Privacy Policy

General Information

As of May 25, 2018, Regulation (EU) 2016/679 (GDPR) came into force, aiming to standardize the rules for personal data protection in the EU. Elmash Ltd. complies with all requirements of the regulation and collects personal data only when necessary for providing services, processing it lawfully and securely.

Information about the Data Controller

• Company Name: Elmash Ltd.

• UIC/BULSTAT: 103580100

• Registered Office and Address: Varna, Vl. Varnenchik Blvd. 13

• Email: info@vendingeu.com

Supervisory Authority

• Name: Commission for Personal Data Protection

• Address: Prof. Tsvetan Lazarov Blvd. 2, Sofia 1592

• Phone: +359 2 915 3 518

• Email: kzld@government.bg

• Website: www.cpdp.bg

Legal Basis for Processing Personal Data

Elmash Ltd. processes your personal data based on:

• Performance of a contract with you.

• Explicit consent from you upon inquiry.

• Legitimate interests of Elmash Ltd. (e.g., compliance with legal obligations).

Purposes and Principles of Personal Data Processing

Personal data is collected and processed for the following purposes:

• Execution of contractual obligations.

• Accounting purposes and ensuring information security.

• Ensuring the quality of the provided services.

Principles of Processing:

• Lawfulness, fairness, and transparency.

• Limiting data collection to what is necessary.

• Ensuring accuracy and relevance of the data.

• Ensuring appropriate security levels.

What Data Does Elmash Ltd. Collect and Process?

• Identifying Data: Name, Personal Identification Number, Address, Email, Phone, Personal Identification Document Number.

• Inquiry Data: First Name, Last Name, Email, Phone.

• IP Addresses: Collected for security and marketing purposes.

• Invoice Data: Unique Identification Number (for issuing invoices).

No sensitive data (such as racial or ethnic origin, political or religious views, biometric data, etc.) is collected.

Retention Period of Personal Data

Elmash Ltd. retains your personal data only for as long as necessary to achieve the purposes of processing or to comply with legal obligations.

Sharing of Personal Data

Your personal data may be shared with third parties or data processors in compliance with applicable legal requirements.

Your Rights

• Right of Access: You have the right to request confirmation and a copy of the data being processed.

• Right to Rectification: You may correct or supplement any inaccurate data.

• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of data when it is no longer needed for the purposes for which it was collected.

• Right to Restrict Processing: You may request to restrict the processing of data in specific cases.

• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and transfer it to another controller.

How to Exercise Your Rights

You can submit requests via email to info@vendingeu.com or by submitting a written request to Elmash Ltd. office.

Personal Data Security Breach

In the event of a personal data security breach that may pose a high risk to your rights, you will be notified without undue delay.

Complaints

If you believe your rights have been violated, you can file a complaint with the Commission for Personal Data Protection.

Contact Information:

• Email: kzld@government.bg