How to submit a request
You can exercise your rights under the GDPR in one of the following ways:
- through the contact form, choosing the subject “GDPR request”;
- by email to info@lod.bg with the subject “Personal data”;
- in writing to: 67 Georgi Benkovski St., Pazardzhik, Bulgaria.
In your request please state: your name, contact details, which right you are exercising and, if possible, in what context we processed your data (enquiry, contract, client account). To protect your data, we may ask for additional information to confirm your identity.
Deadlines
We respond without undue delay and no later than one month after receiving the request. For complex or numerous requests the deadline may be extended by a further two months, of which we will inform you. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests.
Your rights in brief
| Right | What it means |
|---|---|
| Access (Art. 15) | To receive confirmation of whether we process your data and a copy of it. |
| Rectification (Art. 16) | To have inaccurate or incomplete data corrected. |
| Erasure (Art. 17) | To have data deleted when there is no basis for keeping it. |
| Restriction (Art. 18) | To have processing restricted, for example while we verify accuracy. |
| Portability (Art. 20) | To receive your data in a machine-readable format. |
| Objection (Art. 21) | To object to processing based on legitimate interest or for direct marketing. |
| Automated decisions (Art. 22) | Not to be subject to a fully automated decision with significant effects. We do not make such decisions about website visitors. |
When we act as a processor
With hosting, support, development and other services we often process personal data on behalf of our clients. In these cases the client is the controller and we are the processor. We sign a data processing agreement under Article 28 GDPR describing the subject matter, the security measures, the sub-processors and the assistance we provide with data subject requests and incidents.
Security breaches
In the event of a personal data breach, we notify the Commission for Personal Data Protection within 72 hours where required, and the affected persons where there is a high risk to their rights. As a processor, we notify our clients without undue delay.
Complaints
If you believe your rights have been infringed, you have the right to lodge a complaint with the Commission for Personal Data Protection – 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the supervisory authority of your EU country of residence. We would be glad if you first gave us the opportunity to resolve the matter.