Customer

Customers are all individuals who are using our paid or free services, including our free document generator

Email Subscribers

Email subscribers are all individuals subscribed to our email newsletter or other email communication

Website visitor

Website visitors are all individuals visiting our website

Analytical data

anonymized IP address, website sessions, duration of sessions, visited links, User Agent, etc.; We process analytical data about the user experience on our Website and while using our Service.  We collect analytical information only after receiving your consent. You can opt-out at any time.

Data collection:

– Automatically collected data

– Directly from the Data Subject

We aren’t receiving personal data from 3rd parties.

Email Subscriber’s data

The data includes email, name and/or information about preferences; The personal data is collected with the purpose to send emails to subscribers..  Email subscribers can unsubscribe at anytime using the “unsubscribe” button

Data collection:

– Directly from the Data Subject

We aren’t receiving personal data from third parties.

Identification and communication data

The data may include names, email, and address; Identification data is processed to identify the data subject, to enter into a contract and/or communicate in regard to the used services.

Data collection:

– Directly from the Data Subject

We aren’t receiving personal data from third parties.

Payment information

The data includes the due or completed payment amount, date of payment and payer; The personal data is collected to track due and completed payments.

Data collection:

– Directly from the Data Subject

– Data received from a 3rd party

We receive personal data from:

– Payment Service Providers

Consent from the data subject

the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

Performance of contract

processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

Legal Obligations

processing is necessary for compliance with a legal obligation to which the controller is subject;

Legitimate Interest

processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

This Privacy Notice covers the following services:

Privacy Assistant

Software as a Service compliance solution helping businesses get compliant with privacy regulations such as the GDPR, CPRA, etc. (referred to as “Privacy Assistant”). Website: http://conformally.com; The Service is available as Web application. More information about the service and the terms of use at http://conformally.com/terms

Privacy Navigator 

Resource hub and free document generator available at https://conformally.com/privacy-navigator/ (referred to as “Privacy Navigator”. The Service is available as Web application. More information about the service and the terms of use at http://conformally.com/terms

Purpose

Legal basis and notes

Accounting

– legal obligation

Our legal obligations are under the Bulgarian taxes laws such as VAT Act, Corporate Income Tax Law, etc.

Processed personal data categories:

– Payment information

Customer Support

– performance of a contract

Personal data is processed for the provision of the following services:

– Conformally GDPR

Processed personal data categories:

– Identification data

– Payment information

Email Marketing

– consent

Processed personal data categories:

– Email Subscriber’s data

Personalised Advertisement

– consent

Processed personal data categories:

– Analytical data

Website Analytics

– consent

Processed personal data categories:

– Analytical data

Automatic expiration after a period of time

We have set certain retention periods so that some data expires automatically after a specific period of time.

Data Backups

We back up data for security reasons. Sometimes it is impossible to delete the data stored in a backup immediately. In such cases, we will securely store your personal information and isolate it from any further processing until deletion is possible.

Data obtained during pre-contractual relations

We process data when the processing is necessary in order to take steps at the request of the data subject prior to entering into a contract

Deletion of the data by the data subject

Data subjects can delete the data by themselves. In this case, the data is retained for a short period of time after the deletion so the data subject could be able to revert a deletion by mistake.

Establishment, exercise or defence of legal claims

We may retain information where necessary for the establishment, exercise or defence of legal claims

Retention or deletion under a contractual obligation

We may be subject to a contractual obligation to keep or delete the data. In such cases we may retain or remove the information to comply with our contractual obligations.

Retention or deletion under a legal obligation

We may be subject to a legal obligation to keep or delete the data. Examples include mandatory data retention laws, government orders to preserve data relevant to an investigation or data kept for the purposes of litigation. Conversely, we will remove unlawful content if the law requires us to do so.

Upon Request for Removal

We delete the personal data upon a request for removal from the data subject when there is no other legal ground for the retention of the data.

Accounting Service Providers

We may share personal data with Accounting Service Providers to fulfill our legal obligations to maintain diligent accounting and comply with legal and tax requirements Shared personal data categories:

– Identification data

– Payment information

Ad Service Providers

We share information with Ad Service Providers so they can serve ads to the most relevant audience who is interested in our services Shared personal data categories:

– Analytical data

Analytics Service Providers

We share information with Analytics Service Providers to be able to analyse the data we have collected Shared personal data categories:

– Analytical data

Communication Service Providers

We share information with Communication Service Providers to be able to coordinate our team operations Shared personal data categories:

– Identification data

Email Marketing Service Providers

We share information with Email Marketing Service Providers to be able to send emails and newsletters Shared personal data categories:

– Email Subscriber’s data

Government Institutions

We may share personal data with government institutions to perform our legal obligations such as accounting. Shared personal data categories:

– Payment information

– Payroll data

Infrastructure and cloud service providers

We share data with infrastructure and cloud service providers to be able to provide our services and maintain our operations Shared personal data categories:

– Identification data

– Job Candidates Application

Payment Service Providers

We may use Payment Service Providers to be able to receive and make payments Shared personal data categories:

– Payment information

Be informed

Be informed of the personal data we process about you and how we process it.

We inform you:

●      through this Policy

●      through information provided to you as you use our Service

●      by answering your specific questions and requests when you contact us

Know/

Access

Request to know and access the personal data we process about you.

To request a copy of your personal data you can contact us.

Correction

Request that we amend or update your personal data where it’s inaccurate or incomplete.

You can edit your User Data by contacting us or by using your user profile

Deletion

Request that we delete certain of your personal data.

For example, you can ask us to delete your personal data:

●      that we no longer need for the purpose it was collected for

●      that we process based on the legal basis of consent, and you withdraw your consent

●      when you object (see section ‘Object’ below) and

●      you make a justified objection, or

●      you object to direct marketing

There are situations where We are unable to delete your data, for example when:

●      it’s still necessary to process the data for the purpose we collected it for

●      Our interest in using the data overrides your interest in having it deleted. For example, where we need the data to protect our services from fraud

●      We have a legal obligation to keep the data, or

●      We need the data to establish, exercise or defend legal claims. For example, if there’s an unresolved issue relating to your account

To delete your personal data you can contact us. You can also see more details in the section “HOW LONG WE KEEP YOUR PERSONAL INFORMATION“

Restriction

Request that we stop processing all or some of your personal data.

You can do this if:

●      your personal data is inaccurate

●      our processing is unlawful

●      we do not need your information for a specific purpose, or

●      you object to our processing and we are assessing your objection request. See section ‘Object’ below

You can request that we stop this processing temporarily or permanently.

You can exercise your right to restriction by contacting us.

Object

Object to us processing your personal data.

You can do this if:

●      We are processing your personal data on the legal basis of legitimate interests, or

●      We are processing your personal data for tailored advertising.

To exercise your right to object, you can contact us

Data portability

Request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party’s service.

You can request us to transmit your data when we are processing your personal data on the legal bases of consent or performance of a contract. However, We will try to honor any request to the extent possible.

For information about how to exercise the right to portability, see ‘Access’ above.

Not be subject to automated making

Not be subject to a decision based solely on automated decision making (decisions without human involvement), including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.

We don’t perform automated decision making including profiling.

Withdrawal of consent

Withdraw your consent to us collecting or using your personal data.

You can do this if We are processing your personal data on the legal basis of consent.

To withdraw your consent, you can:

●      adjust the relevant control

●      contact us

Lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority if you believe any of your rights have been violated

See the contact details of the data protection authorities below.