Terms of Use | Осветителни тела | Модерно осветление – Kimet.bg
0887 97 60 70

Menu

Personal data protection policy

KIMET Ltd. (hereinafter also “KIMET”, “the Company”, “we” or “us”) is a company that has always strived to protect to the greatest possible extent the personal data it has access to in the course of its business.

The purpose of this personal data protection policy is to explain clearly and accessibly:

  • What personal data we collect and process when you visit our website kimet.bg;
  • How we use your personal data;
  • How and for how long we store your personal data;
  • To whom we may disclose your personal data;
  • What your rights as a data subject are and how you can exercise them.

This Personal Data Protection Policy applies to your personal data when you visit www.kimet.bg.

Personal data controller

The controller of your personal data is KIMET Ltd., UIC 110570327, with registered office and address of management: 1 “Ilinden” St., Lovech 5500, email: office@kimet.bg

Principles under which KIMET collects and processes personal data

Personal data at KIMET is collected and processed on the basis of the principles of:

  • good faith and transparency;
  • lawfulness;
  • security;
  • predictability.

What personal data we collect and process

Personal data is information by which a natural person can be identified. Such information includes, for example, your name, personal identification number, address, phone number, your passwords for access to our website and the like. Data that cannot be linked to your real identity, either directly or in combination with other data, is not considered personal data.

KIMET collects and processes all personal data in accordance with the data protection laws applicable in Bulgaria and the European Union.
Every time you contact us or visit our website, you provide us with your personal data. In order to be useful to you and provide you with the information you want, we need to collect and process your personal data. KIMET collects and processes the minimum amount of personal data necessary to provide the required service and so that its users can feel confident that the personal data collected will be protected to the greatest possible extent.

We collect and process the following personal data:

  • When you visit our website, the connection data of the device connecting to our site, the web pages you visit on our site, the date and duration of the visit, data identifying the type of browser and operating system used, and location are recorded and stored temporarily for security purposes (data which, however, we cannot link to a specific person);
  • When we receive an enquiry from you through one of our contact forms, we will use the contact details you provided to get in touch with you and provide the information or assistance you need;
  • Certain features of the KIMET website require registration or a password. When registering, you provide us with your personal data: name, email address and phone number;
  • We collect and process the history of your visits to the website for the purposes of statistical and marketing analysis;
  • Certain data you provide to us may be disclosed to state, municipal or judicial authorities where required by applicable law or on the basis of an act of an authority empowered to permit and/or request personal data from us.

Why we collect and process personal data

We will only collect and process your personal data if we have a legal basis to do so. The legal basis depends on the reasons for which we collect and need to use your data. In most cases we will need to process your data in order to provide the services (or information) related to our business that you wish to receive.

We may also process your personal data for one or more of the following reasons:

  • To comply with a legal obligation (e.g. to meet the requirements of accounting and tax legislation under the Accountancy Act, the VAT Act, the Corporate Income Tax Act, etc.);
  • You have given us consent to use your personal data (e.g. for marketing purposes), including to use your email address to send you information about our current services. We will only do this if you give us your consent to send you this information periodically by email, text message, phone or any of these means. Your consent is voluntary and we will not refuse you our services if you do not give it.

You can withdraw your consent to receive marketing information from us at any time by contacting us in any way convenient for you: by email or by submitting a written request at a KIMET office or store.

Personal data of third parties

We only process and use data that you have provided to us voluntarily, and we rely on such data being held and provided by you lawfully.

This means that every user is responsible for not providing KIMET with data of third parties in breach of their rights, as KIMET has no access to those persons and no practical means of verifying whether the personal data of third parties is provided with their knowledge or consent given in accordance with the legal requirements.

Therefore, any person who provides us with data of a third party without their knowledge or without obtaining their consent in accordance with the requirements of the applicable data protection legislation bears unlimited personal liability, regardless of the type of data or the reasons for which it is provided: name, phone number, email address or any other.

Sharing your personal data and subcontractors

KIMET does not share, sell, provide or otherwise disclose your personal data to third parties and will not do so in the future, unless required by law, necessary for the purposes of a contract between you and KIMET, or you have given your explicit consent.

Your data may be provided to our service providers in connection with the fulfilment of legal obligations, the exercise of rights or the fulfilment of obligations under contractual relations with you and/or the protection of a legitimate interest, such as, but not limited to, persons providing accounting, legal or other services.

In addition, in certain cases KIMET may engage subcontractors that provide additional security for your data and that may at some point have access to KIMET’s systems and databases, including for the maintenance and protection of the website, infrastructure and/or server.

Please note that all our subcontractors are engaged after careful selection and after verifying their ability to ensure the protection of personal data. They carry out processing only on the basis of our explicit directions and instructions.

Data retention and deletion

We will not keep your data for longer than necessary to achieve the purposes for which we process it. To determine an appropriate retention period, we take into account the amount, nature and sensitivity of the personal data, the purposes for which we process it and whether we can achieve those purposes by other means.

The retention period of personal data depends on the retention period set by law and may not be longer. For example, where your personal data is contained in accounting documents on paper or electronic media that may be requested from KIMET on a legal basis for the purposes of tax control, the retention period for such personal data will be 10 years from 1 January of the year following the year in which it was collected.

Personal data you provide when registering on the KIMET website is stored and processed for the duration of the registration, until you request to be deregistered and your profile to be deleted.
Personal data provided in connection with specific legal relations with KIMET is stored for the period during which you may bring claims against us and we may exercise our right of defence.

Personal data provided through one of our contact forms, including in the case of an incomplete registration on the KIMET website, is stored for 1 year for security purposes and to facilitate subsequent communication with the user, unless there are grounds for applying a longer period.

Where you have given consent for us to use your personal data for marketing purposes, we store and process that personal data until you withdraw your consent.

If the basis on which we store your personal data ceases to exist (for example, if we no longer have a legitimate interest in storing your personal data, if the statutory retention period has expired or if you have withdrawn your consent for us to store your personal data), we will delete or destroy it securely.

Security measures

KIMET has taken the necessary technical and organisational measures to protect personal data against unlawful processing (accidental or unlawful destruction, accidental loss or alteration, unlawful disclosure or access, unauthorised modification or dissemination, and all other unlawful forms of processing of personal data).

Your rights as a data subject

As a data subject, you have:

  • the right to be informed whether we hold your personal data, what data we hold and why we hold it;
  • the right of access to your personal data, which allows you to obtain a copy of the personal data we hold about you and to check that we are processing it lawfully;
  • the right to object, which allows you to object to the processing of your personal data where we rely on a legitimate interest (or the interests of a third party) and there is something about your particular situation that makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes, and to object to automated decision-making, including profiling, i.e. not to be subject to any automated decision-making by us using your personal data or profiling;
  • the right to data portability, which allows you to request your data in an electronic and structured form to be provided to you or to another person. This allows you to take your data from us in a usable electronic format and transfer it to another person in a suitable electronic format;
  • the right to rectification or completion of inaccurate or incomplete data, which allows you to request correction of the personal data we hold about you. This enables you to correct any incomplete or inaccurate information we hold about you;
  • the right to request restriction of the processing of your personal data. This allows you to ask us to suspend the processing of your personal information, for example if you want us to establish its accuracy or the reason for processing it;
  • the right to request erasure of your personal data, which allows you to ask us to delete or remove personal data where there is no good reason for us to continue processing it;
  • the right to withdraw consent. Where you have given consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent to that specific processing at any time. Once we receive notice that you have withdrawn your consent, we will stop processing your information for the purpose or purposes you originally agreed to, unless we have another legitimate reason for doing so by law;
  • the right to protection.

If you wish to exercise any of these rights, you need to submit a request to KIMET. To be able to assist you fully, you will need to provide us with accurate information about yourself and specify your request. No fee is payable to exercise any of these rights. However, please note that where your requests are manifestly unfounded or excessive, in particular because of their repetitive character, and/or exercising them involves significant costs, we may:

1. charge a fee, taking into account the administrative costs of providing the information or communication or taking the action requested, or

2. refuse to act on the request.

We will make reasonable efforts to respond to your request within 30 days of receiving it. Where necessary, this period may be extended by a further two months, taking into account the complexity and number of requests.

We may ask you for specific information to help us confirm your identity and respect your right of access to information (or any of your other rights). This is an appropriate additional security measure to ensure that your personal data is not disclosed to persons who have no right to receive it.

Changes to the personal data policy

We reserve the right to change our Personal Data Policy periodically; users will be notified of any change by a notice on our website.

Supervisory authority

If you believe that your rights in relation to your personal data have been violated, you have the right to lodge a complaint with the Bulgarian supervisory authority, the Commission for Personal Data Protection. More information is available at: www.cpdp.bg.