Who Are We?
The website at https://www.rebenefit.bg is owned and maintained by ReBeneFit Ltd, having its business seat and registered address at 109 Bulgaria Blvd., Vertigo Business Tower, fl. 1404 Sofia, Bulgaria, registered in the Commercial register of the Registry Agency under UIC 206162139. To the extend Re:Benefit Ltd may collect or process personal data through its Websites, ReBenefit Ltd acts as the data controller for the processing of your personal data collected on the Websites.
Information About Children
The Websites are not intended for or targeted at children under 16 years old, and we do not knowingly or intentionally collect or maintain information about children under 16 years old. If you believe that we have collected information about a child under 16 years old, please contact us at email@example.com, so that we may delete the information. In addition, we kindly ask any child under the age of 16 not to submit any personal information to us or use the Websites.
Why And How We Collect And Use Your Personal Information.
Types of personal information we collect
The types of information that we may collect from you, depending on how you use our Websites or contact us, include:
• your name;
• your family name;
• your email address;
• your company details;
• your CV, motivation letter or additional supporting documentation (portfolio, projects description, related pictures, etc.). you elect to provide where you apply for a role at our company on our Websites or via email, events, social media sites or other sites;
• your photo if you elect to provide when you register for an Event;
• information about your age, gender, education, academic profile and occupation you elect
to provide when you take part in our surveys (“Survey(s)”) and
• any other information that you choose to provide us when filling out a contact form on our
Websites or when attending our events, participating in our Surveys or by contacting us via
e-mail or via any of the social media sites like Facebook, Twitter, Messenger, LinkedIn.
How do we collect information and how we use your Personal Information Visitors to our Websites
When entering one of our Websites, we will collect information necessary for the operation of the Websites and for us to comply with security and legal requirements in relation to operating our Websites. We also collect information about your activities during your visit such as date and time of visits, the pages viewed, time spent at our Websites, and the websites visited just before our own, as well as your IP address and your browser so that we can better address your queries and to collect statistics to help us improve your browsing experience in the future.
Information from the “Contact Form” section of our Websites
We may collect your Personal Information, which you choose to provide when you fill in contact forms on our Websites, including your name and e-mail. We may use this Personal Information to respond to your queries, and/or provide the services and/or information that you have requested.
Information from requests via e-mail
When you contact us via e-mail in connection with a request such as request for information, to order a product or service, to provide you with support, to offer us a proposal or to participate in an event, we collect information necessary to respond to your request and to be able to contact you. For instance, we collect your name and contact information and details about your request. We may use this Personal Information to respond to your queries, and/or provide the services and/or information that you have requested. We use Transport Layer Security (TLS) to encrypt and protect web and email traffic. If your
email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit. We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
When you elect to participate in Surveys, organized by us, you may provide to us personal information voluntarily and on your own initiative, as necessary for us to collect accurate feedback in relation to its employment or academic initiatives.
When you register for and/or participate in event, campaign, Survey, traineeship, or other educational program („Training”) we may collect additional information (online or offline) in relation to the event, campaign, Survey, or the Training organization, and during an event, campaign, Survey, or a Training, such as participation in sessions, survey results, test results and/or results from exams. Events/campaigns may be recorded, and group photos taken. We reserve the right to use photos for promotional use, unless you explicitly inform us that you don‘t want photos of you to be used for such purposes or request them to be removed. When you provide us with your business contact information (such as by handing over a business card) we may use this to communicate with you for business purposes only.
If you choose to subscribe to our blog(s) and/or news in order to receive notifications for new articles, news and information about us (“Newsletter”), we will collect and use Personal Information that you provide during the subscription process to send you notifications for new articles and articles` content by email.
Your consent to the use of your Personal Information for these purposes is optional. If you decide not to subscribe to our Newsletter to receive new articles, news, and information, we will not send you any Newsletters, but your use of our Websites will remain otherwise unaffected.
You are entitled to opt-out from receipt of Newsletters at any time. You can do so by using the “unsubscribe” option included in all e-mails. When you unsubscribe, we will keep a record of this, and once your request has been processed, you will stop receiving emails for new articles. You can still use our Websites once you have unsubscribed.
In connection with a job application, inquiry, registration for and/or participation in a Training, whether advertised on our Websites or otherwise (on LinkedIn, www.jobs.bg, our Facebook page etc.), you may provide us with Personal Information about yourself, including your name, family name, e-mail, CV, motivation letter or additional supporting documentation (portfolio, projects description, related pictures, etc.) you elect to provide, where you apply for a role at our company on our Websites or via email, social media sites or other sites as well as any other information that you choose to provide to us when filling out a contact form on our Websites or when attending our events or by contacting us via e- mail or via any of the social media sites like Facebook, Twitter, Messenger, LinkedIn or any other site. We may use this information throughout our departments in order to address your inquiry or consider you for employment purposes. All the information you provide during the process will only be used for the purpose of recruiting for the relevant currently vacant position that you have applied for and shall be kept for a period of no more than 6 months. If you have explicitly consented – your information will be also used for the purpose of recruiting of personnel for future vacant positions for a period of 2 years, which positions according to us are appropriate for you in view of your education, professional qualification, and experience. If we enter an employment relation with you, the submitted information will be stored for the purpose of processing the employment relationship in compliance with legal requirements. We may also use the information you provide during the recruitment process to fulfil other legal or regulatory requirements, if necessary. In addition you may elect for the purposes of the recruitment, to voluntarily provide in your CV Personal Information with a volume greater than the statutory minimum for the conclusion of an employment contract and in such case please be informed that the provision of data beyond than statutory minimum is not mandatory and that the non-provision of these data on your behalf has no negative impact on the selection process. Since you provide your Personal Information voluntarily on the grounds of a consent, you have the right to withdraw your consent at any time by sending an email to: firstname.lastname@example.org (please see below in section YOUR RIGHTS AS A DATA SUBJECT more information about your rights as a data subject). We will not share any of the information you provide during the recruitment process with any third parties for marketing purposes or store any of your information outside of the European Economic Area. The information you provide will be held securely by us and/or our data processors whether the information is in electronic or physical format. We may also obtain information about job applicants from other sources to the extent permitted by applicable law, such as through your contact with us, including your interactions with us, or from third parties such as employment agencies and other websites on the Internet. For example, you may choose to provide us with access to certain personal data stored by third parties such as social media sites like LinkedIn. By authorizing us to have access to this information, you agree we may collect, store, and use this information in accordance with this Policy.
People who contact us via social media
We may also collect information posted by you on social media sites if have opted to connect to or otherwise link us with social media accounts including Facebook and Twitter or if you send us a private or direct message via social media. It will not be shared with any other organizations.
Our Business Purposes
We may also use your Personal Information for our business purposes such as:
• record keeping, statistical analysis, internal reporting, and research purposes;
• to ensure network and information security;
• to notify you about changes to our services;
• to investigate any complaint you make;
• to provide evidence in any dispute or anticipated dispute between you and us;
• to customise various aspects of our Websites to improve your experience;
• to host, maintain and otherwise support the operation of our Websites;
• for the detection and prevention of fraud and other criminal offences and for for risk
• for business and disaster recovery (e.g. to create back-ups);
• for document retention/storage;
• for database management;
• to protect our rights, property, and/or safety, our personnel and others; and
• to ensure the quality of the services we provide to our users.
We use a third-party service to help maintain the security and performance of our Websites. To deliver this service it processes the IP addresses of visitors to our Websites. In addition, we may use your Personal Information for further specific purposes made clear at the point of collection on pages of our Websites. If you choose not to provide Personal Information requested by us, we may not be able to provide you with the information and/or services you have requested or otherwise fulfil the purpose(s) for which we have asked for the Personal Information. Aside from this, your visit to our Websites will remain unaffected.
Legal basis for collection and use of Personal Information
We process your Personal Information in relation to your subscription to events, participation in a Survey, a Training, our Newsletter, your use of the contact forms in our Websites and in cases for recruitment purposes, where we have your consent to do so. In other cases, we process your personal information where we need to do so:
• to comply with our legal and regulatory obligations;
• for our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms in:
• responding to your queries;
• providing services and/or information to you; and
• our internal business purposes, as set out in section 2.8 above.
You can object to processing based on our legitimate interests at any time by contacting us at email@example.com See also in section YOUR RIGHTS AS A DATA SUBJECT “The right to object”.
If you would like to find out more about the legal basis on which we process your Personal Information for a particular purpose you can contact us at firstname.lastname@example.org.
Retention Of Personal Information
It is our policy to retain your Personal Information for the length of time required for the specific purpose or purposes for which it was collected. However, we may be obliged to store some Personal Information for a longer time, considering factors including:
• legal obligation(s) under applicable law to retain data for a certain period of time;
• statute of limitations under applicable law(s);
• (potential) disputes and
• guidelines issued by relevant data protection authorities.
We have strict data retention periods determined in our Internal rules for personal data
protection. If you would like to find out how long we keep your Personal Information for a
particular purpose you can contact us at email@example.com.
How And When Do We Share Information With Third Parties?
Some services that we provide require the involvement of third parties. We have carefully selected these third parties and taken steps to ensure that your Personal Information is adequately protected. Details about how we share Personal Information with third parties is set out below:
Our Websites use Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics works using cookies. Google Analytics cookies collect your IP address. We use the information collected by Google Analytics cookies to find out about how visitors use our Websites.
The IP address sent by your browser in connection with Google Analytics will not be combined by Google, with other data. If you so choose, you can opt out by turning off cookies in the preferences settings in your browser, or by downloading and installing the Google Analytics Opt-out Browser Add-on from http://tools.google.com/dlpage/gaoptout. However, please note that you may not then be able to make full use of all the Websites’ functions. When we would like to use your Personal Information for a new purpose, we will let you know about this first.
Third party service providers
We also share your Personal Information with our third-party service providers based in the European Economic Area (“EEA”) who we engage to provide support services in relation to our Websites for the purposes of hosting and maintaining our Websites; providing data storage; assisting us with database management, and in order to assist us with related tasks or processes.
We may also share your Personal Information with any other third party if we are under a duty to disclose or share your Personal Information in order to comply with any legal obligation, or to protect the rights, property and/or safety of ReBenefit Ltd, our personnel or others; or with any other third party for the purposes of acting in accordance with the requirements of a court, regulator or government agency, for example, complying with a search warrant or court order or acting in accordance with an applicable law or regulation.
Our Websites provide sharing buttons that you can click on in order to share content from our Websites on social media channels, e.g., Facebook. We do not use these buttons to share your Personal Information with social media providers. When you click on a sharing button the relevant social media provider will gather Personal Information directly from you. Please read the privacy notice of any social media provider with which you intend to share content before clicking on the corresponding sharing button.
If we (or our assets) are acquired by another company, whether by merger, acquisition, bankruptcy or otherwise, that company will receive all information gathered by us on the Websites. In this event, you will be notified via email and/or a prominent notice on our Websites, of any change in ownership, uses of your Personal Information, and choices you may have regarding your Personal Information.
Your Rights As A Data Subject
The following section explains your rights.
The right to be informed
The right of access
We can refuse to provide information where to do so may reveal Personal Information about
another person or would otherwise negatively impact another person’s rights.
The right to rectification
You can ask us to take reasonable measures to correct your Personal Information if it is
inaccurate or incomplete. E.g. if we have the wrong name or address for you.
The right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your Personal Information where there’s no compelling reason for us to keep using it or its use is unlawful. This is not a general right to erasure; there are exceptions, e.g. where have legal obligation to keep your Personal Information or we need to use your Personal Information in defence of a legal claim.
The right to restrict processing
You have the right to ‘block’ or suppress further use of your Personal Information when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your Personal Information, but may not use it further. We keep lists of people who have asked for further use of their Personal Information to be ‘blocked’ to make sure the restriction is respected in future.
The right to data portability
You have the right to obtain and reuse certain Personal Information for your own purposes across different organisations. The right to object You have the right to object to certain types of processing, on grounds relating to your particular situation, at any time insofar as that processing takes place for the purposes of legitimate interests pursued by us or by a third party.
We will be allowed to continue to process your Personal Information if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or we need this for the establishment, exercise or defence of legal claims.
The right to complain to a data protection authority You have the right to complain to a data protection authority about our collection and use of your Personal Information. Contact details for data protection authorities in the EEA, Switzerland and certain non-European countries (including the US and Canada) are available at http://ec.europa.eu/justice/article 29/structure/data-protection-authorities/index_en.htm.) Contact details of the Bulgarian data protection authority (CPDP) are available at https://www.cpdp.bg/en/index.php?p=pages&aid=6 and are as follows:
Our Websites are hosted on servers in the EEA. We have adopted and implemented a security standard ISO 27001. Information storage is on secure computers in a locked and certified information centre and information is encrypted wherever possible. We undergo periodic system testing and reviews of our security policies and procedures to ensure that our systems are secure and protected. We use extensive and sophisticated secure technology to protect your data and transmissions between you and us.
Transmission between browsers and our web server is implemented using Secure Sockets Layer (SSL)
technology. Although we have taken these reasonable and appropriate measures to ensure
that your Personal Information is delivered and disclosed only in accordance with your
instructions, as the transmission of information via the Internet is not completely secure we
cannot and do not guarantee the security of your information transmitted to our Websites
and we cannot and do not guarantee that the Personal Information you provide will not be
intercepted by others and decrypted.
To allow you to interact with other websites on which you may have accounts (such as Facebook and other social media sites) or join communities on such sites, we may provide links or embed third-party applications that allow you to login, post content or join communities from our websites. We may also provide you with general links to non-ReBenefit Ltd websites.
If you wish to request further information or exercise any of the above rights, or if you are unhappy with how we have handled your Personal Information, contact us here: firstname.lastname@example.org. Please provide as much information as possible to help us identify the information you are requesting, the action you want us to take and why you believe this action should be taken.
If you are not satisfied with our response to your complaint or believe our processing of your Personal Information does not comply with data protection law, you can make a complaint to the relevant EU data protection authority where you are located. The contact details for each EU data protection authority can be found here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm Contact details of the Bulgarian data protection authority (CPDP) are available at https://www.cpdp.bg/en/index.php?p=pages&aid=6 and are as follows.