In light of the new General Data Protection Regulation (GDPR), personal data is defined as:
„Any information relating to an identified or identifiable natural person („data subject“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;“.
For the purpose of offering and providing our services to you, we have to collect personal data for correspondence with you. We guarantee that the information we collect and use is necessary and crucial for the services we provide and is not used in any way for intruding in your personal space.
In addition, with your prior consent, we may send you our new publications, information about our services, offers, marketing messages, including those tailored to your personal preferences.
The internet page of ARP Management uses „cookies“ and other tracing technology, which collects information from you when interacting with our website, so that we can improve its performance and your user experience.
We will never sell your personal data to third parties, or shall we relinquish these in any way for our own benefit.
ARP management could share some of your personal data with our service sub-contractors, which have contractual arrangement with us.
All third parties, which could potentially receive your personal data are required to store your data securely and only use it for delivering on their contractual obligations to ARP Management. As soon as they no longer require your personal data for fulfilling their contractual obligations, they will be provided with detailed instructions on how to remove your personal data from all their records, in line with procedures developed by ARP Management.
Other potential recipients of your personal data could be government agencies and authorities, which we will provide your personal data to only when required to do so under particular and clear legal obligations.
ARP Management will collect, store and use the personal data you have provided only as per the instructions and requirements of the General Data Protection Regulation (GDPR). We will aim at keeping your personal data accurate and up-to-date.
We will not store your personal data for longer than the reasonably required to meet the specific objectives, which the data was collected for in the first place and which you are hereby informed of.
Some of the stored data and/or information is subject to regulations as to the minimum amount of time it needs to be kept for, in line with other local and/or EU legislation defining the minimum amount of time for storing certain records, documentation and information.
We will ensure that your personal data is safely secured against unauthorised access by taking all necessary and conceivable technical and organisational measures.
ARP Management are required, upon your request, to provide you with details about the personal information stored for you and the way it is being processed.
In case we store your personal data, you are at liberty to require the following information:
- Contact information for the organisation, which processes your data or on behalf of which your data is processed.
- Contact information for the Data Protection Officer or the person responsible for data protection procedures
- The purpose of data processing
- The legal grounds for data processing
- The types and categories of personal data, which are processed
- The recipients or category of recipients, which the data is or will be shared with
- The recipients in non-EU countries or international organisations, in case any personal data is transferred to such entities, as well as guarantees that the level of data security within those entities is at least as good as the level of data protection in the EU.
- In case the personal data is processed per legitimate interests on ARP Management’s side or third parties, information about those interests
The scheduled and planned period, which the personal data will be stored for
- Details regarding your right to request personal data correction, deletion or processing restrictions, as well as your right to object to data processing of any sort
- Information about your right to withdraw your consent at any time
- Details regarding your right to file a complaint with the oversight authorities (Commission for personal data protection)
- Information about whether providing personal data is compulsory or contractual requirement, or a requirement, which is necessary for entering into a contractual agreement, as well as whether you are required to provide personal data and the possible consequences of your inability to provide such information or data
- The source, which your personal data was collected from, in case the information was not collected directly from yourself
- All details and information for the existence of automated decision-making, such as profiling, and all the meaningful information about the corresponding logic behind these automated operations, as well as the meaning of and the expected outcomes and/or consequences of this type of data processing
You will have to fill out an access request, which you can find here or request access via the ARP Management’s contact information provided below, or alternatively you can contact the Data Protection Officer directly via the provided contact details.
To identify yourself, you will have to bring valid ID documentation for the data subject to the company’s office at the following address:
1616 Sofia, 28 Daskal Stoyan Popandreev Str; tel: +359 2 467 28 49; email: office@arpbg.com