Type of information we collect

Personal information means information used to identify you, such as your name, email address, phone number, resume, portfolio, photo, company details, or any other information you choose to submit when filling contact or subscription forms on our website, or when sending us email messages, or contacting us through our social media sites or profiles.

Sensitive Information

Abilitics does not require and you should not disclose to Abilitics any sensitive or criminal background personal information through our websites, social media profiles, contact emails or phone numbers. Sensitive information includes your racial or ethnic origin, health related data, political, religious or philosophical beliefs.

Privacy of Children

We do not knowingly or by intention collect information about children under the age of 16 years. If you are under 16 years old, you should not submit any information on our websites. You could do this only if prior to that your parent or guardian submits an official consent. If you believe that a child under 16 may have provided us personal information, please contact us at office@abilitics.com. We will immediately delete this information.

Ways of collecting information

Websites

We collect information on our websites through registration, subscription to newsletters or blogs, contact or other forms which you may choose to provide to us. We may use this personal information to provide services to you, and to reply to your inquiries. When you create an account on any of our sites it is your responsibility to confidentially keep your account credentials.

When you are using our websites, we automatically may collect information about your IP address, browser, device, geolocation data, device identification, time of usage, viewed pages, time spent per page in order to provide you with better services and browsing experience.

If applicable, in case you access any of our Sites using Third Party profiles or if you provide your third-party account credentials to us, such as Facebook, Google, LinkedIn, etc., the Third Party may disclose to us certain personal information, which is covered by this Privacy Policy.

Certain user profile information, including but not limited to your name, location and any video, text or image content, messages or comments that you upload on our websites through a public user profile may be displayed to and viewed by other users. Your account privacy settings may allow you to limit the information other users can see about your content and user profile.

Email

When you contact us by email to inquire about our services or related information, we may use your personal information in order to respond to your inquiry.

In case you send us an email with your resume, CV, motivation letter, photo, portfolio, etc. with regard to a job application related to a job advertising published on www.jobs.bg, www.zaplata.bg, LinkedIn, Facebook or other channels, you choose to provide that personal information to us, and we will use it solely for the purpose of recruitment for the relevant position. We will delete such an information immediately after the recruitment process is over and a candidate has started work, unless you explicitly tell us that you want us to keep your personal information for future vacant positions. You have the rights to access, request changes or deletion of your personal information at any time.

Forums and events

If you participate in any forum or event organized by us, we may collect personal information related to your participation, and we may make photo, video and audio records of the participants. Unless you explicitly object us using the recorded materials and request us to delete the materials related to you, we may use the records for advertising.

Cookies

Cookies are small text files that are stored on your computer or mobile device, the cookie function is to distinguish you from other users on the same web site or to retain certain information related to your preferences. They are used by most sites to make it easier for you to browse.

HTTP cookies, commonly referred to simply as a cookie, is a packet of information sent from a web server to an Internet browser and then returned from the browser each time it is accessed by that server. The cookies we use are to distinguish you from other users or to keep information related to your preferences.

Each cookie is unique to your browser and contains anonymous information. The content includes the name of the domain from which it comes, its "life expectancy" and value, usually in the form of randomly generated numbers.

Cookies may contain any information selected by the server and are used to support the status of HTTP transactions that are otherwise "without state".

Types of cookies we use:

1. Security and identification

The purpose of these cookies is to:

• Recognize the user within the specific session
• Control security
• Ensure that the information you enter is visible only to you

Security and authentication cookies are automatically deleted after your browser session is terminated or are kept for a limited time to ensure unobstructed site experience. It is important to note that these, as well as the other types of cookies on the site, do not store personal data entered.

We usually use them to verify the identity of a registered user as part of the login or initial sign-up process on our site, and the users does not need to enter a new username and password every time they access our site.

2. Efficiency and functionality

Productivity cookies aim to collect statistical information and deliver content to individual user preferences, and we measure the number of visits, viewed pages, visitor activity, and site visits repeatedly. Thus we analyze traffic that allows us to improve our site and provide you with more relevant and interesting information.

Managing and deleting cookies

We would like you to know that most of the cookies we use improve your browsing on our websites and are important for your access to our services.

Depending on the browser you are using, you can:

• Allow or deny the storage of cookies from all sources
• Set up a notification that asks for acceptance or rejection for each new cookie.

Most browsers are set to accept default cookies, however, if you do not want cookies to be stored on your computer, you can limit them by changing the settings of the browser you are using.

Usage and Sharing of Information

Legal Grounds for Processing

We process your personal data when you provide your consent and your personal data by choosing to register on our websites, or subscribe to our blog or newsletters, or fill a contact or other form on our websites, or you send us emails, or participate in our forums or events.

We process personal data in the following circumstances:

• with the consent of the individuals concerned;
• where there is a contractual obligation (a contract between us);
• to meet a legal obligation under EU or national legislation;
• where processing is necessary for the performance of a task carried out in the public interest under EU or national legislation;
• to protect the vital interests of an individual;
• for our legitimate interests, but only after having checked that the fundamental rights and freedoms of the person whose data is to be processed aren’t seriously impacted.

Usage

We store and process your personal data in compliance to the EU General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR).

We use the data to provide to you better services, which includes but is not limited to identifying your access to our Sites, personalizing your browsing experience and our services for you, replying to communication from you, providing the services you chose to subscribe for, or analyzing your activity on our Sites, improving your customer experience.

We do not send marketing materials or use automated decision making and profiling. In case we decide to start, we will ask for your consent before we send you any marketing materials or use automated decision making and profiling with regard to your personal data.

Third Parties

We may share your personal data with Third Parties only as listed below.

We may disclose personal data to companies within our Group.

We may analyze and lawfully share aggregated information that does not identify you personally with our affiliates and current and potential business partners. Such an information does not contain any personal data.

We may have to disclose personal data if:

• That is required by law, or according to a government authority, or in response to a legal procedure.
• We need to use a Third Party to provide services to you, for example a delivery service or payment provider. In such cases we ensure that the Third Party has signed a binding contract for personal data protection.
• We use Google Analytics analysis services where cookies collect your IP address.
• We participate in a merger, transfer of control or sale. In such a case we will notify you in advance so that you may exercise your rights accordingly.
• You have explicitly given consent to a Third Party for that.
• We need to protect your safety or our rights.

Confidentiality

The consider your personal information confidential and we treat it as such and process it lawfully, fairly and in a transparent manner. We do not commercially distribute, sell or exchange personal data. We may disclose information as per the terms stated under ‘Third Parties’ above.

We keep your confidentiality pursuant to our Privacy Policy and the applicable laws and regulations.

Links to Other Sites

If you access Third Party websites through our Sites and you choose to submit personal information there, our Privacy Policy is not applicable as we are not be able to control the owners and policies of those websites. Your privacy and personal data are governed by their privacy policies. It is therefore advisable to read the privacy policy of such websites prior to deciding whether to submit your personal data on those websites.

Storage and Retention of Data

We process your personal data only in accordance with applicable data protection and privacy laws.

We keep your personal data only as long as we have your permission to keep it or as long as your account is active, or as stipulated by our internal procedures, or by law.

We perform annual reviews to check whether we need to keep your data.

We use the industry standards for security and have taken all necessary security precautions to keep your personal data secured. We have working security procedures and make sure our systems are secure. Whenever possible we keep information encrypted. We use Secure Sockets Layer technology for network transmissions. You should note that internet is not fully secure and your transmission of information to our websites cannot be guaranteed in terms of interception.

We have also taken technical and organizational measures to ensure confidentiality, integrity, availability and sustainability of processing systems and services; controlled access to workspaces, IT equipment, devices and paper carriers; security of IT environments, infrastructure, systems and data; employee consents and trainings; technical and organizational handling measures that guarantee processing security and only for the specific purpose.

International Transfers

Your data is stored only in the European Economic Area and we do not transfer personal information outside the EEA.

Your Rights

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed by us, and, if we do, you can have access to your personal data and the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipient to whom the personal data have been or will be disclosed;
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• where the personal data are not collected from you, any available information as to their source;
• the existence of automated decision-making, including profiling, and the right to object it.

It is your right to:

• Be informed about the processing of your personal data;
• Get access to your personal information that we have;
• Request rectification of inaccurate personal data;
• Obtain the erasure of personal data;
• Restrict processing;
• Receive your personal data that you had provided us in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller;
• Object to processing of your personal data, including profiling based on those provisions;
• Refuse to be subject to a decision based solely on automated processing, including profiling.

In case you wish to file a complaint about the processing of your personal data or about the way in which we have dealt with your complaint, you have the right to file a complaint with the Personal Data Protection Commission. You can file a complaint in one of the following ways:

1. By letter to the Personal Data Protection Commission at 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria

2. By fax to the Personal Data Protection Commission at +35929153525.

3. By e-mail address of the Personal Data Protection Commission (kzld@cpdp.bg). In this case, your complaint must be formatted as an electronic document signed with a personal electronic signature.

In each of these cases, the complaint should contain:

• details of the complaint - names, address, contact telephone number, e-mail address
• the nature of the complaint
• other information and documents that you consider relevant to the complaint
• date and signature (for electronic documents the signature should be electronic).

Acceptance

It is your decision to provide us with your personal data. If you use our websites and send us your personal information, you agree and consent the collection and processing of your personal information. If you do not agree with this Privacy Policy, you should not send us any personal information and you should discontinue using our websites.

Changes

We may change this Privacy Policy from time to time or as may be required by law.

When changes are introduced, the updated Privacy Policy is published on our websites with an immediate effect. In case of material changes, we may contact you to consent with those changes.

We advise you to check for updates of this Privacy Policy periodically.

This Privacy Policy comes into effect on 29 November 2018, and supersedes the previous version dated 1 May 2018.

Contact

If you have any questions or comments related to our Privacy Policy, please contact us at office@abilitics.com.