Last updated: 01.10.2019
General information
A new General Data Protection Regulation, adopted by the European Union, will enter into force on 25 May 2018. The regulation aims to guarantee the protection of the data of individuals from all EU Member States and to harmonize the rules for their processing.
As an administrator of personal data for the provision of publishing services, izdavam.com fulfills all the requirements of the new regulation, collecting only the data of the persons to the extent necessary for the provision of the service, and preserving them responsibly and legally.
Information about the Data Controller
1. Name: "NIMA Printing House" Ltd.
2. UIC / BULSTAT: 114056526
3. Registered office and registered office: Pleven, 5800, 29 Dimitar Konstantinov Str.
4. Address for exercising the activity: Pleven, 5800, 29 Dimitar Konstantinov Str.
5. Correspondence data: Pleven, 5800, 29 Dimitar Konstantinov Str.
6. Email: support@izdavam.com
7. Phone: +359894468901
Information concerning the competent supervisory authority
1. Name: Data Protection Commission
2. Headquarters and address of management: 1592 Sofia, Prof. Tsvetan Lazarov ”№ 2
3. Correspondence information: 1592 Sofia, Prof. Tsvetan Lazarov ”№ 2
4. Phone: 02 915 3 518
5. Email: kzld@government.bg , kzld@cpdp.bg
6. Website: www.cpdp.bg
NIMA Printing House operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
Grounds for collecting, processing and storing your personal data
Art. 1. (1) izdavam.com collects and processes your personal information in connection with the provision of publishing services, registration of documents related to fees and taxes (including filing a tax return), declaration of copyright of the work (book, magazine, newspaper and other similar works subject to copyright law) with the company pursuant to Art. 6, para. 1, Regulation (EU) 2016/679, and in particular on the basis of the following:
● Your explicit consent has been obtained from you as a client;
● Fulfillment of the obligations of izdavam.com under contract with you;
● Compliance with a legal obligation that applies to izdavam.com;
● For the legitimate interest of izdavam.com.
Aims and principles in the collection, processing and storage of your personal information
Art. 2. (1) izdavam.com collects and processes the personal information you provide to us in connection with the use of our publishing services and the signing of a copyright statement provided to the company, including for the following purposes:
● create an account and provide full functionality in the provision of our services
● individualisation of a party to the contract;
● accounting goals;
● statistical goals;
● protection of information security;
● ensuring the performance of the contract for the provision of the relevant service;
● sending informational messages, announcements of changes to the service, recommendations for improving the use of the platform, new and upgraded subscription plans, etc.
● improving and personalizing the service by offering you renewal offers, events and other products and services that may be of interest to you;
● providing technical support through a ticket system or call center;
● use of our services;
● leaving comments under our books and / or authors published on the izdavam.com Blog.
(2) izdavam.com adheres to the following principles in the processing of your personal information:
● lawfulness, good faith and transparency;
● limitation of processing purposes;
● correlation with the purposes of processing and minimizing the data collected;
● data accuracy and timeliness;
● storage limitation to achieve goals;
● the integrity and confidentiality of the processing and ensuring an adequate level of security of personal data.
(3) When processing and storing personal data, izdavam.com may process and store personal data in order to protect the following legitimate interests:
● fulfillment of its obligations to the National Revenue Agency, the Ministry of the Interior and other state and municipal bodies, including courts in and outside the territory of the Republic of Bulgaria.
What types of personal information is collected, processed and stored by izdavam.com?
Art. 3. (1) izdavam.com carries out the following operations with personal data for the following purposes:
● Registration of a user on the website and performance of a contract for the provision of publishing services, registration of documents related to fees and taxes (including filing a tax return), declaration of copyright of the work (book, magazine, newspaper and other similar works submitted of copyright law) - the purpose of this operation is to create a profile to be associated with the use / used service / s and manage the content of the service / s through established administrative panel . Impact assessment conclusion: Based on the above impact assessment, the Data Protection Officer considers that the operation "Conclusion of a Publishing Service Agreement" with the acceptance of the General Terms and Conditions (Terms of Use) of the site and all its supporting documents , which form an integral part of this document, is permissible for implementation and provides sufficient safeguards to protect the rights and legitimate interests of data subjects in accordance with GDPR requirements.
● Registration of documents related to fees and taxes (including filing a tax return) to a consumer for the purpose of recording sales of their books and registering them, and reporting income and tax. Impact assessment conclusion: On the basis of the above impact assessment, the Data Protection Officer considers the operation "Registration of the sale of the author of his work" to be permissible and provides sufficient guarantees to protect the rights and legitimate interests of data subjects in accordance with GDPR requirements.
● Signing and declaring a copyright of a work (a book, magazine, newspaper or other similar work subject to copyright law) - the purpose of this operation and this document is to declare the author requesting to use our service "Publishing a work (book , a magazine, newspaper, or other similar work subject to copyright law) "declaring that he and he alone owns the copyright in the written work;
● Sending Information Messages - The purpose of this activity is to administer the process of sending messages to customers regarding improvements or changes in services, changed parameters, and expiring services under the service agreement.
● Newsletter (newsletter) sending - the purpose of this operation is to administer the process of sending newsletters to clients who have stated that they wish to receive;
● Administer comments under books or author profiles on izdavam.com - The purpose of this operation is to allow users who wish to comment on a published book or author to leave a comment.
(2) izdavam.com processes the following categories of personal data and information for the following purposes and for the following reasons:
● Data: Your personally identifiable information (first and last name, email, country, phone)
○ Purpose for which the data is collected: 1) User registration; 2) Contacting and sending information to the user, including if desired - for sending newsletters and advertising messages; 3) for the publication of his work; 4) to use the services provided on the website;
○ Reason for processing your personal data - By accepting the General Terms and Conditions and registering on the website and purchasing a service, a contractual relationship is created between izdavam.com and you, on the basis of which we process your personal data - Art. 6, para. 1, b. (b) GDPR.
● Additional information provided by you - If you wish to publish your work with us you are required to fill in your account a correspondence address, three names and your unique civilian number.
○ Purpose for which the data are collected: Completion and sending of an official tax payment note on the grounds of Art. 45, para. 4 of the PITA.
○ Grounds for data processing: By accepting the general terms and conditions and registering on the website and purchasing a service, a contractual relationship is created between izdavam.com and you, on the basis of which we process your personal data - Art. 6, para. 1, b. (b) GDPR.
● Other data released by izdavam.com - Upon entering our website or your account, izdavam.com collects data about the IP address used.
○ Purpose for which data is collected: Improvement of service security and interface localization, statistical and marketing studies.
○ Grounds for data processing: Processing is necessary for the performance of a contract to which the data subject is a party - Art. 6, para. 1, b. (b) GDPR. Until the creation of a user profile, the IP address is collected on the basis of the fulfillment of the legitimate interests of the administrator - Art. 6, para. 1, b. (f) GDPR;
● Your invoice details for an individual - If you wish to be issued an invoice in your capacity as an individual, you must provide your unique citizen ID.
○ Purpose for which the data is collected: Issuance of an invoice for making payments under a contract for the provision of services for using the e-commerce platform.
○ Grounds for the processing of your personal data - By accepting the general terms and conditions and registering on the website, or at the conclusion of a written contract, a contractual relationship is created between izdavam.com and on the basis of which we process your personal data - Art. 6, para. 1, b. (b) GDPR.
(3) izdavam.com does not collect or process any personal data relating to the following:
● disclose racial or ethnic origin;
● reveal political, religious and philosophical beliefs, or membership of trade unions;
● Genetic and biometric data, health data, or sexual life or sexual orientation data.
(4) Personal data are collected by izdavam.com from the persons to whom they relate.
(5) The company does not carry out automated decision making with data.
(6) The company does not process data for persons under 14 years of age, except with the explicit consent of their parents or representatives.
The storage period of your personal data
Art. 4. (1) izdavam.com stores your personal data for no longer than the existence of your account on the Website. After this deadline, izdavam.com takes the necessary care to delete and destroy all your data without undue delay.
(2) izdavam.com notifies you in the event that the data retention period needs to be extended for the purpose of fulfilling the purposes, for the fulfillment of the contract, for the legitimate interests of izdavam.com or otherwise.
(3) izdavam.com retains your consent information until it is explicitly withdrawn, without prejudice to any publications or comments made in order to preserve the semantic integrity of the comments.
(4) izdavam.com stores the personal data that it is required to keep under applicable law for the relevant stipulated period, which may exceed the term of your registration.
Transmission of your personal data for processing
Art. 5. (1) izdavam.com may, at its sole discretion, transmit some or all of your personal data to processing personal data for the fulfillment of processing purposes in accordance with the requirements of Regulation (EU) 2016/679.
(2) izdavam.com notifies you in case you intend to transfer some or all of your personal information to third countries or international organizations.
Your rights in the collection, processing and storage of your personal data
Withdrawal of consent to the processing of your personal data
Art. 6. (1) If you do not wish all or part of your personal data to be further processed by izdavam.com for a specific or all processing purpose, you may at any time withdraw your consent to the processing by deleting your account at Your profile or by asking in free text.
(2) izdavam.com may request that you verify your identity and identity with the data subject.
(3) With the withdrawal of the consent to the processing of personal data, which are obligatory for the creation and maintenance of your registration for using the services, your account will become inactive.
Right of access
Art. 7. (1) You have the right to request and receive from izdavam.com whether personal data relating to you are processed.
(2) You have the right to access the data related to it, as well as to the information concerning the collection, processing and storage of your personal data.
(3) izdavam.com provides you, upon request, with a copy of the personal data processed relating to you, in electronic or other appropriate form.
(4) The granting of access to the data is free of charge, but izdavam.com reserves the right to impose an administrative fee in case of repeated or excessive requests.
Right of correction or completion
Art. 8. You may correct or fill in inaccurate or incomplete personal data related to you directly through your website profile or by submitting a request to izdavam.com.
Right to be deleted ("to be forgotten")
Art. 9. (1) You have the right to request from izdavam.com to delete your personal data, and izdavam.com has the obligation to delete them without undue delay when any of the following reasons exist:
● personal data are no longer needed for purposes for which they were otherwise collected or processed;
● You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
● You object to the processing of personal data relating to you, including for direct marketing purposes, and there are no legitimate grounds for processing to take precedence;
● personal data were processed illegally;
● personal data must be deleted in order to comply with a legal obligation under EU or Member State law that applies to izdavam.com;
● personal data have been collected in connection with the provision of information society services.
(2) izdavam.com is not obliged to delete personal data if it stores and processes:
● to exercise the right to freedom of expression and the right to information;
● compliance with a legal obligation requiring processing as provided for in EU or Member State law that applies to the Administrator or for the performance of a public interest task or in the exercise of official powers conferred on it;
● for reasons of public interest in the field of public health;
● for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
● To establish, pursue, or defend legal claims.
(3) In order to exercise your right to "forget", you must delete your profile from the option in your profile or a written request sent to izdavam.com, as well as to verify your identity and identity with the person to whom you refer. the data before izdavam.com by presenting your ID card on the spot for identification purposes and, if necessary, entering your login details into the profile of the data subject to an izdavam.com employee.
(4) izdavam.com does not delete the data that it has a legal obligation to keep, including for protection in connection with legal claims against it or to prove its rights.
Right of restriction
Art. 10. You have the right to request izdavam.com to restrict the processing of your related data when:
● dispute the accuracy of personal data for a period that allows izdavam.com to verify the accuracy of personal data;
● the processing is unlawful, but you do not want your personal data to be deleted, and only their use will be restricted;
● izdavam.com no longer needs personal data for processing purposes, but you require it to establish, exercise, or defend your legal claims;
● You objected to the processing pending verification that the legitimate grounds of izdavam.com take precedence over your interests.
Right to portability
Art. 11. (1) You may at any time download the data stored and processed for you in connection with the use of the services of izdavam.com, by request by email.
(2) You may request izdavam.com to directly transfer your personal data to an administrator designated by you, where technically feasible.
Right to receive information
Art. 12. You may ask izdavam.com to inform you of any recipients to whom personal data for which correction, deletion or restriction of processing has been requested have been disclosed. izdavam.com may refuse to provide this information if this would be impossible or would require a disproportionate effort.
Right to object
Art. 13. You may object at any time to the processing of personal data from izdavam.com relating to you, including if they are processed for profiling or direct marketing purposes.
Your rights in breach of your personal data security
Art. 14. (1) If izdavam.com establishes a breach of your personal data security, which may pose a high risk to your rights and freedoms, we notify you without undue delay of the breach, as well as the measures taken or to be taken be taken.
(2) izdavam.com is under no obligation to notify you if:
● Has taken appropriate technical and organizational safeguards with respect to data affected by a security breach;
● subsequently took measures to ensure that the breach would not pose a high risk to your rights;
● notification would require a disproportionate effort.
Persons to whom your personal data are provided
Art. 15. The controller does not transfer your data to third countries.
Other provisions
Art. 16. In the event of a violation of your rights under the aforementioned or applicable personal data protection legislation, you have the right to file a complaint with the Personal Data Protection Commission as follows:
1. Name: Data Protection Commission
2. Headquarters and address of management: 1592 Sofia, Prof. Tsvetan Lazarov ”№ 2
3. Correspondence information: 1592 Sofia, Prof. Tsvetan Lazarov ”№ 2
4. Phone: 02 915 3 518
5. Email: kzld@government.bg , kzld@cpdp.bg
6. Website: www.cpdp.bg
Art. 17. You may exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are optional and you can submit your requests in any form that contains a statement to that effect and identifies you as the data owner.
Art. 18. If the consent concerns a transfer, the Administrator shall describe the potential risks of transferring the data to third countries in the absence of adequate protection and adequate remedies.
Art. 19 (1). When you assign izdavam.com to process personal data with a third party for the purposes of using the service, izdavam.com acts as a processor for the personal data.
(2). In the cases of para. 1, izdavam.com acts solely on your instructions as a user of the service and only insofar as it may have control over the personal data you process. izdavam.com has no control over the content and data that you, as a user of the service, choose to upload to the service (including if or not personal data). In this case, izdavam.com has no role in the decision-making process as to whether the user is using the personal data processing service, for what purposes and whether it is protected. Accordingly, the responsibility of izdavam.com in this case is limited to 1) compliance with the instructions of the user of the service in accordance with the contract and the general terms and conditions and 2) the provision of information about the service and the functionalities through its interface.
This Mandatory Information was last updated on 9/16/2019.
The security of every type of information, including personal data, located on our infrastructure is a priority for us as a company. Security is something we cannot afford to compromise with.
As a user of the hosting services of the company Superhosting.bg. We can provide you with the following information provided by the data protection company.
In addition to making every effort to fully comply with the new data protection regulation, three years ago, we implemented an entirely new security system for our entire infrastructure, SH Protect, developed by us. It works on several levels and blocks tens of thousands of attempts every day to compromise client sites and client information, including personal data.
Every day, we add new rules to it and keep our customers information at the highest level.
Also, three years ago, we implemented a comprehensive system for protection against DDoS attacks. The DDoS security system detects 95% of known types of DDoS attacks and is constantly updated against newly registered attacks.
With all these actions, we have blocked and continue to block hundreds of thousands of attempts per year for malicious action against the information that our clients store on our servers.