Information about the Data Controller: "4 AGRA" EOOD is a company registered under the Commercial Act of the Republic of Bulgaria with a Unified Identification Code (EIK) 202591205, located at 4 Dr. Dobrev Str., Floor 6, Plovdiv, Bulgaria. You can contact them via email at [email protected] or by phone at 088 967 8333.
Bases and Purposes for Using Your Personal Data 4 AGRA processes your personal data on the following grounds:
- For the purpose of providing access to the functionalities of AGRA.
- With the explicit consent of the users when applicable in connection with AGRA's management.
- As required by law.
In the following paragraphs, you will find detailed information regarding the processing of your personal data based on the grounds on which they are processed.
Processing Personal Data to Provide Access to AGRA Purposes of processing:
- Establishing your identity.
- Registration and access procedure for user profiles for registered users in AGRA.
- Storing correspondence related to the use of AGRA.
Data processed on this basis include:
- Contact information: address (for business users or when issuing primary and derivative accounting documents), email, phone number.
- Identification data: two names.
- Correspondence related to overall service, including email, letters, information regarding requests for issue resolution, complaints, requests, feedback received from you.
- IP address when visiting our website.
The processing of the mentioned personal data is mandatory for us to provide access to AGRA in accordance with the terms and conditions of use. Without providing us with the above-mentioned data, we would not be able to fulfill our obligations under the contract. Data processed on this basis are not shared with third parties. They are retained for the period of maintaining a user profile on your part and for a period of 2 years after the termination of the same.
Processing Personal Data in Compliance with Regulatory Requirements It is possible that the law may require us to process your personal data. In such cases, we are obliged to carry out the processing, such as obligations under the Anti-Money Laundering Act, obligations regarding distance selling, selling outside commercial premises, as provided in the Consumer Protection Act, providing information to the Commission for Consumer Protection or third parties, as provided in the Consumer Protection Act, providing information to the Commission for Personal Data Protection in connection with obligations provided in the regulatory framework for personal data protection, obligations provided in the Accounting Act and the Tax and Social Security Procedure Code and other related regulatory acts in connection with keeping legal accounting, providing information to the court and third parties within the framework of court proceedings, in accordance with the requirements of applicable regulations. These data are collected only to the extent necessary to comply with the legally established rules and are erased when the need for their storage expires.
Processing Data with Explicit Consent Data that we process only with your explicit consent are those for which this circumstance is indicated on AGRA. Your consent is always provided with explicit action and can be withdrawn at any time. Data processed with your explicit consent include data for the purpose of direct marketing, if applicable when using AGRA. The data collected on this basis are deleted upon your request or 12 months after their initial collection.
Processing of Anonymized Data We process your data for statistical purposes, meaning for analyses in which the results are only aggregated, and therefore the data is anonymous. Identifying a specific individual from this information is impossible. Your data can also be anonymized. Anonymization represents an alternative to the deletion of data. In anonymization, all personally identifiable elements/elements that allow your identification are irreversibly erased. Anonymized data does not have a regulatory requirement for deletion since they do not constitute personal data.
For the processing of your personal data, we use partially automated algorithms and methods to continually improve our products and services for the best possible adaptation to your needs. This process is called profiling.
Protection of Personal Data To ensure adequate protection of the company's data and its users, we apply all necessary organizational and technical measures as provided in the Personal Data Protection Act. To ensure maximum security in processing, transmitting, and storing your data, we may use additional protection mechanisms such as encryption, pseudonymization, etc.
User Rights Every user of AGRA enjoys all rights to the protection of personal data under Bulgarian legislation and European Union law. Each user has the right to:
- Information (regarding the processing of their data by the data controller).
- Access to their own personal data.
- Correction (if the data is inaccurate).
- Deletion of personal data ("right to be forgotten").
- Restriction of processing by the data controller or data processor.
- Portability of personal data between different data controllers.
- Objection to the processing of their personal data.
- The data subject also has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects the data subject.
- The right to protection through judicial or administrative action in case the data subject's rights have been violated.