Data Protection Policy

Art. 1 General Provisions
In hosasolar.bg we ensure the confidentiality and protection of your personal data you provide to us as a Data Privacy Administrator.
This Policy explains when and why we collect personal information (“personal information” and “personal data” are used as identical terms in this Policy) for people who visit our site and use our services, how we use it, to reveal it to others and how we keep it.
We may change this Policy at certain times, so please make sure you are familiar with the current Privacy Policy. By using our site and the services provided through it, you agree to be bound by this policy.
Any questions related to this Policy may be sent to e-mail: office@hosasolar.bg
 
Art. 2 About us
We are hosasolar.bg and provide services, products or general information about our business.
Our management address: 7 Dojran St. Blagoevgrad, 2700 Bulgaria. When we use “we” and “us” and verbs in this form in the text below, we mean hosasolar.bg
 
Art. 3 How we collect personal information from you
We receive information about you when you use our site hosasolar.bg, for example when you send a request for an order / information, or when you request, order and use the services provided on the site.
 
Art. 4 What kind of personal information we collect
We only collect basic personal data for you that do not include special categories of personal data (“sensitive data”).  The personal information we collect may include the name, address, e-mail address, telephone number, other data required by the Accountancy Act and other laws as well as information about which pages are visited and when.
 
Art. 5 Why we need your data
We need to know your personal data in order to provide you with the services offered through this site within the framework of a contract between us, as well as with information you have requested or explicitly agreed to. We will not collect personal data that we do not need for the above purposes.
 
Art. 6 How to Use Your Information
We may use your information in order to:
• Provide the services you have requested, including processing your orders and fulfilling our obligations arising from the contractual relationship between us;
• Provide new information directly related to the services you have requested;
• Respond to inquiries and provide you with information you have requested, including help with resolving questions that arise in connection with your inquiries;
• Use re-marketing through trusted sites, including Google AdWords and Facebook;
• Look for your opinions or comments about our services and products / trainings;
• Make statistical analyzes and other analyzes to improve our services;
• Preserve your interests in the use of our site or services;
• Inform you about changes in our general provisions, privacy policy, or our services.
 
Art. 7 How long we keep your information
We keep your personal data only as far as and for as long as it is necessary for the relevant activity for which it is provided or as provided in a contract between us, subject to the requirements and deadlines provided for in the Accountancy Act, Tax Laws and other applicable acts in the Republic of Bulgaria.
The data you provide for marketing purposes is retained until you notify us that you no longer wish to receive the relevant information from us.
Once the goals of processing your personal data have been met, we destroy them.
 
Art. 8 Who has access to your information
We are not allowed to sell, rent or share your information with third parties for marketing purposes.
We may transfer your information to third parties – service providers, subcontractors, and other affiliated organizations for the sole purpose of performing tasks and providing services to you on our behalf.
However, when we use third-party service providers, we only disclose the personal information that is required to provide the service and we have a contract with the third party that requires it to keep your information and not to use it for own direct marketing purposes.
We will not provide your information to third parties for their marketing purposes unless you have requested this, or is required by law, legal action or to prevent fraud or other crime.
We work with a variety of third-party service providers to provide you with quality and reliable services. When you search for or purchase one of these services, the third-party service provider will use your information to provide you with information and fulfill the obligations that arise in connection with such services. In some cases, they will act as data administrator of your information, so we recommend that you familiarize yourself with their Privacy Policy. These third-party service providers will share your information with us and we will use it in accordance with this Privacy Policy.
Providing your data to public authorities can only be done in the cases provided by law and in a volume that does not exceed the purposes for which they are requested.
The Personal Data Protection Commission exercises legal control over the process of processing personal data and we provide full access to the personal data registers kept by us under the legal conditions for doing so.

Art.9 Where we process your data
All personal data is processed in Bulgaria, and for the purposes of hosting and maintenance, the information itself is also located in Bulgaria. Third parties do not have access to your personal data, unless required by law.
 
Art. 10 In which cases will we contact you
You have a choice whether to get information from us or not.
We may contact you freely when and so far as is necessary for the performance of the services you have requested and the contractual obligations between us, to provide new information directly related to the services you have requested, in response to Your inquiries, for the purposes of preserving your interests in connection with the use of our site or services or on the basis of a legal requirement. We have the right to send an email newsletter from the site, in case you have subscribed it.

We will not contact you for marketing purposes by e-mail, telephone, SMS or mail, unless you have given us your prior explicit consent or the communication is directly related to you and meets the requirements of the General Data Protection Regulation of EC (2016/679),
 
Art. 11 How you can access, correct or delete your personal data
You have the right at any time to ask us:
• for access to your personal data collected in the process of providing and using the services, including: confirmation that we process your personal data, what categories are they, the purposes of that processing, and the recipients to whom the data is disclosed, and a copy of your personal data being processed and their source;
• to correct information you have requested with us when it has become inaccurate or outdated, e.g. your email address, and any other information;
• for deletion or blocking of your personal data when processing does not meet the requirements of the Personal Data Protection Law or the General Regulation on Personal Data Protection (Regulation (EU) 2016/679);
• for Notification of such correction, deletion or blocking of the third parties to whom your personal data has been disclosed, unless this is impossible or involves excessive effort.
The requested from you access, correction, deletion or blocking is solely with respect to your personal data. It’s free.
To request access, correction, deletion or blocking of your personal data we process, you must send us a written application containing:
1. name, address and other identification data of the individual concerned;
2. a description of the request;
3. preferred form for provision of the information under Art. 28, par.1 of Personal Data Protection Law;
4. signature, date of filing of the application and address for correspondence;
5. notarized power of attorney when submitted by an authorized person. The application can also be signed with an electronic signature.
The application is sent to an email:  office@hosasolar.bg
We will execute your request for access, correction, deletion or blocking within 14 days, in compliance with legal requirements and exceptions.
You will be notified of the decision to perform the requested action or the refusal to do so in accordance with the law.
 
Article 12 How can you file an objection or complaint against the processing of personal data
You are entitled to:
• object to us against the processing of your personal data if there is a legitimate reason for doing so; when the objection is justified, the personal data of the individual concerned can no longer be processed;
• oppose the processing of your personal data for the purposes of direct marketing;
• be notified before your personal information is disclosed for the first time to third parties or used on their behalf for the purposes of the preceding paragraph of this article, giving you the opportunity to object to such disclosure or use.
If you would like to make any complaint about the way your data is being processed, you can contact us at office@hosasolar.bg . If you are not satisfied with our response or do not believe that we are processing your data in a lawful way, you can contact the personal data protection authority – the Personal Data Protection Commission.
Address: Sofia 1592, 2 “Prof. Tsvetan Lazarov”Str.
tel .: 02/915 35 18, 02/915 35 15, 02/915 35 19, fax: 02/915 35 25
E-mail: kzld@cpdp.bg
Web site: www.cpdp.bg
 
Article 13 Security measures to protect your information from loss, misuse or alteration
When you give us personal information, we take measures to ensure that it is handled in a secure manner. The website hosasolar.bg uses a secure communication protocol SSL certificate. HTTPS authenticates the site and the corresponding webserver on which it is uploaded. It also encrypts the client-to-server connection in both directions, providing protection against wiretapping, tampering or falsifying the content of the messages. In practice, this provides sufficient guarantees that the user connects to the correct site (not a false copy), and ensures that the content of the messages between the user and the site can not be read or altered by third parties. Additional information about HTTPS (https://bg.wikipedia.org/wiki/HTTPS).
Non-sensitive information (your email address, etc.) is usually transmitted over the Internet, and can never be guaranteed 100% security. In this regard, while we strive to protect your information, we can not guarantee the security of the information you send us, and you do so at your own risk. Once we receive your information, we make every effort to ensure its security in our systems.
 
Art. 14 Profiling
We will not use automatic decision-making or profiling.
 
Art. 15 Using cookies
Like many other websites, our uses cookies too. Cookies are small, separate packages of information sent by an organization to your computer to recognize you at your visit. They collect statistics for your actions in the browser. This allows us to track patterns of user traffic, as well as to develop statistical analyzes of service usage, such as the time spent on the website and pages visited most often. Cookies do not identify you as a person, and aggregated statistics do not include personal information. Cookies help us improve the website and provide a better personalized service.
By agreeing to use this site and its services, you agree to the use of cookies, including Google Analytics cookies.
If you prefer not to receive cookies while browsing the Website or using HTML formatted emails, you may decline them. To do this, you can set your internet browser to warn you before accepting a cookie or to refuse cookies when it alerts you to their presence. You can usually find these settings in the ‘Options’ or ‘Preferences’ menu of your browser. To be aware of these settings as well as more detailed information, you can use the ‘Help’ button on your browser’s menus.
 
Art. 16 Links to other web sites
Our web site may contain links to other Web sites managed by other organizations. This privacy policy applies only to our site so that we encourage you to read the privacy statements of the other websites you visit. We are not responsible for the security policy of other websites, even if you use links from our site to access them.
Additionally, if you have come to our website through a third-party site, we can not be held responsible for the privacy policy and practices of the third party’s site owners and administrators, and we encourage you to review its Privacy Policy.
 
Art. 17 Transferring personal information outside EU
As part of the services we provide to you, the information you provide to us may be transferred to countries outside the European Union (the “EU”). These countries may not have similar privacy laws as Bulgaria. By submitting your personal data, you agree to such transfer, storage, or processing. If we transfer your information outside the EU in this way, we will take appropriate security measures to ensure the protection of your personal information in accordance with this Privacy Policy.
If you use our services while outside the EU, your information may be transferred outside the EU to provide you with these services.
 
Art. 18 Revision of this Policy
We review this Policy regularly to ensure quality and legitimate protection of your personal data. This Policy was last updated in March 2018 and is in line with the General Data Protection Regulation (Regulation (EU) 2016/679).