Information on Processing of Personal Data – Contact Form

1. Introduction

Thank you for contacting us through the Contact Form on the website of GEBR. HEINEMANN BULGARIA OOD. We will respond to your question, suggestion or request as soon as possible.

In connection with the above, and in connection with the general Information on Rules for Personal Data Processing and Protection, we would like provide you with more detailed information on the specific processing of the personal data you provided to us by completing the Contact Form.

All procedures and measures implemented by us in this area consistently follow from current regulations on the protection of personal data and privacy, in particular

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);

When changes and modifications are made to the above-described legal regulations, we adapt all of our procedures and measures on a regular basis in accordance with such changes and modifications.

2. GEBR. HEINEMANN BULGARIA OOD, as the personal data controller

Because by completing the Contact Form, you provided us with personal data that we will be processing for a certain period of time, we will become the personal data controller (the “Data Controller”) and will be responsible for the proper processing and protection of the data.

Data Controller: GEBR. HEINEMANN BULGARIA OOD, with its registered office in 36 Shipka Str., 1504, Sofia, Bulgaria, Company ID No.: 131022298,

In its capacity as the Data Controller, GEBR. HEINEMANN BULGARIA OOD processes personal data on the basis of and in compliance with the obligations and requirements ensuing from the General Data Protection Regulation and other related legal regulations.

We process your personal data under the following conditions.

3. Personal data being processed

We process the personal data that you provided to us by completing the Contact Form, i.e. the following data: first and last name, prefix (Mr or Ms) and e-mail address. These identification data are necessary in order for us to respond to the question, suggestion or request you expressed in the part of the Contact Form titled “Your message”.

Any processing of personal data is always linked to a stipulated purpose of processing and the associated legal ground for processing within the meaning of Article 6 of the General Data Protection Regulation, in particular: the performance of a contract or conducting negotiations concerning a contract, compliance with the legal obligations of the Data Controller, legitimate interests of the Data Controller or consent from the data subject.

If you are not yet our registered customer, the personal data that you provided to us in the Contact Form will be processed by us only for the period necessary for processing your question, suggestion or request, and for no longer than one (1) month following the date when the Contract Form was completed, and thereafter such personal data will be erased or destroyed. In such case, the purpose of processing will be the following: processing of a question, suggestion or request from a customer, and the legal ground will be the following: legitimate interests of the Data Controller or, as the case may be, compliance with a legal obligation of the Data Controller.

4. Data subjects and their rights

Should your personal data be processed by GEBR. HEINEMANN BULGARIA OODin its capacity as the Data Controller, you have the legal status of a data subject, along with all of the associated rights towards the Data Controller ensuing from the General Data Processing Regulation.

As a data subject, you have the following rights within the meaning of Articles 15 through 22 of the General Data Protection Regulation:

Right of access to your personal data, particularly the right to request information regarding the processing of your personal data from the Data Controller;
Right of rectification of personal data if the data is inaccurate;
Right to erasure of personal data;
Right to restriction of processing;
Right to object against the processing to the Controller;
Right not to be subject to a decision made solely on the basis of automated processing, including profiling (with exceptions).

In addition to the foregoing, a data subject has a right to lodge a complaint with the supervisory authority, which is:

Commission for Personal Data Protection.

The Personal Data Protection Commission is the supervisory authority responsible for monitoring the application of data protection rules.

You have the right to file a petition to the Data Protection Commission if you believe your rights are violated.

More information can be obtained from the Commission's website: https://www.cpdp.bg/.

5. Contacting us

Should you have any questions, or if you wish to withdraw Consent or exercise your other rights as a data subject, you can contact us:

General Data Protection Regulation: