Privacy
In its capacity of a data controller and processor, AQUACHIM JSC observes and maintains its activity in conformity with all current standards and requirements for data protection, including Regulation (EU) 2016/679 and the Bulgarian legislation. In this context we would like to inform you about the personal data categories accessible to AQUACHIM JSC in view of the undertaken obligations to and the interaction with employees, clients, partners and visitors.
Business Goals | Business activities | Personal data | Role of AQUACHIM | Storage terms | Lawful basis |
Vocational training of young cadres for the professions “laboratory assistant” and “ecologist” in the CVT (Center for vocational training) | Preparation of curriculum, conduction of lectures and exams, issuing of diplomas/certificates | Physical identity – names, PIN, address, place of birth; Social identity – education, qualifications, medical certificate for verification of contraindications | Controller | Depending on the provisions of the respective legislative act | Legal obligation (Art.6, Para.1, Point “c” of Regulation (EU) 2016/679; Law on vocational education and training |
Human resources management (staff) | Preparation and storage of labor files, accomplishment of financial accounting | Physical identity – names, PIN, address, place of birth, phone number, ID card; Social identity – education, qualifications, former labor activity; Data for family members of the employees for tax concessions, social benefits and compensations. | Controller | 50 years | Legal obligation (Art.6, Para.1, Point “c” Regulation (EU) 2016/679); Labor code; Social security code, Income taxes on natural persons Act; Art.12, Item 1, Point 1 of the Accountancy Act |
Human resources management (job applicants) | Recruitment | Physical identity – names, PIN, address, place of birth, phone number, ID card; Social identity – education, qualifications; former labor activity; Medical Certificate; Criminal record certificate in the cases stipulated by law | Controller | Up to 6 months | Initiative consent of the job applicant (Art.6, Para 1, Point “a” Regulation (EU) 2016/679 and storage according Art. 25j. Personal Data Protection Act |
Security activities related to property and employees | Video surveillance of the corporate building | Names, registration number of vehicle, video and audio recording | Controller | 30 days | Legitimate interest related to the corporate property security and vital interest related to the life and the health of the employees – Art.6, Para 1, Point “d” and “f” Regulation (EU) 2016/679 |
Maintenance of the technical condition of medical equipment | Maintenance of the medical equipment’s software | Access to recorded/related data in the Laboratory information system/Hospital information system – names, PIN, address, phone number, ex – officio PIN, examinations | Processor | In case of warranty service – 1 or 2 years; In case of after warranty service – fixed term according to contract provisions | Contract with hospitals/laboratories for warranty and after warranty service in accordance to Art.28 of Regulation (EU) 2016/679 |
AQUACHIM JSC uses the stated personal data categories only for the purpose of complete implementation of the specified company goals and activities. Transfer of personal data to other countries shall not be made and personal data shall not be provided to third parties outside of AQUACHIM JSC and its subsidiaries.
Your rights
The General Data Protection Regulation provides you a number of rights that can be exercised, in relation to the personal data processed by us.
- Right of information: You have the right to receive information if AQUACHIM processes your personal data.
-
Right of access: You have the right to receive information concerning the volume, the character and the manner in which AQUACHIM processes your personal data as well as to receive a copy of your processed personal data upon request. In addition, you have the right to be informed about the undertaken relevant actions for protection of your personal data.
-
Right of rectification: You have the right to require from us, in a reasonable term, to supplement and/or rectify your personal data which is incomplete, inaccurate, or out-of-date.
-
Right to erasure: You have the right to require the erasure of your personal data when the processing is no longer necessary and/or there is no more legal basis for the processing.
-
Right to restriction of processing: In case of inaccuracy of the processed personal data, you have the right to require from AQUACHIM to restrict/to stop the data processing for a period appropriate for us to verify the accuracy of the information and to correct and update it accordingly.
-
Right to data portability: You have the right to receive your personal data in a structured and machine-readable format.
-
Right to object: You have the right to object at any time, on grounds relating to your particular situation when we process your personal data in the legitimate interest of AQUACHIM.
-
Right to withdraw the consent: When the processing of your personal data is based on your explicit consent, you have the right to withdraw it at any time by a written notice. The withdrawal of your consent shall not affect the lawfulness of the publication of the stated information before its withdrawal.
-
Right of complaint to a supervisory authority: If you consider your rights of privacy and data protection infringed, you have the right to address the Commission for personal data protection.
Contact data of the supervisory authority: Commission for personal data protection, address: Sofia, 2 “Prof. Tsvetan Lazarov” Blvd., phone number: +359 2 915 3518, Fax: +359 2 91 53 525; e-mail: kzld@cpdp.bg .
Contact data of the data protection officer in AQUACHIM: Mrs. Boryana Velikova-Tosheva, Administrative coordinator, phone number: +359 2 807 50 18; fax: +359 2 807 50 50; e-mail: boryana.velikova@aquachim.bg