Privacy Policy

I. General Provisions

"Dialysis Center - Virtus Medical" Ltd. UIC 103889926, Varna, ul. "Bratya Shkorpil" № 6, and the same address for correspondence, tel.: 052/600 002, email: office@kidneycenterbg.com, website: kidneycenterbg.com, represented oby prof. Valentin Ikonomov (hereinafter „Kidney Center“), is a data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (Regulation (EU) 2016/679) and the Bulgarian Personal Data Protection Act.

The Kidney Center respects the sanctity of private life of individuals and representatives of legal entities using its services and does its utmost to protect their personal data when processedе.

The Privacy Policy of the Kidney Center has been drafted in accordance with the Bulgarian and European legislation in the field of personal data protection. All amendments and additions to the Privacy Policy shall be published on the Kidney Center’s website.

II. Definitions

"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); a person who can be identified is a person who can be identified directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or one or more features specific to the natural person, the physiological, genetic, mental, intellectual, economic, cultural or social identity of that individual.

„Обработване на лични данни“: всяко действие или съвкупност от действия, които Дружеството извършва по отношение на личните данни с автоматични или неавтоматични средства (така напр. събиране, записване, организиране, групиране, съхраняване, адаптиране, актуализиране или коригиране, изменение, възстановяване, консултиране употреба, разкриване чрез предаване или предоставяне, разпространяване, комбиниране, блокиране, заличаване, унищожаване и др.).

III. Reasons and Purpose of Collecting, Processing and Storing Your Personal Data.

The Kidney Center collects and processes the following personal data when using the contact form, subscribing to the newsletter and using the website kidneycenterbg.com:

1. Name and surname;
2. Email
3. Phone number
4. Data from cookies.

The Kidney Center collects your personal data with the following purposes:

1. Identification of the author of the message;
2. Conducting correspondence and addressing a response to the author of the message;
3. Sending an email newsletter containing information on current publications, offers and services, related to the Kidney Center.

The personal data collected in the register are collected by the person only after the voluntary and informed consent of the person.

IV. Principles of Collecting and Processing Your Personal Data.

When processing your personal data, the Kidney Center adheres to the following principles:

• Lawfulness, fairness and transparency;
• Purpose limitation;
• Correlation with the purposes of processing and data minimisation;
• Limitation of storage for a minimum period in order to achieve the objectives;;
• Explicit consent of the data subject for data processing;
• Integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.

V. Disclosure of Personal Data to Third Parties.

The personal data collected may be provided to our partners, who act as data processors on behalf of the Kidney Center and act in full compliance with the applicable data protection legislation. The collected information can be used only within the limits set by the legal basis on which it is collected and or by your personal consent to the processing performed on behalf of the Kidney Center. We treat this information as confidential.

VI. Storage Period

The personal data of individuals collected and processed in connection with emails received by them through the website of the Kidney Center is stored until the purposes for which it was collected is fulfilled or until the consent to process the personal data is withdrawn – whichever occurs first.

VII. Email Newsletter

Our email newsletter regularly informs you about publications, offers and services related to the Kidney Center. If you wish to receive the email newsletter, we will need your valid email address. When registering for our newsletter we use a double-opt-in process. This means that after registration we send on your email a message with a link, which ask you to confirm that you want to receive our newsletter. If you do not confirm your registration on the link within 2 weeks, you will not receive the email newsletter, and your collected personal data will be deleted automatically after one month. Additionally, we store in every case the IP addresses used and the time of entry and confirmation. The purpose of the procedure is to be able to prove your registration and if necessary to clarify any potential misuse of your personal data. As a subscriber to the email newsletter, you can withdraw at any time your consent to the processing of your email address. The consent can be revoked through the link provided for this purpose in the content of the email newsletter itself or by sending an email with subject "unsubscribe" to gdpr@kidneycenterbg.com.

VIII. Individualization and Cookies.

New technologies allow us to customize our website for every individual visitor. Cookies are text files that contain information that allows returning users to be identified. Cookies are stored locally on the device you use to access our website kidneycenterbg.com and do not cause damage to your system. Cookies help us identify your preferences (appearance and usability settings). The accumulation and analysis of this information allows us to improve our electronic services and overall user experience so that they conform to the highest degree of your needs. You can get acquainted with the cookies and other technologies used by us in our Cookie Policy.

IX. Your Rights in the Collection, Processing and Storage of Your Personal Data.

At all times while we process your personal data, you, as the data subject, have the following rights:

1. Right of access With a written application you can get information about the type of personal data you have provided and the purpose of its processing. The application can be submitted in person at our specified contact address or electronically to gdpr@kidneycenterbg.com from the same email address you have provided, in accordance with the provisions of the Bulgarian Electronic Document and Electronic Certification Services Act, the Electronic Government Act and the Electronic Identification Act. Your application must include your full name, personal identification number, contact address, description of your specific request and preferred form of obtaining the requested information, signature and date of application.
2. Right of rectification You have the right to request that your personal data be corrected in case you find errors or inconsistencies.
3. Right of erasure (the right to be forgotten) – if the conditions under Art. 17 of Regulation (EU) 2016/679 are met - after you have been provided with access to your personal data, you may request that we remove any records of your personal information without the possibility of further processing.
4. 4. Right to object – With regard to the data that is processed on the basis of a "legitimate interest", you have the right at any time to object to the processing of your personal data. In the event of such an objection, the Kidney Center undertakes to consider your objection and to inform you within 30 calendar days of its receipt of the result of the conducted internal inspection. If the objection is justified, we shall stop processing your personal data and remove any records of your personal information without the possibility of further processing.
5. 5. Right to restriction of processing – In the conditions under Art. 18 of Regulation (EU) 2016/679 are met - you can ask the Kidney Center to restrict (stop) the processing of your data. Such cases are the need to verify the accuracy of the data, the grounds for the processing or the lawfulness of their processing.

6. Right of appeal If you believe that your data is being processed illegally by the data controller, you have the right to appeal to the Commission for Personal Data Protection, which is the supervisory authority responsible for the application of Regulation (EU) 2016/679 and the Bulgarian Personal Data Protection Act.

Commission for Personal Data Protection; Address: гр. София 1592, бул. „Проф. Цветан Лазаров“ №2 Телефон: 02 / 9153 518 Интернет страница: cpdp.bg E-mail kzld@cpdp.bg

X. Measures for Information Security and Personal Data Protection

The Kidney Center has taken appropriate technical and organizational measures to protect the collected personal data provided from accidental or illegal destruction, accidental loss, unauthorized access, alteration or distribution, as well as from other illegal forms of processing by unauthorized persons. The security measures we apply are subject to constant improvement and adaptation to the latest technologies.

XI. Notification of Amendments to the Privacy Policy

As a controller of personal data, the Kidney Center reserves the right to make amendments and additions to this policy. When making amendments to the Privacy Policy, these will be promptly uploaded and made available to all interested parties on the website of the Kidney Center.

If you have any questions concerning our measures and rules on the protection of personal data, please send an email with subject "Kidney Center - Privacy" to the email address gdpr@kidneycenterbg.com