This document aims, in accordance with the information requirements under Art. 13 and Art. 14 of the GDPR, to inform about the personal data processing activities carried out by “RADEYA” OOD, the purposes for which the data are processed, the measures and guarantees for the protection of the processed data, the rights of the subjects and the manner in which they can be exercised, in accordance with the requirements of Regulation (EU) 2016/679 of the EU of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, (hereinafter only “Regulation 2016/679” or “GDPR”) and other applicable acts of the European Union and the Republic of Bulgaria.

1. Data about the administrator and contact information.

  • “RADEYA” Ltd. is the administrator of personal data that is processed in or on the occasion of carrying out the commercial activity of the Company in accordance with the law, with its registered office and management address: Plovdiv, 70 Ruski Blvd.
  • The address for correspondence with the Company is Plovdiv, 70 Ruski Blvd., to which address requests to the Company as a data administrator can be sent by mail.
  • Requests can also be sent to the e-mail address executivedirector@leipzig.bg, and the message should indicate the necessary data for individualization and contact for feedback.

2. Purposes and grounds for processing personal data, categories of processed data.

  • “RADEYA” Ltd. carries out its activities in accordance with national legislation, under which it processes personal data in connection with the following main activities:
    • Personnel administration;
    • Financial and accounting reporting;
    • Bird watching.
  • For the purposes of personnel administration (human resources management) and financial and accounting reporting, the Company processes personal data on the basis of Art. 6, par. 1, b. “c” and Art. 9, par. 2, b. “b” of the Regulation of job applicants, employees/workers and individuals, parties to contracts and representatives of legal entities – parties to contracts /clients or suppliers/.
  • The categories of processed data are regarding the physical and social, family and economic identity, data on the judicial history and health status of individuals.
  • For the purposes of video surveillance, “RADEYA” Ltd. processes personal data of all employees/workers and visitors to the Company’s building/facilities.
  • The categories of personal data that are collected relate to the physical identity of individuals, through an image.
  • When the Company processes data based on the consent of the subject, personal data are processed only if the individuals have freely, specifically, informedly and unambiguously expressed their consent to the processing.
  • Data processing is carried out for the specific and precisely defined purposes by law, and the data are processed lawfully and in good faith and cannot be further processed in a manner incompatible with these purposes.

4. Data storage period.

  • As a data controller, “RADEYA” OOD processes data for a period of minimum duration in accordance with the purposes of processing and the provisions of the current legislation in accordance with the principle of storage limitation.
  • Data related to employment and social security relations are stored for a period of 50 years, and the remaining data are stored for a period between 2 months and 10 years, depending on the type of data determining the legal obligation for processing, including their storage.

5. Rights of natural persons – data subjects.

  • The measures taken to protect personal data in accordance with the requirements of Regulation 2016/679 are aimed at ensuring the rights of the subjects whose personal data are processed, namely:
    • Right of access;
    • Right to correction of inaccurate or incomplete data;
    • Right to erasure (right to be forgotten), if the conditions of Art. 17 of REGULATION 2016/679 are applicable;
    • Right to restriction of processing;
    • Right to data portability, if the conditions for portability under Art. 20 of REGULATION 2016/679 are met;
    • Right to object, if the conditions of Art. 21 of REGULATION 2016/679 are met.
    • Right not to be subject to a decision based solely on automated processing, including profiling.
  • The above rights can be exercised by submitting a request to “RADEYA” OOD (in writing or electronically).
  • The request should be signed and sent to the Company’s contact address.

6. Right to lodge a complaint with the Personal Data Protection Commission.

  • If a personal data subject believes that his/her rights under Regulation 2016/679 have been violated, he/she may lodge a complaint with the Personal Data Protection Commission.

Transfer of personal data to third countries or international organizations.

  • “RADEYA” Ltd. does not transfer processed personal data to third countries or international organizations.