Privacy Policy

1. INTRODUCTION

1.1. Jump.BG Ltd., registered in the Commercial Register at the Registry Agency under UIC 201416377, with its registered seat and management address at: Sofia, 70 Tsaribrodska Street, floor 4, Office 7, hereinafter referred to for brevity as the Company / We, is responsible for compliance with the provisions of the General Data Protection Regulation 2016/679.

1.2. This Privacy Policy aims to inform natural persons what personal data the Company processes in its capacity as a controller and for what purposes, to whom it discloses them, what the rights of natural persons are in relation to their processed personal data, and how they can exercise them.

1.3. The Company is a personal data controller with respect to the data for which it determines the purposes and means of processing. With respect to the personal data that the Company's clients process on their own websites, the Company, in its capacity as a provider of server services, is a processor. Each client who manages a platform on which they process personal data must prepare their own Privacy Policy that complies with Bulgarian and European legislation.

 

2. CATEGORIES OF PERSONS WHOSE PERSONAL DATA ARE PROCESSED THROUGH THE WEBSITE AND THE COMPANY'S SOCIAL MEDIA PROFILES

2.1. In connection with the management and maintenance of the Website and the commercial activity carried out through it, on the one hand, as well as with the provision of information resources on the corporate profiles/pages on social networks and with the communication with everyone who contacts the Company, on the other hand, we may process personal data of the following categories of natural persons:

• Visitors of the Website and users of the information resources;
• Clients of the Company, including registered users;
• Persons submitting inquiries, requests and signals to us or conducting other correspondence with us, regardless of the communication channel used;
• Third parties whose information is contained in an inquiry, request, signal or other correspondence addressed to us, regardless of the communication channel used;
• Persons subscribed to receive a newsletter;
• Persons interacting with our corporate profiles/pages on the various social networks.

 

3. PERSONAL DATA AND CATEGORIES OF PERSONAL DATA THAT WE PROCESS

Data automatically collected or generated in connection with the use of the Website.

3.1. Each time you open our Website and the various menus within it, we receive information in the form of an information protocol (log), which may contain the following:

• The website that referred you to us;
• IP address;
• Date and duration of access;
• Information about the browser and operating system you use;
• Geolocation;
• Logs of factual actions and legal statements performed, e.g. confirmation of acquaintance with the Privacy Policy, Terms and Conditions, etc.

Data necessary for the creation and maintenance of user accounts

3.2. This Website offers the option of registration, which provides you with many features and the ability to purchase services. For the purposes of registration, you must provide the following personal data:

• First and last name;
• Email address;
• Telephone number;
• Address;
• Invoicing data, in case an invoice is requested;
• Password (encrypted);
• Logs of factual actions and legal statements performed, e.g. confirmation of acquaintance with the Privacy Policy, Terms and Conditions, etc.

3.3. Any visitor who has a profile on the Facebook and Google social networks may use these profiles to create an automatic registration on this Website by retrieving the necessary data.

3.4. In their profiles, registered users have access to additional information related to the actions they perform on the Website, such as order history information, information about the services used, the option to enter bank card details for automatic payment of services, etc.

Data of persons processed when submitting inquiries, requests and signals or conducting other correspondence with us

3.5. When you contact us, we may process the following types of personal data relating to you:

• First and last name;
• Email address;
• Telephone number (optional);
• Other information contained in the message that constitutes personal data, including of third parties.

Data of natural persons who subscribe to a newsletter

3.6. When you subscribe to receive a newsletter, current news and special offers, we will process the personal data you provide to us in connection with this subscription. Such data may be:

• Name;
• Email address;
• Confirmation that you are at least 16 years of age and consent to the processing of personal data for the purposes of the newsletter, where such consent is given.

3.7. In addition to the information indicated above, we also keep information proving the fact that you subscribed, the so-called log files – IP address, date and time at which the subscription statement was made.

Data of natural persons interacting with the corporate profiles on social networks

3.8. In order to promote our activity and the services we provide, we may maintain corporate profiles/pages on various social networks (such as Facebook, Instagram, YouTube, etc.)

3.9. The social networks are not maintained by us and the processing of personal data on their part is not under our control. The persons who maintain the respective social networks have their own terms and conditions and personal data protection policies, with which we encourage you to familiarize yourself.

Cookies and similar technologies

3.10. In connection with the management and maintenance of the Website, we may use „cookies“ and other similar technologies to ensure its proper functioning and to analyze its use. You can obtain similar information about the use of the various types of „cookies“ from the Cookie Policy page.

 

4. FOR WHAT PURPOSES AND ON WHAT GROUNDS WE PROCESS YOUR PERSONAL INFORMATION

4.1. The Company processes personal data for purposes necessary for the performance of legal obligations:

(1) providing information to the competent administrative and judicial authorities, or rendering assistance, where applicable;

(2) responding to and fulfilling clients' inquiries and requests;

(3) accounting for commercial operations;

4.2. The Company processes personal data for purposes related to the steps you have taken to conclude a contract:

(1) creation of user accounts;

(2) conclusion and performance of contracts for the services offered by the Company.

4.3. The Company processes personal data for purposes related to its legitimate interest:

(1) managing the Website and analyzing the way it is used;

(2) ensuring the normal functioning of the Website and preventing cyber attacks and other malicious activities;

(3) providing the possibility of communication through various channels (including the contact form on the Website, email correspondence, etc.);

(4) maintaining relations with the Company's corporate profiles on social networks, including communication through them;

(5) exercising and protecting legal rights and interests before administrative and judicial authorities, where applicable.

4.4. The Company processes personal data for purposes that require explicit consent. This circumstance is always indicated in the form by which consent is sought. For example, the processing of personal data when subscribing to the newsletter is based on consent.

 

5. DISCLOSURE OF PERSONAL DATA

Disclosure of personal data to personal data processors

5.1. In certain cases, the Company may disclose certain personal data to strategic partners – subcontractors who work for it by providing services that it needs in carrying out its commercial activity. The personal data that the Company provides to its partners is in a volume necessary for performing the assigned work.

Disclosure of personal data to other personal data controllers

5.2. In certain cases, the Company may provide personal data to other personal data controllers. In these cases, the Company always requires the other controllers to strictly comply with the provisions of Bulgarian and European legislation in the field of personal data protection.

Disclosure of personal data to competent administrative and judicial authorities

5.3. Disclosure of personal data is also possible when it is necessary for the performance of a legal obligation of the Company or for the protection of its legitimate interests, or the interests of third parties. Usually, such disclosure of personal data is made to the competent administrative and judicial authorities.

 

6. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

6.1. The Company does not transfer personal data to third countries outside the European Union.

 

7. PROTECTION OF PERSONAL DATA

7.1. The Company takes precautionary measures, including physical, personnel and documentary protection, to protect your personal data from loss, theft and misuse, as well as from unauthorized access, disclosure, alteration or destruction.

7.2. All employees of the Company are obliged to maintain the confidentiality of your personal data, as well as to comply with the applicable organizational and technical measures for their protection. The access of the Company's employees to your data is limited to the extent necessary for the performance of their duties.

 

8. PERSONAL DATA RETENTION PERIOD

8.1. The Company processes your personal data for a period necessary to fulfill the purposes set out in this Policy, unless it is required to process them for a longer period. Depending on the type of data and the purposes for which they were collected, a retention period is determined, upon the expiry of which the information is permanently deleted.

Retention of personal data in view of compliance with legal obligations

8.2. Personal data related to and/or contained in documents for which there are statutorily regulated retention periods will be stored for the periods provided for in the applicable legislation, unless this Policy provides for a longer retention period.

Retention of personal data necessary for the conclusion and performance of contracts

8.3. Personal data necessary for the conclusion and performance of contracts are stored throughout the entire term of the contract and for up to 5 years from its termination or performance, unless the law provides for a longer retention period.

Retention of personal data contained in correspondence conducted with the Company

8.4. In cases where there is no statutory period for the retention of personal data contained in correspondence conducted with the Company, the personal data are stored for a period of up to 5 years from the completion of the respective correspondence and the relations related to it, respectively.

Retention of personal data when processing is based on consent

8.5. The Company processes personal data collected on the basis of explicit consent provided, which data are processed until the final achievement of the purposes for which they were collected, or until the withdrawal of consent, whichever occurs first. You can withdraw the consent you have provided at any time.

Retention of cookies

8.6. Detailed information regarding the retention periods of the various cookies used by the Company can be obtained from the Cookie Policy published on the Website.

Other periods for processing personal data

8.7. In the event of a legal dispute or proceeding requiring the retention of data, and/or in the event of a corresponding request from a competent state authority, data may be retained for a period longer than the periods indicated above, until the final completion of the dispute or proceeding before all instances and for a period of up to 5 years after its final completion.

 

9. YOUR RIGHTS

9.1. If you have provided your personal data to the Company, you have the following rights, which you can exercise at any time:

• Right to information – You have the right to receive information about your personal data processed by the Company. This Policy aims to provide you with detailed information regarding the processing of your personal data when you use the Website.
• Right of access – if you are a registered user, you have the option to check in your user profile what personal data of yours has been collected and stored on the Website. You also have the right to make corrections to the data included in your profile. Regardless of whether you are a registered user or not, you have the right to request from the Company and to receive information regarding what personal data of yours is processed, as well as to obtain access to this data.
• Right to rectification – You have the right to request the rectification (change or supplementation) of your provided personal data.
• Right to erasure – You have the right to request the erasure of your personal data when the conditions for this provided for in the Regulation are met.
• Right to restriction of processing – You have the right to request the restriction of the processing of your personal data, in case any of the hypotheses provided for in the Regulation is present.
• Right to data portability in a structured, commonly used and machine-readable format – You have the right to receive your personal data processed by the Company in a structured, commonly used and machine-readable format. You also have the right to request the transfer of your personal data from the Company to another controller, where this is technically feasible.
• Right not to be subject to a decision based solely on automated processing, including profiling.
• Right to object – You have the right to object at any time to the processing of your personal data. In case you make such an objection, the Company will consider it and will terminate the processing if the objection is justified. In case the objection is unjustified, the Company will inform you of this circumstance.
• Right to withdraw consent for the processing of personal data – You have the right to withdraw the consent you have provided at any time, when the processing of personal data is carried out on the basis of such consent. When the consent is withdrawn by you, we will terminate the processing of personal data for the purposes for which it was provided. The withdrawal of consent does not affect the lawfulness of the processing of your personal data back in time, i.e. up to the moment of submitting the request for withdrawal.
• Right to lodge a complaint with the supervisory authority – You have the right to lodge a complaint with the supervisory authority, in case you consider that your personal data protection rights have been violated.

If you wish to exercise your rights in connection with the protection of your personal data, you can contact the Company by filling in the Request Form for a Natural Person here and/or by sending an email to the following email address: gdpr@jump.bg.

You can exercise your rights indicated above completely free of charge. In case your requests are manifestly unfounded or excessive, the Company may impose a reasonable fee or refuse to take action on the request.

 

10. SUPERVISORY AUTHORITY

10.1. The Commission for Personal Data Protection (CPDP) is the independent state authority that ensures the protection of persons in the processing of their personal data and in the access to this data, as well as the control over compliance with the Personal Data Protection Act in the territory of the Republic of Bulgaria.

10.2. In case of suspicion that your rights related to the protection of your personal data have been violated, you can submit a signal to the CPDP at:

• Address: Sofia 1592, 2 „Prof. Tsvetan Lazarov” Blvd.
• Email: kzld@cpdp.bg
• Website: www.cpdp.bg

 

11. CONTACT DETAILS OF THE COMPANY

11.1. If you have questions or uncertainties regarding the processing of your personal data or wish to exercise any of your rights, you can contact the Company at the contact details indicated: gdpr@jump.bg.

 

12. VALIDITY AND UPDATING OF THE PRIVACY POLICY

12.1. The Company reserves the right to amend and update its Policy. In case of a change in this Policy, a notice will be published on the Website, as well as the updated „Privacy Policy“.

 

These terms and conditions were adopted by Jump.BG Ltd. on 01.09.2023 and enter into force as of 02.10.2023.