to be forgotten”)
Article 14. (1) You have the right to ask the Administrator to delete part or all your personal data, and the Administrator has the obligation to delete them without undue delay, when any of the following grounds are present:
o in order to exercise the right to freedom of expression and the right to information;
Right to limitation
Article 15. You have the right to request the Administrator to limit the processing of your personal data when:
Right to portability
Article 16. (1) If you have consented to the processing of your personal data or the processing is necessary for the execution of the contract with the Administrator, or if your data is processed in an automated manner, you may, after identifying yourself to the Administrator:
(2) You can exercise your right to portability by sending a request in free text.
Right to receive information
Article 17. You can ask the Administrator to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested has been disclosed. The administrator may refuse to provide this information if it would be impossible or would require a disproportionate effort.
Right to object
Article 18. You may object at any time to the Administrator’s processing of personal data relating to you, including if it is processed for the purposes of profiling or direct marketing.
Your rights in the event of a breach of your personal data protection
Article 19. (1) If the Administrator detects a breach of the security of your personal data, which may create a high risk for your rights and freedoms, he notifies you without undue delay about the violation, as well as about the measures that have been taken or are about to be taken.
(2) The Administrator is not obliged to notify you if:
Persons to whom your personal data is provided
Article 20. For the purposes of processing your personal data and fulfilling the concluded contract, SSARM EOOD may provide your data to third parties processing personal data who comply with all requirements for legality and security in the processing and storage of your personal data.
Article 21. The administrator does not transfer your data to countries outside EU.
Article 22. In the event of a violation of your rights under the above or applicable Personal Data Protection Legislation, you have the right to file a complaint with the Commission for Personal Data Protection as follows:
Name: Commission for Personal Data Protection
Registered office and address of management: 1592 Sofia city, No. 2 Prof. Tsvetan Lazarov Blvd.
Address for correspondence: 1592 Sofia city, No. 2 Prof. Tsvetan Lazarov Blvd.
Telephone number: 02/ 915 3 518
Article 23. You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are not mandatory and you can make your requests in any form that contains a statement to that effect and identifies you as the data owner.
SSARM Ltd. will provide a link to this Mandatory Information on its website, with a reference or in another appropriate way, ensuring that you can familiarize yourself with its content.