This document contains information regarding how personal data is processed, the types of personal data that are collected, the purpose of using the collected personal data, our security measures that are taken in relation to the collected personal data, and the rights that you have natural and legal persons in connection with the use of the data provided by them. All personal data are collected, processed and destroyed in accordance with Regulation (EU) 2016/679 of the European Parliament (hereinafter referred to as the Regulation) and the relevant legislation on information security and protection in the Republic of Bulgaria.

PERSONAL DATA PROTECTION ACTIONS

“GeoHydroDril” EOOD, with headquarters in the city of Sofia, 50 “Raiko Alexiev” St., bl. 103, entrance A, fl. 1, as the owner and administrator of the site https://geohydro.bg/ undertakes to maintain the confidentiality of the information provided by you in order to gain access and the opportunity to fill out our forms. The data submitted to the company, in its capacity as a personal data controller, is protected by SSL technology. The technology is a method in the field of encoding personal data so that it can be transmitted securely over the Internet.

Preserving the privacy of users’ personal information is of great importance, which is why the company limits access to it only to those employees of https://geohydro.bg/ who need to come into contact with it in order to perform their functions and give possibility of the services provided by the company being correctly offered to the user. The Site will keep user information confidential except where disclosure is required by law or for technical reasons.

https://geohydro.bg/ stores users’ personal information for as long as is necessary, according to current legislation in the EU, to ensure the effective functioning of the site managed by “GeoHydroDril” EOOD. The information provided and collected by users is not and will not be provided for use for a fee to anyone without the user’s personal consent. Provision of information to third parties can be done in the event of a request in due course from the relevant state bodies and institutions, determined by the current Bulgarian legislation.

USER RIGHTS AND OPTIONS REGARDING THE PROCESSING OF THEIR PERSONAL DATA

Users of services provided by https://geohydro.bg/ have certain rights, according to the applicable legislation, regarding the personal data that the company stores, namely:

• every user has the right to request access to and receive information regarding the personal data stored for him, as well as information regarding the purposes of processing, the categories of personal data, the recipients to whom their personal data may be disclosed;
• every user has the right at any time to request the correction of inaccurate data related to him, as well as the completion of incomplete data, if this is appropriate and/or necessary in view of the purpose for which the data is processed;
• at any time, a user may withdraw his consent to the use of his personal data, which he has previously provided;

If a user decides that he does not want https://geohydro.bg/ to process his personal data, he has the right to be “forgotten”, i.e. may request at any time that his personal data be deleted, in the presence of any of the following circumstances:

• his personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• in case the user has withdrawn his consent to the processing of his personal data;
• if the user’s personal data is processed illegally;
• in case the user has objected to the processing of his personal data;
• other cases provided for in the legislation regulating the protection of personal data;

All the rights listed above can be exercised by submitting a written application in free form to the email address office@geohydro.bg, sent from the user’s registration email address, containing at least the following:

• Name, email and other identification data of the relevant natural or legal person;
• accurate description of the request in free text;
• specifying the site domain to which this request relates;
• preferred form for providing the information;

If a data subject wishes to be “forgotten” and their personal data is deleted, this is an irreversible process and cannot be subsequently recovered.

In cases of exercising the rights under Art. 17 of Regulation (EU) 2016/679, regulating the right to erasure (“the right to be forgotten”), the site only deletes the subject’s personal data, but not publicly available posts that the data subject has made in forums, comments to publications and articles on the company’s website.

Submitting an application to the site is completely free. The deadline for considering the application is one month, starting from the date of receipt of the application by the company.

TERMS USED

“Personal Data” means any information relating to an identified natural person or an identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by an identifier such as a name, an identification number, location data, an online identifier or by one or more characteristics specific to the physical, the physiological, genetic, psychic and mental, economic, cultural or social identity of that natural person.

“Data subject” is a natural person who is identified or could be identified based on certain information representing personal data of the same.

“Processing” means any operation or set of operations performed on personal data or a set of personal data by automatic or other means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, distribution or other form of providing access to the data, arrangement or combination, restriction, deletion or destruction.

“Person with access to data” is any person acting under the direction of the controller or the processor who has access to personal data, may process them only on the instructions of the controller, unless otherwise provided by law.

The legal basis on which https://geohydro.bg/ collects personal data is Art. 6, item 1, b. A of the Regulation, namely the hypothesis where the data subject has given consent to the processing of his personal data for one or more specific purposes. In relation to the purposes set out below, users should give their express consent to each individual purpose by ticking a checkbox (CheckBox) that appears as a square box with accompanying text on the side or bottom, consent is required everywhere .

When a choice is made, a tick appears in the box, which represents the consent given by the user to have his personal data processed by the site. When no selection is made the checkbox is empty.

PERSONAL DATA PROVIDED BY INDIVIDUALS

The personal data that individuals provide directly are processed and used for the purposes specified in this Privacy and Personal Data Protection Policy. The provision of personal data is not a mandatory condition for using https://geohydro.bg/, unless users wish to use the contact forms for contact.

Personal data that we collect from users, natural persons, when voluntarily filling out a contact form are: name and surname, e-mail, contact phone number and other data, depending on the individual wishes of the natural person and the need for certain personal data for correct implementation of the services provided by the site. The site also collects other information that users can provide voluntarily, at their discretion, and providing it is not a prerequisite for registering a profile on the relevant site managed by “GeoHydroDril” EOOD – personal data administrator.

This information does not identify individuals (for example, hobbies, favorite activities, interests), but is kept at the request of the latter for the purpose of presenting it to other users of the respective site. Users should be aware that by publicly providing personal information on the site, the same can be seen by other users of the site and the administrator of personal data for the site will not be able to prevent its further use by them.

USE OF SOCIAL MEDIA

https://geohydro.bg/ uses social media to promote its activities, products and services, as well as to advertise, improve and administer its own services.

Integration with social media plugins. A social media plug-in is integrated in https://geohydro.bg/, which means that when a user clicks on one of these virtual buttons (for example the “like” button on Facebook) some of the user’s personal data is shared with the provider the relevant social media.

If at that moment the user is logged in to his profile in the relevant social media, the provider of the same media can associate this information with the relevant profile and display them, making them visible to other users with whom the profile is linked.

Other Social Media Services and Features. The site may also integrate services related to social media (such as messages in social media), through which users can communicate with “GeoHydroDril” EOOD or with each other, in connection with the services provided by the company. It is possible that “GeoHydroDril” EOOD, the data controller, maintains profiles on social media and offers applications on the site of various social media. Each time a user connects to the site of “GeoHydroDril” EOOD, through social media, the provider of the latter could allow the user to share information with the site. If the user chooses to share, they will be generally notified by the provider which information will be shared. For example, when a user logs into their profile through their social media profile, certain information (as permitted by the social media provider) may be shared with GeoHydroDril Ltd., the data controller. This may include the user’s address, age or profile pictures saved in their profile.

PERSONAL DATA COLLECTED AUTOMATICALLY

When a user visits our site, the Administrator’s web server automatically recognizes and collects the IP address assigned by the user’s Internet service provider and does not identify the user personally.

Summary Information – Log Files – like many other sites we receive information from log files (a collection of system information about the user): IP address; ISP (Internet Service Provider); the browser you use when you visit a group site (such as Google Chrome, Internet Explorer and Mozilla Firefox); the time he spent on a site and which pages on the site he visited. The information contained in these files includes:

• cookies (‘Cookie’): this is a small amount of information that the web server sends to the web browser, allowing the server to collect feedback from the browser. The user can choose to delete our or third-party cookies through the options of each browser. This may affect the interaction with our site or another site. More information about cookies can be found at http://www.allaboutcookies.org/faqs/cookies.html.

The site uses the following types of cookies:

(1) Statistics cookies that anonymously remember the user’s computer or mobile device when visiting our website. They track search patterns and help us build a profile of how our readers use the website. We may use this information to display advertisements that may be of particular interest to the user on our and other websites.

(2) Service cookies that help us make our website as efficient as possible. They make it possible to remember the registration and login data, to save the settings preferred by the user.

(3) Third-party advertising and analytics cookies that are placed on behalf of independent advertisers who advertise on our sites. These cookies can be placed in different places on the site. These “cookies” are anonymous – they cannot identify the user. They are used for statistical analysis, allowing the advertiser to count how many people have seen their ad or seen it more than once. They may also allow the advertiser to tailor advertising to the user when visiting other websites.

(4) We do not have access to third-party cookies, and third-party organizations do not have access to ours. Third-party organizations that place cookies have their own strict privacy policies.

Web beacons are files that allow a website to collect information about the number of users who have visited it and access their cookies. More information about web beacons can be found at: http://www.allaboutcookies.org/faqs/beacons.html

Purposes of processing users’ personal data:

“GeoHydroDril” EOOD, which manages https://geohydro.bg/ processes users’ personal data only for the purposes described below:

• to register submitted requests in the contact forms, including to use services that require communication on our site and communication with the user, including to resolve disputes and fix problems;
• to measure and track statistical dependencies on user behavior on the site in order to improve our information services;
• for marketing purposes related to activities on our website;
• to send the user marketing messages and third-party information when we have expressly obtained consent for this;

Recognizing and collecting the IP address enables:

• disclose the identity of users in cases where this is necessary to comply with the law, legal procedures or to comply with these terms;
• analysis of traffic to the sites and protection against malicious attacks;
• to display advertising related to the user’s location or service information such as the weather forecast, the town in which he is located or the closest to him;

PROCESSING OF PERSONAL DATA OF PERSONS,

UNDER 16 YEARS OF AGE

As a Data Controller, we understand the importance of taking additional measures to protect children’s privacy and safety.