GDPR and Privacy Policy

PERSONAL DATA PROTECTION POLICY

This privacy policy is designed to help you understand what personal data we collect, why we collect them, and what we do with them. Please take the time to read our Privacy Policy carefully. We want you to know how we use your information and how you can exercise your rights.

This Privacy Policy applies to your personal data when you visit a www.umni.bg and/or use our products/services through this site and does not apply to other sites and/or products/services that we do not own and/or do not control.

WHO ARE WE

The Company providing you with the Service as a Personal Data Administrator and/or Personal Data Operator is “Umni Solutions” OOD, UIC 204765843, with headquarters and management address: Sofia, p. code.1111, 56 Hristo Maksimov Str., represented by its manager Elitza Ognianova Stoilova, e-mail: support@umni.bg, tel.: +359 895 190 022.

Data Controller: Elitza Ognianova Stoilova, Business Address: Sofia, p. code.1111, 56 Hristo Maksimov Str., represented by its manager Elitza Ognianova Stoilova, e-mail: support@umni.bg , tel.: +359 895 190 022.

We at Umni Solutions OOD respect the right to privacy and work continuously to keep the data we process, minimized and maximally protected. However, in order for you to be able to use our services and for us to be able to improve and develop them, we need to process some personal data. By using one of our services, you agree that you have read and understood this Personal Data Protection Policy.

DATA WE COLLECT AND HOW WE USE IT

Personal data are data that describe and relate to someone in personal quality. These are data by which individuals can be identified.

We collect some personal data to provide the services to all our customers. We process personal data only for legitimate reasons. We do not sell or otherwise distribute your personal information. We may share them with our selected subcontractors only when it is necessary to provide our services as explicitly described below.

We process the following personal data for individuals to achieve the following goals:

Customer names are needed to be able to identify the person as our potential customer.

An e-mail address or a phone number is required to contact the customer at any time in connection with the execution of the requested services in order to respond to your inquiries and to respect your requests.

When we receive an inquiry from a person through one of our contact forms, we use the contact details he or she has provided (names, phone number and email address) to contact and provide the information or assistance he or she needs.

We would like to use your email address and phone number to send you information about our services, promotions, discounts, and bonuses that you can use. We will do so only if you give us your explicit consent to receive this information.

Your consent is voluntary, and we will not deny you our services if you do not provide it to us. However, we believe you will have a great benefit in getting this information because it will reflect our latest projects and ideas to improve our services and customer satisfaction.

We will not use your contacts to advertise third-party products or services.

You can withdraw your consent to receive this information at any time by writing to the Data Controller in any convenient way: by letter, e-mail, and/or filing an application on-site.

METHOD OF DATA COLLECTION

We do not collect personal data about the end-users of the chatbot software. We are not data controllers with respect to end users, but we act as processors of personal data by processing and using only data that our client data controllers have voluntarily provided to us. This means that each client of our services is responsible for not providing data to third parties in violation of their personal data protection rights as we do not have access to those individuals and we have no practical opportunity to control whether our clients provide us with data to third parties persons with their knowledge and consent given according to the legal requirements.

Therefore, each person bears full personal responsibility if he or she provides us with data to a third party without his / her knowledge and/or without obtaining his or her consent to comply with the requirements of the applicable data protection legislation, including names, telephones and email addresses provided to us by a client.

SECURITY MEASURES

We have undertaken a wide range of technical and organizational measures to protect your personal data against loss or other forms of illegal processing. Personal data is only accessible to those persons who need access to perform their work in connection with the provision of our products/services. These persons are trained and empowered accordingly. Our staff is required to process personal data in accordance with our guidelines on the lawfulness, confidentiality, ethics, and proper use of the data.

SUBCONTRACTORS

In order to provide quality products/services, we have hired service providers – data processors, carefully selected according to their capacity to protect and process personal data. Without them, the implementation of our services will not be possible. We use only subcontractors – professionals in the relevant field, through which we provide additional security for your data and to which we provide only the information necessary for the performance of the assigned activities, including:

-To manage the services provided to users, and to administer the correspondence and the notifications: Facebook, Mailchimp, Viber/Skype, Messenger, and others.;

-For domain and hosting: ETN Host;

-To analyze the use of the site and improve our services – Google Analytics and Google AdWords Pixel;

-To customize the content you see- Google AdSense

With the Google tools, we do not have the ability to recognize the individuals whose data is generated. However, this information may be customized by Google platforms and affect the content they show you. For more information and deactivation of certain features, you should use the Google platform settings over which we have no control and we cannot block their functionality.

In other cases where this is required by law or contract, your data may be provided in connection with accounting or legal processing, payment, recovery, etc., in which case the data is processed for us only on the basis of our explicit instructions and in accordance with our privacy policy with due care and security.

We do not provide your personal data to third parties without legal or contractual rights, we do not sell them or distribute them in any other way.

In the course of our activity, no transfer of personal data to third parties outside the EU is made to persons unless it is necessary to carry out certain functions as part of the service for the users listed above. All persons to whom data is transmitted are approved and fulfill all the requirements of the EU-US Privacy Shield Framework.

MINORS AND UNDERAGE PERSONS

We provide services only to persons over 18 years of age. If you are under the age of 18, please seek help from a person at least 18 years old to use our products/services.

If we receive information that we have collected personal data from a person below the age of 18

age, we will immediately delete it unless we are legally obliged to store such data.

Please contact us if you think that we have mistakenly or unconsciously collected information from a person below the age of 18.

DATE OF STORAGE AND DELETION

The data obtained through our contact form is stored for up to 6 (six) months in order to create and settle a contractual relationship.

Registration data (such as name, phone number, and email address) will be stored within 3 years or until the withdrawal of consent before the expiration of this period.

Any user may at any time may issue a request to delete his or her personal data stored and processed by the administrator by letter and/or by e-mail.

YOUR RIGHTS

-You may request a copy of your personal data at any time, check the accuracy of the information stored, correct or update this information, and ask for your personal information to be deleted if there are grounds for doing so, as described below. You also have the right to complain when your privacy rights have been violated. Here is a detailed description of your rights as a personal data subject:

-You have the right to request confirmation of the processing of personal data relating to you and to request a copy of your personal data as well as information relating to the collection, processing, and storage of your personal data;

-You have the right to request that your personal data be deleted on any of the following grounds: the personal data are no longer required for the purposes for which they were collected; when you have objected to the processing when the processing is unlawful; when data is processed on your consent and you withdraw that consent; where personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State which applies to the controller. -you may be denied the deletion of your personal data for the following reasons: the exercise of the right to freedom of expression and the right to information; to comply with our legal obligation and/or for the performance of a task in the public interest and/or in the exercise of the official authority that is granted to us; for reasons of public interest in the field of public health; for the establishment, exercise or protection of legal claims;

-You have the right to ask for your personal data to be corrected if it is inaccurate or supplemented if it is incomplete;

-You have the right to request that you limit the processing of your personal data if applicable and there is reason to do so, for example, you dispute the accuracy of personal data for a period that allows us to verify the accuracy of the personal data; processing is illegal, but you do not want personal data to be deleted but only to be limited; we do not need more personal data for the purposes of the processing, but you require them to identify, exercise or protect your legal claims; you have objected to the treatment pending verification that our legitimate grounds have an advantage over your interests.

-You have the right to ask to receive the personal data that concerns you and which you have provided us in a structured, widely used, and machine-readable format and you have the right to transfer this data to another Administrator when the processing is based on consent or contractual obligation and processing is done in an automated way;

-You have the right to make an objection before a Data Controller to such processing of your personal data if there are reasons to do so.

You can address all requests to the Data Controller. In order to be able to provide you with full assistance, please provide us with accurate information about you and specify your request. It is possible that, in order to exercise your rights, we may ask for additional information to establish your identity.

Please keep in mind that when your requests are clearly unfounded and/or excessive, in particular, because of their repetitiveness, we can:

impose a fee, taking into account the administrative costs of providing the information or communication or the action taken, or
refuse to take action on the request.

We will make reasonable efforts to honor your request within 30 (thirty) days from receiving your application. If necessary, this period may be extended by 2 more (two) months, taking into account the complexity and the number of requests.

SUPERVISORY AUTHORITY

If you believe that we have breached your rights in relation to your personal data, you may file a complaint with the supervisory authority of the Republic of Bulgaria, which is the Personal Data Protection Commission. More information can be found at:

www.cpdp.bg.

You can also submit your complaint in the country where you live, at your workplace, and/or where you think we are violating your rights.

CORRECTING AND SUPPLEMENTING DATA

For your convenience and ease you can use the following text to correct and supplement your details:

Request for correction / completion of data

To “Umni Solutions” OOD, UIC 204765843, with headquarters and management address: Sofia, p. code.1111, 56 Hristo Maksimov Str., represented by its manager Elitza Ognianova Stoilova,

From: __________________________________ (full name)

Tel.: __________________________________

Е-mail: __________________________________

Please correct / supplement the following data: __________________________________

Please supplement the data as follows: __________________________________

and/or

Please correct the data as follows: __________________________________

WITHDRAWAL OF CONSENT

For your convenience and ease, you can use the following text to withdraw consent:

Request for withdrawal of consent

To “Umni Solutions” OOD, UIC 204765843, with headquarters and management address: Sofia, p. code.1111, 56 Hristo Maksimov Str., represented by its manager Elitza Ognianova Stoilova,

From: __________________________________ (full name)

Tel.: __________________________________

Е-mail: __________________________________

I withdraw my consent to the collection, processing, and storage of the following personal data I provide:

I withdraw my consent in respect of all the information I have provided / regarding the following data:

I withdraw my consent for all purposes of using the data / with respect to the following purposes:

DELETE DATA

For your convenience and ease, you can use the following text to request the deletion of data.

Request to delete data

To “Umni Solutions” OOD, UIC 204765843, with headquarters and management address: Sofia, p. code.1111, 56 Hristo Maksimov Str., represented by its manager Elitza Ognianova Stoilova,

From: __________________________________ (full name)

Tel.: __________________________________

Е-mail: __________________________________

I ask that all personal data you collect, process, and store provided by me or related to me be deleted except for the data to be stored for the purpose of performing legal obligations.

TRANSFER OF DATA

For your convenience and ease, you can use the following text to request data transfer.

Request for data transfer

To “Umni Solutions” OOD, UIC 204765843, with headquarters and management address: Sofia, p. code.1111, 56 Hristo Maksimov Str., represented by its manager Elitza Ognianova Stoilova,

From: __________________________________ (full name)

Tel.: __________________________________

Е-mail: __________________________________

Please all personal data you collect, process, and store provided by me or related to me to be sent to:

__________________________________