Privacy Policy

Allpersonal data (PII) transmitted by You in relation to the use of theWebpage is collected in a lawful, fair and transparent manner.Ispolink LTD complies with the principles and requirements forprocessing of personal data. All information is collected for aspecific, precise and legitimate purposes and is not processedfurther in a manner inconsistent with these purposes. Personal datathat is collected and processed is appropriate, relevant and limitedto what is necessary as per the defined purposes and in accordancewith the identified processing grounds.PIIis processed in a manner that ensures appropriate security of thepersonal data, including protection against unauthorized or unlawfulprocessing and against accidental loss, destruction or damage, usingappropriate technical or organizational measures.

1. Basic concepts for a better understanding of this policy

“Personal Data” or PII within the meaning of this Policy means the data, provided by users and customers of Ispolink LTD in connection with (including but not limited to):

• Use of the web pages and / or online applications owned and operated by Ispolink LTD (including the official pages of the Company on social networks – Facebook; Instagram, Linkedin, etc.);
• Applications for vacant positions within the Company;
• Related to the exercise of the rights of data subjects.

“Processing of personal data” of a user means any operation or a set of operations performed withpersonal data or a set of personal data through automatic or othermeans such as collection, recording, organizing, structuring, storing, adapting or changing, retrieving, consulting, using, disclosing through transmission, distribution or other means, by which data are made available, arranged or combined, restricted, deleted or destroyed

“Controller” means a natural or legal person, public authority, agency or otherbody, which alone or jointly with others determines the purposes and means of the personal data processing and when the purposes and means of such processing are determined by the EU legislation or the national laws of a Member State, the controller or the specific criteria for the administrator may be laid down in the EU legislation or the national laws of a Member State.

“Consent of the data subject” means any freely expressed, specific, informed and unambiguousindication of the data subject’s will, by the means of a statementor clearly affirmative action, expressing his / her consent to theprocessing of his/her personal data;

„Data processor“ means a natural or legal person, public authority, agency or otherorganization, that processes personal data on behalf of Ispolink LTD.

“ThirdParty” means an individual or legal person, public authority, agency orother body, other than the data subject, controller, processor and persons who, under the direct control of the controller or processor, have the right to process personal data.

“Data subject” means an individual who can be identified, directly or indirectly, inparticular by an identifier such as name, identification number,location data, online identifier, or by one or more characteristics, specific to the physical, physiological, genetic, psychic, mental, economic, cultural or social identity of that individual.

“Applicable law” means the legislation of the European Union and of the Republic of Bulgaria, which is relevant to the personal data protection (Personal Data Protection Act, etc.);

“Regulation(EU) 2016/679” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons withregard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General DataProtection Regulation), published in the Official Journal of theEuropean Union on 4 May 2016, hereinafter referred to as “the Regulation”,

2. Purpose of data processing

IspolinkLTD collects through its website and uses your personal informationfor the following purposes:

2.1 Provision of the services you have requested:

Almost all of the personal data you fill out in the registration form onyour profile is necessary to respond to your need or the service you have required and which Ispolink LTD provides. In view to provide high quality services, we need your identification data, whereas their scope varies depending on the type of service requested and the applicable legal requirements.

2.2 Marketing

The personal data you provide may be used to inform you about newservices, provided by Ispolink LTD. The messages we send will bealways in compliance with the applicable Bulgarian and Europeanlegislation.

You may object in an easy and convenient way to the use of your personaldata for the purposes of marketing when the reason for processing isof legitimate interest and we will terminate the processingimmediately; the information on how to withdraw already given consentor to object to receiving an unwanted marketing message will alwaysbe visibly displayed in the message.

For the purposes of marketing we perform traffic analysis and track users’ behaviour on the website through third-party domain codes, whereas we process your personal data, using cookies. You can read more about them in our cookie policy. Forthe purposes of marketing activities, we process your personal data because we have a legitimate interest within the meaning of Art. 6(1) (f) of Regulation (EU) 2016/679 (GDPR) or because you have givenus your consent on the basis of Art. 6 (1) (a) of Regulation (EU)2016/679 (GDPR).

2.3 Selection of employees, applying for vacant positions:

Throug hour website we provide a convenient opportunity for you to getacquainted with the vacancies announced and apply for a position ofyour choice. If you submit your documents through the website and forthe purposes of selection, we will identify and process theinformation you send and your personal data on the basis of yourconsent to do so in accordance with Art. 6 (1) (a) of Regulation (EU)2016/679 (GDPR). In this case we might provide your personal data tothird party that have vacancy matching your profile. This third partywill process your personal data as controller for the purposes offulfilling their vacant positions.

3. What personal data we process

We collect and process your personal data through our website, including through: online forms you submit to our web site.

We may process the below referred categories of personal data (the list is indicative and not exhaustive) provided by you to the Company:

• Names: Full names and initials;
• Contact information: E-mail, Address, Telephone;
• Education, qualification and language skills information;
• Professional experience;
• Other personal information included in the job application;
• Technical data (such as your IP), related to functioning of the website.

4. Rights of the data subjects

As per the Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, all data subjects have the following rights with regard to the personal data that is being processed by the Ispolink LTD:

• Accessto personal data;
• Correction of the personal data:
• Restriction of the processing of personal data;
• Deletionof the personal data (“the right to be forgotten”);
• Data portability;
• Objection to the processing of personal data;
• The right of the data subjects not to be a subject to a decision based solely on automated processing including profiling.

5. Rights of the data subjects

Every data subject has the right of confirmation by Us as to whether or not his or her personal data are being processed, and respectively, to verify if the data is accurate. Requests for exercising data subjects’ rights can be accepted through an email send to the following email address:dpo@ispolink.com

6. Retention periods of personal data

All PII are stored in accordance with the deadlines laid down in the relevant legislation and in accordance with the principles applicable to the storage of personal information.

Ispolink LTD does not store personal data for a period longer than necessary to meet the purposes for which this data is collected and processed. For instance, your contact information will only be stored and used to send the information you have requested from us until you withdraw your consent that can be done at any time by utilizing the “deleteprofile” functionality.

In certain cases, personal data may be stored for longer periods insofar as they are processed for purposes of public interest archiving, scientific or historical research or for statistical purposes, provided that the appropriate technical and organizational measures are implemented aiming to guarantee the rights of the data subjects.

The Webpage uses Amazon Web Services to ensure the security of your personal data processing, storage, and privacy.