In “Index Bulgaria” Ltd. (IB), applicable measures for the implementation of the requirements of Regulation (EU) 2016/679 – the General Data Protection Regulation, have been implemented.
As the data controller, IB processes the Personal Data of individuals entered into contracts, invoices, warranty cards, acceptance protocols, and others related to specific contracts, as required by the Accounting Act and other relevant regulatory and sub-regulatory acts.
We declare that IB processes Personal Data as confidential. IB stores Personal Data in electronic and/or paper form. Personal Data is processed in a secure environment with controlled access. Only IB employees who need such access to fulfill IB’s obligations under the specific transaction have access to the Personal Data processed by IB. Access to paper documents with personal data is recorded and controlled. IB employees have undergone training to comply with the requirements of Regulation (EU) 2016/679 and have signed a declaration of non-disclosure of Personal Data and its use only for official purposes. A data protection officer has been appointed in the company, exercising control over the protection of Personal Data.
IB provides and maintains appropriate technical and organizational measures to protect individuals’ Personal Data against unauthorized access or unlawful use of Personal Data and/or against their accidental loss, alteration, disclosure, access, and/or damage or copying.
IB retains Personal Data until the completion of the contract or for the period specified in relevant special laws (e.g., the Accounting Act).
IB does not provide Personal Data to individuals to other data controllers or processors, except to authorized state authorities.
Under the conditions of the law, individuals have the following rights regarding the protection of their Personal Data: access, correction, deletion (“right to be forgotten”), processing limitation, data portability, objection, and the right to file a complaint with the Commission for Personal Data Protection. Individuals can exercise their rights by submitting a written request to IB.
For any questions regarding the protection of Personal Data, individuals can contact the data protection officer: тел. +359 2 903 4400; *3355 (*DELL), факс: 02 975 3681; dpo@indexbg.bg