Statement from Management
for the protection of personal data in Energoremont-Galabovo AD, included in the Register of the controllers and processors which have a designated data protection officer ID No. 13826 / 21.01.2010 in connection with Regulation 2016/679 of the European Parliament
Obligation to provide personal data
Energoremont-Galabovo AD, in its capacity as Personal Data Controller, processes the personal data received from the worker/employee/suppliers/contractors in strict compliance with the requirements of the applicable legislation only for the purposes of concluding and executing an employment, civil and management contract, for the purposes of accounting as well as for the protection of its legal interests.
The worker/employee is obliged to provide his/her personal data when such are needed by Energoremont-Galabovo AD in connection with the fulfillment of his/her statutory obligations under labor and insurance relations during the period of the employment (full name; PIN; address; ID card No.; certificate of completed education; medical certificate for performed medical examination when such is required in view of the specifics of the activity; TMEC decision; work booklet for applying for work experience; hospital sheet when compensation is sought for temporary/permanent disability, maternity, raising a child up to two years, etc.). The worker/employee is not obliged to disclose his personal data in connection with his racial or ethnic origin, political, religious or philosophical beliefs, membership in political parties, organizations, associations for religious, philosophical, political or trade union purposes, as well as personal data relating to health or sexual life. Energoremont-Galabovo AD may process such data only with the explicit written consent of the person.
Purposes of processing
Energoremont-Galabovo AD is a personal data controller within the meaning of the PDPA and processes the personal data of the employee for the fulfillment of its statutory obligations in connection with labor and social security relations, including tax obligations, social and health insurance, safety and health conditions at work, accounting, etc., as well as in fulfillment of other general statutory obligations of the employer (for example, in connection with crimes committed and criminal prosecution of persons, etc.). The use of the data for other purposes that are not within the statutory obligations of the employer will only take place with the consent of the employee.
Data processing
Data are processed and stored on paper and electronic media. Energoremont-Galabovo AD – personal data controller, provides the necessary technical and organizational measures to protect the data from attacks, loss or changes.
Providing data to third parties
Energoremont-Galabovo AD - personal data controller, undertakes not to disclose the personal data of the worker/employee/suppliers/contractors to third parties. Provision and access to these data can only be made in cases where Energoremont-Galabovo AD is legally obliged to provide the data to the relevant public authorities and organizations or is duly requested by such authorities in the appropriate order; when the employee has given explicit consent to the disclosure of the data to the specific third party; or in other cases provided for in the Personal Data Protection Act.
Energoremont-Galabovo AD shall not be liable if the employee has himself disclosed his personal data to third parties.
Access to personal data
The worker/employee has the right to access and correct their personal data processed by Energoremont-Galabovo AD, including to request their deletion and updating, to prohibit their presentation to third parties, etc., under the conditions and in accordance with Chapter V of the Personal Data Protection Act.
Destruction of data after completion of processing
After completing the processing of the employee's data, Energoremont-Galabovo AD shall destroy them within 60 working days. Energoremont-Galabovo AD stores data after this period only if there is a legal obligation to do so and only those data that are necessary for the fulfillment of these obligations, including upon termination of the employment contract with the employee for the fulfillment of its obligations to store accounting records, payrolls, tax control documents, etc., but not longer than 60 working days after the expiration of the deadlines provided for in the law.
Energoremont-Galabovo AD may transfer the data to another controller with identical processing purposes with the permission of the Commission for Personal Data Protection or store them as anonymous data in compliance with the terms of the PDPA.
Documents from the registers that are in paper form and contain personal data shall be destroyed after the expiration of the storing period. These documents are destroyed by cutting or burning, for which a protocol is drawn up by a commission appointed by order of the Procurator. The destruction is carried out after explicit written permission from the Procurator of Energoremont-Galabovo AD.
We inform our business partners that according to Regulation 2016/679 of the European Parliament on the protection of personal data (GDPR), within our business relationship with your company, we will store in paper and electronic media data about your company such as: registered office, correspondence address, e-mail, contact persons, UIC, tax number, bank accounts, as well as documents related to our joint activity - offers, contracts, invoices, dispatch notes, etc. This data will be stored and used for the purposes of our business relationship - it will not be used for other purposes and will not be provided to third parties. We ensure that your data is protected by the necessary technical and organizational measures that guarantee the confidentiality, integrity, accessibility of the data in connection with its future processing.
Upon termination of our business relationship, you can request the deletion of your company data. The data shall be destroyed within 30 days after the expiration of the statutory storage periods.
If you do not agree with this, you can send your objection or share your concerns by email to the following address: office@energoremont.bg