1. Data Controller
Raben Group companies identified the consent request, are Joint Controllers of your personal data processed for the purposes set out in point 3 below.
"Joint controllership of personal data" means, in particular, joint determination of the purposes and means of processing personal data and jointly ensuring the security of processing.
For more information on joint controllership, including an up-to-date list of Raben Group companies covered by a joint-controlling agreement and the purposes of processing of the aforementioned data under joint-controllership, please see Raben Group's Privacy Policy (section V) at https://bulgaria.raben-group.com/politika-za-poveritelnost.
2. Point of contact
You can contact the Joint Controllers directly regarding data protection issues, through the communication channel indicated in our privacy policy, section V. here.
In case you wish to address your enquiry directly to any of the Raben Group Companies in Poland, you may contact us by e-mail, directly to the e-mail address of the Data Protection Officer: nikolay.stoyanov@raben-group.com.
3. Purposes of and legal grounds for processing
Your personal data will be processed for to purpose of:
- pursuing our legitimate interest (Article 6(1)(f) of the GDPR), which is:
- making contact and responding to your enquiries or taking steps to conclude a contract with the entity you represent;
- promoting the activities and presenting the offer of Raben Group companies and conducting opinion/satisfaction surveys regarding the services provided by the aforementioned companies;
- performing activities of an administrative and technical nature (e.g. providing cyber security or legal services for processes within the organisation);
- establishing or exercising civil law claims in the course of business, as well as the defence against such claims.
- taking action for the purpose of concluding a contract - if you are our potential customer (Article 6(1)(b) of the GDPR).
Notwithstanding the above, in accordance with generally applicable legislation separate from the GDPR, your consent, granted separately for each of the aforementioned channels, is required for us to carry out direct marketing activities via communication channels such as email or telephone. You may revoke the consent you have granted at any time, however this does not affect the lawfulness of actions taken on the basis of this consent prior to its revocation.
4. Period of data storage
Your personal data will be processed:
- with regard to the processing of your data for the purpose of contacting and responding to your enquiries or taking steps to enter into a contract with you or the entity you represent, for a period of two months from the end of the communication with you (unless you have previously lodged a legitimate objection to the processing);
- with regard to the processing of your data for the purpose of promoting the business activity and presenting the offer of Raben Group companies and conducting opinion/satisfaction surveys concerning the services provided by the aforementioned companies - until the time of revocation of the consent granted under separate regulations or until you file an objection to the processing of your personal data;
- with regard to the processing of your personal data for the establishment, exercise or defence against claims, until such claims have become time-barred;
- with regard to the processing of your personal data for the purpose of carrying out administrative and technical activities, as long as we have a legal grounds to process the data for other purposes.
5. Data recipients and data transfer to third countries
Access to your personal data will be granted to the service providers we use - e.g. providers responsible for our website, IT system providers, legal advisors.
Your personal data may be transferred to data processors established outside the European Economic Area (EEA).
Countries outside the EEA may not offer the same level of personal data protection as EEA countries. Before personal data are transferred outside the EEA, Raben Group will make every effort to ensure that such transfer does not lead to a reduction in the level of protection guaranteed under the regulations in force in the EEA countries. If personal data are transferred outside the EEA, the transfer will be based on an adequacy decision or on the basis of standard data protection contractual clauses adopted by the European Commission. You may request additional information with regard to the transfer of the data outside the EEA by contacting us as described in section 2 above.
6. Your rights and profiling
The joint controllership of personal data under the provision Article 26(1) of the GDPR does not affect the exercise of your rights under the GDPR. As agreed between the Joint Controllers, each Joint Controller is the entity responsible for the processing of personal data in accordance with the GDPR.
You have the right to request access to your personal data, their rectification, erasure or restriction of processing, or to object to processing as well as the right to data portability.
At the same time, please be advised that you have the right to lodge a complaint with the supervisory authority competent for the Raben Group Company running the communication with you. For Raben Group companies in Bulgaria, the competent authority in this respect is the is the Commission for Personal Data Protection, with its registered office Sofia, bul. Tsvetan Lazarov 2 PK 1592.
For the purposes of processing relating to the handling of enquiries from the form, we do not profile your data or make decisions by automated means.
7. Obligation to provide data
The provision of personal data is voluntary, however necessary in order to establish contact and respond to your enquiries, to carry out activities aimed at concluding a contract with you or the entity you represent, as well as for the purpose of communication with you on the basis of consents granted in accordance with separate regulations.