Privacy Policy
About us,"Consult Plus" OOD, the protection of personal data is of paramount importance. Therefore, we would like to inform you about our internal privacy policy when you visit our website or when you enter into a service contract with us as a Data Processor on your behalf.
Who are we and in what capacity do we process personal data?
"Consult Plus" OOD ,UIC:115788900 with registered office and management address - city of Plovdiv, "Zlatyu Boyadzhiev" Str. №1, floor 3, e-mail for correspondence kd@scaleupbg.com and website www.consultplus-global.com. We provide complex accounting services and other related services, such as keeping TPZ (Labor and salary) and personnel, financial and legal services, customs representation.
If you, for example, are a Company that would like to conclude a contract with us for accounting services, we would process as a Processor of personal data within the meaning of Art. 28(1) of Regulation (EU) 679/2016 the personal data of individuals on your behalf (e.g.of the workers and employees or other counterparties-natural persons of the Company), while you would act as a Data Controller who determines the nature, scope, context and purposes of the processing of personal data.
It is important to emphasize that in our overall activity we strictly adhere to the applicable European and national regulations in the field of data protection in every operation of processing personal data, including the current Regulation (EU) 679/2016 or the so-calledGeneral Regulation for the Protection of Personal Data ("GDPR") and the Bulgarian Law on the Protection of Personal Data. We also have a personal data protection officer who can be contacted for questions about the protection of personal data and this policy at e-mail..., tel...
Thus, our customers can be completely sure that when they choose our services as a Data Processor on their behalf, they fully fulfill their obligation to use only contractors who meet all the requirements of the General Data Protection Regulation and do not carry the risk ofadministrative sanctions and fines that the Commission for the Protection of Personal Data could impose on them in case of non-fulfillment of the Regulation by the accounting firm serving them.
If you are a natural person who wants to conclude a contract with us in a personal capacity or send us an inquiry using the contact form from this site, we would process the information as a Data Administrator, again in strict compliance with all legal requirements for the protection of personal datadata
What personal data do we process?
When you visit our website, we may collect information about your computer, including, where applicable, operating system, browser type for system administration.These are statistical data about the actions and searches performed by users of our sites and do not identify you or individuals.We do not collect your IP address, but we may receive information about your general internet usage using a cookie file that is stored on your computer's hard drive and which helps us improve our website and provide better and more personalizedservices. You may refuse to accept cookies by activating your browser settings that allow you to refuse cookies. By choosing this type of settings, access to certain parts of our websites may be impossible or restricted.
If you decide to contact us via the contact form on this site or via our email, we would collect the following information for you - your name, email address and phone number, as well as the correspondence we have conducted regarding your query.
As a Data Processor, we process certain personal information related to the activities of the Companies we serve:
1.1.General identifying information of the Manager of the Company - three names, date and place of issuance of identity document, TIN, permanent address;
1.2.Electronic signature of the manager of the Company, with which we are authorized to represent him before the public authorities (e.g. NAA, NOI) and other third parties;
1.3.Personal data from invoices, when they are concluded with natural persons - three names, TIN address;
1.4.Personal data of workers and employees of the Company, when the accounting service includes services for TPZ (Labor and salary) and personnel, including:
a.General identifying information of the employee - three names, date and place of issuance of an identity document, social security number, permanent address;
b.Personal life data: marital status and data on children up to 18 years of age, in case maternity and child allowances are paid (name, surname, surname and TIN of the child);
c.Education and qualification: acquired educational - qualification degree (type of education), specialty, additional qualification or legal capacity, when such are required for the position held;
d.Medical examination card for entering work;
e.Criminal record certificate (when required by the Company for employment)
f.Labor - legal documentation: job description, employment contract, attendance sheets, orders of the employer, etc. documents under labor legislation;
g.Financial - accounting and insurance documentation: data on work experience, salary slips, data on health insurance and pension - insurance income;
h.Hospital papers;
i.Bank details: Bank account;
j.Contact data: phone, address, email;
1.5.Personal data from civil contracts concluded by the served Company, which most often include:
a.General identifying information of the employee - three names, date and place of issuance of an identity document, social security number, permanent address;
b.Education and qualification: acquired educational - qualification degree (type of education), specialty, additional qualification or legal capacity; (if such data are required to conclude the contract)
c.Civil - legal documentation: civil contract, attendance sheets (if such are required for the execution of the contract), etc.
d.Financial - accounting and insurance documentation: data on work experience, salary slips, data on health insurance and pension - insurance income;
e.Bank details: Bank account;
f.Contact data: phone, address, email;
What is the purpose and basis for processing your personal data?
The information we process about you received through our contact form is for the purpose of contacting you and providing you with services you have requested from us or information about them.We do this on the basis of measures taken by you to enter into a contract in the event that we enter into one, or on the basis of our legitimate interest in keeping our correspondence with you.
In our capacity as a Personal Data Processor on the basis of a contract with the Company-Administrator, we process the above-mentioned data under items 1.1-1.5.in order to comply with the requirements of labor - insurance and accounting legislation, individualization of labor and civil legal relations and use of the collected information for official purposes of the served Company, such as carrying out activities related tothe existence, amendment and termination of employment relationships, preparation of documents in this regard, contracts, additional agreements, certificates of work experience, official notes, references, certificates, for keeping accounting records of the remuneration ofemployed persons, fulfillment of obligations under an employment or civil contract, such as payment of remuneration to the specified bank account, etc.
For what period and in what way are your personal data stored?
Personal data are stored for the periods necessary to achieve the purposes for which they were collected, after which they are destroyed.When there is a legal obligation to process and store personal data, we do so for the period determined by labor insurance and accounting legislation - 50 years, and when the information is from financial - accounting documents such as invoices for a period of 5 years,from the date of creation of the document.
As part of the processing assigned to us by the Companies we serve, we may also store the above-mentioned personal information on the services ТРЗ (Labor and salary) and personnel and assist in the direct exercise of the rights of the workers/employees in their capacityto data subjects by giving them access to the information we hold, the right to correct their data, etc.In this case, personal data is stored on paper in a personal file of each employee in a room and locked cabinets with limited access, as well as on a digital medium in a digital database "Navigator" with ensured technical and organizational measures (incl.encryption, high access passwords and more) to ensure their security and privacy.
Every year, the documents and data that we process on behalf of the served Companies are archived and returned to the Administrator Company with a protocol.
Will my personal data be accessible to third parties?
We keep the data strictly confidential and do not disclose it to third parties, except when we have a legal obligation to do so in the cases listed below, when we act on behalf of the Company we provide accounting services in order to comply with its obligations arising from the accounting andlabor insurance legislation.
We are obliged to share personal data on labor insurance and financial accounting documentation with the National Revenue Agency, and in some cases with the National Social Security Institute, when it is necessary to report sick leave, pay disability benefits ormotherhood. The data may also be disclosed to other public authorities in accordance with their control competences during inspections of the served Company (e.g. Labor Inspection, Commission for the Protection of Personal Data, Commission for the Protection of Consumers, etc.).
Your rights regarding your personal data
As a data subject, the persons whose data is processed by us or by the Companies we serve have the following rights according to Regulation (EU) 679/2016, which they may wish to exercise with a request to us (when it comes to an inquiry through the contact form ) or before the Company itself (whenyour data is collected by him as an Administrator):
And get the access to personal data and a copy of them, as well as information related to processing;
To ask the data to be corrected in case of incompleteness or inaccuracy of the data;
To ask the data to be deleted, when the prerequisites for this are present - for example, if the purpose for which the data was collected has been achieved;
To demand the processing of personal dataYoudata yes be limitedin the cases defined by law, for example, if they dispute the accuracy of personal data;
5. To exercise your right to portabilityof the data and request that the data be provided in a structured, commonly used and machine-readable format if it is processed in an automated manner and is processed on the basis of the conclusion or performance of a contract.
To submit complaint to the supervisory authority (Personal Data Protection Commission).
If you have any questions about this personal data protection policy, you can contact our personal data protection officer at office@consultplus.bg, phone 032/945986