Privacy Policy (GDPR)
Vessolyte Ltd. strictly complies with Regulation 2016/679 (General Data Protection Regulation) and the Personal Data Protection Act (PDPA) and has appointed data protection officers within the company.
The Website uses cookies, the type, purposes and conditions of their use are set out in the Cookie Policy, which the User agrees to by using the Website.
All of our employees have agreed in writing to comply with the regulations and guidelines for the protection, security and confidentiality of personal data.
In what cases can Vessolyte Ltd. process your personal data?
- When you, as our customer, need us to issue you with an invoice, warranty card or other document, or to send you an item you have ordered, have an employee visit you or otherwise.
- When you contact us/our employees, through public information about us and/or through our contact information on our website or the internet.
- When you make an enquiry on our website - for example, to obtain a quotation for making a product or performing a service.
- When you declare your interest to participate in a recruitment procedure for our advertisement and/or send/submit your CV, cover letter, other, or become or have been our employee.
- When you come within range of a video camera in the building where our offices are located in the city. Kardzhali, or in its vicinity.
- When you provide us with your personal data yourself, or give us consent to process it, etc.
Vessolyte Ltd. may process your personal data for various reasons, depending on the relationship between us and on the basis of respectively applicable legal grounds under privacy laws, such as: legitimate business purposes of Vessolyte Ltd., for the conclusion and/or performance of a contract with you, for compliance with legal obligations by Vessolyte Ltd., as well as with your freely given, specific, informed and unambiguous consent to the processing of your data.
| Legal grounds | Activities, actions, interests |
| Legitimate business objectives of Vessolyte Ltd. | Business activities of Vessolyte Ltd. |
| Conclusion and/or execution of a contract | Lawful establishment, implementation and termination of commercial, employment and civil legal relations. Ensuring compliance with health and safety procedures |
| Compliance with legal obligations | Fulfilling the obligations of Vessolyte Ltd. under the applicable labor, civil, tax, social security and other legislation;Ensuring safety and security conditions for its employees and property;Preventing and/or investigating incidents, violations and criminal violations; |
| Your consent has been obtained | To register or make an enquiry on our site; To respond to your request to exercise a right, etc. |
What types of personal data Vessolyte Ltd. processes
Depending on the specific purpose, Vessolyte Ltd. may process different sets of data:
- Your name, address, PIN (e.g. for invoice, warranty card, courier.
- Contact details (address, telephone, e-mail) - in case of correspondence, contract, other
- Video images - when within range of a video camera
For our employees on employment/civil service contracts:
- Physical identity: name, passport details, ID number, place of birth, address, telephone number;
- Economic identity: salary amount, banking information, use/repayment of loans, alimony, garnishments, other obligations;
- Social identity: education, qualifications, work history, work experience, marital status, children;
- Health identity: current health, common illnesses, chronic diseases, health care, employment, disability, pregnancy and childbirth.
For what periods is your personal data processed?
We retain personal data for periods of time consistent with the specific purpose or purposes for which it was collected or for the period specified by law. The criteria for determining time limits that are not legally regulated depend on:
- The purpose of data collection and the implementation of this purpose.
- The reason for collecting the data (e.g. in the case of consent, you can withdraw it at any time).
There are cases where – by virtue of legal provisions or internal rules applicable to our activities – the time limits may be shorter or longer. For example:
- Personal data in accounting documents - 10 years;
- Video images under the "VIDEOWATCHING" registry are stored for 13 to 16 days, depending on the number of days in a given month, after which they are deleted from the DVR/NVR and from the back-up.
- The personal data under the Personnel Register are kept for different mandatory periods specified by law - from 3 to 50 years for different types of documents.
How can you access your personal data that we process, object to processing, request restriction of processing, or request completion, correction, or deletion of data?
To request access to your personal data that we process, to object to processing, to request restriction of processing, or to request completion, correction, or deletion of data, please contact us via the contact form on our website https://vessolyte.com, at the e-mail address: gdpr@vessolyte.com or at our address: 6600 Kardzhali Blvd. Our office is located at our office in Kardzhali, .
Who can access your personal data?
Access to processed personal data is strictly regulated by the internal rules of Vessolyte Ltd., depending on the purposes for which the processing is carried out. Such accesses may have:
- Data subjects themselves - to their data;
- Authorised employees of Vessolyte Ltd., on a need to know basis, according to defined roles and job responsibilities;
- Processing personal data on behalf of Vessolyte Ltd. or third parties - e.g. hosting our website, payment services application, email marketing services application, other;
- Persons to whom the disclosure of data is prescribed in a legal act (such as authorities of the Ministry of the Interior, court, Prosecutor's Office, National Social Security Institute, NRA, etc.).
We do not sell or in any way provide personal data to anyone beyond the above.
How can you exercise the right to portability of your personal data processed by us?
You have the legal right to receive a copy of the personal data concerning you which is processed by us in a structured, commonly used and machine-readable format and you have the right to transfer this data to another controller, subject to the conditions set by law. You may also request this from us and we will do so if technically possible.
What security measures do we implement to protect personal data?
In accordance with the legal requirements for the protection of personal data, we apply strict organizational and technical security measures, such as:
- encryption of personal data;
- measures to ensure the continued confidentiality, integrity, availability and resilience of processing systems;
- measures to restore the availability of and access to personal data in a timely manner in the event of a physical or technical incident;
- regular testing and evaluation of the effectiveness of measures to ensure the security of processing.
We also require a high level of security and reliability when selecting our operators and third parties.
How can you make a complaint?
For Bulgaria, the competent authority is the Commission for Personal Data Protection:
Blvd. Tsvetan Lazarov, № 2, 1592 Sofia, Tel. +359 2 915 3580; Fax +359 2 915 3525; e-mail: kzld@cpdp.bg Website: http://www.cpdp.bg/
How can you contact us about privacy issues?
https://vessolyte.com/, at e-mail address: gdpr@vessolyte.com or at our address: 6600 Kardzhali Blvd. Belomorski №105
Who are we and how to find us?
Vessolyte Ltd., UIC/ VAT: BG 208487455
Registered office and registered address. Headquarters and registered office: 6600 Kardzhali Blvd. №105