General information and legal basis

This document informs you about what personal data is collected on this website by us as the controller, for what purpose, as well as to what extent and in which cases this data is provided to third parties.
Personal data controller

Law firm "Buzgyova & Partners", hereinafter also referred to as the "Company" or the "Company"
Blagoevgrad region, Blagoevgrad municipality, 2700 Blagoevgrad, 41 "Todor Aleksandrov" Str., 2nd floor,
Contact telephone number: +359 897 972 718
Email: buzgyovapartners@gmail.com

Data protection officer
You can contact our data protection officer by post at the above address or by e-mail at buzgyovapartners@gmail.com.
Legal basis for processing

The processing of personal data requires the presence of a legal basis, which we present to you below.

The legal basis for processing personal data for which we obtain the consent of the data subject is contained in Article 6(1)(a) of the EU General Data Protection Regulation.

The legal basis for processing personal data necessary for the performance of a contract to which the data subject is a party is contained in Article 6(1)(b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures. The legal basis for processing personal data necessary for the performance of a legal obligation of our company is contained in Article 6(1)(c) of the GDPR. The legal basis for processing personal data necessary for the protection of the legitimate interests of our company or of a third party and the interests, fundamental rights and freedoms of the data subject do not override the first interest is contained in Article 6(1)(f) of the GDPR. Our company's legitimate interest lies in the performance of our business activities, as well as in the analysis, optimization and maintenance of the security of our online platform.

Log files, hosting

Server statistics automatically store data that your browser transmits to us within the framework of our legitimate interest in analysis and for security reasons (so-called "log files"). Specifically, this is the following data:

Language and version of the browser software;

The operating system used and its interface;

Referrer URL (previously visited page);

Host name of the accessing computer (IP address);

Date and time of the server request;

Time zone difference to Greenwich Mean Time (GMT);

Content of the request (specific page);

Amount of data transferred;

Access status/ HTTP status code.

As a rule, this data cannot be linked to specific individuals and therefore cannot be used for profiling or behavioral analysis. This data is not combined with other data sources. The data will be deleted within 90 days after statistical evaluation and in order to detect possible misuse. Data whose further retention is necessary for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

We provide all hosting services for the web shop ourselves and do not use hosting service providers for this. Hosting serves to provide infrastructure and platform services, computing power, storage space and database services, security services and technical support in order to maintain the operation of the web shop. In this way, we process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in the efficient and secure provision of this online offer.

Processing for the purpose of concluding a contract

The personal data you provide for the purpose of concluding a contract, for example when requesting an offer, such as name, address or email address, will be used within the Company to respond to your inquiries, process your orders or provide you with access to certain contractual information.

Contact, job applicant data, events
Contact data

If you contact us by email, your data will be stored by us in order to answer your questions.

In principle, the data will not be passed on to third parties, unless applicable data protection regulations justify the transfer or this follows from our legal obligation. You can withdraw your consent at any time with effect for the future. To do this, please contact the data protection officer by post at the above address or by email. In the event of withdrawal, your data will be deleted immediately, unless there is a legal exception for their further processing. If there is no exception, your data will be deleted if we have finished processing your request or the purpose of storage is no longer applicable and no other legal exceptions to deletion apply.
​
Events

If you register for or participate in events, conferences or trainings, your personal data will be collected in order to enable the planning, implementation and billing of these activities. This means that when you register for the event, the Company processes and stores the personal data you provide (e.g. company, position, first and last name, and email address) for the stated purposes. We may use the data you provide to contact you by email and to provide you with the necessary information about your participation and the content of the event.

Links to external sites
We may link the event invitation to an external domain of one of the organizers. The operators of the linked websites are responsible for the content of these websites and their compliance with the applicable data protection regulations. The Company is not responsible for the content of these websites. The legal basis for the processing of your data here is Article 6, letter «b» of the GDPR, i.e. the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual obligations undertaken at the request of the data subject. The categories of recipients of your personal data are the Company and, where applicable, employees of event agencies, hotels and travel agencies.

The Company reserves the right to take photos and videos during events for marketing purposes and to account for expenses incurred. In the event of an event that will be filmed, we will inform you at the latest at the beginning of the event. As a rule, photos and videos are taken of people who have a special role (e.g. speakers, moderators, etc.) or groups of people participating are shown or the atmosphere of the event is depicted. We publish these photos and film recordings on the Company website or in our social media presence such as LinkedIn, Twitter, Facebook and Instagram, using them to create a summary of the photos taken or a video with highlights of the event. If you do not wish to appear in these photos and videos, please inform the photographer of this. The legal basis for the processing of data in relation to photos and video recordings is our legitimate interest in accordance with Article 6(1)(f) of the GDPR. This consists of documenting the event with photos and video recordings for marketing purposes, 5 for reporting activities, for their use for informational or representational purposes. The legal basis for the creation of photos and video recordings of natural persons is obtaining your consent in accordance with Article 6(1)(a) of the GDPR, which you can withdraw at any time. If necessary, please also contact the organizer Company by post at the above address or by email at the address of the data protection officer specified there.

Cookies

This site uses cookies. Cookies are small text files that are stored on your computer and that provide certain information to the entity that sets the cookie. They are used to make the website easier and more efficient to use and/or to make it easier for you to navigate our website. We only set cookies that are not strictly necessary with your consent. You can withdraw this consent at any time for future use.

Consent is voluntary and you can use our website without accepting cookies. You can also configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies or delete cookies that have already been stored. If you do not accept cookies, please note that in this case our website may not function without errors. Unless we provide other information on the individual topics mentioned in this privacy policy or in the cookie banner, the lifespan of cookies is up to 24 months. You can find out which function of our website places cookies below in the individual functions.

You can opt out of the use of cookies at any time in our consent management tool where it is managed. There you have the opportunity to change the decisions you have made and to give or withdraw your consent retroactively. Management is possible by using this button

Advertising

On our website you will be offered the opportunity to subscribe to a newsletter on various topics and products. If you wish to receive such a newsletter, we need your valid email address, which allows us to confirm that you are the owner of the provided email address, as well as that the owner agrees to receive the newsletter. As part of our double opt-in procedure, we will send you a confirmation email to the address provided for this purpose after providing your email address, in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data related to sending the newsletter will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your email address until you unsubscribe from the newsletter. We only send newsletters with your consent in accordance with Article 6(1)(a) GDPR or because of legal permission.

This also means that we use the contact data you provide for advertising purposes without requiring your separate consent for this (e.g. for direct mail advertising, direct advertising for our own similar goods and services within the framework of existing customer relationships). The legal basis for this is our legitimate interest (Article 6(1)(f) GDPR). Our legitimate interest lies in customer care and providing information about our products and services.

You can withdraw your consent to the storage of your data, your email address and its use for sending the newsletter at any time. An unsubscribe link can be found at the end of each newsletter. If users have only subscribed to the newsletter and have cancelled this subscription, their personal data used for this will be deleted.

Registration

Our website offers registration for the use of some of its functionalities. The personal data entered as part of the registration process are stored exclusively for the purposes of internal use by the Company. During registration, the user's IP address is stored, as well as the date and time of registration. This is done to prevent misuse of the services. The data will not be passed on to third parties, except in the event of a legal obligation to transmit them.

The registration of data is necessary for the provision of content or services. Registered persons have the opportunity to delete or change the stored data at any time. The data subject may obtain information about the personal data stored about him at any time.
​
Media presence

You can find us on social networks and platforms. We use online channels to communicate with our customers, stakeholders and users who are active there and to inform them about our company and our products and services.

The processing of personal data of active users is based on our legitimate interests in communicating and providing information to and with users. If consent to data processing has been given by users within the respective social platform, the processing is based on this consent.

If you visit one of our social media presences, please note that we are jointly responsible with the operator of the social platform for the data processing operations that are triggered during this visit. You can assert your rights (information, rectification, deletion, restriction of processing, data portability and complaint, see the section "Data subject rights") both against us and against the operator of the respective social platform. We would like to point out that despite joint and several liability, we do not have full influence on the data processing operations of the social platform and, if necessary, we forward the request for rights to the respective operator in order to more securely 8 process the rights of the data subject. Our options are usually based on the corporate policy of the respective provider. You can find the data retention periods below. The company has no influence on the storage period of your data stored by the social platform operator for its own purposes. For details, please contact the social network operators directly (you can find their contacts in their privacy policy at the links below).

Depending on the social platform, the processing of user data may also take place outside the territory of the European Union. The transfer of data to Google and Meta is carried out on the basis of the adequacy decision of the EU-US data protection agreement "Data Privacy Framework" (ensuring the level of data protection when processing data by data importers based in the US). You can find more information about the data privacy framework here: https://www.dataprivacyframework.gov/

As a rule, user data is processed by the platforms for market research and advertising purposes. For example, user profiles can be created based on the user's behavior and interests when using the platform. In turn, user profiles can be used, for example, to place advertisements within and outside the platforms that are assumed to correspond to the interests of the users. For this purpose, cookies are usually stored on the user's computer, where information about user behavior and interests is saved. Data can also be stored in the usage profiles, regardless of the devices used by the users. This is done in particular if the users are members of the respective platforms and are logged in to them.

For a detailed description of the respective processing and the options for objection, we refer to the information of the providers described below.

Facebook (Pages, Groups)
(Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
(Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) https://www.facebook.com/legal/terms/page_controller_addendum
Privacy Policy: https://www.facebook.com/about/privacy/
Opt-out Link: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com
Whatsapp
(Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
The basis for this is an agreement on the joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendum
Privacy Policy: https://www.whatsapp.com/legal/privacy-policy-eea

Google/ YouTube
(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
Privacy Policy: https://policies.google.com/privacy
Opt-out link: https://adssettings.google.com/authenticated

LinkedIn
(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Disclosure of data to third parties
Disclosure of data in performance of a contract

We transfer data to third parties if this is necessary for the performance of a contract and/or if we are legally obliged and/or entitled to do so in individual cases.
Disclosure of data to external providers for the operation of the website

In some cases, we use external service providers based on your consent to the use of your data or based on our legitimate interests for the purposes of analysis, optimization and economic operation of the website. If you have given your consent for tools that are not necessary for the operation of the website, you can change these settings at any time. Below we list our service providers. If your data is to be used for other purposes, we will inform you in advance and will only use the data if you have given your express consent in advance.
Google

Within the scope of your consent, we use services to optimize and economically operate our online offering, for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is responsible. Google is a party to the EU-US data protection agreement "Data Privacy Framework" (ensuring the level of data protection when processing data by data importers from the USA). You can find more information about the Data Privacy Framework here: https://www.dataprivacyframework.gov/

Google/YouTube

We may use YouTube, a service provided by Google, to embed videos.

These videos are stored on www.youtube.com and can be played directly from our site. YouTube uses cookies to collect data and analyze statistics. YouTube uses cookies, among other things, to collect reliable video statistics, prevent fraud and improve the user experience. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to YouTube servers in the USA and stored there. Your IP address cannot be assigned unless you are logged in to YouTube or another Google service before accessing the page or if you are not logged in permanently. If you do not wish this to happen, you will have to log out of your YouTube account and your other Google accounts. Through YouTube cookies, we obtain statistical values ​​for retrieving individual videos embedded in the website without reference to the respective user. Embedded YouTube videos are used within the scope of YouTube's permitted use, which all users must accept. If you see a copyright infringement, please report it directly to YouTube. We use embedded YouTube videos in enhanced privacy mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player but does not click on the video to start playback. If the YouTube video player is clicked on, YouTube may be able to store cookies on the user's computer. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by YouTube. For more information about YouTube's official privacy policy, please see https://www.google.de/intl/de/policies/privacy/ and https://support.google.com/youtube/answer/171780?hl=de.

Meta

With your consent, we use the services of the social network facebook.com, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, for the analysis, optimization and processing of our online platform ("Facebook"). Meta is a party to the EU-US data protection agreement "Data Privacy Framework" (ensuring the level of data protection when processing data by data importers based in the USA). You can find more information about the Data Privacy Framework here: https://www.dataprivacyframework.gov/

Facebook Custom Audiences and Website Custom Audiences

Our website uses the advertising tools Custom Audiences and Website Custom Audiences from Facebook. In this case, an irreversible and non-personal checksum (hash value) is generated from your usage data, which is transmitted to Facebook for analytical and marketing purposes on its social platform and stored in the USA.

The meta pixel is integrated directly by Facebook when you visit our website and can store a so-called "cookie", i.e. a small file, on your device. If you then log in to Facebook or visit Facebook while logged in, your visit to our website will be recorded in your Facebook profile. The data collected about you is anonymous for us, so it does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a link to the respective user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes. If we transmit data to Facebook for comparison purposes, it will be encrypted locally in the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of establishing a comparison with the data, which is also encrypted by Facebook.

In addition, when using the meta pixel, we use the additional "expanded matching" function (data such as telephone numbers, email addresses or Facebook user IDs) to form target groups ("Personal Audiences" or "Lookalike Audiences"), which are transmitted to Facebook (encrypted). Further information on "expanded matching": https://www.facebook.com/business/help/611774685654668).

To prevent your data from being collected via the meta pixel on our website, please follow the following link: https://www.facebook.com/ads/website_custom_audiences/ If you click on the link, an "opt-out cookie" will be stored on your device. If you delete the cookies in this browser, you will have to click on the link again. Furthermore, the opt-out only applies in the browser you are using and only within our web domain on which the link was clicked.

Also, based on our legitimate interests, we use the "Custom Audiences from a File" procedure of the social network Facebook, Inc. In this case, the email addresses of the newsletter recipients are uploaded to Facebook. The upload process is encrypted. The sole purpose of the upload is to determine the recipients of our Facebook advertisements. We want to ensure that advertisements are only shown to users who are interested in our information and services.

If you would like to object to the use of custom audiences on the Facebook website, you can also do so at: https://www.facebook.com/ads/website_custom_audiences/. To do this, you must be logged in to your Facebook account.

For further information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard and setting options to protect your privacy, please refer to Facebook's privacy policy at http://www.facebook.com/about/privacy/ and specifically for Facebook Custom Audiences at https://www.facebook.com/ads/website_custom_audiences/.
Data storage outside the EU/EEA

As stated in the individual tool descriptions, we use third-party tools outside the EU and the EEA. To the extent that this is necessary for the purposes stated, it may happen that your IP address is processed outside the EU and the European Economic Area, where a level of data protection that meets the European standard is not consistently guaranteed and confirmed (e.g. by an appropriate guarantee within the meaning of Article 46 of the GDPR or an adequacy decision of the European Commission pursuant to Article 45 of the GDPR). It cannot therefore be excluded in particular that security authorities in a third country gain access to your IP address without you being able to take legally effective action against it. The transfer of the IP address to these third-party providers takes place in accordance with Article 49(1)(a) of the GDPR on the basis of your consent, which you have expressly given in the consent banner. This consent is voluntary. You can revoke this at any time with effect for the future. You will not suffer any damage as a result of the refusal.

Automated decision-making

We use automated decision-making to compare the entities receiving the deliveries and their personal data with the export control and sanctions lists issued by the European Union and other countries from which the export may take place. Depending on the outcome of this review, we are obliged to implement appropriate measures within the framework of the export control regulations set by the European Union and other countries from which the export will take place. 13 The legal basis for the processing of the data is Article 6(1)(c) of the GDPR. The comparison ensures compliance with the applicable export legislation.

Retention period for personal data

Unless we have provided other information about retention periods at the specific locations, the following applies: we store personal data for the duration of the relevant statutory retention period or for as long as the purpose for which the data was collected exists. After the retention period has expired, the data will be routinely deleted, unless it is required for entering into a contract or for the performance of the contract. Unless the user data is deleted because it is required for other purposes permitted by law, its processing will be restricted as far as possible. Accordingly, the data will be blocked as far as possible and will not be processed for other purposes. For example, this may apply to user data that must be stored for commercial or tax reasons.

Security

We make every effort to process your personal data using all technical and organizational means in such a way that the provisions of the statutory data protection requirements are complied with and thus to protect this data. Our website and communication with us through our website is encrypted via HTTPS.