Terms of use

Privacy Policy.

Please read the website's Privacy Policy.

Privacy Policy

Thank you for your interest in us!

Data protection is a matter of particularly high priority for MINERALCOMMERCE JSC, acting as the Data Controller.

The processing of personal data of natural persons complies with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016) and the specific data protection provisions of Bulgarian legislation applicable to MINERALCOMMERCE JSC.

This Privacy Policy applies to the website of MINERALCOMMERCE JSC, MINERALCOMMERCE.BG. It is based on the terms used in the General Data Protection Regulation, hereinafter referred to in this policy as the GDPR. You can familiarise yourself with the terminology used here.

Through this Privacy Policy, our organisation wishes to inform visitors to our website about the nature and scope of the personal data we process when they use our website, as well as the purposes of such processing. Furthermore, data subjects are informed through this policy of their rights regarding the protection of their personal data. As the Data Controller, MINERALCOMMERCE JSC has implemented numerous technical and organisational measures to ensure the most comprehensive protection of personal data processed through this website. Nevertheless, internet-based applications may inherently have security vulnerabilities, and absolute protection cannot therefore be guaranteed. For this reason, every data subject is free to provide us with personal data through alternative means, for example by telephone.

Use of the website MINERALCOMMERCE.BG is possible without providing personal data. However, if a data subject wishes to use specialised corporate services through our website, it may be necessary to process personal data such as the data subject's name, address, email address, and telephone number. Personal data is processed to the minimum extent necessary to provide a high-quality service. MINERALCOMMERCE JSC is committed to maintaining the confidentiality of your personal data. Where the processing of personal data is necessary but we have no legal basis for such processing, we obtain the data subject's consent in advance. In certain cases, the explicit consent of the data subject to the processing of their personal data may not be necessary if another legal basis for processing exists (a contract, a legal obligation, or the legitimate interests of the Data Controller).

Name and contact details of the Data Controller:

MINERALCOMMERCE JSC

1 Novozagorsko Shose Street, Agrobiochim Industrial Site, land of Hrishteni village, Stara Zagora 6000

Bulgaria

Telephone: +359 884 340048

Email: silicas@mineralcommerce.bg

DEFINITIONS UNDER THE REGULATION

In this Privacy Policy, we use the following terms:

Personal Data / Personal Information

Personal data means any information relating to an identified or identifiable natural person (the "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Data Subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.

Processing

Processing means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, disclosure by transmission, dissemination or otherwise making data available, alignment or combination, restriction, erasure, or destruction.

Restriction of Processing

Restriction of processing means the marking of stored personal data with the aim of limiting its processing in the future.

Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.

Pseudonymisation

Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific natural person without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller or Person Responsible for the Processing of Personal Data

The controller or person responsible for processing is a natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its nomination may be provided for by Union law or the law of the Member States.

Personal Data Processor

A personal data processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

Recipient

A recipient is a natural or legal person, public authority, agency, or other body to which personal data is disclosed, whether or not it is a third party. However, public authorities that may receive personal data in the context of a specific investigation in accordance with Union law or the law of the Member States shall not be regarded as recipients; the processing of such data by those public authorities shall comply with the applicable data protection rules in accordance with the purposes of the processing.

Third Party

A third party is a natural or legal person, public authority, agency, or body other than the data subject, the controller, the personal data processor, and persons who, under the direct authority of the controller or the personal data processor, are authorised to process personal data.

Consent

The consent of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they, through a statement or a clear affirmative action, signify agreement to the processing of personal data relating to them.

RIGHTS OF DATA SUBJECTS

Right to Confirmation and Right of Access

Every data subject has the right, granted by European legislation, to obtain confirmation from the controller as to whether or not personal data concerning them are being processed and, where that is the case, to access those data, including a free copy of the personal data undergoing processing, as well as access to the following information:

  • the purposes of the processing and the relevant categories of personal data;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the envisaged period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller the rectification or erasure of personal data, or the restriction of processing of personal data concerning the data subject, or to object to such processing;
  • the existence of the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject;
  • where personal data are transferred to a third country or an international organisation, the data subject has the right to be informed of the appropriate safeguards relating to the transfer.

Right to Rectification

Every data subject has the right, granted by European legislation, to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning them or the completion of incomplete personal data.

Right to Erasure (Right to Be Forgotten)

Every data subject has the right, granted by European legislation, to obtain from the controller the erasure of personal data concerning them without undue delay, and the controller is obliged to erase personal data without undue delay where one of the following grounds applies:

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • The data subject withdraws the consent on which the processing is based, and there is no other legal ground for the processing.
  • The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
  • The personal data have been unlawfully processed.
  • The personal data must be erased for compliance with a legal obligation under Union law or the law of a Member State to which the controller is subject.
  • The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

We may refuse to erase your personal data to the extent that processing is necessary:

  • for exercising the right to freedom of expression and the right to information;
  • for compliance with a legal obligation on our part or for the performance of a task carried out in the public interest;
  • for reasons of public interest in the area of public health;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, insofar as erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or for the establishment, exercise, or defence of legal claims.

Right to Restriction of Processing

Every data subject has the right, granted by European legislation, to obtain from the controller restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful, but the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
  • The controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise, or defence of legal claims.
  • The data subject has objected to processing pursuant to Article 21(1) of the GDPR, pending verification of whether the legitimate grounds of the controller override those of the data subject.

In the cases listed above, the data will only be stored and will not be processed.

Right to Data Portability

Every data subject has the right, granted by European legislation, to receive the personal data concerning them that they have provided to the controller in a structured, commonly used, and machine-readable format. They have the right to transmit those data to another controller without hindrance from the controller to which the personal data were provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contractual obligation pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means.

Furthermore, when exercising their right to data portability pursuant to Article 20(1) of the GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others.

Right to Object

Every data subject has the right, granted by European legislation, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, including processing for direct marketing purposes (unsolicited advertising messages), as well as automated processing, including profiling. In the event of an objection, MINERALCOMMERCE JSC shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or grounds for the establishment, exercise, or defence of legal claims.

If the data subject objects to processing for direct marketing purposes, MINERALCOMMERCE JSC shall no longer process the personal data for such purposes.

Furthermore, on grounds relating to their particular situation, the data subject has the right to object to the processing by MINERALCOMMERCE JSC of personal data concerning them for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.

Automated Individual Decision-Making, Including Profiling

Every data subject has the right, granted by European legislation, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller; or (2) is authorised by Union law or the law of the Member State to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights, freedoms, and legitimate interests; or (3) is based on the data subject's explicit consent.

Where the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the data controller, or (2) is based on the data subject's explicit consent, MINERALCOMMERCE JSC shall implement suitable measures to safeguard the data subject's rights, freedoms, and legitimate interests, at least the right to obtain human intervention on the part of the controller, the right to express their point of view, and the right to contest the decision.

Right to Withdraw Consent to Data Processing

Every data subject has the right, granted by European legislation, to withdraw their consent to the processing of their personal data at any time.

If the data subject wishes to exercise any of the personal data protection rights described above, they may contact any employee of MINERALCOMMERCE JSC at any time using the contact details provided. Their request will be considered within the time limits prescribed by the GDPR.

Right to Lodge a Complaint with a Supervisory Authority and to an Effective Judicial Remedy Against a Controller or Processor: If you believe that we are violating Bulgarian or European legislation, we kindly ask you to contact us so that we can clarify the situation and take immediate action. In all cases, and without being obliged to notify us as described in the preceding sentence, you have the right to lodge a complaint with the supervisory authority responsible for personal data protection in the European Union Member State of your habitual residence, place of work, or place of the alleged infringement. In Bulgaria, this supervisory authority is the Commission for Personal Data Protection, address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria (www.cpdp.bg).

You have the right to an effective judicial remedy if you consider that your personal data protection rights have been infringed as a result of our processing of your personal data.

The rights listed above do not affect any other administrative or judicial remedies available to you under the applicable legislation.