Information aimed at data subjects, based on Act.13 from the General Data Protection Regulation, effective from 25.05.2018.
Categories of Personal Data processed by Information Services Jsc. Purposes and Lawful Basis for the Processing
In relation to the employee recruitment, Information Services Jsc. collects and further processes the following categories of personal data: full name, contacts of the candidate – telephone number and e-mail; citizenship; the highest level of academic education; information about employment.
Information about the Personal Data Administrator and contact details of the Data Protection Officer
Information Services Jsc. is a Personal Data Administrator /ADMINISTRATOR/. The Jurisdiction is registered in the (German) Commercial Register under UIC 831641791 and its headquarters is in Sofia, 2 Panayot Volov street. To contact the ADMINISTRATOR and the Data Protection Officer you can write and e-mail to: dpo@is-bg.net.
Data Storage Limitation
The ADMINISTRATOR stores personal data provided by the data subjects for a period of 6 months unless there is additional consent for a longer period.
Rights of access by data subjects
The data subject has the right to receive confirmation from the ADMINISTRATOR whether their personal data is processed, and if so, to gain access to it.
Right of adjustment
The data subject has the right to have its mistaken/inaccurate personal data corrected.
Right to restrict processing
The data subject has the right to request from the ADMINISTRATOR to restrict the processing if any of the following circumstances is present:
The accuracy of the data is disputed by the data subject, for a period which allows the ADMINISTRATOR to verify the accuracy of the data;
The ADMINISTRATOR no longer needs the personal data for processing purposes, but the data subject requires them for the establishment, exercise or defense of legal claims.
Right to Appeal
The data subject has the right to appeal to the supervisory authority if he considers that the processing of his own personal data infringes the General Data Protection Regulation.
Automated decision-making
The ADMINISTRATOR does not intend to make automated decisions, including profiling.
