Updated: December 2022
It is of the highest priority to us at "uIMPACT" AD to ensure that your right to personal data protection is protected, which is why we will apply and invest all necessary legal means and efforts to collect, store, and process your data in accordance with Regulation (EU) 2016/679 (the "General EU Data Protection Regulation" or "GDPR"), as well as Bulgarian law.
The purpose of this policy is to inform you of how we collect, process, and store your personal information when you interact with us.
1. Information about the administrator of personal data
"uIMPACT" AD, a joint stock company, duly incorporated and validly existing under the laws of the Republic of Bulgaria. It is registered in the Commercial Register with the Registry Agency under UIC 207114019, official representative Iskra Yovkova, Managing Director
2. What information is collected, stored, and processed by the administrator
We collect your personal data directly from you, so you have control over the type of information you submit to us. In general, it is possible to browse our site without providing us with any personally identifiable information. However, there are specific situations that may require you to provide us with personal data.
This is information you provide when filling out contact forms, and sending inquiries and messages through our site. Other possible cases:
When you participate in a survey, questionnaire, or discussion panel for their conduct and analysis of the results.
When you have requested information or assistance by completing our contact form, we will send you a personalized response.
About any section of the Website where you knowingly and voluntarily provide personal information and data.
In addition, we may collect and use certain information about how you use our website to improve its performance and personalize your experience.
3. Grounds and purposes for personal data processing
We will use your personal data for the following purposes:
3.1. Provision of services offered through the Company's website, including:
Providing support, including providing answers to your questions in connection with the purchases you made from the "uIMPACT" AD website.
Resolving any issues related to purchased services.
Our wish is that you are always aware of all upcoming events, as well as the latest offers regarding products and services organized or offered by uIMPACT. For this reason, if you have given your explicit consent, we may send you our newsletters, which contain general and thematic information, by e-mail.
The processing of your personal data for these purposes is carried out based on your consent. You can withdraw your consent at any time by clicking the “unsubscribe” button at the end of each email you receive.
Please note that a subsequent withdrawal of consent does not affect the legality of the processing of personal data carried out up to now. This is based on the consent given before its withdrawal.
4. Term of storage of your personal data
UIMPACT is committed to applying the highest standards of ethical and legal practices in all its activities. This includes the protection of the personal data of all users of the Website. Except as set forth below, we will not disclose or permit anyone outside the Company to access or use your personal information.
Depending on the specifics of each particular case, we may transfer or provide access to some of your personal data to IT service providers. We have concluded contracts for the protection of personal data with these companies and they only process them on our instructions.
Access to your data by our employees will be carried out in accordance with the legal provisions on data protection and information confidentiality. This is based on the obligations that they have assumed to protect your confidentiality and security. They are not authorized to use, disclose or change this information in any way except to perform the services assigned by the company.
If we are required by law or if it is necessary to protect our legitimate interests, we have the right to disclose certain personal data to public authorities as well.
5. Protection of the security of your personal data
We are committed to ensuring the security of your personal data by implementing appropriate technical and organizational measures.
All information we receive about you is stored on secure servers, and we constantly implement technical and organizational measures that are appropriate and necessary to protect your personal data. The Company continually reevaluates the security of its network and the suitability of its internal information security program, which is designed to:
Helps protect your personal data from unauthorized access or disclosure.
Identify reasonably foreseeable risks to the network security of our website.
Minimize security risks, including risk assessment and regular testing.
We have procedures in place to deal with any suspected breach of personal data. We will notify you and the relevant authorities of a breach when we are legally required to do so.
6. Countries where your personal data is stored and processed
Our data is entrusted to an EU-based ISO 27001 and GDPR-certified provider. This ensures that data and information are stored and managed under the highest data and information security standards.
7. Rights you have as a data subject