Privacy policy

In accordance with the requirements of art. 13 and art. 14 of GDPR, with this Privacy policy, CADBARA 2019 EOOD informs you of the personal data it collects and processes, the measures for its protection and your rights under EU and national legislation.

 

1. Controllers’ information and contact details:

CADABRA 2019 EOOD UIC: 204944320, with seat and management address in Sofia, 21 Srebarna Str., represented by the manager Vesela Vitanova;

Requests, questions and claims you may fail on the following email address: office@cadabra.bg.

2. Personal data that the controller collects.

CADABRA collects your personal data in one of the following ways:

  • Directly from you through your applications.

​When applying for a job position you agree that CADABRA will collect and process your personal data for the purposes of the recruitment for that position.

When applying you can give your explicit consent that CADBARA will store and process your personal data for a period of 5 years and will contact you in the future when there is a job position suitable for you.

The personal data the Controller collects include the following:

  • Contact information.
  • Education and work experience, training and additional qualification.
  • Language skill and other work related skills.
  • Recommendations.
  • Other information in regard with your professional qualification provided in your CV.

3. Purposes of processing. Principles of processing.

CADABRA processes the personal data for the following purpose:

  • Recruitment

In the course of its main activity and under art. 6, p. 1c and art.9, p. 2b, CADABRA processes personal data of candidates for job position, employees and natural persons for the purposes of human resources administration, financial administration and accountancy.

In the cases where the processing is on the grounds of a consent from the subject of personal data, CADABRA will process that data only upon a willingly given explicit consent until this consent is withdrawn.

Data processing is permitted only for explicit and lawful purposes and cannot be processed additionally in a way not compatible with those purposes.

       Personal data shall be processed according to the following principles:

  • Lawfulness - CADABRA will collect and process your personal data only on the grounds stipulated in art. 6 of GDPR.
  • Transparency – CADABRA will keep you inform as of the nature of the personal data it collects and the purposes for the processing and will inform you what kind of personal data it has stored and will provide you with access upon request as per its procedures.
  • Limitation of purposes - personal data shall be collected for specific, explicit and legitimate purposes; further processing for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes is not considered to be incompatible with the original purposes;
  • Data minimization - personal data will be limited to what is necessary in connection with the purposes.
  • Storage limitation - personal data shall be stored in a form that allows for the data subject to be identified for no longer than its necessary; personal data may be stored for longer periods as long as they are processed solely for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, provided that appropriate technical and organizational measures are applied to guarantee the rights and freedoms of the individuals whose data are processed.
  • Integrity and confidentiality - personal data shall be processed in a way that ensures an appropriate level of protection of personal data, including protection against unauthorized or unlawful processing and against any accidental loss, destruction or damage.
  • Completion - the personal data has to be correct and complete.
  • Protection - the personal data must be protected with adequate measures. 

​4. Data recipients.

CADABRA does not reveal personal data to third parties and recipients, unless there are lawful grounds for that, the data is public, or the data subject has given his/hers explicit consent for the data transfer.

CADABRA, in compliance with GDPR rules for joint administrators, provides the personal data of the candidates that have applied for a given open job position, to the respective client, which has announced that position.

In some cases, recipients of personal data may be some of the following:

  • Government bodies (such as NAR, NSI, MIA and ect.).
  • Bank institutions for payment purposes.
  • Couriers and post companies.
  • Processors.

5. Terms for storage.

As a controller, CADABRA processes personal data with consideration of the principle of storage limitation for the minimum period necessary under the applicable legislation.

In some cases upon written explicit consent, CADABRA may store your personal data for longer periods.

6. Rights of the data subjects.

You have the following rights:

  • Right of information and access to your personal data: you have the right to receive from us confirmation as to whether or not your personal data is being processed, and, where that is the case, access to the personal data.
  • Right to rectification: in cases where you have found the personal data we have for you is incomplete or inaccurate you have the right to request its completion or rectification.
  • Right to erase (to the extent that processing is necessary for the Controller to exercise freedom of speech, execute legal obligation, for reasons of public interests for legal claims).
  • Right to restriction of processing (to the extent that processing is necessary for the Controller to execute legal obligation, for reasons of public interests for legal claims).
  • Right to object: you have the right to object against the processing which is based on public interest or in the exercise of official authority vested in the controller or legitimate interests pursued by the controller or by a third party.
  • Right to data portability: you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and you have the right to transmit that data to another controller, if the processing is based on consent or on a contract and the processing is carried out by automated means.
  • Right to a claim before the Commission for personal data protection.

You can exercise your rights by filling a request to CADABRA, to the client, who has announced the position or to both Controllers.

7. Third countries.

In some cases, CADABRA may provide your personal data to recipients located in third countries outside of EU, namely USA, Canada and Australia. In such cases CADABRA will transfer your data in compliance with the rules for data transfer under GDPR, on the bases of adequacy decision or on other lawful grounds, namely: a) a legally binding and enforceable instrument between public authorities or bodies, b) binding corporate rules, c) standard data protection clauses adopted by a supervisory authority and others, stipulated in art. 46 of GDPR.

8. Cookies.

Our website uses cookies in order to be able to distinguish you from other users. This allows us to personalize your experience when browsing our website and improve the website itself.

Some of the cookies content personal data. Most cookies don’t collect information which identify you, but rather general information regarding the exploitation of the systems or user’s location.

Some of the services we provide are accessible only through cookies. The cookies we use are four types:

8.1 Necessary Cookies

These cookies are essential for the website and its operations. These cookies do not identify you as an individual. If you block these cookies you may not be able to use the whole content of the website.

8.2  Performance Cookies

These cookies collect information about how you use our websites, for instance: which pages you go to most often, the time spent on our websites, and any issues encountered, such as error messages. These cookies are also used to let affiliates know if you came to our website from an affiliate and if your visit resulted in the use or purchase of a product or service from us, including details of the product or service purchased. This helps us improve the performance of our websites.

8.3      Functionality Cookies

These cookies allow our websites to remember the choices you make to provide a more personalized online experience.

8.4     Targeting or Advertising Cookies

These cookies are used to deliver content that is more relevant to you and your interests. They are also used to deliver targeted advertising or limit the number of times you see an advertisement. They remember that you have visited our website and this information is shared with other parties, including advertisers. These cookies may also be linked to site functionality provided by third parties.

Users can block the cookies. Blocking some of the cookies may interfere with the website performance.

9. Protection measures.

CADABRA has adopted effective data protection measures, fully described in its Internal rules for data protection measures. Please contact us if you wish to read the full text of the Internal rules.

This Privacy policy may be amended at any time by the Collector. When there are amendments the Collector will announce that on its website in a visible and understandable manner.