privacy policy

This Privacy Policy summarizes the main points in relation to the protection of your personal data. If you need more information about specific processes, you can contact us through the contacts listed below.
‍
Being administrator of personal data, Mundus Services AD declares that it meets all the requirements of Regulation (EU) 2016/679, collecting personal data only to the extent necessary for the provision of services, and keeps them responsible, applying all technical and organizational measures for the protection of personal data, which are prescribed by law or other regulatory act at national and European level.

Information about the Personal Data Controller

If you need any further information, you can contact us via the contacts listed below:

• “Mundus Services” AD
• UIC: 203855825
• Sofia 1528, Blvd. “Iskarsko shosse” № 7, Shopping Center Europe, building 8

Definitions

Personal data means any information relating to a natural person who is identified or can be identified, directly or indirectly, by an identification number or by one or more specific signs.
‍
‍Processing of personal data is any operation or set of operations that Mundus Services AD carries out with personal data or a set of personal data by automatic or other means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consulting, use, disclosure by transmission, dissemination or other means by which the data becomes available, arranged or combined, destruction, erasure or destruction.
‍
‍Administrator of personal data/The Controller is Mundus Services AD as well as any other natural or legal person, public body, agency or other entity, which alone or jointly with others determines the purposes and means for the processing of personal data.

Purposes and principles for the collection, processing and storage of your personal data

Mundus Services AD collects and processes the personal data that you provide in connection with the use of our services and for the conclusion of a contract with the company, as well as for the following purposes:

• Individualization of a party to the contract;
• Accounting purposes;
• Statistical purposes;
• Protection of information security;
• Marketing and advertising;
• Ensuring the performance of the contract for the provision of the relevant service;
• Sending informational messages, announcements of changes in the service, recommendations for improving the use of the platform, new and updated conditions;
• Improve and individualize the service by offering suitable renewal offers, events and other products and services that may be of interest to you;
• Providing technical support;

Mundus Services AD adheres to the following principles in the processing of your personal data:

• Legality, good faith and transparency;
• Limitation of the purposes of processing;
• Relevance to the purposes of the processing and minimization of the data collected;
• Protection of information security;
• Accuracy and timeliness of data;
• Limitation of storage with a view to achieving the objectives;
• Integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data;

For the purposes of executing its contracts, Mundus Services AD may also use subcontractors who assume obligations for adequate security measures regarding the protection of personal data.
‍
In the case of selection of subcontractors, Mundus Services AD does not share or send personal data, committing the selected partner to provide sufficient guarantees to protect the rights and legitimate interests of the data subjects in accordance with the requirements of Regulation (EU) 2016/679, if data transfer takes place.

Mundus Services AD does not collect or process personal data relating to the following:

• Disclosure of racial or ethnic origin;
• Disclosure of political, religious or philosophical beliefs, or membership in trade union organizations;
• Genetic and biometric data, health data or data on sex life or sexual orientation;

Personal data collected by Mundus Services AD through this website (web portal) for you

In order to provide you with effective access to the web portal and its services, Mundus Services AD collects the following information about you:

• Name, surname, e-mail (address), telephone, when filling in the various forms placed on our website, including the form for submitting requests, the contact form and sending opinions and/or comments;
• Name, surname, telephone, e-mail, city, address, when concluding contracts and sending requests for offers between you and Mundus Services AD;
• When visiting the website without registration — data on the IP address used, visits to the website, searches, location, etc.

Basis for collecting, processing and storing your personal data

• Legal basis — the processing of personal data is necessary to fulfill a legally established obligation. Such obligations are, for example: keeping of accounting documents in accordance with the Law on Accounting, obligations arising from the Law on Measures against Money Laundering, as well as all other regulatory obligations of the administrator;
• Explicit written consent - the natural person by means of a written declaration expresses his express consent to the processing of personal data, as well as for what purposes and for what period - Article 6, paragraph 1, letter “a” of Regulation (EU) 2016/679.
• Contractual basis — Mundus Services AD processes your personal data on a contractual basis in order to provide information and/or to fulfill its contractual obligations under contracts for the provision of services concluded with you — Article 6, paragraph 1 b. (b) of Regulation (EU) 2016/679;
• On the basis of Article 6, paragraph 1, b. (f) of Regulation (EU) 2016/679, Mundus Services AD may also process personal data if there is a legal (legitimate) interest, except when these interests are overridden by the interests of the natural person to whom the data relate. This is the case when we collect data about your IP address when you visit our website.

Period of storage of your personal data

Depending on the basis on which we process your personal data, the storage period of personal data is different.

• Your personal data is stored by us for a period of 5 years from the termination of the contractual basis if we process the personal data for the performance of contractual obligations to you. After the expiration of this period and in the event that there is no legal basis for continuing the storage of your personal data, the information about you is destroyed.
• The controller stores the personal data that it is necessary to keep under the applicable legislation for the respective stipulated period, which may exceed the duration of the existence of your registration or the term of the respective contract.
• The storage period in cases of processing personal data on the basis of explicit consent is until the withdrawal of your consent or after reaching the purposes for which your personal data were processed.

The administrator will inform you if the period of storage of the data needs to be extended in order to fulfill the objectives, performance of the contract, in view of legitimate interests of Mundus Services AD or otherwise.

Transfer of your personal data for processing

Mundus Services AD may, at its discretion, transfer part or all of your personal data to processors for the fulfillment of the processing purposes in compliance with the requirements of Regulation (EU) 2016/679. In order to fulfill obligations under contractual and/or pre-contractual relations with you, Mundus Services AD may disclose your personal data to the following persons:

• Companies providing courier services;
• The company that provides hosting services related to this website;
• Third parties performing services in connection with contractual obligations to you or on the basis of a legal basis for processing;
• At the request of competent authorities in accordance with the current legislation of the Republic of Bulgaria and the European Union;
• The controller has the right to provide your personal data to related companies that are positioned on the territory of the Republic of Bulgaria, provided that there is a legal interest related to the processing of your personal data for administrative purposes and needs.

Mundus Services AD will notify you in case of intention to transfer part or all of your personal data to third countries or international organizations.

Rights in the collection, processing and storage of your personal data

Withdrawal of consent to the processing of your personal data

If you do not want all or part of your personal data to continue to be processed by Mundus Services AD for specific or all processing purposes, you may at any time withdraw your consent to processing by means of a free-text request.

The controller may ask you to verify your identity and identity with the data subject.

Right of access

You have the right to request and receive from Mundus Services AD confirmation whether personal data related to you are being processed.
You have the right to access the data relating to you as well as the information relating to the collection, processing and storage of your personal data.
Mundus Services AD provides you upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.
Providing access to the data is free of charge, but Mundus Services AD reserves the right to impose an administrative fee, in case of repetition or excessive requests.

Right to rectification or replenishment

You can correct or complete inaccurate or incomplete personal data relating to you directly through your profile on the website or by making a request to Mundus Services AD.

Right to erasure (“right to be forgotten”)

You have the right to request the Controller to delete the personal data related to you, and Mundus Services AD has the obligation to delete them without undue delay, when any of the following reasons exist:

• Personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
• You object to the processing of your personal data, including for direct marketing purposes, and there are no overriding legitimate grounds for the processing;
• Personal data has been processed unlawfully;
• Personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to the Controller;
• Personal data were collected in connection with the provision of information society services.

The controller is not obliged to delete personal data if it stores and processes it:

• To exercise the right to freedom of expression and the right to information;
• To comply with a legal obligation requiring processing provided for in EU or Member State law applicable to the Controller or for the performance of a task in the public interest or in the exercise of official powers conferred on it;
• For reasons of public interest in the field of public health;
• For archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
• For the establishment, exercise or defence of legal claims.

In order to exercise your right to “be forgotten”, you should submit a request electronically or in writing in paper form and send it to “Mundus Services” AD, as well as verify your identity and identity with the person to whom the data relate before..., by presenting your identity card on the spot for identification purposes and if necessary enter your login details in the profile of the person to whom the data relate, in front of an employee of Mundus Services AD.

The controller does not delete the data for which he has a legal obligation to store, including for protection in connection with legal claims made against him or proof of his rights.

Right to Restriction

You have the right to request the Controller to restrict the processing of your data when:

• Challenge the accuracy of the personal data for a period that allows the Controller to verify the accuracy of the personal data;
• The processing is unlawful, but you do not want your personal data to be deleted, only their use to be restricted;
• The controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defense of your legal claims;
• You have objected to the processing pending verification whether Mundus Services AD's legitimate grounds override your interests.

Right of portability

You can at any time download the data that is stored and processed for you in connection with the use of the services of Mundus Services AD, directly through your account or by e-mail request.

You can ask Mundus Services AD to directly transfer your personal data to an administrator specified by you, when this is technically feasible.

Right to receive information

You can ask the Controller to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested have been disclosed. Mundus Services AD may refuse to provide this information if this would be impossible or requires disproportionate effort.

Right to object

You may object at any time to the processing by the Controller of personal data concerning you, including if they are processed for profiling or direct marketing purposes.

Rights in the event of a breach of the security of your personal data

If Mundus Services AD detects a breach of the security of your personal data, which may pose a high risk to your rights, we inform you without undue delay about the breach, as well as about the measures that have been taken or are to be taken.
‍
Mundus Services AD is not obliged to notify you if:

• has taken appropriate technical and organisational protection measures with regard to the data affected by the security breach;
• has subsequently taken measures to ensure that the breach does not result in a high risk to your rights;
• notification would require a disproportionate effort.

In the event of a violation of your rights under the aforementioned or applicable data protection legislation, you have the right to lodge a complaint with the Commission for Personal Data Protection as follows:

• Commission for Personal Data Protection
• gr. Sofia 1592, blvd. “Prof. Tsvetan Lazarov” № 2
• phone number: 02 915 3518
  E-mail: kzld@government.bg, kzld@cpdp.bg
  Web site: www.cpdp.bg

Consequences of refusal to provide personal data

In order to provide products and services by us, as well as entering into contractual legal relations, we collect and process your personal data. We also process your personal data in order to comply with legal obligations.

In case of refusal to voluntarily provide the requested personal data by you, Mundus Services AD will not be able to provide its products and services, respectively to conclude a contract/continue the performance of an already concluded contract.

Changes to the Privacy Policy

In order to reflect relevant changes in legislation, it is possible to update and amend our Privacy Policy, so we recommend that all our visitors check for updates in a timely manner and, where necessary, review the latest version of the document.

Intellectual property rights

The website https://www.mundus.bg/ is an exclusive intellectual property of Mundus Services AD. All content of the website (e.g. information, data, trademarks, logos, photographs, graphics, drawings, diagrams and any other distinctive features in general of all digital files) and the services of the website are defined as the intellectual property of Mundus Services AD, and are protected by Bulgarian, Community and international copyright laws. intellectual and industrial property.

No part of the aforementioned content of the website may be sold, copied, reproduced, modified, transmitted, republished and/or distributed in any way or by any means, in whole or in parts, unless Mundus Services AD has agreed in writing to this effect.

Limitation of liability

The Company is not responsible for damages arising as a result of access or inability to access the website of Mundus Services AD, as well as for missed benefits in connection with access or inability to access or information received from the site.