1. General provisions

This Privacy Policy is intended to provide information on the way in which Welde Bulgaria AD, UIC: BG820194517, with registered seat and address of management: Troyan, Velchevski Quarter, Bulgaria (the “Company”), processes the personal data of the visitors to its website.

The Policy has been drawn up in accordance with the requirements of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation – GDPR), the Bulgarian Personal Data Protection Act and the applicable Bulgarian legislation.

The Company strives to ensure lawful, fair and transparent processing of personal data by applying appropriate technical and organisational measures for their protection.

2. Data controller

The controller of the personal data processed through the website is:

Welde Bulgaria AD
UIC: BG820194517
Address: Troyan, Velchevski Quarter, Bulgaria

For all questions relating to the processing and protection of personal data, you may contact the Company at the email address indicated on the website.

3. Key principles of personal data processing

Welde Bulgaria AD processes personal data in compliance with the following principles:

  • lawfulness, fairness and transparency;
  • purpose limitation – data are collected for specified, explicit and legitimate purposes;
  • data minimisation – only the necessary data are processed;
  • accuracy – keeping the data up to date where necessary;
  • storage limitation – data are stored only for the period required;
  • integrity and confidentiality – appropriate security measures are applied.

4. Categories of personal data processed

Depending on the way you use the website, the Company may process the following categories of personal data:

4.1. Data provided through the contact form

When you use the contact form, the following data may be processed:

  • name;
  • email address;
  • telephone number, if provided voluntarily;
  • the content of the enquiry sent;
  • other data you have provided voluntarily.

4.2. Data provided when applying for a job

When the job application form is used, the Company may process:

  • name;
  • contact details;
  • curriculum vitae (CV);
  • cover letter;
  • attached documents;
  • data on education, qualifications, professional experience and skills;
  • other information provided voluntarily by the applicant.

Applicants should avoid providing special categories of personal data, except where this is necessary and permissible under the applicable legislation.

5. Purposes and legal grounds for the processing

5.1. Handling enquiries submitted through the contact form

The data provided through the contact form are processed for the purposes of:

  • receiving and reviewing the enquiries submitted;
  • providing a reply;
  • conducting any subsequent communication.

Legal grounds:

  • taking steps at the request of the data subject prior to entering into a potential contract;
  • the legitimate interest of the Company in conducting business communication.

5.2. Selection of job applicants

The data provided when applying are processed for the purposes of:

  • reviewing applications;
  • carrying out selection procedures;
  • communicating with applicants;
  • assessing professional suitability for a specific position.

Legal ground:

  • taking steps at the request of the applicant prior to entering into a potential employment contract.

5.3. Retention of applications for future positions

Where the applicant has expressly stated such a wish, their documents may be retained for consideration in connection with future suitable vacancies.

Legal ground:

  • the consent of the applicant.

6. Recipients of personal data

The Company may disclose personal data to:

  • providers of services relating to the technical maintenance of the website;
  • hosting and information service providers;
  • persons processing data on behalf of the Company under appropriate contractual arrangements;
  • competent state authorities, where required by law.

Personal data are not sold and are not disclosed to third parties for advertising or marketing purposes.

7. Retention periods

The Company retains personal data for periods consistent with the purposes of the processing and the applicable legislation.

Data from the contact forms are retained for the period necessary to handle the enquiry and any subsequent communication.

The data of job applicants are retained:

  • until the completion of the specific selection procedure;
  • for a period of up to 12 months after the completion of the procedure, where the applicant has given consent to be considered for future vacancies.

Upon expiry of the applicable period, the data are deleted or anonymised in an appropriate manner.

8. Cookies and external services

The website may use strictly necessary cookies, as well as third-party services where this is required for the proper functioning of the site.

When an embedded map is used, the provider of the mapping service may process certain technical information necessary for the provision of the service.

Detailed information on the cookies used and on managing your preferences is available in the Cookie Policy of the website.

9. Information security

Welde Bulgaria AD applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or unauthorised disclosure.

10. Rights of data subjects

Subject to the conditions and limitations of the applicable legislation, you have the right:

  • of access to your personal data;
  • to rectification of inaccurate or incomplete data;
  • to erasure of your personal data;
  • to restriction of processing;
  • to object to the processing;
  • to data portability, where the statutory conditions are met;
  • to withdraw your consent, where the processing is based on consent.

11. Exercising your rights

To exercise your rights, you may send a request to:

sales@welde.bg

The Company may request additional information in order to verify the identity of the applicant, with a view to protecting against the unlawful disclosure of information.

12. Complaints to a supervisory authority

If you consider that the processing of your personal data infringes the applicable legislation, you have the right to lodge a complaint with:

The Commission for Personal Data Protection
(the supervisory authority for personal data protection in the Republic of Bulgaria)

13. Changes to the Privacy Policy

Welde Bulgaria AD may update this Policy in the event of changes in the legislation, in the Company’s activities or in the functionalities of the website.

The current version of the Policy will be published on the website.

14. Contact

For questions regarding this Privacy Policy:

Welde Bulgaria AD
Troyan, Velchevski Quarter, Bulgaria
E-mail: sales@welde.bg