Procedure for exercising rights relating to personal data

The present Procedure aims at assisting current and future customers (data subjects) to exercise their rights related to personal data protection in “ARTEKS ENGINEERING” AD. The procedure governs the process of accepting, considering and responding to requests for data protection rights in connection with the rights relating to personal data protection.

The procedure is consistent with the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to processing of personal data and the free movement of such data (GDPR).

Procedure for exercising rights related personal data protection

For exercising rights relating to personal data protection in accordance with this Procedure any data subject submits a signed Application for exercising rights for protection of personal data to “ARTEKS ENGINEERING” AD.

Submitting an Application for Personal Data Protection

Requests for exercising rights relating to personal data protection are submitted in one of the following ways:

a. to the e-mail address of the Data Protection Officer at “ARTEKS ENGINEERIND” AD: ivelina.daskalova@arteks.net;

b. to the address of the management of “ARTEKS ENGINEERING” AD.

Time-limits for responding to the application

In the request for exercising rights under the protection of personal data "ARTEKS ENGINEERING" AD provides information about the actions taken within one month of the receipt of the request. If necessary, this period may be extended by further two months, taking into account the complexity and the number of requests from a particular person. ARTEKS ENGINEERING" AD shall inform the data subject about any extension within one month of the receipt of the request, indicating the reasons for the extension.

Documents Requirements

Identity documents are required and, in case of authorizing a representative the original authorization document. “ARTEKS ENGINEERING” AD provides personal data only if the person has been properly identified, including verified credentials. The company is not obliged to respond to a request, in the event that it is unable to identify the data subjects or their credentials. “ARTEKS ENGINEERING” AD may require the provision of additional information necessary to confirm the identity and credentials of the data subject, when there are reasonable concerns about the identity of the individual submitting the request.

Rights that the data subject can exercise

1. Right of access to personal data (art. 15 of GDPR) – “ARTEKS ENGINEERING” AD confirms whether personal data are processed for the subject and accordingly provide the necessary information.

“ARTEKS ENGINEERING” AD may refuse to respond to the request for access in cases where requests for access are obviously unfounded or excessive, especially because of their repeatability.

2. Right of rectification (Article 16 of GDPR);

3. Right to erasure (Article 17 of GDPR);

4. Right to restriction of processing (Article 18 of GDPR);

5. Right to data portability (Article 20 of GDPR)

6. Right to object to the processing of personal data (Article 21 of GDPR) where personal data are processed for direct marketing purposes or on the basis of a legitimate interest.