Privacy Policy Bulgaroom

Personal Data Protection

Bulgaroom.com is registered as Personal Data Controller at the Commission for Personal Data Protection of Bulgaria with № 430549/17.08.2017. The Company is a holder of personal data and information processing license, which could connect with and could identify a certain person and which data and information is stored by the Agency through the services and the company’s activity. Personal data is processed under the terms of this Privacy Policy.

The Privacy Policy is applicable to all web site users – these who use the services provided by the Company without registration or via subscription, and those who are registered or subscribed for these services. The services provided by the Company are not intended to store any personal data for users under the age of 16.

What is personal data?

According to the terms of General Data Protection Regulation No 2016/679 (EU), personal data is described as:

“Any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

What personal data can Bulgaroom.com collect?

Bulgaroom.com stores: registration information; information necessary for contracts concluding; any information from the social media that the user agree to be shared with the Company; any information about the Company’s activity when the user apply to or operate with the Agency’s service.

a) Registration information is information that the users provide to register themselves for the Company’s service, to create an own profile, to subscribe for newsletter or to make a request. The registration information could include – name, e-mail address, telephone/mobile number, permanent address, country.

b) Information necessary for contracts concluding is such one which consists of identifying data and is used for certifying the identity of the user while concluding contract, and this information could include – three names, PIN, details from ID card, correspondence address and permanent address, as well as certain categories of specific data, for example marital status.

c) Information from social media. If the users access a Company’s service through the service of a social network or if they connect a Company’s service to the service of such media/network, the Company could store also account information or user’s name connected with this service, every information or content shared between the Agency and the social media after the agreement of the user, including a profile picture, e-mail address, as well as other public data.

d) Activity information. When users access request with the services of the Company, we could collect data about those requests. "Cookies" and other similar technologies, could be used for collecting and saving information about the used company's services from your side, such as: pages you visited from our website, content you have accessed, search requests, advertisements you've seen, which information could contains: IP address, web browser type, device type data. For more information please visit our Cookies Policy.

Bulgaroom.com doesn’t process with personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, data concerning health or data concerning judicial records.

Connected services

The Company’s services may be connected with links to other websites owned by unrelated companies and may contain advertisement or offer content, functionality or apps created and supported by unrelated companies . The contents of these websites are not related to Bulgaroom.com  and we are not responsible for their contents.

How does Bulgaroom.com use your personal data?

The personal data the Agency collect from and for the users is used for service provision by assessment, analysis and improvement of these services according to the expectations and interests of the users; to increase subjects’ satisfaction with the use of the Company’s services by providing appropriate and interesting content; to offer with the clients’ agreement a qualifying client service, to communicate with the clients to answer their requests; to send offers, promotions and other marketing communication (on e-mail, SMS, by phone call, chat or social network), connected with the provided services and products in the real estate business by the Company and other related entities and/or partners including companies under the brand of Bulgaroom.com; after your prior agreement the Agency shall send you electronic newsletters according to you interests.

Bulgaroom.COM could use for any purpose or to share it with third party’s anonymous information or information that doesn’t allow the direct or indirect identification of the user as a certain person.

Why do we use your personal data?

Personal data processing is necessary in regard with the provided services; in connection with the applicable law regarding the Bulgaroom.com’s obligation to store such data; concerning the economic activity of the Agency on the grounds of the legal interests of the Company and its contractors, as the data processing is according to a strictly prescribed order. Each user has the right to withdraw his/her agreement for personal data processing by sending a message to the following e-mail address: gdpr@bulgaroom.com.

How do we process your personal data?

Personal data is handled both automatically and manually and it's protected via appropriate security measures, taking into account the technical progress, implementation costs as well as the type, purpose and the scope of the processing. The Company establishes appropriate administrative, technical, staff and physical measures for protecting personal data which contains, from loss, stealing, unauthorized use, disclosure or modification.

Who has access to your personal data?

The Agency could share personal data only for the goals of this Privacy Policy with the following categories of recipients on the territory of the European Union or out of it according to and in regard with the regulation under the terms of this section. a) third parties providing services which process data or are obliged to process it when this is required by the existing legislation, providers of services that support or maintain the Company’s services (such as IT specialists, experts, consultants, lawyers); b) related entities in the capacity of controllers or personal data processors; c) competent authorities.

Do we transfer your personal data abroad?

Any personal data shall not be exported without the informed agreement of the user.

What are your rights in respect of your personal data?

At any time, each user has the right to: - to receive a confirmation if their data exists or not, to be informed about the content and the source, as well as to check if the personal data is true and to claim for correction, actualization or change; - to claim for deletion, anonymization or limitation of the personal data processing if this data is processed in breach of the legislation; - to make an objection against the personal data processing on legal basis. The user could send the request on the address below. The request should contains an e-mail, name, address, telephone number and to point out exactly what information want to get, change, update, hide or delete. The data subject could withdraw his or her consent at any time in terms of: - receiving e-mails from us. If the data subject does not want to receive any marketing and advertisement emails in future, he or she could reject receiving such letters from us following the instructions in our mails or to send a request on gdpr@bulgaroom.com; - sharing personal information by the Agency with our relates entities for their marketing purposes. If a user prefers in the future the Company not to share their personal data with our relates entities for the purpose of direct marketing, they could reject such sharing by sending a request to the following e-mail address: gdpr@bulgaroom.com.

Periods of personal data storage

Bulgaroom.com shall keep personal data for a period of time necessary for the performance of the process purposes in the way it is described on this Privacy Policy. At the end of the period all personal data shall be removed, anonymised or aggregated.

Privacy policy updates

Bulgaroom.com has the right to make changes or to update its Privacy Policy for any reason (not only but including: legislation changes, explanations, indications, decisions, statements and orders connected with the existing legislation). All changes in this Privacy Policy shall be preliminary declared by publishing them on the website of the Company.

Contacts

If you have any questions about the Privacy Policy, please contact us by sending a request to the following e-mail address: gdpr@bulgaroom.com.
 

Authorization through Google allows users to log in using existing Google accounts. This is a convenient way for new users to register on a third-party site instead of registering a new account with another username and password.

Authorization process via Google on the site:

1. On the login page, users can choose one of two login options. The first step is to provide a username and password if they already have an account on the site. And the other is to log in to the site using your existing Google account.
2. When users click the "Sign in with Google" button, the authorization flow starts through Google and it takes users to the Google site.
3. Users log in with their Google credentials, after which they will be redirected to the confirmation page.
4. On the confirmation page, users will be asked for permission to transfer their Google account information to a third-party site.
5. Once users are allowed to share their information with a third-party site, they will be redirected to the third-party site from where they initiated the Google login flow.

Authorization via Google ensures the security of your personal data, as authentication is performed for each service separately. Even if an attacker breaks into one of the accounts, the rest will be safe.