Privacy Policy
TRANSTRAIGHT Ltd
Art. 1. This Privacy Policy (hereinafter “the policy”) has been adopted by TRANSTRAIGHT, with UIC 203222035 (hereinafter “TRANSTRAIGHT“), in its capacity as a personal data controller, in accordance with the requirements of regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter”the EU General Data Protection Regulation” or “GDPR”) and the personal data protection act (hereinafter “PDPA”).
Art. 2. (1) the right to confidentiality of personal data is a top priority of TRANSTRAIGHT. TRANSTRAIGHT strictly complies with the applicable provisions of national and European legislation regarding the protection and secure storage of personal data of employees, contractors and partners, as well as of natural persons who have provided their personal data through the forms of communication on a website with an address https://www.transtraight.com/(below “site”).
(2) TRANSTRAIGHT complies with the basic principles introduced as mandatory in the processing of personal data: legality, good faith and transparency, limitation of purposes, data minimization, accuracy, storage limitation, integrity and confidentiality, accountability.
(3) this Privacy Policy does not cover the entire activity of TRANSTRAIGHT, but aims to inform data subjects about the processing of personal data when using a website with an address https://www.transtraight.com/
Definitions
Art. 3. The terms used in this policy have the meaning defined in the GDPR.
WHO PROCESSES YOUR PERSONAL DATA
Art. 4. Personal data controller is ” TRANSTRAIGHT, with UIC 203222035, with headquarters and address of Management in the town of Sofia. Kresna, str. Olympia, 3,
CONTACT DETAILS OF THE ADMINISTRATOR
Art. 5. The administrator has the following correspondence data:
Address: City Kresna, str. Olympia, 3;
E-mail address: office@transtraight.com;
Phone: +359 988 92 92 95
WHEN WE PROCESS PERSONAL DATA
Art. 6. TRANSTRAIGHT does not collect personal data on its own and without limitation. TRANSTRAIGHT collects only those personal data that are necessary for the performance of the relevant legal activities of the company. The activities related to the use of the site, in which personal data are processed, are related to the forms of communication on the site, specified below.
INDIVIDUALS WHOSE PERSONAL DATA WE PROCESS
Art. 7. Through the website TRANSTRAIGHT processes personal data of the following categories of natural persons:
Registered users of the site;
Persons who have provided their personal data through the request form for Transport and logistics services on the site;
Job applicants who have provided their personal data through the application form for job ads on the site;
Persons who have provided their personal data through the General contact form for inquiries on the site.
CATEGORIES OF PERSONAL DATA WE PROCESS
Art. 8. (1) in the performance of the activities related to the site, TRANSTRAIGHT processes personal data provided directly by the data subjects. In this sense, data subjects themselves determine the amount of personal data to provide for different purposes. TRANSTRAIGHT stores only the personal data that are necessary to fulfill the purposes of processing, such as:
(2) when registering on the site or using the forms of communication on the site listed above, TRANSTRAIGHT processes only ordinary personal data – names, email address and telephone number;
(3) TRANSTRAIGHT also processes the personal data contained in the CVs of the persons who have used the application form for job advertisements on the site, for example data on education, marital status, residence, place of Work, Social Security history, etc.
PROCESSING PURPOSES
Art. 9. TRANSTRAIGHT processes personal data only for specific and legitimate purposes and does not further process them in a manner incompatible with the established purposes. TRANSTRAIGHT processes personal data obtained through the site for the following purposes:
Selection of employees under an employment relationship;
Provision of information about the company’s services in case of a request received;
Making contact with persons who have expressed interest in the services of TRANSTREET in view of the commercial activity of the company;
Contacting potential counterparties or users through the forms of communication on the site, including when requesting consent to receive messages from the site;
LEGAL GROUNDS FOR PROCESSING
Art. 10. In the activities related to the site, TRANSTRAIGHT processes personal data of data subjects on the basis of art. 6, paragraph 1, letter “B” and letter ” F ” GDPR, namely:
(B) processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (e.g. upon request for a transport service sent through the website)./;
(F) processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or Fundamental Rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child (e.g. for the management of inquiries received through the communication forms on the site and the management of job applications received through the site).
TO WHOM WE MAY TRANSFER OR DISCLOSE PERSONAL DATA
Art. 11. (1) when performing activities related to the site, TRANSTRAIGHT may transmit or disclose personal data only to competent state authorities, which by virtue of a statutory Act have the power to require from TRANSTRAIGHT the provision of information, including personal data – Court, investigative bodies (police, investigation, prosecution), sans, supervisory / regulatory authorities;
(2) TRANSTRAIGHT does not transfer personal data to other countries, including non-EU states.
PERIOD OF STORAGE OF PERSONAL DATA
Art. 12. The duration of storage of personal data collected through the site depends on the processing purposes for which it was collected. In any case, personal data are stored for a period not longer than the period provided for in the relevant legal act. For personal data collected through the site, the following storage periods are defined:
Personal data provided through the application form for job advertisements on the site are stored for a period of up to 6 (six) months in accordance with art. 25k, Al. 1 of the PDPA, unless the applicant has given his explicit written consent for storage for a longer period;
Personal data provided through the request form for Transport and logistics services on the site are stored until the communication with the person concerned ceases, unless the parties take action to conclude a contract;
Personal data provided through the General contact form for inquiries on the site are stored for the period from the receipt of the inquiry, request or question until the purpose of their processing is achieved and/or the legal basis for the processing of the relevant personal data is dropped.;
Personal data of users registered on the site are stored until termination of the registration;
SECURITY OF PERSONAL DATA
Art. 13. TRANSTRAIGHT shall implement all appropriate technical and organizational measures to ensure the security of personal data, including minimizing the volume of personal data processed necessary to achieve the respective purposes; timely restoration of availability and access to personal data in the event of a physical or technical incident; undertaking an explicit obligation of confidentiality by the employees, as well as other measures. In addition, the site uses Apostille certificates that provide effective encryption of users ‘ data during their transmission to the site’s web server, provider identification – transstream, and also authenticate the site to protect it from phishing.
RIGHTS OF DATA SUBJECTS
Art. 14. Any natural person whose data is processed by TRANSTRAIGHT has the following rights::
– right of access to his personal data, including to receive a copy of them;
– right to correct or supplement inaccurate or incomplete personal data;
– right to erasure of personal data processed without a legal basis;
– right to restriction of processing-in the event of a legal dispute between TRANSTRAIGHT and the person-until its resolution or for the establishment, exercise or defence of legal claims;
– right to object – at any time and on grounds relating to the specific situation of the person, provided that there are no compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or legal proceedings;
right to portability-only in the event that personal data is processed automatically on the basis of consent or contract;
– the right not to be subject to a fully automated decision involving profiling that produces legal consequences for the data subject or significantly affects him or her.
In accordance with the GDPR and the PDPA, the above-mentioned rights can be exercised by submitting a written application electronically. The application shall be made personally by the data subject or by a person authorised by him or her. TRANSTRAIGHT shall rule on the request of the data subject within 30 days of its submission.
PROTECTION OF THE RIGHTS OF DATA SUBJECTS.
Art. 15. In accordance with the personal data protection Act and regulation (EU) 2016/679, any natural person who considers that his or her right to the protection of his or her personal data has been violated may lodge a complaint with the commission for personal data protection at: Sofia 1592, Blvd. “Prof. Tsvetan Lazarov” apostille 2, website: www.cpdp.bg.
