- Grounds and objectives for the collection, processing and storage of personal data. Types of personal data
Aglaya 11 EOOD processes only legally collected personal data necessary for specific, well-defined and legitimate purposes, being both a personal data controller and processor. The reason for collecting and processing the personal data you provide to us is the need to perform our contract with you. Therefore, according to the above mentioned Regulation, the collection and processing of your personal data is legal.
With your electronic or paper request for translation, you provide us with your personal data (contact details: name of natural and/or legal person, business and/or personal email address, business and/or personal address, telephone; invoice details, etc.). By sending or submitting a request for a service, you give your consent to the collection of the personal data provided. The personal information we collect is limited to the minimum required for your order execution.
Your subsequent electronic and paper-based approval of the performance conditions offered by us has the effect of a contract. In connection with the performance of that contract – for translation or linguistic services – you provide us with any personal data contained in the translation documents which we process and store. It is your responsibility to make sure that the data subject has given his or her consent or that you have any other legitimate reason to provide us with texts containing personal data.
All personal data we process are provided to us directly by you. We do not use third parties or other means of personal data collection.
We do not retrieve personal data from the content of the translations and do not process them outside the context of documents translation.
- Confidentiality and non-disclosure of personal data
Aglaya 11 EOOD undertakes not to disclose your personal data without your explicit consent to third parties, except when necessary for the contract performance. We only disclose your personal data to third parties to the extent necessary to perform the contract. Your consent to the disclosure of your personal data to the following third parties is deemed to be given:
- Translators/editors only have access to personal data that may be contained in the translation texts, they have signed confidentiality statements, and are duly informed of their confidentiality obligations and are responsible for the compliance thereto.
- State authorities, departments, institutions and embassies, certifying and legalizing all kinds of documents and papers.
- Third parties, as required by law, when concluding contracts for the purposes set out in the Accounting Act and the Tax and Social Insurance Procedure Code and other related regulatory acts, in connection with the maintenance of lawful accounting;
Your personal data may be disclosed without your explicit consent only when the law requires us to provide the information to third parties or when that information becomes public without our intervention.
- Measures to ensure the personal data protection.
As a personal data administrator, Aglaya 11 EOOD provides technical and organizational security measures, including appropriate procedures and methods for transferring data through secure communication channels and additional measures (such as encryption of information). In addition, appropriate policies have been put in place for the storage of documents containing personal data and their deletion and physical destruction after the contract has been completed.
Our employees and subcontractors (individuals and legal entities) receive specific guidance on the compliance with the best data protection measures and sign confidentiality statements. We have taken adequate measures to protect documents from loss or damage.
In the event that we detect a realized or potential breach of data protection, we will immediately notify you and the relevant data protection authority.
We transfer your data to third countries only to the extent necessary to perform the contract (e.g. translation and legalization of a document).
For IT hosting and support purposes, files are stored on servers within the European Union.
If your documents contain special categories of personal data belonging to a third party, it is your responsibility to obtain the appropriate consent and to establish legitimate grounds for the processing of such data in accordance with Articles 6 and 9 of the Regulation.
As Aglaya 11 EOOD does not fall under the cases where Regulation (EU) 2016/679 provides for the mandatory appointment of a data protection officer, no such person has been appointed.
- Time limits for personal data storage
Aglaya 11 EOOD stores the personal data you provide for no longer than is necessary to fulfil the purposes for which they are being processed or until you decide that you want to be “forgotten”. The rights to delete personal data are subject to some restrictions if your information appears on contractual or financial documents (which we are required to keep for a specified period of time, stipulated in the legislation) or for legal protection purposes.
Under the Accounting Act, we store the personal data specified therein for the periods required by the Act, after which they shall be destroyed.
- Your rights
Aglaya 11 EOOD guarantees your rights under the Data Protection Regulation within the applicable legislation:
- Right of access;
- Right to correct inaccurate or incomplete data;
- Right of deletion (right to be forgotten), if the conditions of Art. 17 of Regulation 2016/679 apply;
- Right to a restriction on processing;
- Right of data transferability, if the conditions for transferability under Art. 20 of Regulation 2016/679 exist;
- Right to objection, if the conditions of art. 21 of Regulation 2016/679 exist.
You can exercise the above rights by making a request to Aglaya 11 EOOD (in writing or electronically) stating your specific requirement.
- Right of appeal to the Data Protection Commission or to the court
If you believe that your rights under Regulation 2016/679 have been infringed, you may file a complaint with the Data Protection Commission or an Administrative Court.