Please, include Javascript in your browser so the website can work correctl!

How do i include Javascript in my browser?
Personal data | Avtobus.BG

Personal data

Obligatory information on the rights of individuals with personal data protection (Privacy notice)


General information

From May 25, 2018, a new General Data Protection Regulation (GDPR), approved by the European Union, enters into force. The regulation aims to guarantee the protection of the data of individuals from all EU Member States and to harmonize the rules for their processing.

As an administrator of personal data for the provision of electronic and web services, “Avtobus BG” Ltd. fulfills all the requirements of the new regulation, collecting only the data of the persons to the extent necessary for the provision of the service, and preserves them responsibly and legally.

What does personal data mean?

Personal data within the meaning of Article 2, Paragraph 1 of the Personal Data Protection Act is any information relating to an individual who is identified or can be identified directly or indirectly by an identification number or by one or more specific attributes.

Some examples of personal information are: names, personal identification number, address, telephone number, deposit, passport details of the person (physical identity); marital status and kinship relations (family identity); professional biography (work activity); health status, psychological and / or mental status, sexual orientation (medical records); racial or ethnic origin, political, religious or philosophical beliefs (social identity); property, financial status, participation and / or holding of shares or securities of companies (economic identity), etc.

We collect personal information solely to provide the products and services you have requested and use with us, as well as to fulfill our contractual and pre-contractual obligations, as well as to offer the highest quality comprehensive market services.

Information about Personal data administrator

  1. Name: “Avtobus BG” Ltd.
  2. Unified Identity Code /UIC/ BULSTAT: 205671635
  3. Headquarters and registered office: 54 Lev Tolstoy, entrance D, fl.1, ap.95, Sofia 1220
  4. Activity address: 54 Lev Tolstoy, entrance D, fl.1, ap.95, Sofia 1220
  5. Correspondence data: 54 Lev Tolstoy, entrance D, fl.1, ap.95, Sofia 1220
  6. E-mail: info@avtobus.bg
  7. Tel.: +359 8 99955521

Information about the competent supervisory authority

  1. Name: Commission for personal data protection
  2. Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
  3. Correspondence data: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
  4. Tel.: 02 915 3 518
  5. E-mail: kzld@government.bg, kzld@cpdp.bg
  6. Web-site: www.cpdp.bg

“Avtobus BG” Ltd. operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parlament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Grounds for collecting, processing and storing your personal data

Art. 1. (1) “Avtobus BG” Ltd. shall collect and process your personal data in connection with the provision of printing services and concluding contracts with the company on the grounds of Art. 6, paragraph 1, Regulation (EU) 2016/679, and in particular on the basis of the following:

Your explicit consent has been obtained from you as a client;
• Fulfillment of the obligations of “Avtobus BG” Ltd. under contract with you;
• To take steps on your request for a contract, if you are a candidate for employment with us;
• To execute a contract or take steps to conclude one with a trading partner.
• Compliance with a legal obligation that applies to “Avtobus BG” Ltd.;
• For the legitimate interest of “Avtobus BG” Ltd.

(2) “Avtobus BG” Ltd. is an administrator of personal data in relation to your data as users of our services. With respect to the personal data you process using our services, “Avtobus BG” Ltd. acts as a processor of personal data.

Aims and principles in the collection, processing, and storage of your personal information

Art. 2. (1) "Avtobus BG" Ltd. collects and processes the personal data you provide to us in connection with the use of our printing services and to conclude a contract with the company, as well as to register for participation in our events, or by applying for work at “Avtobus BG” Ltd., including for the following purposes:

• sending a request;
• the individualisation of a party to the contract;
• registration of a participant in an event organized by “Bus BG” EOOD;
• accounting purposes;

• statistical purposes;
• protection of information security;
• ensuring the performance of the contract for the provision of the relevant service;
• sending informational messages, announcements of changes in the service, etc.;

• improving and personalizing the service by offering you relevant offers for products, events and other services that may be of interest to you;
• providing customer service through our call centre;
• individualizing the applicant;
• contacting the applicant and conducting communication;
• selection of candidates.
(2) When concluding a contract with a trading partner, we collect and process personal data about the names of the legal representative of the legal person - party to the contract, for the purpose of individualizing the party to the contract and performing it.

(3) The contact details of the legal representative or contact officer shall be official information and as such shall not be considered as personal data.

(4) When concluding a contract with a partner - a natural person, we collect and process personal data for the three names, an unified registration number and data on an identity document (number, date of issue, publisher) for the purpose of individualizing the contracting party and its implementation.

(5) “Avtobus BG” Ltd. adheres to the following principles in the processing of your personal data:

• legality, integrity and transparency;
• limitation of processing objectives;
• relevance to the purposes of processing and minimizing the data collected;
• data accuracy and timeliness;
• storage limitation in order to achieve the objectives;
• integrity and confidentiality of the processing and guaranteeing an adequate level of security of personal data.

(6) In the processing and storage of personal data, “Avtobus BG” Ltd. may also process and stores personal data in order to protect the following legitimate interests:

• fulfillment of its obligations to the National Revenue Agency, the Ministry of the Interior and other institutions;
• provision of information to the Commission for the protection of personal data in relation to the obligations laid down in the legislation on personal data protection - Personal Data Protection Act, Regulation (EU) 2016/679 of 27 April 2016, etc .;

• Obligations stipulated in the Accountancy Act and the Tax-Insurance Procedure Code and other related normative acts, in connection with keeping proper and lawful accounting;
• providing information to the court and third parties, in the course of proceedings before a court, in accordance with the requirements of the procedural and substantive legal acts applicable to the proceedings.

What types of personal data are collected, processed and stored by “Avtobus BG” Ltd.?

Art. 3. (1) “Avtobus BG” Ltd. shall carry out the following operations with personal data for the following purposes:

• Sending a request from a user through the website and executing a contract for the provision of printing and other services - the purpose of this operation is to submit a request to be processed by us and accordingly prepared and sent back a specific offer to the client;
• Conclusion and execution of a commercial transaction with a client or partner - the purpose of this operation is to conclude and execute a contract with a commercial partner or client and its administration;
• Sending information messages - the purpose of this activity is to administer the process of sending messages to customers regarding improvements or changes in services under the service contract;

• Newsletter sending - the purpose of this operation is to administer the process of sending newsletters to clients who have stated that they wish to receive;
• Concluding and executing employment or civil contract: For the selection of job applicants, we process personal data that have been sent to us in the form of CVs and cover letters or other documents certifying education and qualification;
• Conclusion and execution of a commercial transaction: For the conclusion and execution of a commercial transaction with a trading company, we process only the three names of the legal representative or the person authorized by the company, as well as for the natural person-partner under contract.

2) “Avtobus BG” Ltd. processes the following categories of personal data and information for the following purposes and on the following grounds:

• Data: Your personal information (name and surname, e-mail, country, telephone, address and in
in some cases an Unified registration number or personal number for foreigner);

• The purpose for which the data is collected:

  • Send a request from a user;
  • Establishing a connection with the user and sending information to a user, including if desired - for all in newsletters and advertising messages;

• Grounds for processing your personal data - By accepting the general terms and conditions and purchasing a service, a contractual relationship is created between “Avtobus BG” Ltd. and you, on the basis of which we process your personal data - Art. 6, paragraph 1, (b) of the General Data Protection Regulation (GDPR);

• Other data that “Avtobus BG” Ltd. processes - When logging into our website or your profile, “Avtobus BG” Ltd. collects data about the IP address used.

  • Bank account information or other bank and payment information in connection with payments made to “Avtobus BG” Ltd.;
  • Customer number, code or other identifier created by “Avtobus BG” Ltd. for customer identification;
  • Other feedback we receive from you.

• The purpose for which data is collected: Improvement of service security and interface localization, statistical and marketing studies.

• Grounds for data processing: Processing is necessary for the performance of a contract to which the data subject is a party - Art. 6, paragraph 1, (b) of the GDPR. Until the creation of a user profile, the IP address is collected on the basis of the fulfillment of the legitimate interests of the administrator - Art. 6, paragraph 1, (f) of the GDPR;

• Your invoice details for an individual - If you wish to be issued an invoice in your capacity as an individual, you must provide your Unified registration number;

• The purpose for which the data is collected: Issuance of an invoice for making payments under a concluded service contract;
• Ground for processing of your personal data - By accepting the general terms and conditions of the website, or at the conclusion of a written contract, a contractual relationship is established between “Avtobus BG” Ltd. and you, on the basis of which we process your personal data - Art. 6, paragraph 1, (b) of the GDPR.

(3) “Avtobus BG” Ltd. does not collect or process personal data related to the following:

• reveal racial or ethnic origin;
• reveal political, religious or philosophical beliefs or membership in trade union organizations;
• genetic and biometric data, health data, or sexual life or sexual orientation data.

(4) The personal data are collected by “Avtobus BG” Ltd. from the persons to whom they relate.

(5) The company does not carry out automated decision making with data.

The storage period of your personal data:

Art. 4. (1) “Avtobus BG” Ltd. terminates the use of your personal data, for the purposes related to the contractual relationship, after termination of the contract or after its expiration, but we do not delete them before the expiration of one year after the termination of the contract or expiration of its term or until final settlement of all financial obligations and expiration of regulatory certain obligations for data storage, such as obligations under the Electronic Communications Act for the storage and provision of information for the purpose of detecting and investigating crimes, obligations (6 months) under the Accountancy Act for storing and processing accounting data (11 years), expiry of the statutory limitation periods for filing claims under Obligations and Contracts Act (5 years), obligations to provide information to the court, competent state institutions, etc. grounds provided for in current legislation (5 years).

(2) "Avtobus BG" Ltd. shall store your personal data as a job applicant for a term not longer than the availability of a current job advertisement, publish it on our website or elsewhere. After the expiration of the announcement or the completion of the selection, "Avtobus BG" Ltd. takes the necessary care to delete and destroy all your data without unnecessary delay or anonymize (i.e. to bring them in a form that does not reveal your identity ), unless you expressly consent to your data continuing to be stored and processed in the future.

(3) "Avtobus BG" Ltd. stores the personal data of the legal representatives of the legal entities - parties to the contract or natural persons-partners under a contract with the company indefinitely, for the purpose of protecting the legitimate interest of "Avtobus BG" Ltd. and the fulfillment of its legal obligations to institutions.

Transmission of your personal data for processing:

Art. 5. (1) “Avtobus BG” Ltd. may, at its own discretion, transmit some or all of your personal data to processing personal data for the fulfillment of the processing objectives in compliance with the requirements of Regulation (EU) 2016/679.

(2) “Avtobus BG” Ltd. notifies you in case you intend to transfer some or all of your personal data to third countries or international organizations.

Your rights in the collection, processing, and storage of your personal data. Withdrawal of consent to the processing of your personal data:

Art. 6. (1) If you do not wish all or a part of your personal data to be further processed by “Avtobus BG” Ltd. for specific or for all purposes of the processing, you may at any time withdraw your consent for the processing by contacting us by requesting in free text.
(2) “Avtobus BG” Ltd. may ask you to verify your identity and identity with the data subject.

Right of access

Art. 7. (1) You have the right to request and receive from “Avtobus BG” Ltd. confirmation that personal data related to you are being processed.
(2) You have the right to access the data related to it, as well as to the information related to the collection, processing and storage of your personal data.
(3) “Avtobus BG” Ltd. provides upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.
(4) The provision of access to the data is free of charge, but “Avtobus BG” Ltd. reserves the right to impose an administrative fee in case of repeated or excessive requests.

Right of correction or completion

Art. 8. You may correct or fill in inaccurate or incomplete personal data related to you directly through your profile on the website or by sending a request to “Avtobus BG” Ltd.

Right to be deleted ("to be forgotten")

Art. 9. (1) You have the right to request from “Avtobus BG” Ltd. to delete the personal data related to you, and “Avtobus BG” Ltd. has the obligation to delete them without undue delay, if any of the following reasons exist:

• personal data are no longer needed for purposes for which they were otherwise collected or processed;
• You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
• You object to the processing of personal data relating to you, including for the purposes of direct marketing and there are no legitimate grounds for the processing to take precedence;

• personal data were processed illegally;
• personal data must be deleted in order to comply with a legal obligation under EU or Member State law that applies to “Avtobus BG” Ltd.;
• personal data were collected in connection with the provision of information society services.

2) “Avtobus BG” Ltd. shall not be obliged to delete personal data if it stores and processes:

• to exercise the right to freedom of expression and the right to information;
• compliance with a legal obligation requiring processing as provided for in EU or Member State law applicable to the Administrator or for the performance of a public interest task or in the exercise of official powers conferred on him;

• for reasons of public interest related to public health;
• for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
• to establish, pursue or defend legal claims.

(3) In order to exercise your right to "forget", you must submit a written request sent to “Avtobus BG” Ltd., as well as to prove your identity and identity with the data subject before “Avtobus BG” Ltd. by presenting on the spot your ID card for identification purposes.

(4) “Avtobus BG” Ltd. does not delete the data which it has a legal obligation to keep, including for protection in connection with legal claims against it or proving its rights.

Right of restriction

Art. 10. You have the right to request “Avtobus BG” Ltd. to restrict the processing of the related data when:

• challenge the accuracy of personal data for a period that allows “Avtobus BG” Ltd.to verify the accuracy of personal data;
• the processing is unlawful, but you do not want your personal data to be deleted and only their use restricted;
• “Avtobus BG” Ltd.no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defense of your legal claims;
• You objected to the processing pending the verification that the legal grounds of “Avtobus BG” Ltd. have priority over your interests.

Right to portability

Art. 11. (1) You may at any time download the data stored and processed for you in connection with the use of the services of “Avtobus BG” Ltd., by request by email.
(2) You may request “Avtobus BG” Ltd. to directly transfer your personal data to an administrator designated by you, where technically feasible.

Art. 12. You may request “Avtobus BG” Ltd. to inform you of any recipients to whom the personal data for which correction, deletion or restriction of processing has been requested have been disclosed. “Avtobus BG” Ltd. may refuse to provide this information if this would be impossible or would require a disproportionate effort.

Right to object

Art. 13. You may object at any time to the processing of personal data from “Avtobus BG” Ltd. that relates to you, including if it is processed for profiling or direct marketing purposes.

Your rights in breach of your personal data security

Art. 14. (1) If “Avtobus BG” Ltd. detects a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, we shall notify you without undue delay for the breach, as well as for the measures taken or to be undertaken.
(2) “Avtobus BG” Ltd. is not obliged to notify you if:

• has taken appropriate technical and organizational safeguards with respect to data affected by a security breach;
• subsequently took measures to ensure that the violation would not pose a high risk to your rights;
• a notification would require a disproportionate effort.

Persons to whom your personal data are provided
Art. 15. (1) Persons processing data on behalf of “Avtobus BG” Ltd.:

• collecting companies and / or securing receivables - debt collection agencies, credit agencies, which by way of surety or other means, servicing and collecting claims;

• postal operators and courier services regarding the sending of parcels and the need to verify their identity on delivery;

• agents of “Avtobus BG” Ltd., who act as representatives of the company in the sale of services and products;

• persons who outsource the equipment, software, and hardware used for the processing of personal data and necessary for the proper functioning of the business of the company and for the provision of various reporting, payment for services and products, technical support, etc.;

• institutions, and persons to whom we are obliged to provide personal data under the current legislation;

• banks to service the payments you make;

(2) Persons processing the data on their own behalf

• assignees - a party to the assignment contracts with which “Avtobus BG” Ltd. transfers (sells) your outstanding obligations;
• competent authorities which by virtue of a regulatory act have the power to request the provision of information, including personal data, such as courts, prosecutors, various regulatory institutions such as the Consumer Protection Commission, the Communications Regulation Commission, the Commission for personal data protection, authorities responsible for the protection of national security and public order;

Art. 16. The admin does not transfer your data to third countries.

Other provisions

Art. 17. In the case of a violation of your rights under the aforementioned or applicable personal data protection legislation, you have the right to file a complaint with the Commission for personal data protection as follows:

  1. Name: Commission for personal data protection
  2. Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
  3. Correspondence data: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
  4. Tel.: 02 915 3 518
  5. E-mail: kzld@government.bg, kzld@cpdp.bg
  6. Web-site: www.cpdp.bg

Art. 18. You may exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are optional and you can submit your requests in any form that contains a statement to that effect and identifies you as the data owner.

Art. 19. If the consent concerns a transfer, the Administrator shall describe the possible risks of transferring the data to third countries in the absence of adequate protection and adequate remedies.

Art. 20. (1) When you instruct “Avtobus BG” Ltd. to process personal data of a third person for the purposes of using the service, “Avtobus BG” Ltd. acts as the processor of the personal data.

(2). In the cases of paragraph 1, “Avtobus BG” Ltd. acts only on your instructions as a user of the service and only insofar as it can have control over the personal data you process. “Avtobus BG” Ltd. does not have control over the content and data that you, as a user of the service, choose to load in the service (including if or not personal data is included).

In this case, “Avtobus BG” Ltd. has no role in the process of deciding whether the user uses the personal data processing service, for what purposes and whether it is protected. Accordingly, the responsibility of “Avtobus BG” Ltd., in this case, is limited to 1) compliance with the instructions of the user of the service according to the contract and the general conditions and 2) the provision of information about the service.

Cookie Policy

The website of “Avtobus BG” Ltd. uses cookies that are important for its correct work. By visiting our site, you agree to the use of cookies.

Grounds for collecting, processing and storing your personal data.

The types of cookies we use:

• Required cookies

These cookies are required for the website to function correctly. For example, with these cookies, we show you the information on our site in the correct language.

• Analytics cookies

Thanks to these cookies, we monitor the traffic to our site and can analyze how easily our users handle it (Google Analytics cookies). These cookies do not give us any information about your personal information. They show us which pages on our site you viewed, whether you visited our site through a mobile or desktop device and other anonymous data. For Google Analytics, we also use the anonymization of IPs using _anonymizelp. The maximum period in which we store analytics data in Google Analytics is 50 months.

• Functional cookies

These cookies allow you to use the full functionality of our site, watch videos on it, and more.

• Precision targeting cookies

These cookies contain information about how you used our site and may be triggered by our advertising partners. They do not store personal information. Thanks to them, you will not be shown information that is irrelevant to you. These are dynamic cookies on Facebook, Google, Adform, Adwise and more.
The cookie settings you receive from our site can be made in the browser you are using. Please note that if you restrict some types of cookies, our site may not work properly and you may not be able to use its full functionality.

What security measures have we taken at “Avtobus BG” Ltd. regarding the security of the personal data you store on our infrastructure?

The security of all types of information, including personal data, located on our infrastructure is a priority for us as a company. Security is something we cannot afford to compromise with.

In addition to making every effort to fully comply with the new privacy policy, our site and email server structure are protected by our hosting and internet providers. For maximum security in the processing, transmission, and storage of your data, we may use additional security mechanisms such as encryption, pseudonymization, logging of data processing activities in automated processing systems, and more. “Avtobus BG” Ltd. regularly conducts trainings of its employees on the measures for personal data protection.

In order to implement the most up-to-date security measures and to comply with applicable laws, we will regularly update this Privacy Policy. If the changes we make are significant, we may post a notice of the changes made to our site. We invite you to review the current version of this Privacy Policy on a regular basis, to be constantly informed of how we care for the protection of the personal data we collect.

This Privacy Policy was last updated on May 23, 2018.