Art. 1. (1) Energy Supply collects and processes personal data of Service Clients on the grounds of Art. 4, Para. 1, Pt. 2 and 3 of the Law for Protection of Personal Data and more specifically based on the following:
- Client’s explicit consent;
- Energy Supply’s performance of their obligations towards Clients under the respective service agreements.
(2) By accepting the general terms and conditions of the services provided by Energy Supply, the Clients expressly agree that Energy Supply would be entitled to process personal data, disclosed by the Clients with the conclusion of the contract for the services.
(3) Energy Supply is registered as a personal data administrator with the Commission for Personal Data Protection under № ………….
Art. 2. (1) Energy Supply collects and processes personal data submitted by Clients for the purposes of providing the Services under the agreement with respective Clients, including with regard to the following:
- accounting purposes;
- statistical purposes;
- ensuring information security;
- ensuring the implementation of the agreement for the respective service;
- dispute resolution between the Clients and third parties;
- ensure security and compliance with the applicable legislation and requirements of the contract;
(2) Energy Supply shall observe the following principles when processing Clients’ personal data:
- lawfulness and a bona fide approach;
- specific determination of possessing purposes;
- relevance with regard to possessing purposes;
- accuracy and currentness;
- Clients’ consent to data processing.
Art. 3. (1) Energy Supply shall not collect and process personal data and Clients shall not disclose such data which:
- reveals racial or ethnic origin;
- reveals political, religious or philosophic beliefs, membership in political parties or organizations, associations of a religious, philosophical, political or trade union nature;
- relates to overall health, sexual life or the human genome;
(2) Para. 1 shall not be applicable in cases pursuant to Art. 5, Para. 2 of the Law for Protection of Personal Data.
Art. 4. (1) In collecting and processing Clients’ personal data, Energy Supply shall ensure a sufficient degree of protection against accidental or unlawful destruction or accidental loss, unauthorized access, modification or distribution, as well as other illegal forms of processing, in accordance with the current development of information technologies.
(2) Clients shall be diligent with regard to storing and protecting their personal data when providing it to Energy Supply.
(3) Clients shall be required to maintain the currentness of personal data provided to Energy Supply.
Art. 5. In cases when personal data has been received from the Client it relates to, Energy Supply shall be entitled to provide to that Client in each case, and after initial assessment of the need for such provision in order to ensure fair processing of data relating to the respective natural person, the following information:
- recipients or recipient categories to whom data may be disclosed;
- information on the obligatory or voluntary nature of disclosing data and the consequences of refusing to do so;
- information on right of access and right to adjust collected data.
Art. 6. Energy Supply shall provide Clients with access to personal data collected in the conclusion of the contract for the respective services upon explicit request.
Art. 7. Energy Supply shall provide the Commission for Personal Data Protection with access to the registers it keeps and shall not hinder control over data processing.
Art. 8. Energy Supply shall disclose Clients’ personal data to state authorities after receiving an explicit written order and in cases provided by law, as well as to an extent not exceeding the purposes for which such data is being requested.
Art. 9. After achieving the objectives of processing Clients’ personal data, Energy Supply Ltd. shall destroy the data or transfer it to another personal data administrator, observing the requirement under Art. 25, Para. 1 of the Law for Protection of Personal Data.
Art. 10. (1) Clients shall be entitled to access personal data, which relates to them, after submitting a request for electronic access to Energy Supply.
(2) Energy Supply shall provide access only to data relating to the respective natural person, who has submitted the request for access.
Art. 11. (1) The natural person, to whom the data relates, shall be entitled to request from Energy Supply at any time the following:
- confirmation as to whether their data is being processed, information on the purposes of such processing, data categories and recipients or recipient categories to whom data is being disclosed;
- notification in an intelligible form, containing the individual’s personal data subject to processing, as well as any available information on data sources;
- information on the logic behind any automatic personal data processing, relating to that person.
(2) The natural person, whose data is being processed, shall be entitled to require actions under Para. 1 free of charge once every 12 months at the most.
Art. 12. The natural person, whose data is being processed by Energy Supply, shall be at any time entitled to request from the latter:
- to delete, adjust or block their personal data, should its processing not meet the requirements of the Law for Protection of Personal Data;
- to inform third parties, to whom personal data has been disclosed, of any deletion, adjustment or blocking carried out in accordance with the above sentence, except in cases when this is impossible or involves excessive efforts.
Art. 13. (1) Requests submitted to Energy Supply under the current policy shall include at least the following:
- name, address and other data for the identification of the respective natural person;
- description of what is being requested;
- the preferred form for provision of information;
- signature, submission date of the request and mailing address.
(2) When the request is being submitted by a proxy, a notarized power of attorney shall need to be enclosed.
Art. 14. (1) Energy Supply shall rule on the natural person’s request pursuant to Art. 13, Para. 1 within 14 working days from its submission.
(2) The term under Para. 1 may be extended by Energy Supply up to 30 working days, should gathering all requested data objectively require a longer time and thus, seriously hamper Energy Supply’s activities.
(3) Energy Supply shall notify the natural person, who has submitted the request, if their request is being met in writing or else, send a reasoned refusal. The notification shall be provided by Energy Supply to the natural person via registered mail or in person, against signature.
(4) The lack of notification by Energy Supply to the natural person under this article shall be considered a refusal.
Art. 15. The natural person, to whom the data relates, shall be entitled to:
- object before Energy Supply as regards the processing of their personal data, should there be legal grounds to do so; should such opposition be deemed justified, the personal data of the individual may no longer be processed;
- object to the processing of their personal data for the purposes of direct marketing;
- receive notification before their personal data is disclosed to third parties for the first time or used on their behalf for the purposes of Pt. 2, and be given the opportunity to object to such disclosure or use.
Art. 16. (1) The natural person agrees that Energy Supply has the right to store information or gain access to information stored in the terminal equipment of the recipient of services offered by Energy Supply (cookies).
(2) Energy Supply shall ensure that the service recipient has the opportunity to receive information on data stored in terminal equipment at any time. The respective natural person shall exercise that right by sending an inquiry via email to Energy Supply and by legitimation through their ID card.
(3) If a natural person has not expressly objected to information storing or gaining access to information stored on terminal equipment, Energy Supply shall be entitled to carry out these actions without the individual’s explicit consent. The natural person shall have the opportunity to submit an objection under the current article via Energy Supply’s main internet site.
(4) Energy Supply grants no explicit opportunity to natural persons to disagree with this article in cases of provision of service of information society, which is expressly requested by the recipient of the service of information society.
Commission for Personal Data Protection
Address: Sofia 1592 Prof. Tsvetan Lazarov Str. № 2,
tel.: (02) 940 20 46, fax: (02) 940 36 40
Email: email@example.com, firstname.lastname@example.org