PRIVACY POLICY
This is the website of the Bulgarian Ports Infrastructure Company (BPI Co.). In our Privacy Policy we would like to provide you with all relevant information on how we process your personal data (what data we collect, for what purpose, do we share such data with third parties, terms of storing such data) and what rights you have.
BPI Co.’s Contact Details:
69, Shipchenski Prohod Blvd, Slatina District, 1574 Sofia
Email address: office@bgports.bg
Website: www.bgports.bg
Contact details of the data protection officer:
69, Shipchenski Prohod Blvd, Slatina District, 1574 Sofia
Email address: dpo@bgports.bg
Telephone No. 02/807 99 51
“Personal data“ means any information relating to an identified or identifiable natural person, who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
“Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Controller“ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
The information, which may contain your personal data, shall be processed or is processed by the BPI Co. in the following cases:
Human Resources
When you apply for a vacant position or if you are an undergraduate or graduate student, applying for paid or non-paid internship, you disclose to us personal data, such as names, photographic image, date of birth, telephone number, address, acquired level of education, additional qualifications, information on former employment (if any), etc. The purpose of such personal data processing is to select the most appropriate candidate for the vacant position and to retain the information of the eliminated candidates, in order to include them in subsequent selection procedures. BPI Co. shall store your data for up to six months after the final completion of the selection procedure. With your personal consent, your personal data may be stored for up to two years, so that you take part in subsequent selections, and you may withdraw such consent at any time. You can find BPI Co.’s Policy for the processing and protection of the personal data of job candidates in the “Careers“ Section (available in Bulgarian).
Contractors
We process your personal data, when we undertake steps for the conclusion, amendment, performance and termination of contracts, pursuant to the Public Procurement Act, the Obligations and Contracts Act, the Trade Act, etc. BPI Co. processes data, such as names, PIN, contact details, signature, including digital, banking information, educational and qualification degrees, professional experience, certificates, etc. of natural persons – contractors (clients, suppliers, sub-contractors, etc.), of natural persons, who represent or are employed by contractors, etc.. Your data is provided to governmental, municipal, judicial and other authorities and institutions only in the legally required cases. You can find BPI Co.’s Policy for the processing and protection of the personal data of contractors in the “Tenders“ Section (available in Bulgarian).
National Maritime Single Window
If you are a member of the crew or a passenger of a ship, arriving in or departing from a port in the Republic of Bulgaria, a ship-owner, ship manager, operator or agent, we process your personal data in conformity with the Law on the Marine Areas. Inland Waterways and Ports in the Republic of Bulgaria and the Ordinance on the Organization on the Performance of Border Passport, Customs, Health, Veterinary and Phytosanitary Control, as well as the Control of the Vehicles and Vessels in the ports of the Republic of Bulgaria. The personal data that we process may include names, sex, ID document and issuing country, nationality, date and place of birth, other information. Your personal data may be disclosed to the Executive Agency Maritime Administration, Customs Agency, Border Police, the Regional Health Inspectorates, Regional Food Safety Directorates, Border Veterinary Control and other bodies and institutions, only in the cases, provided for by law. Your data shall be stored for a period of three years, from the date of their submission. You can find BPI Co.’s Policy regarding the National Maritime Single Window in the “E-Services” Section.
Video Surveillance
You can be the subject of video surveillance, when you enter, reside in or exit a building or office premises of the BPI Co. Every building, where video surveillance is operated, is labelled with a sign “CCTV in operation“ and аn information board. We do not operate CCTV in meeting rooms, personnel rest rooms, toilettes and other similar premises. The objective of the video surveillance is to preserve the property of the BPI Co., as the video recordings are stored for two months and the access thereto is strictly limited. You can get more detailed information from the information board in the building you are visiting.
Visitors
In order to enter buildings or office premises of the BPI Co., which are not publicly accessible areas, you are required to introduce yourself, as well as to disclose the organization you represent and the reason for your visit. You may be required to present an ID document, as the ID shall not be scanned, copied or stored by the security officers. We process your personal data for the purpose of protecting BPI Co.’s property, for access control, as the information shall be stored for one month and the access thereto shall be strictly limited. Each building with access control is provided with a notice board, which provided detailed information in this respect.
Reports and complaints
Your personal data, when reporting or lodging complaint, and the personal data, specified in the reports or complaints, are processed by the BPI Co. on a case-by-case basis. The data in your reports or complaints may be disclosed to third parties, only if so provided for by law.
Telephone Calls
When you call any of BPI Co.’s landline telephone numbers, you identify your telephone line (caller line identification – CLI). We use this information to return a missed call.
Links to other websites
This Privacy Policy does not guarantee the privacy of your personal data, when using the links, published on BPI Co.’s website, leading to other websites. It is highly recommended that you review the privacy policies of all such other websites that you visit.
Your rights, when your personal data is processed
You have the following rights, according to Regulation (EU) 2016/679, when the BPI Co., as an administrator, processes your personal data:
Right of information;
Right of access to the processed data;
Right of rectification of the processed data;
Right of erasure of the processed data;
Right to limitation of the data processing;
Right of portability of the processed data;
Right to object to the data processing;
Rights, related to the decisions based on profiling and automated decision-making;
Right to withdraw your consent to the data processing.
BPI Co. is obliged to notify any and all third parties, to whom your personal data have been disclosed, of any rectification, erasure or limitation in the processing of your personal data.
If you want to exercise any of your rights, related to the processing of your personal data, please complete the attached Application for Exercising of Rights. You can exercise your rights by any one or more of the following methods: by filing an Application for Exercising of Rights in person or by your authorized person, to the Head Office of the BPI Co. in Sofia or in any of the branches – territorial directorates in Burgas, Varna, Lom or Ruse; to file an Application for Exercising of Rights by electronic means, to the email address of the data protection officer with the BPI Co. subject to the provisions of the effective legislation (Electronic Document and Electronic Certification Services Act, the Electronic Government Act and the Electronic Identification Act).
We may request from you the provision of further information, to confirm your identity. This is intended to prevent any disclosing of your personal data to a third party.
We will respond to your Application for Exercising of Rights within one month. If you have lodged several Applications for Exercising of Rights or if your requests are particularly complex, the period, in which we shall respond, may be extended up to two months. In this case you will be notified of the extended response period.
If your requests are evidently unjustified, excessive or repetitive, we may refuse to fulfil your request, and you shall be duly notified of our decision and motives.
You may lodge a complaint to the data protection supervisory authority. The supervisory authority in the Republic of Bulgaria is the Commission of Personal Data Protection, address: 2, Tsvetan Lazarov Blvd, 1592 Sofia, website: https://www.cpdp.bg/.
Should you have any questions, related to the processing of your personal data, or want to exercise your rights, or if you believe that your rights have been infringed, please contact BPI Co.’s data protection officer first, before you refer the matter to the data protection supervisory authority.
BPI Co. reserves its right to amend its Privacy Policy.