Privacy Policy with Regard to Job Applicants

Information About The Controller

1. Name: VPS.BG Ltd
2. Seat and registered address: Blvd. Bulgaria 58, ent. C, fl. 4, office 15; Sofia 1680, Bulgaria
3. Entry in public registers: UIC/UIN: 203144520
4. VAT registration: BG 203144520
5. E-mail: legal@vps.bg
6. Data Controller Certificate number: 413076

Supervisory bodies:

"VPS.BG Ltd." collects and processes your personal data in connection with the conclusion and execution of contracts with the Company on the grounds of Art. 6, para. 1, Regulation (EC) 2016/679 (GDPR), and in particular on the following grounds:

• To take steps on your request to sign a contract if you are a candidate for work with us;
• Compliance with a statutory duty applicable to the Administrator;
• For the purposes of the legitimate interests of the Administrator or a third party.

We collect and process the personal data you provide to us by applying for work at VPS.BG Ltd., including for the following purposes:

• Individualization of the applicant;
• Making contact with you and conducting communication;
• Selection of candidates.

The contact details of the job applicant shall be official information and as such shall not be considered as personal data.

We keep your personal data you have provided to us for the entire duration of the job announcement, and in the event that we would like to continue storing your data after this period for the purpose of further communication with you, we will send you by email, to give your explicit consent that your data will continue to be stored.

We comply with the following principles when processing your personal information:

• Lawfulness, good faith, and transparency;
• Limitation of the purpose of the processing;
• Relevance to processing goals and minimization of data collection;
• Accuracy and timeliness of the data;
• Integrity and confidentiality of the processing, and ensuring an adequate level of security of personal data.

When processing and storing personal data, VPS.BG Ltd. may process and store personal data to protect the following legitimate interests: fulfilling its obligations to the National Revenue Agency, the Ministry of Interior, and other state and municipal authorities.

VPS.BG Ltd. performs the following operations with the personal data you provide as job applicants for the following purposes:

• Conclusion and performance of an employment or civil contract with a physical person: to process a selection of job applicants, we process the personal data you have sent us to your resume.

Conclusion of the Impact Assessment: Given the small volume of data subjects that are processed and given the limited amount of personal data collected, an impact assessment is not necessary for the current operation.

VPS.BG Ltd. does not collect or process any personal data related to the following:

• Reveal racial or ethnic origin;
• Reveal political, religious, or philosophical beliefs or membership of trade unions;
• Genetic and biometric data, health data, or data on sexual life or sexual orientation.

The personal data are collected by VPS.BG Ltd. from the persons to whom they refer.

VPS.BG Ltd. does not make automated decision making with data.

VPS.BG Ltd. keeps your personal data as a candidate for work for a period no longer than the availability of a current job offer, published on our website or elsewhere. After the expiration of the notice or the completion of the selection, VPS.BG Ltd. takes the necessary care to erase and destroy all your data without undue delay or to anonymize them (i.e. to bring them in a form that does not reveal your personality) unless you expressly agree that your data will continue to be stored and processed for the future.

VPS.BG Ltd. shall notify you in case the period for storing the data needs to be extended in order to comply with a statutory obligation or in view of the legitimate interests of the company or otherwise.

VPS.BG Ltd. may, at its own discretion, transmit all or part of your personal data to processor personal data for the fulfillment of the processing purposes you have agreed to, subject to the requirements of Regulation (EC) 2016/679 (GDPR).

VPS.BG Ltd. notifies you in case of intent to transfer some or all of your personal data to third countries or international organizations.

1. Withdrawal Of Consent To Process Your Personal Data

You may at any time withdraw your consent to processing by sending a formal request to legal@vps.bg.

• VPS.BG Ltd. may ask you to certify your identity with an identity document at the official address of VPS.BG Ltd.
• VPS.BG Ltd. may continue to process part or all of your data if there is a legal obligation or for protecting legitimate interests.
• Withdrawal does not affect the merits of processing done before withdrawal.

2. Right Of Access

• You have the right to request and obtain confirmation of processing.
• You may request a copy of your personal data in electronic or other forms.
• Access is free, but VPS.BG Ltd. may impose an administrative fee in case of repeatability or excessive demand.

3. Right To Delete ("To Be Forgotten")

You may request deletion when:

• Data are no longer necessary;
• Consent is withdrawn and no legal basis exists;
• You object to processing;
• Data has been tampered with;
• Deletion is required by law;
• Data was collected in relation to information society services.

VPS.BG Ltd. may retain data when:

• Needed for freedom of expression/information;
• For public health interest;
• Required by law;
• For research/archiving/statistics;
• For legal claims.

Deletion will exclude your three names (kept for reporting).

4. Right Of Correction Or Completion

You may request correction of inaccurate or incomplete data.

5. Right Of Portability

• You may request a readable copy of your data or transfer to another administrator.
• You also may request VPS.BG Ltd. to transfer directly when technically feasible.

6. Right Of Limitation

You may request restriction when:

• Accuracy is contested;
• Processing is illegal but you request limitation;
• Data is no longer needed but required for legal claims;
• You object to processing pending verification.

7. Right To Receive Information

You may ask VPS.BG Ltd. to inform you of all recipients to whom corrected, deleted, or restricted data has been disclosed.

8. Right Of Objection

You may object at any time to processing, including profiling.

9. Your Rights In The Case Of Personal Data Breach

VPS.BG Ltd. shall notify you without undue delay if a breach poses high risk to your rights and freedoms, unless:

• Adequate measures have already been taken;
• Measures ensure no high risk remains;
• Notification would require disproportionate effort.

For the purposes of processing your personal data and executing the concluded contract, VPS.BG Ltd. may provide your data to third parties - personal data processors that comply with all the legality and security requirements for the processing and storage of your personal data.

VPS.BG Ltd. does not transfer your data to third countries.

• In case of violation of your rights under the above or applicable data protection laws, you may file a complaint with the Personal Data Protection Commission.
• You may exercise all rights by sending a formal request to legal@vps.bg.
• VPS.BG Ltd. ensures that this Mandatory Information will be available via link on its website or by other appropriate means.
• VPS.BG Ltd. reserves the right to update this Policy at any time without prior notification.

VPS.BG Ltd.
Blvd. Bulgaria 58, ent. C, fl. 4, office 15; Sofia 1680, Bulgaria
Email: legal@vps.bg

Last updated: January 28th, 2021