Personal Data Protection

Privacy Policy

This Privacy Notice is intended to provide you with information about what personal data EKO BULGARIA EAD processes about you in its activities (PART I), as well as what personal data is processed during your visit to the official Facebook page of EKO Bulgaria petrol stations, namely:
https://www.facebook.com/EKOstations/ (PART II) and how it is used. If you have any questions, please contact us at: office@eko.bg or at: Litex Tower, floor 9, 3, Lachezar Stanchev Street, Izgrev Region, Sofia 1756, Republic of Bulgaria;

If you wish to confirm that EKO BULGARIA EAD is processing your personal data, or to have access to the personal data EKO BULGARIA EAD may have about you, please contact us at office@eko.bg


INTRODUCTION

EKO Petrol stations are owned by EKO Bulgaria. The company entered into Bulgarian market in July 2002 and so far we have 89 petrol stations all over the country. Petrol stations EKO owns 4 petrol bases as well all over Bulgaria.

EKO Bulgaria is part of Hellenic Petroleum group - the biggest Industrial and Commercial Corporation in Greece, which has a key role for the development of energy sector in the South Eastern region.

In order to provide high level of goods and services to its clients, EKO BULGARIA EAD enters into number of contractual relations with its partners, goods and service providers.

Group Data Protection Officer (DPO)Contact Details

e-mail: DPO@helpe.gr  

Phone number: +30 210 6302252

Address: Chimarras 8A, 15125-Marousi, Greece

PART I: INFORMATION ABOUT PERSONAL DATA PROCESSED BY EKO BULGARIA EAD IN ITS ACTIVITIES

CATEGORIES OF CONCERNED INDIVIDUALS (DATA SUBJECTS) AND PURPOSES OF DATA PROCESSING

For the performance of its activities EKO BULGARIA EAD processes personal data of the following main categories of Data Subjects, apart from the data subjects whose data is processed within internal employment and corporate relations:

  • CLIENTS PHYSICAL PERSONS – upon issuance of requested EKONOMY Cards and invoices to the individuals in their personal capacity. The General condition for issuing and usage of EKONOMY cards can be found at the official corporate website – http://www.eko.bg/uploads/EKO_Ekonomy_Card_Forms_OU_A4_0618.pdf
  • STATUTORY AND/OR AUTHORIZED REPRESENTATIVES, OWNERS AND CONTACT PERSONS OF ITS CORPORATE CLIENTS for wholesale and retail;
  • EMPLOYEES OF THE ABOVE CORPORATE CLIENTS using Fleet Cards – upon the issuance of prepaid Fleet Cards and fuel and gas purchases. General conditions for issuing and usage of corporate cards - http://www.eko.bg/uploads/Genereal_agreement_economy.pdf;
  • STATUTORY AND/OR AUTHORIZED REPRESENTATIVES, OWNERS AND CONTACT PERSONS OF ANY ORGANIZATION who has contractual relations with EKO BULGARIA EAD (including lessees, lessors and title holders providing us in-rem rights).
  • INDIVIDUALS PERFORMING TRANSPORTATION OF GAS AND/OR FUELS
  • BUSINESS CONTACTS

HOW, WHY AND WITHIN WHAT TERMS WE PROCESS YOUR PERSONAL DATA

The below information applies both to Data Subjects who provided their personal data to EKO BULGARIA EAD by themselves and to these whose personal data are provided to EKO BULGARIA EAD by third parties (e.g. their employers).

EKO BULGARIA EAD, UIC 130948987, with seat and management address at: Litex Tower, Floor 9, 3, Lachezar Stanchev Street, Izgrev Region, Sofia 1756, Republic of Bulgaria, represented by Alexios Athanasopoulos in his capacity of Executive Director (“EKO BULGARIA”), in its capacity of personal data controller processes personal data as follows:

  • CLIENTS PHYSICAL PERSONS

EKO BULGARIA processes the following categories personal data of its clients, physical persons:

(a)   data listed in the applications for the issuance of EKONOMY Card, namely: name, date of birth, address for correspondence, email address, gender, mobile phone number, signature.

Purpose, legal basis and term of processing

We use the above data for the following purposes only:

-        issuance and administration of requested EKONOMY Card

For this purpose data will be processed for a term of up to 6 years after the date of deactivation of the EKONOMY Card for any reason as per the General Terms and Conditions for Use of EKONOMY Cards, including but not limited to deactivation due to the expiry of its validity. The hardcopies of the EKONOMY Card application are kept for a term of up to 2 years after its delivery to EKO BULGARIA.

The legal basis for this processing is performance of contractual obligations undertaken by EKO BULGARIA towards the EKONOMY cardholders.

-        direct marketing through sending products, messages for products, promotional terms and conditions, campaigns, newsletters and other advertise related to the business activity of EKO BULGARIA, as well as for research of the cardholders opinion by sending them invitations for participation at different marketing researches

This processing is based on EKO BULGARIA’s legitimate interest to promote its goods and services to clients and keep the high level of quality its goods and services.

The term of the processing for these purposes is up to 10 years after receiving the application for EKONOMY Card or any of the terms listed in the next item b, if applicable.

Whom we may provide your personal data to

EKO BULGARIA may assign any of the above processing activities of your personal data to marketing agencies and other service providers needed for the achievement of the purposes above (e.g. outside documents archive, software and hardware solutions, etc.) by ensuring their protection and lawful processing. Your personal data might be also processed by our partner who is managing the respective filling station where you submit your personal data.

We may provide your personal data to competent authorities upon their due request and in compliance with all statutory requirements with this regard.

(b)   data needed for the issuance of invoices to individuals as requested by the client, namely:names, personal identification number, address, signature

Purpose, legal basis and term of processing

We use the above data for the following purposes only:

-        execution of contractual relations and accountancy and taxation (including issuance of invoices).

This data processing is on the grounds of EKO BULGARIA’s contractual obligation to serve its clients and the company’s statutory obligations related to accountancy and taxation.

Your personal data listed in this item are processed by EKO BULGARIA for the following terms:

-        data contained in accounting registers and financial statements: 11 years;

-        data contained in documents subject to tax audits and needed for accounting purposes: 11 years;

-        data contained in documents needed for the performance of contractual relations: up to 6 years after termination of the respective contract or until closure of dispute related procedures.

-        data processed in relation to the compliance with statutory obligations – within the applicable statutory terms.

Whom we may provide your personal data to?

For the issuance of invoices EKO BULGARIA uses accounting and other types of software and the persons providing the respective software or hardware solution or the persons maintaining these software might have limited access to your personal data. We also may share the above personal data with our Headquarters represented by Hellenic Petroleum S.A., Greece.

We may provide your personal data to competent authorities upon their due request and in compliance with all statutory requirements with this regard.

  • STATUTORY AND/OR AUTHORIZED REPRESENTATIVES, OWNERS AND CONTACT PERSONS OF ITS CORPORATE CLIENTS for wholesale and prepaid corporate sales;
  • STATUTORY AND/OR AUTHORIZED REPRESENTATIVES, OWNERS AND CONTACT PERSONS OF ANY ORGANIZATION who has contractual relations with EKO BULGARIA

(jointly referred to the “Contractors”)

EKO BULGARIA processes the following categories personal data of its Contractors:

(a)   Minimum required personal data needed for the signing of the respective contract – names, personal identification number. Data contained in ID card are to be used only if the contract is signed with notary verification or is signed by authorized representative via notary verified power of attorney.

(b)   Personal data for official contact during the performance of the contract - this information is limited to the kinds of information that can be found on a business card: first name, last name, job title, employer name, work address, work email, and work phone number.

(c)    Personal data of beneficial owners, shareholders and representatives of a Contractor (applicable upon anti-money laundering and anti-financing of terrorism measures application): name, date and place of birth, official personal identification number or another unique element for certification of identity, contained in an official identity document, the term of validity of which is not expired and which contains a photograph of the respective person, each nationality that the person has, state of permanent residence and an address, ID card/passport data, signature; data about professional activity; property, general financial condition, bank account number, origin of funds (where applicable).

We receive from our Contractors these personal data (contact information) of employees or other individuals assigned by our Contractors as contact persons for the respective contract. Our Contractors providing us these data are also personal data controllers of these data and are responsible to provide the respective Data Subjects with all needed information with this respect. Furthermore, our Contractors are obliged to ensure the accuracy of these data and for keeping them up-to date all the time. This means that if any data provided to us is changed or no longer accurate, we need to be duly informed on this as soon as practically possible. Until receiving such notice, we assume that the provided contact related data are accurate and we may use it for the purposes below.

Purpose, legal basis and term of processing

We use the above data for the following purposes only: 

-        execution of pre-contractual and contractual relations, administration of contracts (incl. accountancy and taxation), control over the performance and debt collection, legal claims defence;

-        compliance with statutory requirements applicable towards the respective contract and/or towards EKO Bulgaria.

The legal basis for this processing is the performance of the pre-contractual and contractual obligations of EKO BULGARIA and its statutory obligations, e.g. for ensuring anti-money laundering and anti-financing of terrorism measures, accountancy and taxation, etc.

All of the personal data listed in this section are processed by EKO BULGARIA for the following terms:

-       data contained in accounting registers and financial statements: 11 years;

-       data contained in documents subject to tax audits and needed for accounting purposes: 11 years;

-      data contained in documents needed for the performance of contractual relations: up to 6 years after termination of the respective contract or until closure of dispute related procedures.

-     data processed in relation to the compliance with statutory obligations – within the applicable statutory terms.

Whom we may provide your personal data to

We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our goods and services, such as our partners managing our filling stations, accountants, auditors, lawyers, IT, software and hardware service providers and other service providers, all competent authorities, if duly requested and as far as it is needed. We also may share the above personal data with our Headquarters represented by Hellenic Petroleum S.A., Greece

  • EMPLOYEES OF OUR CORPORATE CLIENTS USING FLEET CARDS

General conditions for issuing and usage of corporate cards - http://www.eko.bg/uploads/Genereal_agreement_economy.pdf

EKO BULGARIA processes the following categories personal data of Fleet Cards holders:

(a)   the names of employees of or other individuals stipulated by its corporate clients using personalized Fleet Cards.

Purpose, ground and term of processing

These personal data are processed only for the purpose of issuance and administration of Fleet Cards.

The processing is on the legal basis of execution of EKO BULGARIA’s contractual obligations with its clients and the statutory obligations for accountancy and taxation.

These data are used by us only for the term of validity of the respective Fleet Card.

We receive these personal data from our corporate clients. That is why they are responsible to provide these Data Subjects with all needed information with this respect. Furthermore, our corporate clients are obliged to ensure the accuracy of these data and for keeping them up-to date all the time. This means that if any data provided to us are changed or no longer accurate, we need to be duly informed on this as soon as practically possible. Until receiving such notice, we assume that the provided contact related data are accurate and we may use it for the purposes below.

Whom we may provide your personal data to

EKO BULGARIA provides the above personal data to our service provider assigned to issue the plastics of the Fleet Cards as well as to competent authorities upon their due request and in compliance of all statutory requirements with this regard.

(b)   location of fuel loading, amount and price of the loaded fuel by each fleet card holder, providedupon request of the respective corporate client – this data processing EKO performs as a data processor under the assignment of its corporate clients (the data controllers for these data)

Purpose, ground and term of processing

These personal data are processed by us only for the purposes of our corporate clients who ordered the Fleet Cards and the services related to them.

The processing is on the legal basis of execution of EKO BULGARIA’s contractual obligations with its clients and the statutory obligations for accountancy and taxation.

These data are used by us only for the following terms:

-        the term of validity of the respective Fleet Card; or

-        the term of validity of the agreement that we have with our corporate client; or

-        within the applicable statutory terms, if any (e.g. such applicable for accountancy and taxation).

As far as our corporate clients are the data controllers of these data, they are responsible to provide the Fleet Card holders with all needed information details with respect to their personal data processing.

Whom we may provide your personal data to

EKO BULGARIA provides the above personal data to our providers of hardware and software for usage of the Fleet Cards and/or for accounting purposes as well as to competent authorities upon their due request and in compliance of all statutory requirements with this regard.

  • INDIVIDUALS PERFORMING TRANSPORTATION OF GAS AND/OR FUEL

EKO BULGARIA processes the following categories personal data of individuals-drivers assigned to transport gas and/or fuels in any possible way and by any possible person, for example by transportation company under assignment from EKO BULGARIA or by client of EKO BULGARIA:

(a)   names and mobile phone;

(b)   data contained in professional driver’s license and data contained in certificate of professional qualification for carriage of dangerous goods (fuels) (ADR certificate);

(c)    data related to required experience in the category of the professional driver’s license;

(d)   data contained in a certificate of clean criminal record;

(e)   data related to location and/or movements received via GPS system.

Where do we have the personal data from

Your personal data are provided to us by your employer or contractor under civil contract.

Purpose, legal basis and term of processing

We process the above data for the following purposes only:

-        for the execution and performance of the contract under which EKO BULGARIA or its client have assigned transportation services as well as for the compliance with and performance of EKO BULGARIA’s statutory obligations with this regard.

The legal basis for this processing is exercising the rights of EKO BULGARIA and the fulfilment of its obligations under the respective contract for delivery and/or transportation of gas and/or fuels, in particular – for the purposes of performance of and monitoring of the transportation activities and requesting, sending, receiving and administration of deliveries.

This processing is also based on statutory obligations of EKO BULGARIA related to the transport of gas and fuels.

We also may process your personal data based on our legitimate interest to assign the transportation services which we need to reliable partners.

The term within which EKO BULGARIA will process your personal data is limited to the term for which such processing is justified. For example, as regards personal data which may be contained in accounting documents which we have to keep by law, this term is 11 years. On the other hand, we will keep personal data contained in documents needed for the performance of contractual relations for up to 6 years after termination of the respective contract or until closure of dispute related procedures.

When applicable, the data will be processed for a term not less than the term required by law.

  • BUSINESS CONTACTS

If you provided any employee of EKO BULGARIA with your business contact information via your business card or in any other way or this information is publically available, please note that it is possible that EKO BULGARIA has included this information of you in its business contacts list.

The above means that in case of business need, for the purpose of sending you holiday greetings or for the purpose of providing you with information about our services, EKO BULGARIA may contact you but only in your official capacity in which we have your contact information.

EKO BULGARIA provides all necessary protections to its database with business contacts as for all other personal data.

If you do not wish EKO BULGARIA to contact you as described above, please inform us at any of our addresses listed in the next item II and your contact information will be deleted from our business contacts database.

Whom we may provide your personal data to

EKO BULGARIA respects and protects the confidentiality of your personal data. In compliance with the statutory requirements, we may share personal data with our service providers (for example, legal services), other contractors involved in fuel and gas transportation or supply processes (for example our clients to which we provide deliveries by you and/or companies to which the management of filling stations EKO is assigned), or with other companies from the Hellenic Petroleum group of companies to which EKO belongs (in EU member states only).

We may provide your personal data to competent authorities upon their due request and in compliance with all statutory requirements with this regard.

DATA SUBJECTS RIGHTS

If you are an individual whose data are processed by EKO BULGARIA under any of the above circumstances, you have the following rights with this regard:

(a)   You have the right to object to the processing of your personal data for the purpose of direct marketing, if you are client, subject to direct marketing. If you file such an objection against direct marketing, we will no longer process your personal data for this purpose but none of our services related to your EKONOMY Card will be limited anyhow. However, in order to ensure that your objection is regarded, your data will be included in data base of objected Data Subjects;

(b)   All Data Subjects have the right to:

-        be informed what kind of personal data are processed by EKO BULGARIA;

-        access and receive a copy of the processed data;

-        rectification or erasure of their personal data;

-        restrict the processing; and

-        data portability.

You may exercise any of your rights above by submitting a written application in any of the following ways:

-        via e-mail to: office@eko.bg

-        via letter addressed to: EKO BULGARIA EAD, UIC 130948987, address: Litex Tower, floor 9, 3, Lachezar Stanchev Street, Izgrev Region, Sofia 1756.

Please note that your application should contain at least your names and other identification information, description of your request, preferred way of communication with you, address for correspondence, signature and date of the application.

If the application is signed by a proxy, the respective power of attorney should be attached to the application.

EKO BULGARIA may contact you for additional information, if it needs to ensure your identity or further clarify your request.

You may also object to direct marketing in any other way indicated by EKO BULGARIA in the respective direct marketing message – e.g. opt-out link provided in e-mail.

You have the right to contact a supervisory authority, which for the Republic of Bulgaria is the Commission for Personal Data Protection, if you want to lodge a complaint with regard to the processing of your personal data.

EXCESSIVE DATA PROVIDED BY/FOR YOU

If we receive any personal data in excesses of what is needed for us to comply with our purposes above, we will delete this information immediately but not later than a month after its receipt.

SECURITY OF YOUR INFORMATION

To help protect the privacy of your personal data, we maintain physical, personal, technical and administrative safeguards. We update and test our security technology on an ongoing basis. We restrict access to your personal data to those employees and personal data processors who need to know that information to provide benefits, goods or services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees' privacy responsibilities.

USE OF EKO.BG WEBSITE

As is true of most other websites, EKO BULGARIA’s website collects certain information automatically and stores it in log files. The information may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system and other usage information about the use of our website, including a history of the subsections you view. We use this information to help us design our site to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences. EKO BULGARIA’s website also uses cookies and web beacons. It does not track users when they cross to third party websites, does not provide targeted advertising to them, and therefore does not respond to Do Not Track (DNT) signals.

You may find more information on how EKO BULGARIA may process your personal data through our website at: https://www.eko.bg/en/the-company/eko-bulgaria/group-policy-for-personal-data-protection/.

PART II: INFORMATION ABOUT THE PERSONAL DATA PROCESSING RELATED TO THE FACEBOOK PAGE OF EKO BULGARIA

The Facebook page of EKO petrol stations (hereinafter “the Facebook Page”) is created to facilitate the communication between the management of EKO Bulgaria EAD and the clients and visitors to its petrol stations, for the promotion of goods, services, games, events and other ongoings and campaigns organized by us or our partners. Our Facebook Page also aims to provide the consumers with the opportunity to share their opinions and assess the quality of the products and services offered at EKO petrol stations.

For the performance of the activities mentioned above, EKO Bulgaria EAD processes personal data of the following main categories data subjects:

  • VISITORS OF THE FACEBOOK PAGE OF EKO PETROL STATIONS
  • INDIVIDUALS PARTICIPATING IN GAMES ORGANIZED BY EKO BULGARIA EAD IN FACEBOOK
  • INDIVIDUALS ATTENDING EVENTS ORGANIZED AT THE PREMISES OF EKO PETROL STATIONS

HOW, WHY AND WITHIN WHAT TIME LIMITS DO WE PROCESS YOUR PERSONAL DATA

EKO Bulgaria EAD, with Unified Identification Code 130948987, having its seat and management address at: 3, Lachezar Stanchev Str., Litex Tower Complex, fl. 9, Sofia 1756, Izgrev District, Republic of Bulgaria, represented by Alexios Athanasopoulos (hereinafter EKO Bulgaria“), in its capacity of Administrator, processes personal data as follows:

  • VISITORS OF THE FACEBOOK PAGE OF EKO PETROL STATIONS

EKO Bulgaria processes the following categories personal data of its Facebook page visitors:

(a)   data, contained in their Facebook profile, namely: first name and family name; gender; date of birth; email address, telephone number, in case and to the extent that the visitor has shared publicly these data in his/her Facebook profile.

(b)  other data, published in the Facebook page of Eko petrol stations by visitors, namely: photos, videos, comments, personal messages and all other types of posts made by the visitor in our Facebook Page.

Purpose of processing, legal basis and processing terms

We use the data above only for the following purposes:

-        administration and management of the Facebook Page of EKO Bulgaria;

-        administration of any comments and complaints of our customers made through our Facebook Page.

EKO Bulgaria processes these data on the basis of its legitimate interest to popularize and advertize its activities including those carried out at EKO petrol stations.

When you publish information or upload pictures/videos at the Facebook Page of EKO petrol stations or post a comment to any of our posts, the information you have published and your Facebook identification name become publically available. This information could be accessed by anyone who is visiting the Facebook Page.

EKO Bulgaria is not responsible for the way these third parties use the information you posted on our Facebook page.

When you participate in discussion on our Facebook Page (including through personal messages), we strongly recommend that you avoid sharing personal data that can be used to identify yourself directly, such as your name, age, address, and phone.

EKO Bulgaria is not responsible for the protection of the information you have posted on the Facebook page.

The processing term for these purposes is until the deletion of the specific article or post.

  • INDIVIDUALS PARTICIPATING IN GAMES ORGANIZED BY EKO BULGARIA IN FACEBOOK

EKO Bulgaria processes the following categories personal data of individuals who registered themselves to participate in games, organized by us (including such organized by EKO Bulgaria together with our partners) in the Facebook Page:

(a)   data for physical identity: first name and family name; gender; email address; telephone number; address;

(b)  data related to games’ participation: data contained in photos and/or videos; comments and other social media posts.

Purpose of processing, legal basis and processing terms

We may use the data above only for the following purposes:

-        administration of games and events, including contacting the winning participants, awarding prizes, conducting mandatory accounting and taxation;

-        we may also (but not necessary) use the above personal data for direct marketing of any activities, initiatives and campaigns organized by EKO Bulgaria and our partners, including. This purpose for processing of your personal data also includes sending newsletters and various advertising messages but only for our activities, related to the goods and services offered by EKO Bulgaria.

EKO Bulgaria processes these personal data on the basis of its legitimate interest to promote and advertise its goods, services and activities including those carried out at EKO petrol stations as well as on the basis of the contractual obligation of EKO Bulgaria to award prizes to the winning participants.

The processing of your personal data for these purposes is limited by the following terms:

-        for the purposes of administering the specific campaign/event your personal data will be processed for a maximum of 7 (seven) days after the expiration of the term for receiving the awards from the game (including in paper form)

-        data contained in documents, necessary for the execution of contracts - up to 6 (six) years after termination of the respective contract or until closure of dispute related procedures;

-        data contained in accounting registers and financial statements and/or data contained in documents subject to tax audits and needed for accounting purposes – up to 11 (eleven) years.

Information how to exercise your right to object to direct marketing, can be found in the What Are Your Rights section below.

  • INDIVIDUALS ATTENDING EVENTS ORGANIZED AT THE PREMISES OF EKO PETROL STATIONS

EKO Bulgaria processes the following categories personal data of individuals who have attended events, organized at EKO petrol stations or by EKO Bulgaria at other locations:

(a)   data for physical identity: data contained in photos and/or videos.

Purpose of processing, legal basis and processing terms

EKO Bulgaria may post on its Facebook page photos of events organized at EKO petrol stations or by EKO Bulgaria at other locations.

The processing of your personal data in this case is based on EKO Bulgaria’s legitimate interest to promote the organized events and communicate their conduct.

If you do not want photos/videos of you to be published on our Facebook Page, you have the right to object to the processing of these data and EKO Bulgaria will ensure that the respective posts are removed from the Facebook Page.

Information on how to exercise your rights, including how to object, can be found in the What Are Your Rights section below.

The term of this processing is until the specific article or post is deleted.

WHO WE CAN SHARE YOUR DATA WITH

EKO Bulgaria tends to organize increasingly interesting and interactive games, and for this purpose, EKO Bulgaria may assign any of the above-mentioned activities of personal data processing to marketing agencies and IT service providers (including such providing software and hardware solutions) ensuring data protection and lawful processing. We may also provide personal information to our partners, if this is necessary for the provision of game prizes (including couriers and co-organizers of games).

WHAT ARE YOUR RIGHTS

If you are an individual whose data are processed by EKO Bulgaria under any of the above circumstances, you have the following rights with this regard:

(a)   You have the right to object to processing of your personal data for the purpose of:

-        promoting events organized by/at EKO petrol stations or by EKO Bulgaria at other locations in our Facebook Page;

If you make such an objection to a publication of photos/videos containing your personal data on the Facebook page, we will remove the respective photos/videos and will no longer process these personal data for that purpose.

-        direct marketing, if you are addressee to such messages

If you make such an objection to our direct marketing messages we will no longer process your personal data for this purpose but none of our other services provided to you will be limited anyhow. However, in order to ensure that your objection is regarded, your data will be included in data base of objected data subjects.

(b)  All data subjects have the following rights:

-        be informed what kind of personal data are processed by EKO Bulgaria;

-        access and receive a copy of their processed personal data;

-        rectification or erasure of their personal data;

-        restrict the processing; and

-        data portability.

You may exercise any of your rights above by submitting a written application in any of the following ways:

-        via e-mail to: office@eko.bg

-        via letter addressed to: 3, Lachezar Stanchev Str., Litex Tower Complex, fl. 9, Sofia 1756, Izgrev District, Republic of Bulgaria, EKO Bulgaria;

-        you may also object to direct marketing in any other way indicated by EKO Bulgaria in the respective direct marketing message - e.g. by clicking on link provided in an e-mail.

You also have the right to file a complaint concerning the processing of your personal data with the supervisory authority which is the Personal Data Protection Commission for the Republic of Bulgaria, with contact details listed in the following link: https://www.cpdp.bg/?p=pages&aid=5 

CONTENTS OF YOUR APPLICATION

Please note that your application for exercise of any of your rights should contain at least your names and other identification information, description of your request, preferred way of communication with you, address for correspondence and date of the application.

If the application is signed by a proxy, the respective power of attorney should be attached to the application.

EKO Bulgaria may contact you for additional information, if it needs to ensure your identity or further clarify your request.

EXCESSIVE DATA PROVIDED BY/FOR YOU

If we receive any personal data in excesses of what is needed for us to comply with our purposes above, we will delete this information immediately but not later than 1 (one) month after its receipt. 

PROTECTION OF YOUR DATA

To help protect the privacy of data and personally identifiable information, we maintain physical, personal, technical and administrative safeguards. We update and test our security technology on an ongoing basis. We restrict access to your personal data only to those employees and personal data processors who need to know that information to provide benefits, goods or services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to ensure our employees' privacy responsibilities

USE OF THE FACEBOOK PAGE OF EKO BULGARIA

Like any Facebook page, ours also follows the general rules on personal data protection that Facebook provides.

With this regard, we want to remind you that the information you share through your Facebook account is automatically owned by Facebook Inc. or the Irish subsidiary Facebook Ireland Limited. Facebook has the right to process and store this information until you delete your account.

At the same time, Facebook does not allow companies managing Facebook pages to specify storage terms for the information you send them through messages. Thus, sending information via personal message to the Facebook Page of EKO petrol stations implies higher risks for your personal data as we could not guarantee where and how long your personal data are stored.

For this reason, each data subject has the freedom to provide us with information through alternative means which are under our control, for example by email to: office@eko.bg.

CHANGES AND UPDATES TO THIS PRIVACY NOTICE

As our organization, goods and services change from time to time, this Privacy Notice is expected to change as well. We reserve the right to amend the Privacy Notice at any time, for any reason, without notice to you, other than the posting of the am         ended Privacy Notice at this Site. We may e-mail periodic reminders of our notices and terms and conditions and will e-mail our partners and clients of material changes thereto, but you should check our website frequently to see the current Privacy Notice that is in effect and any changes that may have been made to it.

The present documents represent privacy notice within the meaning of Art. 13 and Art. 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).