Privacy
MANDATORY INFORMATION REGARDING INDIVIDUALS' DATA PROTECTION RIGHTS (PRIVACY NOTICE)
General Information: As of May 25, 2018, a new regulation on personal data protection called the General Data Protection Regulation (GDPR) came into effect in the European Union. The regulation aims to ensure the protection of data of individuals from all EU member states and harmonize the regulations for their processing. As a data controller for providing information services, 'Domus Invest' Ltd. complies with all requirements of the new regulation, collecting only data necessary for the use of the website and direct marketing, and handles them responsibly and in accordance with the law. Any changes to this information will be published on this page. This allows you to stay informed at any time about what data we store, how we collect and use it.
Information about the Data Controller:
- Name: 'Domus Invest' Ltd.
- EIK/BULSTAT: 206773486
- Registered office and management address: Sofia, Iskar District, "Prosveta" Str. 25 Correspondence details: Sofia, Iskar District, "Prosveta" Str. 25. Email: office@domus-invest.bg Phone: +359 882 444 445
Information about the Competent Supervisory Authority:
- Name: Commission for Personal Data Protection
- Registered office and management address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2 Correspondence details: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2 Phone: 02 915 3 518 Email: kzld@government.bg, kzld@cpdp.bg Website: www.cpdp.bg
'Domus Invest' Ltd. conducts its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
Basis for Collecting, Processing, and Storing Your Personal Data: Article 1. (1) 'Domus Invest' Ltd. collects and processes your personal data in connection with the use of the domusinvest.bg website and subsequent provision of information, based on Article 6, paragraph 1 of Regulation (EU) 2016/679, specifically on the following: • Explicit consent obtained from you as a client; (2) 'Domus Invest' Ltd. is the data controller regarding your data as users of our services. With respect to personal data that you process using our website and inquiry form, 'Domus Invest' Ltd. acts as a processor of personal data.
Purposes and Principles for Collecting, Processing, and Storing Your Personal Data: Article 2. (1) 'Domus Invest' Ltd. collects and processes the personal data you provide to us in connection with the use of our website, including for: • Statistical purposes; • Information security protection; • Improvement and customization of the service by offering suitable offers and other useful information that may be of interest to you; (2) 'Domus Invest' Ltd. adheres to the following principles in processing your personal data: • Legality, fairness, and transparency; • Limitation of the purposes of processing; • Compatibility with the purposes of processing and data minimization; • Accuracy and timeliness of the data; • Limitation of storage in order to achieve the purposes; • Integrity and confidentiality of processing and ensuring an appropriate level of security for personal data.
(3) In processing and storing personal data, 'Domus Invest' Ltd. may process and store personal data for the purpose of protecting the following legitimate interests: • Fulfilling its obligations to the National Revenue Agency, Ministry of Interior, and other state and municipal authorities.
Types of Personal Data Collected, Processed, and Stored by 'Domus Invest' Ltd.
Article 3. (1) "Domus Invest" Ltd. carries out the following operations with personal data for the following purposes: • Sending informational messages – the purpose of this activity is to administer the process of sending advertising and informational messages to clients. • Sending newsletters – the purpose of this operation is to administer the process of sending newsletters to clients who have expressed a desire to receive them.
(2) "Domus Invest" Ltd. processes the following categories of personal data and information for the following purposes and on the following grounds: • Data: Your identifying information (name, email, country, phone number). Purpose for which the data is collected: Establishing contact with the user and sending information to them, including upon expressed desire – for sending newsletters and advertising messages. Legal basis for processing your personal data – By accepting the terms and conditions and sending an inquiry between "Domus Invest" Ltd. and you, a contractual relationship is established, on the basis of which we process your personal data – Article 6, paragraph 1, point (b) of the GDPR.
• Other data processed by "Domus Invest" Ltd. – When entering our website or your profile, "Domus Invest" Ltd. collects data about the used IP address. o Purpose for which the data is collected: Enhancing service security, localizing the interface, statistical, and marketing research. o Legal grounds for data processing: Processing is necessary for the performance of a contract to which the data subject is a party - Article 6, paragraph 1, point (b) of the GDPR. Before creating a user profile, the IP address is collected based on the legitimate interests pursued by the controller – Article 6, paragraph 1, point (e) of the GDPR.
o Use of additional applications (plugins) on social networks – It is possible for additional applications ("plugins") of the social media platforms facebook.com and Twitter to be embedded on our web pages. The related services are provided by Facebook Inc. and Twitter Inc. ("providers") respectively.
Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). To get an overview of Facebook plugins, visit: https://developers.facebook.com/docs/plugins
Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. To get an overview of Twitter plugins, visit: https://twitter.com/about/resources/buttons
To enhance the protection of your personal data when visiting our websites, these plugins will only be available after two clicks. This ensures that when you access websites containing plugins via the "Domus Invest" Ltd. page, you will not be automatically connected to the provider's server. Only if you activate the plugins, allowing the data transfer, will your browser connect you directly to the provider's server. Then, the content of the various plugins will be transferred directly from the provider to your browser and appear on your screen. The plugin discloses to the provider which of our pages you have visited. If, while browsing our website, you are logged into your Facebook or Twitter account, the provider has the ability to correlate your interests, for example, the information you are viewing, with data from your profile. When you use any of the plugin functions (such as clicking the "Like" button or leaving a comment), this information will also be transmitted directly from your browser to the provider for storage.
Additional information about the collection and use of data by Facebook or Twitter, as well as your rights and options for protecting your personal information under these circumstances, can be found in the Privacy Policy of the providers: Privacy Policy issued by Facebook: http://www.facebook.com/policy.php Privacy Policy issued by Twitter: https://twitter.com/privacy
To prevent Facebook or Twitter from associating your visit to our website with your user profile with these providers, you will need to log out of the respective user profile before visiting our pages.
(3) "Domus Invest" Ltd. does not collect or process personal data related to the following: • Reveal racial or ethnic origin; • Reveal political, religious, or philosophical beliefs, or membership in trade unions; • Genetic and biometric data, data concerning health, or data concerning sex life or sexual orientation.
(4) Personal data is collected by "Domus Invest" Ltd. from the individuals to whom it pertains.
(5) The company does not carry out automated decision-making with data.
Personal data of children – "Domus Invest" Ltd. does not wish to collect data for children under 18 years of age. When sending an inquiry to us, it is mandatory to confirm that the person is over 18 years old. If parents or other legal guardians discover that children under their supervision have provided personal data to "Domus Invest" Ltd., we ask them to contact us at the address provided below (see below), if they want this data to be deleted. We will then promptly arrange for the erasure of this data.
Article 4. (1) "Domus Invest" Ltd. retains your personal data for a period not exceeding five years. After this period, "Domus Invest" Ltd. takes necessary measures to erase and destroy all your data without undue delay, in accordance with the internal company procedure for the destruction of personal data.
(2) "Domus Invest" Ltd. may inform you in case the data retention period needs to be extended for the purpose of fulfilling the processing objectives, contractual performance, for the legitimate interests of "Domus Invest" Ltd., or other reasons.
(3) "Domus Invest" Ltd. retains personal data as required by applicable legislation for the respective designated period.
Transfer of your personal data for processing Article 5. (1) "Domus Invest" Ltd. may, at its own discretion, transfer all or part of your personal data to data processors for the purpose of processing while complying with the requirements of Regulation (EU) 2016/679.
(2) "Domus Invest" Ltd. will inform you in case of intention to transfer all or part of your personal data to third countries or international organizations.
Your rights in the collection, processing, and storage of your personal data
Withdrawal of consent for the processing of your personal data Article 6. (1) If you do not want all or part of your personal data to continue to be processed by "Domus Invest" Ltd. for specific or all processing purposes, you can withdraw your consent for processing at any time through a free-text request.
(2) "Domus Invest" Ltd. may request you to verify your identity and identity of the person to whom the data relates.
Right of access Article 7. (1) You have the right to request and receive confirmation from "Domus Invest" Ltd. whether personal data related to you is being processed.
(2) You have the right to access the data related to you, as well as information regarding the collection, processing, and storage of your personal data.
(3) Upon request, "Domus Invest" Ltd. provides you with a copy of the processed personal data related to you, in electronic or other suitable form.
(4) Providing access to the data is free of charge, but "Domus Invest" Ltd. reserves the right to impose an administrative fee in case of repetitiveness or excessiveness of requests.
Right to rectification or completion Article 8. You have the right to correct or complete inaccurate or incomplete personal data related to you by sending a request directly to "Domus Invest" Ltd.
Right to erasure ("right to be forgotten") Article 9. (1) You have the right to request from "Domus Invest" Ltd. the erasure of personal data related to you, and "Domus Invest" Ltd. has the obligation to erase them without undue delay when one of the grounds listed below is present: • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed; • You withdraw your consent, which is the basis for the data processing, and there is no other legal ground for the processing; • You object to the processing of the personal data related to you, including for direct marketing purposes, and there are no overriding legitimate grounds for the processing; • The personal data has been processed unlawfully; • The personal data must be erased for compliance with a legal obligation under EU or Member State law to which "Domus Invest" Ltd. is subject.
(2) "Domus Invest" Ltd. is not obliged to erase the personal data if it stores and processes it: • For the exercise of the right to freedom of expression and information; • For compliance with a legal obligation that requires processing under EU or Member State law to which the Administrator is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Administrator; • For reasons of public interest in the area of public health; • For archival purposes in the public interest, scientific or historical research purposes, or for statistical purposes; • For the establishment, exercise, or defense of legal claims.
(3) To exercise your right to be forgotten, you should submit a written request sent to "Domus Invest" Ltd., and verify your identity and the identity of the person to whom the data relates in person by presenting your ID card for identification purposes to an employee of "Domus Invest" Ltd.
(4) "Domus Invest" Ltd. does not erase the data that it is legally obliged to retain, including for protection against legal claims brought against it or for the establishment, exercise, or defense of its rights.
Right to restriction Article 10. You have the right to request from "Domus Invest" Ltd. the restriction of processing of your data when: • You contest the accuracy of the personal data, for a period enabling "Domus Invest" Ltd. to verify the accuracy of the personal data; • The processing is unlawful, but you do not want your personal data to be erased, and request instead the restriction of their use; • "Domus Invest" Ltd. no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims; • You have objected to processing, pending the verification whether the legitimate grounds of "Domus Invest" Ltd. override yours.
Article 11. (1) You can withdraw the data that is stored and processed for you in connection with the use of the services of "Domus Invest" Ltd. at any time, directly through your profile or by email request.
(2) You can request "Domus Invest" Ltd. to directly transfer your personal data to the administrator specified by you, when technically feasible.
Right to receive information Article 12. You can request "Domus Invest" Ltd. to inform you about all recipients to whom the personal data for which correction, erasure, or processing restriction has been requested, have been disclosed. "Domus Invest" Ltd. may refuse to provide this information if it is impossible or requires disproportionate effort.
Right to object Article 13. You can object at any time to the processing of personal data by "Domus Invest" Ltd. related to you, including if processed for direct marketing purposes.
Your rights in case of a security breach of your personal data Article 14. (1) If "Domus Invest" Ltd. identifies a security breach of your personal data that may pose a high risk to your rights and freedoms, we will notify you without undue delay about the breach and the measures that have been taken or are planned to be taken.
(2) "Domus Invest" Ltd. is not obliged to notify you if: • It has taken appropriate technical and organizational measures to protect the data affected by the security breach; • It has subsequently taken measures to ensure that the breach will not lead to a high risk to your rights; • Notification would require disproportionate effort.
Entities to whom your personal data is provided Article 15. The personal data collected from the website of "Domus Invest" Ltd. is not provided to external entities outside the internal organization of the administrator - "Domus Invest" Ltd. The individuals authorized to use the personal data within the organization are exhaustively defined in the adopted rules for the internal order of the Company, as well as in the adopted procedures for the processing of personal data.
Article 16. The Administrator does not transfer your data to third countries.
Other provisions Article 17. In case of violation of your rights under the above or the applicable legislation for personal data protection, you have the right to file a complaint with the Commission for Personal Data Protection as follows:
- Name: Commission for Personal Data Protection
- Seat and address of management: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
- Correspondence data: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
- Phone: 02 915 3 518
- Email: kzld@government.bg, kzld@cpdp.bg
- Website: www.cpdp.bg
Article 18. You can exercise all your rights in any form containing a statement to that effect and identifying you as the data subject.
Article 19. If the consent relates to a transfer, the Administrator describes the possible risks of transferring the data to third countries in the absence of a decision on adequate protection and suitable safeguards.
Article 20(1). When entrusting "Domus Invest" Ltd. to process personal data of a third party for the purposes of using the "Domus Invest" service, "Domus Invest" Ltd. acts as a data processor.
(2). In cases under paragraph 1, "Domus Invest" Ltd. acts solely on your instruction as a user of the service and only to the extent that it can have control over the personal data you process. "Domus Invest" Ltd. has no control over the content and data that you as a user of the service choose to load into the service (including whether this data includes personal data or not). In this case, "Domus Invest" Ltd. has no role in the decision-making process as to whether the user uses the service for processing personal data, for what purposes, and whether they are protected. Accordingly, the responsibility of "Domus Invest" Ltd. in this case is limited to 1) compliance with the user's instructions in accordance with the contract and the general terms and conditions, and 2) providing information about the service and its functionalities through its interface.
Cookie Policy The website of "Domus Invest" Ltd. uses cookies that are important for its proper functioning. By visiting our website, you accept the use of cookies.
Basis for the collection, processing, and storage of your personal data Types of cookies we use:
Necessary cookies: These cookies are necessary for the proper functioning of the website. For example, these cookies display information on our website in the correct language.
Analytical cookies: Thanks to these cookies, we monitor the traffic on our website and can analyze how easily our users work with it (Google Analytics cookies). These cookies do not provide us with any information about your personal data. They show us which pages of our site you have viewed, whether you have visited our site via a mobile or desktop device, and other anonymous data. We also use anonymization of IP addresses for Google Analytics through _anonymizelp. The maximum period for keeping analytical data in Google Analytics is 50 months.
Functional cookies: These cookies allow you to use the full functionality of our site, watch videos, write to us on chat, and remember the preferred language in which to load information on our site.
Targeting cookies: These cookies contain information about how you have used our site and can be activated by our advertising partners. They do not store personal information. Thanks to them, you will not be shown information that is irrelevant to you. These are dynamic cookies from Facebook, Google, Adform, Adwise, and others.
You can adjust the cookie settings you receive from our site in the browser you use. Keep in mind that if you limit certain types of cookies, our site may not work properly and you may not be able to use its full functionality.
What security measures have we taken at "Domus Invest" Ltd. regarding the security of the personal data you store on our infrastructure? Protecting personal data is a top priority for our company. The current rules are an expression of our desire to protect the data of our current and future clients as best as possible. In addition to them, we have adopted a number of internal company procedures to ensure the regularity and legality of the procedures related to the processing of personal data.