General information

From May 25, 2018, a new regulation for the protection of personal data (General Data Protection Regulation), adopted by the European Union, entered into force. The regulation aims to ensure the protection of the data of natural persons from all EU member states and to unify the regulations for their processing.

Information about the competent supervisory authority

Name: Personal Data Protection Commission
Headquarters and management address: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2
Correspondence details: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2
Phone: 02 915 3 518
Email: kzld@government.bg, kzld@cpdp.bg
Website: www.cpdp.bg

InventTech operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data.

Grounds for collecting, processing and storing your personal data

Art. 1. (1) InventTech collects and processes the personal data that you provide in connection with the use of our services and for concluding a contract with the company, as well as for registering to participate in our events, including for the following purposes:
statistical purposes;
protection of information security;
subscribing to articles published on the InventTech Blog;
leaving comments under articles published on the InventTech Blog;
newsletter subscription.
(2) InventTech observes the following principles when processing your personal data:

legality, good faith and transparency;
limitation of processing purposes;
relevance to the purposes of the processing and minimization of the data collected;
accuracy and timeliness of data;
limitation of storage in order to achieve the objectives;
integrity and confidentiality of processing and ensuring an appropriate level of personal data security.

What types of personal data does InventTech collect, process and store?

Art. 2. (1) InventTech performs the following operations with personal data for the following purposes:

Sending a newsletter (newsletter) – the purpose of this operation is to administer the process of sending newsletters to customers who have indicated that they wish to receive them;
Subscription to receive articles from the InventTech Blog – the purpose of this operation is to send articles and materials published on our blog, if you wish;
Administration of comments under articles from the InventTech Blog – the purpose of this operation is to provide an opportunity for users who wish to express their opinion in relation to a published material or article to leave a comment.
(2) InventTech processes the following categories of personal data and information for the following purposes and on the following grounds:

Data: Your personalizing data (name and email)

Purpose for which the data is collected:

1) User registration;
2) Establishing contact with the user and sending information to him, including if he wishes – to send newsletters and advertising messages.
Purpose for which the data is collected: Improving the security of the service and localization of the interface, statistical and marketing research.
Personal data for InventTech Blog users (names and email)
Purpose for which the data is collected: 1) Subscribe to receive articles and materials from the InventTech Blog and 2) Leave comments under articles and materials from the Blog.
Basis for processing your personal data – Your personal data is processed on the basis of your consent – art. 6, para. 1, b. (a) GDPR.

(3) InventTech does not collect or process personal data relating to the following:

reveal racial or ethnic origin;
reveal political, religious or philosophical beliefs, or membership in trade unions;
genetic and biometric data, health data or data about sex life or sexual orientation.
(4) Personal data is collected by InventTech from the persons to whom it relates.

(5) The company does not perform automated decision-making with data.

(6) The company does not process data for persons under the age of 14, except with the express consent of their parents or representatives.

Period of storage of your personal data

Art. 3. (1) InventTech stores your personal data for a period not longer than the existence of your profile on the website. After the expiry of this period, InventTech takes the necessary care to delete and destroy all your data without undue delay.

(2) InventTech notifies you in the event that the data storage period needs to be extended in order to fulfill the objectives, fulfill the contract, in view of InventTech’s legitimate interests or otherwise.

(3) InventTech stores your data, given on the basis of consent, until its explicit withdrawal, and this does not affect publications and comments made in order to preserve the meaningful integrity of the comments.

(4) InventTech stores the personal data that it is necessary to keep under the applicable legislation for thethe intended term, which may exceed the lifetime of your registration.

Transmission of your personal data for processing

Art. 4. (1) InventTech may, at its own discretion, transfer part or all of your personal data to personal data processors for the fulfillment of the processing purposes in compliance with the requirements of Regulation (EU) 2016/679.

(2) InventTech notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations.

Your rights in the collection, processing and storage of your personal data

Withdrawal of consent to the processing of your personal data

Art. 5. (1) If you do not wish all or part of your personal data to continue to be processed for specific or all processing purposes, you may at any time withdraw your consent to processing by written request in free text or through the automatic system of the provider to send a newsletter.

(2) InventTech may request that you verify your identity and identity with the person to whom the data relates.

(3) By withdrawing consent to the processing of personal data that is mandatory for the creation and maintenance of your registration for using the services, your account will become inactive.

Right of access

Art. 6. (1) You have the right to request and receive confirmation from InventTech whether personal data related to you is being processed.

(2) You have the right to access the data related to it, as well as the information related to the collection, processing and storage of your personal data.

(3) InventTech provides you, upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.

(4) Providing access to the data is free of charge, but InventTech reserves the right to impose an administrative fee in case of repetitive or excessive requests.

Right to rectification or completion

Art. 7. You may correct or complete inaccurate or incomplete personal data relating to you by making a request to InventTech.

Right to erasure (“to be forgotten”)

Art. 8.(1) You have the right to request the deletion of personal data related to you, and InventTech has the obligation to delete them without undue delay, when any of the following grounds are present:

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
You object to the processing of your personal data, including for direct marketing purposes, and there are no overriding legal grounds for the processing;
the personal data were processed unlawfully;
the personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to InventTech;
personal data were collected in connection with the provision of information society services.
(2) InventTech is not obliged to delete personal data if it stores and processes them:

to exercise the right to freedom of expression and the right to information;
to comply with a legal obligation that requires processing provided for in EU or Member State law applicable to the Administrator or for the performance of a task in the public interest or in the exercise of official powers conferred on him;
for reasons of public interest in the field of public health;
for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
for the establishment, exercise or defense of legal claims.
(3) InventTech does not delete the data that it has a legal obligation to store, including for defense in connection with legal claims made against it or proving its rights.

Right to limitation

Art. 9. You have the right to request that InventTech restrict the processing of data related to you when:

dispute the accuracy of the personal data, for a period that allows InventTech to verify the accuracy of the personal data;
the processing is illegal, but you do not want your personal data to be deleted, but only to have its use restricted;
InventTech no longer needs the personal data for the purposes of processing, but you require them to establish, exercise or defend your legal claims;
You have objected to the processing pending verification of whether InventTech’s legal grounds take precedence over your interests.

Right of portability

Art. 10. (1) You can at any time download the data that is stored and processed for you in connection with the use of the InventTech services, directly with a request by email.

(2) You can ask InventTech to directly transfer your personal data to an administrator specified by you, when this is technically feasible.

Right to receive information

Art. 11. You can requestby InventTech to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing is requested has been disclosed. InventTech may refuse to provide this information if it would be impossible or would require a disproportionate effort.

Right to object

Art. 12. You may object at any time to InventTech’s processing of personal data relating to you, including if it is processed for profiling or direct marketing purposes.

Your rights in the event of a breach of the security of your personal data

Art. 13. (1) If InventTech detects a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, we will notify you without undue delay of the breach, as well as of the measures that have been taken or are about to be taken .

(2) InventTech is not obliged to notify you if:

has taken appropriate technical and organizational measures to protect the data affected by the security breach;
has subsequently taken measures to ensure that the breach will not result in a high risk to your rights;
notification would require a disproportionate effort.

Other provisions

Art. 14. In the event of a violation of your rights under the above or applicable personal data protection legislation, you have the right to file a complaint with the Personal Data Protection Commission as follows:

Name: Personal Data Protection Commission
Headquarters and management address: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2
Correspondence details: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2
Phone: 02 915 3 518
Email: kzld@government.bg, kzld@cpdp.bg
Website: www.cpdp.bg

Art. 15. You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are not mandatory and you can make your requests in any form that contains a statement to that effect and identifies you as the data owner.

Art. 16. If the consent refers to a transfer, the Administrator describes the possible risks for the transfer of the data to third countries in the absence of a decision for adequate protection and suitable means of protection.

Art. 17(1). When you entrust InventTech to process personal data of a third party for the purposes of using the service, InventTech acts as a personal data processor.

(2). In the cases under para. 1, InventTech acts solely on your instructions as a user of the service and only to the extent that it can have control over the personal data that you process. InventTech has no control over the content and data that you, as a user of the service, choose to upload to the service (including whether or not that data includes personal data). In this case, InventTech has no role in the process of deciding whether the user uses the service to process personal data, for what purposes and whether they are protected. Accordingly, InventTech’s responsibility in this case is limited to 1) complying with the instructions of the service user according to the contract and general terms and conditions and 2) providing information about the service and functionalities through its interface.

This Mandatory Information was last updated on 02/07/2023.

Cookie Policy

The InventTech site uses cookies that are important for its correct operation. By visiting our site, you accept the use of cookies.
Grounds for collecting, processing and storing your personal data

Types of cookies we use:

Required cookies

These cookies are necessary for the correct operation of the website. Such cookies are also those for enabling caching, etc.

Analytical cookies

Thanks to these cookies, we monitor visits to our site and can analyze how easily our users work with it (Google Analytics cookies). These cookies do not give us any information about your personal data. They show us which pages of our site you have viewed, whether you visited our site via a mobile or desktop device, and other anonymous data. For Google Analytics, we also use anonymization of IP addresses using _anonymizelp. The maximum period we keep analytical data in Google Analytics is 24 months.

Functional cookies

These cookies allow you to use the full functionality of our site, watch the videos on it, write comments, as well as remember the preferred language in which to load the information on our site.

Cookies for precision targeting

These cookies contain information about how you have used our site and may be triggered by our advertising partners. They do not store personal information. Thanks to them, you will not be shown information that is irrelevant to you. These are dynamic cookies of Facebook, Google, Adform, Adwise, etc. In addition, most ad networks offer the option to opt out of profiled advertising.