Privacy Notice in relation to personal data processing by “PLIVDIV PLAZA“ EAD with UIC 160074440

This Privacy Notice has the aim to provide you information about what kind of personal data  “PLIVDIV PLAZA“ EAD with UIC 160074440 processes in relation to concluding, servicing and execution of lease contracts of commercial areas, any other relations relevant to maintenance, marketing and management of PLOVDIV PLAZA Shopping center, as well as the video surveillance, performed at the shopping center.

If you have any questions in relation to this, please contact us on e-mail: info@plovdivplaza.bg

or postal address: Plovdiv, 3 Dr. Georgi Stranski St.

If you want to confirm that “PLIVDIV PLAZA “ EAD with UIC 160074440  can process your personal data, or to get an access to the personal data that could be stored in relation to you, please contact us via e-mail: info@plovdivplaza.bg

 

INTRODUCTION

“PLIVDIV PLAZA “ EAD with UIC 160074440, is the owner of PLOVDIV PLAZA Shopping center (hereinafter referred to as „the shopping center“ or „PLOVDIV PLAZA”).

PLOVDIV PLAZA is the largest and the most modern shopping center in Plovdiv with its unique design, architecture and over 35 000 square meters of commercial space.

In order to realize its functioning, management and development of the shopping center, PLOVDIV PLAZA   processes personal data of the following categories of data subjects:

  • PHYSICAL PERSONS, WHO PARTICIPATE IN GAMES, PROMOTIONS AND OTHER MARKETING CAMPAIGNS, ORGANIZED BY PLOVDIV PLAZA
  • PHYSICAL PERSONS, SUBSCRIBED FOR DIRECT MARKETING MESSAGES AND BULLETINS OF PLOVDIV PLAZA
  • VISITORS OF THE SHOPPING CENTER – IN RELATION TO THE VIDEO SURVEILLANCE CARRIED OUT ON THE TERRITORY OF PLOVDIV PLAZA AND ITS PARKING SPACE
  • LEGAL AND/OR AUTHORIZED REPRESENTATIVES AND THE CONTACT PERSONS OF THE LESSEES OF THE COMMERCIAL AREAS IN PLOVDIV PLAZA
  • LEGAL AND/OR AUTHORIZED REPRESENTATIVES AND THE CONTACT PERSONS OF ANY CORPORATE ORGANIZATION THAT HAS CONTRACTUAL RELATIONS WITH PLOVDIV PLAZA

HOW, WHY AND WHAT ARE THE PERIODS OF PROCESSING YOUR PERSONAL DATA

The following information concerns both, data subjects, who have provided their personal data to PLOVDIV PLAZA, as well as those, whose personal data have been provided to PLOVDIV PLAZA by third persons (for example, their employers).

PLOVDIV PLAZA EAD with UIC 160074440, with headquarters and address of management: : the town of Plovdiv, 3 Dr. Georgi Stranski St, the Republic of Bulgaria, represented by Gerogios Konstantinu (hereinafter referred to as PLOVDIV PLAZA), in its capacity of personal data administrator, processes personal data, as follows:

  • PHYSICAL PERSONS, WHO PARTICIPATE IN GAMES, PROMOTIONS AND OTHER MARKETING CAMPAIGNS, ORGANIZED BY PLOVDIV PLAZA

PLOVDIV PLAZA processes the following categories of personal data for the persons, visitors of PLOVDIV PLAZA shopping center and/or the Facebook page of PLOVDIV PLAZA, who participate in games, promotions and other marketing campaigns, organized by the company and are potential clients of the lessees of PLOVDIV PLAZA:

  • data for physical identity: name and surname; gender; e-mail; telephone;
  • data, in relation to a participation in a game: data, containing in the photos and/or video files, comments and other publications in the social media (for more information concerning data that we processes in relation to the Facebook page of PLOVDIV PLAZA, please click here).

Purpose, grounds and period of possessing

We process the above mentioned data only for the following purposes:

  • games and events administration, including making a contact with the winning participants and providing the awards, fulfillment of the mandatory accounting and taxation;
  • we can also (but not necessarily) use the above mentioned personal data for direct marketing of any activities, initiatives and campaigns of PLOVDIV PLAZA and its partners, including, but not only to its lessees. This purpose for processing your data also includes sending bulletins and different advertising messages about our activities.

PLOVDIV PLAZA processes these personal data on the grounds of the legitimate interest to promote and advertise activities, carried out in the shopping center, as well as on the basis of the contractual relation of PLOVDIV PLAZA to provide the awards of the winning participants.

The period of possessing your personal data for these purposes is as follows:

  • for the purposes of administration of the respective campaign/event, the data shall be processed for the maximum period of 7 days after expiration of the period of receiving the awards from the game (including on paper);
  • for the purposes of direct marketing, the data are being included into marketing data bases and the period for their storage is up to 6 years after finishing the respective marketing campaign, in which the data were collected. Information about the way you can exercise your right of objection against processing for the purposes of direct marketing, you can find in the section Your Rights;
  • data, containing in documents, necessary for the execution of contractual relations – up to 6 years after termination of the respective contract or until completion of the procedures, related to possible disputes;
  • data, containing into the accounting records and financial reports and/or containing in documents, subject of tax audits and necessary for accounting purposes – 11 years.

 

PHYSICAL PERSONS, SUBSCRIBED FOR DIRECT MARKETING MESSAGES AND BULLETINS OF PLOVDIV PLAZA

PLOVDIV PLAZA processes the following personal data categories of the visitors of the shopping center and other persons, who show interest towards marketing activities, organized by PLOVDIV PLAZA and whose data are included in our marketing data base:

  • data for physical identity: given name, father’s name and surname, e-mail, telephone number, signature, gender.

Purpose, grounds and period of processing

We use the above mentioned data only for the following purposes:

  • direct marketing of any activities, initiatives and campaigns of PLOVDIV PLAZA and its partners, including, but not limited to its lessees. This aim for processing your data also includes sending bulletins and different advertising messages of our activities.

PLOVDIV PLAZA processes these personal data on the grounds of its legitimate interest to advertise and promote the activities, carried out at the shopping center.

The period of processing your personal data for these purposes is 10 years after the end of the respective marketing campaign, in which the data or the request for your subscription have been received.

You can find information about how you can exercises your right of objection in the Section Your rights, described below. 

  • VISITORS of the SHOPPING CENTER– VIDEO SURVAILLANCE

PLOVDIV PLAZA processes the following personal data categories of the shopping center visitors and the parking space to it:

  • for physical identity: video images
  • others: data about the vehicles registration numbers.

 

Purpose, grounds and period of processing

We use the above mentioned data only for the following purposes:

  • ensuring the security on the territory of the PLOVDIV PLAZA shopping center and its parking;
  • observing the parking rules for the vehicles on PLOVDIV PLAZA parking lot;
  • protection at setting up legal claims and actions.

PLOVDIV PLAZA processes these personal data on the grounds of its legitimate interest to provide higher level of protection and security on the territory of the shopping center, as well as with a view to the fulfillment and control of the contractual relations performance in relation to using the shopping center parking.

The period of processing your personal data for these purposes is as follows:

  • data, containing in the total video recordings: up to 1 month;
  • video recordings, containing only vehicles registration numbers – up to 1 year;
  • data, containing in the video recording, in which an accident had occurred: up to 6 years or until competition of the proceedings, related to possible disputes,

You have the right to object to the processing, which is fulfilled on the grounds of PLOVDIV PLAZA legitimate interest to provide higher level of protection and security of the shopping center territory. More information about how you can exercise this right could be found in the section Your rights, described below.

 

  • LEGAL AND/OR AUTHORIZED REPRESENTATIVES AND CONTACT PERSONS OF THE LESSEES OF ARAS IN PLOVDIV PLAZA
  • LEGAL AND/OR AUTHORIZED REPRESENTATIVES AND CONTACT PERSONS OF ANY CORPORATIVE ORGANIZATION THAT HAS CONTRACTUAL RELATIONS WITH PLOVDIV PLAZA

(together referred to as „Contracting parties“)

PLOVDIV PLAZA processes the following personal data categories of its contracting parties:

  • minimal personal data quantity, necessary for signing the respective contact– names and personal number. Data of the personal card are used only if the contract shall be concluded with a notarization or through signing by the authorized representative via a notarized power of attorney.
  • personal data for a business contact during the performance of the contract – this information is limited to the types of information, which could contain in a business card: name and surname, position, employer’s name, business address, business e-mail and business telephone number.

We receive from our contracting parties such personal data (information for contact) of employers or other persons, to whom our contracting parties have assigned to be the contact persons in compliance with the respective contract. Our contracting parties, that provide us these data, are also administrators of personal data in relation to the data in question, and bear responsibility for presenting of the entire necessary information of the respective data subjects in this relation. Moreover, our contracting parties are obliged to ensure the accuracy of this data and to maintain them up-to-date all the time. This means that if any of the data presented are no longer up-to-date, we should be duly notified about this as soon as possible. Until such notice is received, we shall assume that the contact data provided are accurate and we can use them for the above mentioned purposes.

Purpose, grounds and period of processing

We use the above mentioned data only for the following purposes:

  • execution of pre-contractual or contractual obligations, administration of contracts (including bookkeeping and taxation), control over the execution and collection of debts, protection against legal claims.

Personal data, pointed out in this section, are processed by PLOVDIV PLAZA at the following periods:

  • data, containing in the bookkeeping registers and financial reports: 11 years;
  • data, containing in documents, subject of tax audits and necessary for accounting purposes: 11 years;
  • data, containing in documents, necessary for execution of contractual obligations: up to 6 years from the date of termination of the respective contract or until the end of the procedures, related with possible disputes;
  • data,   processed in relation to the execution of the legal obligations – for the applicable legal periods.

 

YOUR RIGHTS

If you are a person, whose personal data are processed by PLOVDIV PLAZA, under any of the above mentioned circumstances, you have the following rights in this relation:

  • you have the right to object against processing your personal data for the purposes of the direct marketing, and if you are a person, who is an addressee of direct marketing. If you raise such an objection against the direct marketing, we shall no longer process your personal data for this purpose. However, in order to ensure that your objection shall be respected;
  • you have the right to object against processing your personal data for the purpose of implementation of video surveillance of PLOVDIV PLAZA shopping center and parking. We are asking you to have in mind that raising an objection does not lead to automatic deletion of the video recordings, which contain your personal data. Our team shall review the objection that you have raised within a period of one month, and shall make an assessment whether your rights and interest have an advantage over the legal grounds for the processing.
  • all data subjects have the right:
    • to be informed about the types of personal data that shall be processed by PLOVDIV PLAZA;
    • of an access to their processed personal data;
    • of correction and deletion of their personal data;
    • of limitation of the processing;
    • of portability.

 

Your can exercise any of the above mentioned rights through submitting a written application in one of the following ways:

  • via an e-mail to: info@plovdivplaza.bg
  • via a letter, addressed to: PLOVDIV PLAZA EAD with UIC 160074440, address: Plovdiv, 3 Dr. Georgi Stranski St.
  • you can also object against the direct marketing that we fulfill, in another way as it is specified by PLOVDIV PLAZA in the respective marketing message – for example by clicking on a link, placed in the e-mail.
  • In case of doubt that your rights, related to the protection of your personal data have been violated, you can submit the Commission for Personal Data Protection at:
  • Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd
  • E-mail: kzld@cpdp.bg
  • Internet page: www.cpdp.bg
  • Telephone: 02 / 91-53-518

 

CONTENT OF YOUR APPLICAITON

You should have in mind that your application for exercising any of your rights must at least contain your name and other identifying information, description of your request, preferred method of communication with you, an address for correspondence, signature and an application date.

If the application has been signed by a representative, the respective power of attorney should also be attached to the application.

PLOVDIV PLAZA could contact you for additional information if it is necessary to confirm your identity or your application should be additionally specified.

WHO CAN WE SHARE YOUR PERSONAL DATA WITH

 

PLOVDIV PLAZA can assign any of the above mentioned activities for your personal data processing in relation to the digital marketing and games to marketing agencies and IT services suppliers, when ensuring data protection and their lawful processing. It is also possible to provide personal data to our partners, if this is necessary (for example couriers and games co-organizers of games with the purpose of giving the price).

The data can also be provided to a partner/partners of PLOVDIV PLAZA and third persons, who help us fulfilling the support and the management of PLOVDIV PLAZA Shopping center, such as our accountants, auditors, lawyers, marketing agencies, IT services suppliers and other software and hardware services and competent authorities if this is duly required.

 

EXCESSIVE PERSONAL DATA, PRESENTED FROM/TO YOU

If we receive personal data that we think excesses our needs for achieving the above mentioned purposes, we shall erase this information not later than 1 month after receiving it.

PROTECTION OF YOUR INFORMATION

In order to help your personal data protection, we have implemented measures for physical, personal, technical and administrative protection. We regularly update and test our security technologies. We limit the access to your personal data only to the employees and processors who need to have this information, in order to provide you with benefits, goods and services. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and the security of your information. We are committed to take the necessary disciplinary measures, in order to impose the observation of security obligations of our employees.

USING THE WEBPAGE WWW.PLOVDIVPLAZA.BG

As most of the webpages, PLOVDIV PLAZA webpage automatically collects certain information and stores it in the so-called log files. The information could include an IP address, regional or general location from which you use internet via a computer or other device, type of the browser, operational system and other information, related to using our webpage, including the history of your visits to the webpage sections. We use this information, in order to optimize the design of our webpage in a way that it meets the visitors’ needs. We can also use your IP address with the aim to locate a problem with our server or to administrate our webpage, to analyze trends, to follow the visitors’ movements on the webpage and to collect a wide demographic information that help us understanding what the preferences of the visitors are.

PLOVDIV PLAZA webpage also uses cookies and web beacons. They do not follow the visitors when they go to another webpage, they are not used for targeted advertising, that is why they do not influence by “do not follow” signals.

 

AMENDMENTS AND UPDATE OF THIS PRIVACY NOTICE

We reserve our right to make changes in this Privacy notice and the Terms of use at any time, for any reason, without notifying you in a way, other than posting the amendment of the Privacy notice on this webpage. We can send periodic reminds of our notifications and the general conditions via e-mail and we shall notify our clients and partners via e-mail for any substantial changes they contain. You can see the current privacy policy rights on our webpage (link to it ).

The present document represents the privacy notice under the meaning of art. 13 and art. 14 of the Regulation (EU) 2016/679 of the European Parliament and the Council from 27th April 2016, regarding the protection of physical persons in relation to the processing of their personal data and regarding the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).