PERSONAL DATA PROCESSING POLICY
Information about the data controller:
" DECICON" Ltd . is a company registered under the Commercial Act of the Republic of Bulgaria with UIC: 206557710, with headquarters and address of management: Sofia, P.O. Box 1000, Sredets District, 5 Slavyanska Str., entr. 1, fl. 3.
"DEXICON" Ltd. acts through the website " www.dexycon.eu" and all its subpages, hereinafter referred to as the "Site".
Contact details:
Telephone number: 0888268209;
E-mail address: support@ dexycon.eu
In the following paragraphs you will find detailed information about the processing of your personal data depending on the basis on which we process them.
What is personal data?
Personal data is any information or set of information that identifies you or could be used to identify you (together with other information you provide in the contact form).
The processing of personal data includes collecting, storing, transmitting, correcting, updating, deleting, destroying and all other actions that are performed with your personal data.
Grounds and purposes for which we use your personal data:
For the purposes of concluding contracts and providing services through the Platforms we process your personal data that you provide by filling in forms, sending inquiries and messages on the Platforms, as well as when you make subsequent contact with us in the course of considering your inquiries and messages. The data you provide serve us to be able to provide you with information and send notifications about everything, related to the services you use with us.
Data we process on this basis
On this basis, we process information about the type and content of the contractual relationship, as well as any other information related to the contractual relationship, including:
personal contact details – email, phone number;
information about the inquiry sent to us;
correspondence in relation to the overall service – e-mail, letters, information about your requests for troubleshooting, complaints, requests, complaints, feedback we receive from you;
Information from your actions on the site;
IP address
The processing of the specified personal data is mandatory for us in order to be able to provide you with comprehensive information about our services. In the forms through which personal data is entered, we clearly indicate the mandatory or voluntary nature of the provision of the data.
When we delete the data collected on this basis
The data collected on this basis is deleted 5 years after the termination of the contractual relationship, whether due to the expiration of the contract, termination or other grounds.
Direct marketing – if you have provided your consent to receive marketing messages, we will collect and process your personal data for the purpose of sending suggestions for the products / services in which you are interested. In this regard, we may send you commercial messages through the following electronic communication channels (e-mail, SMS, etc.), which contain general and thematic information; information about products, complementary to the services used and other business communications.
Data we process on this basis
On this basis, we process only the data for which you have given us your explicit consent. Specific data is determined for each individual case. Usually this data is an email address, phone number and name.
Provision of data to 3rd persons
On this basis, we can provide your data to marketing agencies, Facebook, Google or the like.
Withdrawal of consent
The consents provided may be withdrawn at any time by paying an email to us at the specified contact email addresses. The withdrawal of consent has no impact on the performance of contractual obligations. If you withdraw your consent to the processing of personal data for any or all of the ways described above, we will not use your personal data and information for the purposes set out above. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
The data collected on this basis is deleted at your request or 12 months after its initial collection.
3. Legitimate interest - the processing of your data is necessary to comply with our obligations under applicable law. There may be cases where we use or transmit information to protect our rights and commercial activity. These may include:
measures to protect the Platforms and users of the Platforms against cyber-attacks;
measures to prevent and detect fraud attempts, including the transmission of information to competent public authorities;
measures to manage various other risks;
Legislation;
contractual interest – we process your data for the purpose of providing the services under the contracts concluded on the Platforms.
Your consent – we rely on your consent to send you commercial messages, as well as to inform and involve you in our projects and programs, to share your data with our partners, as well as to notify you of changes in our organization and activity.
How we protect your personal data
In order to ensure adequate protection of the data of the company and its customers, we apply all necessary organizational and technical measures provided for in the Personal Data Protection Act.
The company has established rules to prevent abuse and security breaches, which supports the processes of protecting and ensuring the security of your data.
For maximum security when processing, transferring and storing your data, we may use additional protection mechanisms such as encryption, pseudonymization, etc.
Who will we share your information with?
Our third-party service providers who perform certain tasks on our behalf and according to our instructions may also have access to information relating to visitors to our website to the extent necessary to provide their services to us. These third parties include our IT service providers who perform tasks in the areas of hosting, database management, website management, support services, alert services, web analytics, and incoming inquiry and data analytics processing.
Our website uses analysis tools provided by specialized third parties to help us diagnose technical problems, analyze traffic to our website, analyze trends, monitor and measure how our visitors engage with our website.
Our third-party service providers and the analytics tool providers we use may have access to information related to your device, your browser and how you navigate our content in accordance with that statement from various countries, including countries outside the European Union.
Consumer Rights
Each User of the site enjoys all rights to the protection of personal data under Bulgarian and European Union law.
The user can exercise his rights through the contact form or by sending a message to our email.
Each User has the right to:
Awareness (in relation to the processing of his or her personal data by the controller);
Access to your own personal data;
Correction (if the data is inaccurate);
Deletion of personal data ("right to be forgotten");
Restriction of processing by the controller or processor;
Portability of personal data between individual administrators;
Objection to the processing of his/her personal data;
Each data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
Right to judicial or administrative redress in the event that the rights of the data subject have been violated.
The user may request deletion if one of the following conditions is met:
The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
The data subject withdraws consent on which the processing is based and there is no other legal ground for the processing;
The data subject objects to the processing and there are no overriding legitimate grounds for the processing.
The personal data have been unlawfully processed;
The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services to children and consent has been given by the holder of parental responsibility for the child.
In case the User wishes to have his personal data deleted, he should address his request to the Personal Data Administrator via the email specified above.
The data subject shall have the right granted by the European legislator to restriction of processing of his or her personal data where:
Contest the accuracy of the personal data. In this case, the restriction of processing is for a period enabling the controller to verify the accuracy of the personal data
The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use instead.
The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
Objects to processing pending verification whether the legitimate grounds of the controller override the interests of the User.
Right to portability
Each data subject shall have the right granted by the European legislator to receive the personal data concerning him or her which he or she has provided to a controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, where the processing is based on consent or on a contractual obligation and the processing is carried out by automated means. In exercising his or her right to data portability, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
Right to object
Users have the right to object to the controller against the processing of their personal data. We shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims. In case of objection to the processing of personal data for direct marketing purposes, the processing should be terminated immediately.
Complaint to the supervisory authority
Each User has the right to file a complaint against the unlawful processing of his or her personal data with the Personal Data Protection Commission or the competent court.
