PRIVACY POLICY P. M. SOLUTIONS Ltd.
Information about the company processing your data:
Name: P. M. SOLUTIONS Ltd.
UIC / BULSTAT: 201 261 197
Headquarters and address of management: Sofia, 16 Liditze Str., 6, 11
Address for correspondence: Sofia, 6 Alexander Zhendov Str., office 303
Phone: 00359 888 511 595
E-mail: office@pmsolutions-bg.com
Website: www.pmsolutions-bg.com
Information on the competent supervisory authority for the protection of personal data:
Name: Personal Data Protection Commission
Headquarters and address of management: Sofia 1592, 2, Prof. Tsvetan Lazarov Blvd
Address for correspondence: Sofia 1592, 2, Prof. Tsvetan Lazarov Blvd
Phone: 02 915 3 518
Website: www.cpdp.bg
P. M. SOLUTIONS Ltd. (hereinafter referred to as “Administrator”, “Company” or “PM Solutions”) carries out its activity in accordance with the Personal Data Protection Act and the Regulation (EU) 2016 / 679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. This information is intended to inform you of all aspects of the processing of your personal data by the Company and of the rights you have in relation to such processing.
Reason for collecting, processing and storing your personal data
Art. 1. PM Solutions collects and processes your personal data in connection with the provision of dental services as well as in connection with the conclusion and performance of contracts with the Company, the provision of additional services on the contracts, the registration and the use of the services through our website pmsolutions-bg.com, and in particular on the following grounds:
• Your explicit consent as a patient;
• Performing the duties of PM Solutions on contract with you;
• Compliance with the legal obligations that apply to PM Solutions;
• For the purpose of the legitimate interests of PM Solutions or a third party.
Goals and principles of collecting, processing and storing your personal data
Art. 2. (1) We collect and process the personal data you provide in connection with the conclusion and execution of contracts with the Company, the use of accounting and payroll services with us, the registration and use of our web site www. pmsolutions-bg.com for the execution of our own legal obligations, including for the following purposes:
• Individualization of the country under the contract;
• Registering on our website and providing full functionality in using our services;
• Accounting purposes;
• Statistical objectives;
• Protection of information security;
• Ensuring the implementation of the contract for the provision of the respective service;
• Sending a newsletter and advertising messages at your request;
• PM Solutions website is designed to protect your information and enable you to be more informed on the dental treatment. We protect your privacy and collect only the data we need to ensure high quality content.
(2) We comply with the following principles when processing your personal data:
• legality, good faith and transparency;
• limiting the purposes of processing;
• comparability with the purposes of processing and minimization of the data collected;
• accuracy and timeliness of the data;
• Restriction of storage in order to achieve the objectives;
• integrity and confidentiality of processing and ensuring an adequate level of security of personal data.
(3) When processing and storing personal data, PM Solutions may process and store personal data in order to protect against the following legitimate interests:
• fulfilling its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities;
• protection from legal claims to the Company.
What kind of personal data collects, processes and stores our company
Art. 3. (1) The provision of dental care, including diagnosis and treatment, as well as the conclusion and performance of a contract, including a distance contract, provision of additional services, etc. It may collect and process the following categories of personal data:
• Three names;
• Personal ID;
• Address;
• Telephone number;
• Email;
2) Upon conclusion of a contract with a trading partner or a client we collect and process personal data about the names of the legal representative of the legal person – a party to the contract, for the purpose of individualization of the party to the contract and its execution. Contact details of the legal representative or contact person are official information and as such are not considered personal data.
Art. 4. The Company performs the following operations with the personal data you provide for the following purposes:
1. Accounting, payroll and other activities related to making contact with him and compiling the required accounting documents.
• Data to be processed: Three names, PIN (when invoice is issued), address and telephone.
• Basis of processing: The Company processes your personal data on the basis of your explicit consent as a client.
2. Accounting and payroll services request – The purpose of the operation is to ensure the use of the PM Solutions’ Website electronic accounting service application, including the provision of contact data.
• Data to be processed: Three names, email;
• Basis for processing: The Company processes your personal data on the basis of a contract – Art. 6, para. 1, b. (b) GDPR.
3. Collecting opinions and recommendations from clients – The purpose of the operation is to provide the client with the opportunity to express an opinion or recommendation on the company’s activities.
• Data to be processed: No personal data is required.
• Basis of processing: The Company processes your personal data on the basis of your consent – Art. 6, para. 1, b. (s) GDPR.
4. Implementation of Surveillance – The purpose of this operation is the implementation of security activities to protect the security of the clients and the employees in the PM Solutions’ sites:
• Data to be processed: Image;
• Basis of processing: The Company processes your personal data on the basis of the legitimate interest of the controller – Art. 6, para. 1, b. “E” by GDPR.
Art. 5. (1) The Company shall not collect or process personal data concerning the following:
• reveal racial or ethnic origin;
• Disclose political, religious or philosophical beliefs, or membership of trade unions;
• genetic and biometric data, sex life or sexual orientation data, health status data.
(2) The Company does not collect data for persons under 16 years except with the explicit consent of their parent or legal representative.
(3) The personal data are collected by the Company from the persons to whom they refer.
(4) The Company does not make automated decision making with
Term of storage of your personal data
Art. 6. (1) PM Solutions keeps your personal data as a client party to the contract for the entire duration of the contract, upon the expiration of which the Company only keeps the documents containing personal data which is legally obliged to keep for the respective provided in the law term. With respect to all other data, the Company takes the necessary care to erase and destroy them without undue delay or to anonymize them (ie to bring them in a form that does not reveal your personality).
(2) PM Solutions keeps your personal data for a period of 5 years for the purpose of protecting the legal interest of the Company in legal or administrative disputes and the accounting documents are kept for the relevant statutory period.
(3) PM Solutions notifies you that when the retention period is required to be extended in order to comply with a statutory obligation or with the legitimate interest of PM Solutions or otherwise.
Art. 7. PM Solutions keeps the personal data of the legal representatives of its trading partners for the duration of the contract, respecting the legitimate interests and legal obligations of PM Solutions, which may exceed the term of the contract.
Transmitting your personal processing data
Art. 8. (1) PM Solutions may, at its sole discretion, transmit all or part of your personal data to processors for the fulfillment of the processing purposes you have agreed to, subject to the requirements of Regulation (EC) 2016/679 (GDPR) .
(2) PM Solutions informs you of any intention to transfer all or part of your personal data to third countries or international organizations.
Your rights in collecting, processing and storing your personal data
Withdrawal of consent to process your personal data
Art. 9. (1) If you do not wish all or part of your personal data to continue to be processed by the Company for any specific or all-purpose processing you have expressly agreed upon, you may at any time withdraw your consent to processing through fill in the form you can find on our website or by free text request sent by email or provided on paper at the address of our company’s management or at our site.
(2) The Company may ask you to certify your identity and identity with the person to whom the data relate by requesting you to present an identity document to our employee.
(3) By withdrawing the consent to the processing of personal data that is required to create and maintain a profile on our website, your account will become inactive. Of course, you will be able to browse our website and the products offered and make orders as a guest or re-register.
(4) If there is a request for a service that is being processed, the earliest point at which you can withdraw your consent to processing is upon the successful completion of the order.
Art. 10. You may at any time withdraw your consent to process your personal data for the purposes of direct marketing.
Right of access
Art. 11. (1) You have the right to request and receive from PM Solutions a confirmation that personal data relating to you are being processed, as if you are a registered user, you may at any time see in your profile the personal data you have provided and processed for You.
(2) You have the right to access data relating to you as well as information relating to the collection, processing and storage of your personal data by sending a request in free text by email or by paper to the address of management or in an object of PM Solutions.
(3) PM Solutions provides you with a copy of the personal data processed with you, in electronic or other appropriate form, upon request.
(4) Providing access to the data is free of charge, but PM Solutions reserves the right to impose an administrative fee in the event of recurrence or excessive claims.
Right of correction or completion
Art. 12. You may correct or fill in the inaccurate or incomplete personal data relating to you directly through your website profile or by sending a request to PM Solutions by email or on paper at the address of your management or at PM Solutions.
Right to delete (“to be forgotten”)
Art. 13. (1) You have the right to request from PM Solutions to delete any or all personal data related to you, and PM Solutions has the obligation to delete them without undue delay when any of the following reasons exists:
• personal data is no longer needed for the purposes for which it was collected or otherwise processed;
• You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
• You object to the processing of personal data related to you, including for direct marketing purposes, and there are no legitimate grounds for the processing that will take precedence;
• personal data has been tampered with;
• personal data must be deleted to comply with a legal obligation under EU law or the law of a Member State that applies to PM Solutions;
• personal data have been gathered in connection with the provision of information society services.
(2) PM Solutions is not obliged to delete personal data if it keeps and processes it:
• exercising the right to freedom of expression and the right to information;
• Compliance with a legal obligation that requires treatment provided for by EU law or the law of the Member State applicable to PM Solutions or for the performance of a public interest task or the exercise of official authority conferred on it;
• for reasons of public interest in the field of public health;
• for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
• for the establishment, exercise or protection of legal claims.
(3) In order to exercise your right to be forgotten, you must submit a request by email or paper to the address of management or to PM Solutions by filling in the form attached to the site or by request in free text.
(4) The Company may ask you to certify your identity and identity with the person to whom the data relate by requesting you to present an identity document to our employee.
(5) If there is an order you are currently processing, the earliest point at which you may want to be “forgotten” is when you successfully complete your order.
(6) By deleting your personal data submitted for registration on our website, your account will become inactive. Of course, you will be able to browse the website and the products offered and make orders as a guest or make a new registration.
(7) PM Solutions does not erase the data that it has a legal obligation to store, including for protection against claims brought against it or proof of its rights.
Right of limitation
Art. 14. (1) You have the right to request from PM Solutions to restrict the processing of your related data when:
• question the accuracy of personal data for a period that allows PM Solutions to verify the accuracy of personal data;
• the processing is illegal, but you do not want to delete the personal data, but only to limit its use;
• PM Solutions no longer requires personal data for the purposes of processing, but you require them to establish, exercise or protect your legal claims;
• You have objected to the treatment pending verification that the legitimate grounds of PM Solutions have an advantage over your interests.
(2) The Company may ask you to certify your identity and identity with the person to whom the data relate by requesting you to present an identity document to our employee.
Right of portability
Art. 15. (1) You may at any time download or receive in a machine-readable format the data that is stored and processed for you by the Company by submitting a request PM Solutions by email or paper to the address of management, by filling out the form attached to the site or by requesting it in free text.
(2) You may request the Company to transfer your personal data directly to an administrator you provide when it is technically feasible.
(3) The Company may ask you to certify your identity and identity with the person to whom the data relate by requesting you to present an identity document to our employee.
Right to receive information
Art. 16. You may request the Company to inform you of all recipients to whom personal data for which correction, deletion, or limitation of the processing has been requested has been disclosed. The company may refuse to provide this information if this would be impossible or requires disproportionate effort.
Right of objection
Art. 17. You may object at any time to the processing of personal data of the Company that apply to you, including whether processed for profiling or direct marketing purposes.
Your rights to violate the security of your personal information
Art. 18. (1) If PM Solutions detects a breach of security of your personal data that may pose a high risk to your rights and freedoms, it shall notify you without undue delay of the breach and of the measures taken or to be taken .
(2) PM Solutions is not obliged to notify you if:
• has taken appropriate technical and organizational measures to protect the data affected by the breach of security;
• has subsequently taken measures to ensure that the violation will not lead to a high risk for your rights;
• Notification would require disproportionate efforts.
Individuals to whom your personal information is provided
Art. 19. For the purpose of processing your personal data and providing the service in its full functionality and in view of your interests, PM Solutions may provide the data to the following data processors – see the list of data processors. These processing personal data comply with all legal and security requirements for the processing and storage of your personal data.
Art. 20. The Company does not transfer your data to third countries.
Art. 21. In the event of a violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows:
Name: Personal Data Protection Commission
Headquarters and address of management: Sofia 1592, 2 “Prof. Tsvetan Lazarov” Blvd
Address for correspondence: Sofia 1592, 2 “Prof. Tsvetan Lazarov” Blvd
Telephone 02 915 3 518
Website www.cpdp.bg
Art. 22. You may exercise all of your rights to protect your personal data through the forms enclosed with this information. Of course, these forms are not mandatory and you can make your claims in any form that contains a statement about it and identifies you as the data holder.
Art. 23. If the consent relates to a transfer, the Company describes the possible risks for the transfer of data to third countries in the absence of a decision on adequate protection and appropriate remedies.
Art. 24. This Mandatory Information on Personal Data Protection Rights was accepted on June 25, 2019. PM Solutions may change the Mandatory Information and is required to maintain an up-to-date version of its website and the sites where it is provided.