Personal Data Protection at IZDAVAM.com (GDPR)
Art. 1. (1) Izdavam.com collects and processes your personal data in connection with the provision of publishing services, registration of documents related to fees and taxes (including the filing of a tax return), declaration of copyright over the work (book, magazine, newspaper and other similar works subjected to the Copyright Act) with the company on the grounds of Art. 6, para. 1, Regulation (EU) 2016/679, and in particular based on the following:
- explicitly obtained consent from you as a client;
- fulfillment of the obligations of IZDavam.com under contract with you;
- compliance with a legal obligation, which applies to izdavam.com;
- for the purposes of the legitimate interest of izdavam.com.
Objectives and principles in collecting, processing and storing your personal data
Art. 2. (1) Izdavam.com collects and processes the personal data you provide to us in connection with the use of our publishing services and to sign a copyright statement provided to the Company, including for the following purposes:
- Creating an account and providing full functionality when providing our services
- individualization of a party to the contract;
- accounting purposes;
- statistical purposes;
- Protection of information security;
- securing the performance of the contract for the provision of the respective service;
- Send information messages, changes for changes to service, recommendations for improving the use of the platform, new and upgraded subscription plans, etc.
- Improvement and individualization of the service by offering the renewal renewal offers, events and other products and services that may be of interest to you;
- Provision of technical support through a ticketed system or call center;
- the use of our services;
- Leaving comments under our books and/or authors posted on the blog on Izdavam.com.
(2) Izdavam.com complies with the following principles when processing your personal data:
- legality, good faith and transparency;
- restriction on the purpose of processing;
- Calculation with the purpose of processing and minimizing the data collected;
- accuracy and relevance of the data;
- storage restriction in order to achieve the goals;
- integrity and confidentiality of processing and guaranteeing an appropriate level of security of personal data.
(3) In the processing and storage of personal data, izdavam.com may process and store personal data in order to protect its following legitimate interests:
- fulfillment of its obligations to the National Revenue Agency, the Ministry of the Interior and other state and municipal bodies, including the courts of and outside the territory of the Republic of Bulgaria.
What types of personal data collects, processes and stores izdavam.com?
Art. 3. (1) Izdavam.com performs the following personal data operations for the following purposes:
- registration of a user on the website and execution of a contract for the provision of publishing services, registration of documents related to fees and taxes (including filing of a tax return), declaration of copyright over the work (book, magazine, newspaper and other similar works subjected to the Copyright Act) - the purpose of this operation and to be created/used/used to Administrative panel. Conclusion from the impact assessment: Based on the above impact assessment, the Personal Data Protection Officer considers that the operation "concluding a publishing service contract" with the acceptance of the General Terms (Terms of Use) of the Page and all of its additional documents, which are of interest to the rendering and provides sufficient guarantees for defense of GDPR.
- Registration of documents related to fees and taxes (including the filing of a tax return) of a consumer for the purpose of registering sales of their books and registering them and reporting the revenue and the payment of tax. Conclusion from the impact assessment: Based on the above impact assessment, the Officer for Personal Data Protection, considers that the "Registration of the Sale of the Author of his work" is admissible for and provides sufficient guarantees for the protection of the rights and legitimate interests of the data subjects in accordance with the requirements of the GDPR.
- Signing and Declaving Copyright over the work (book, magazine, newspaper or other similar work subject to the Copyright Act) - the purpose of this operation and this document is the declaration of the author requires to use our service "Issue, a newspaper or other such a work of the law)";
- Sending information communications - the purpose of this activity is to administer the process of sending messages to clients, which relate to improvements or changes in services, changed parameters, and expired services, in accordance with the contract for the provision of the service.
- Sending a newsletter (newsletter) - the purpose of this operation is to administer the process of sending newsletters to the clients who have stated that they wish to receive;
- Administration of comments under books or author profiles of IZDavam.com - the purpose of this operation is to provide users who wish to express their opinion in connection with a book or author issued, to leave a comment.
(2) Izdavam.com processes the following categories of personal data and information for the following purposes and on the following grounds:
- Data: Your individualizing data (name and surname, e -mail, country, telephone)
- purpose for which the data is collected: 1) registration of a user; 2) connecting with the User and sending information to him, including in the case of expressed desire - for sending ballots and advertising messages; 3) for issuing his work; 4) for isolating the services provided on the website;
- reason for processing your personal data - with the acceptance of the General Terms and Conditions and registration on the Website and the purchase of a service, between izdavam.com and you a contractual attitude is created, on which we are processing your personal data - Art. 6, para. 1, b. (b) GDPR.
- Additional information provided by you - if you want to issue your work with us, you are obliged to fill in your profile address for correspondence, your three names and your single civic number.
- Purpose for which the data is collected: filling in and sending an official note for paid tax on the grounds of Art. 45, para. 4 of the PITA.
- grounds for processing the data: By accepting the General Terms and Conditions and registration on the Website and the purchase of a service, a contractual attitude is created between izdavam.com and you, on the basis of which we process your personal data - Art. 6, para. 1, b. (b) GDPR.
- Other data that Izdavam.com processes - when you enter our website or your account, IZDavam.com collects data on the IP address used.
- Purpose for which data is collected: improving service security and interface location, statistical and marketing studies.
- grounds for processing the data: The processing is necessary for the implementation of a contract under which the data subject is a party - Art. 6, para. 1, b. (b) of GDPR. Until the creation of a profile of the user, the IP address is collected on the basis of the provision of the legitimate interests of the administrator - Art. 6, para. 1, b. (f) from GDPR;
- Your data on the issuance of an invoice to an individual - if you would like to be issued an invoice as an individual, you should submit your single civil number.
- Purpose for which the data is collected: Issuance of an invoice for making payments under a contract for the provision of services for the use of the platform for the creation of e -shops.
- grounds for processing your personal data - with the acceptance of the General Terms and Conditions and the registration of the website, or at the conclusion of a written contract, between izdavam.com and you a contractual attitude is created, on the grounds we process your personal data - Art. 6, para. 1, b. (b) GDPR.
(3) izdavam.com does not collect or process personal data that relates to the following:
- reveal racial or ethnic origin;
- reveal political, religious and philosophical beliefs, or membership in trade union organizations;
- genetic and biometric data, health status or sexual orientation data.
(4) Personal data are collected by izdavam.com by the persons to whom they relate.
(5) The company does not make automated data decision making.
(6) The company shall not process data for persons under 14 years of age, except with the explicit consent of their parents or representatives.
Storage period of your personal data
Art. 4. (1) Izdavam.com stores your personal data for a period not exceeding the existence of your account on the website. After this period expires, Izdavam.com takes the necessary care to delete and destroy all your data without unnecessary delay.
(2) Izdavam.com shall notify you if the data storage period must be extended in order to fulfill the objectives, the fulfillment of the contract, for the legitimate interests of izdavam.com or another.
(3) Izdavam.com stores your data, given on the basis of consent, until its explicit withdrawal, which does not affect the publications and comments made in order to preserve the meaningful integrity of the comments.
(4) Izdavam.com stores the personal data that it is necessary to preserve by virtue of the applicable legislation for the relevant period, which may exceed the period of existence of your registration.
Transmit your personal processing data
Art. 5. (1) Izdavam.com may, at its own discretion, transmit part or all your personal data to processing personal data for the fulfillment of the processing objectives in compliance with the requirements of Regulation (EU) 2016/679.
(2) Izdavam.com shall notify you in the event of an intention to transmit some or all your personal data to third countries or international organizations.
Your rights in collecting, processing and storing your personal data
Withdrawing consent to processing your personal data
Art. 6. (1) If you do not wish all or part of your personal data to continue to be processed by izdavam.com for specific or all purposes of processing, you may at any time withdraw your processing consent by deleting your account in your account or by requesting free text.
(2) Izdavam.com may request that you certify your identity and identity with the person to whom the data is referred to.
(3) With the withdrawal of the consent to the processing of personal data that are binding on the creation and maintenance of your registration for the use of the services, your account will become inactive.
Accession
Art. 7. (1) You have the right to request and receive from IZDavam.com confirmation that personal data related to you are processed.
(2) You have the right to access the data related to it, as well as to the information relating to the collection, processing and storage of your personal data.
(3) Izdavam.com provides you upon request, a copy of the processed personal data related to you in electronic or other appropriate form.
(4) The provision of access to the data is free of charge, but IZDavam.com reserves the right to impose an administrative fee in case of repeatability or excessive requests.
Right to adjust or fill in
Art. 8. You can correct or fill in the inaccurate or incomplete personal data related to you directly through your profile on the Website or by requesting an Izdavam.com.
Right to delete (“to be forgotten”)
Art. 9. (1) You have the right to request from Izdavam.com delete the related personal data, and izdavam.com has the obligation to delete it without unnecessary delay when any of the grounds mentioned below is available:
- personal data are no longer necessary for the purposes for which they have been collected or processed in another way;
- you withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
- you have objected to the processing of your related personal data, including for the purposes of direct marketing and there are no legitimate grounds for processing that have an advantage;
- Personal data have been processed unlawfully;
- Personal data must be deleted in order to comply with a legal obligation under EU or Member State law, which applies to izdavam.com;
- Personal data were collected in connection with the provision of services to the information society.
(2) Izdavam.com is not required to delete personal data if it stores and processes it:
- for the exercise of the right to freedom of expression and the right of information;
- for compliance with a legal obligation requiring the processing provided for in the law of the EU or the law of the Member State, which applies to the administrator or to the implementation of a public interest task or in the exercise of official powers that have been granted to him;
- for public interest reasons in the field of public health;
- for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
- for the establishment, exercise or protection of legal claims.
(3) In order to exercise your right to "forgetting", you must delete your profile from the option in your profile or a written request sent to izdavam.com, as well as certify your identity and identity with the person to whom the data is referred to, as the person in front of the information and the need to enter izdavam.com.
(4) Izdavam.com does not delete the data it has a legal obligation to store, including for protection against court claims or proving its rights.
Restraint
Art. 10. You have the right to request from izdavam.com to limit the processing of your related data when:
- dispute the accuracy of personal data for a period which allows izdavam.com to check the accuracy of personal data;
- processing is unlawful, but you do not want your personal data to be deleted and only to use it;
- izdavam.com no longer needs personal data for the purposes of processing, but you require it to establish, exercise or protect your legal claims;
- You objected to the processing in anticipation of verification that the legitimate grounds of IZDavam.com have an advantage over your interests.
Portability
Art. 11. (1) You may at any time download the data stored and processed for you in connection with the use of the services of IZDavam.com, with an email request.
(2) You may request from IZDavam.com to directly transfer your personal data to the administrator you specify when this is technically feasible.
The right to receive information
Art. 12. You may ask the Izdavam.com to inform you of all recipients to whom personal data for whom the adjustment, deletion or restriction of processing has been requested have been disclosed. Izdavam.com may refuse to provide this information if this would be impossible or require disproportionate effort.
Objection
Art. 13. You may object at any time against the processing of personal data from izdavam.com that relate to you, including if processed for profiling or direct marketing purposes.
Your rights in violation of your personal data security
Art. 14. (1) If izdavam.com detects a violation of the security of your personal data, which may generate a high risk to your rights and freedoms, we shall notify you without unnecessary delay of the violation, as well as of the measures taken or are to be taken.
(2) izdavam.com is not obliged to notify you if:
- has taken appropriate technical and organizational protection measures regarding the data affected by the security offense;
- has subsequently taken measures that guarantee that the violation will not lead to a high risk to your rights;
- Notification would require disproportionate effort.
Persons to whom your personal data is provided
Art. 15. The Administrator does not transfer your data to third countries.
Other provisions
Art. 16. In case of violation of your rights under the above or applicable personal data protection legislation, you have the right to file a complaint with the Commission for Personal Data Protection as follows:
1. Name: Personal Data Protection Commission
2. Headquarters and registered office: Sofia 1592, Prof. Tsvetan Lazarov Blvd.
3. Correspondence Data: Sofia 1592, Prof. Tsvetan Lazarov Blvd.
4. Phone: 02 915 3 518
5. Email: kzld@government.bg, kzld@cpdp.bg
6. Website: www.cpdp.bg
Art. 17. You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are not mandatory and you can make your requests in any form that contains a statement about it and identifies you as a data holder.
Art. 18. If the consent refers to a transfer, the Administrator describes the possible risks of data transfer to third countries in the absence of a decision on adequate protection and appropriate remedies.
Art. 19 (1). When assigning IZDavam.com to process personal data to a third party for the purposes of using the service, izdavam.com acts as a processor processor.
(2). In the cases of para. 1, izdavam.com acts only on your instructions as a service user and only insofar as there can be control over the personal data you process. Izdavam.com has no control over the content and data that you as a user of the service select to load in the service (including if these data include or not personal data). In this case, izdavam.com does not play a role in the decision -making process whether the user uses the personal data processing service, for what purposes and whether they are protected. Accordingly, the liability of izdavam.com is limited to 1) complying with the instructions of the User of the Service under the contract and the General Terms and 2) the provision of information about the service and functionality through its interface.
This compulsory information was last updated on September 16, 2019.
The security of any type of information, including personal data on our infrastructure, is a priority for us as a company. Security is something that we cannot afford with.
As a user of the hosting services of Superhosting.bg. We can provide you with the following information provided by the data protection company.
In addition to making every effort to fully respond to the new personal data protection regulation, three years ago we introduced a brand new, developed by us, a security system for our entire infrastructure - SH Protect. It works at several levels and every day blocks tens of thousands of attempts to compromise client sites and client information, including personal information.
Every day we add new rules to it and make sure that our customers are protected at the highest level.
Also three years ago, we introduced a comprehensive DDOS attack system. The DDOS protection system detects 95% of the known types of DDOS attacks and is constantly updated against newly registered attacks.
With all these actions, we have blocked and continue to block hundreds of thousands of attempts a year on malicious actions to the information that customers store on our servers.