Privacy Policy

“Vector Construct” Ltd. is a company registered in the Commercial Register of the Registry Agency with UIC: 131267493, email: office@vectorconstruct.com, and phone: +359 886 08 65 64.

Grounds and Purposes for Processing Your Personal Data

We process your personal data on the following grounds:

The Terms of Use of the Website;
Explicit consent from you – the purpose is specified for each particular case;
A legal obligation.

In the following paragraphs, you will find detailed information about the processing of your personal data depending on the grounds under which we process it.

For Contract Execution

We process your personal data for the purposes of using the website in accordance with the rules of the terms and conditions.

Purposes of processing (when applicable):

Identifying your identity;
Providing the functionalities of our website.

On this basis, we process only personal data related to the user profile you have created.

Data collected on this basis is deleted 2 years after the termination of the contractual relationship, regardless of whether it is due to the expiration of the contract, cancellation, or other grounds.

Based on Your Consent

We process your personal data on this basis only after receiving your explicit, unambiguous, and voluntary consent. We will not impose any adverse consequences on you if you refuse the processing of your personal data.

Consent is a separate basis for processing your personal data, and the purpose of the processing is specified therein. It does not overlap with the purposes listed in this policy. If you provide us with the appropriate consent, until its withdrawal or the termination of any contractual relationships with you, we prepare personalized offers for products/services and conduct detailed analyses of your primary personal data.

Data processed on this basis:
On this basis, we may process personal data for direct marketing purposes, including website usage data and social media profile data.

Providing Data to Third Parties:
On this basis, we may share your data with marketing agencies, Facebook, Google, or similar entities.

Withdrawal of Consent

Provided consents can be withdrawn at any time. The withdrawal of consent does not affect the fulfillment of contractual obligations. If you withdraw your consent for the processing of personal data for any or all of the purposes described above, we will not use your personal data for the specified purposes. The withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

To withdraw your consent, you only need to use our website or contact us directly.

Data Deletion

Data collected on this basis is deleted upon your request or 12 months after its initial collection.

How We Protect Your Personal Data

To ensure the adequate protection of the company’s and our clients’ data, we apply all necessary organizational and technical measures, as required by the Personal Data Protection Act.

The company has established rules to prevent misuse and breaches of security, which support the processes of safeguarding and securing your data.

For maximum security during processing, transfer, and storage, we may use additional protection mechanisms such as encryption, pseudonymization, etc.

User Rights

Every user of the site has all rights to personal data protection under Bulgarian legislation and European Union law.

Users can exercise their rights by sending an email to us.

Every user has the right to:

Be informed (regarding the processing of their personal data by the administrator);
Access their own personal data;
Rectify data (if it is inaccurate);
Delete personal data (the right “to be forgotten”);
Restrict processing by the administrator or data processor;
Data portability between separate administrators;
Object to the processing of their personal data;
Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or significantly affects them;
Seek judicial or administrative protection if their data rights have been violated.

Deletion Conditions

A user may request deletion if one of the following conditions is met:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
The user withdraws their consent, on which the processing is based, and there is no other legal basis for processing;
The user objects to the processing, and there are no overriding legitimate grounds for the processing;
The personal data was unlawfully processed;
The personal data must be erased to comply with a legal obligation under Union or Member State law applicable to the administrator;
The personal data was collected in relation to the offer of information society services to children, and the consent was given by the person holding parental responsibility for the child.

Data Processing Restriction

Users have the right to restrict the processing of their personal data when:

They contest the accuracy of the personal data. In this case, the restriction applies for a period that allows the administrator to verify the accuracy of the personal data;
The processing is unlawful, but the user does not want the personal data to be deleted and instead requests a restriction of its use;
The administrator no longer needs the personal data for processing purposes, but the user requires it for establishing, exercising, or defending legal claims;
They object to the processing pending verification of whether the legitimate grounds of the administrator override those of the user.

Data Portability

The data subject has the right to receive personal data concerning them in a structured, commonly used, and machine-readable format and has the right to transmit that data to another administrator without hindrance from the administrator to whom the personal data has been provided when processing is based on consent or a contractual obligation and is carried out by automated means.

Right to Object

Users have the right to object to the processing of their personal data by the administrator. The data administrator is required to cease processing unless it demonstrates compelling legal grounds for processing that override the user’s interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

Complaint to Supervisory Authority

Every user has the right to lodge a complaint against unlawful processing of their personal data with the Commission for Personal Data Protection or a competent court.

This privacy policy was prepared with the assistance of https://obshti-uslovia.com.