Information About Us

“BREAKTIME” AD (Breaktime and/or the Administrator) is a company registered in the Commercial Register of the Registry Agency with UIC 202356958, with its headquarters and management address at 8 Malashevska Street, Sofia, Bulgaria; Tel: 02/839 14 19; e-mail: office@breaktime.bg

Our Approach to Your Personal Data

BREAKTIME AD places great importance on the protection of personal data and collects and processes personal data only in compliance with the requirements of local and European legislation. The purpose of this “Personal Data Protection Policy” is to inform you about how we process your data, what personal data we might collect about you, for what purpose, and for how long, as well as what your rights are.
The security of the data you have entrusted to us is very important to us. Therefore, we protect your data by applying all appropriate technical and organizational measures available to us to prevent unauthorized access, unauthorized or malicious use, loss, or premature deletion of information.

Personal Data

We may collect personal data about you when you use our website or choose to purchase our products or services. In most cases, we require your personal data to conclude a contract, fulfill a legal obligation, or protect our legitimate interest. In some cases, you provide us with this information voluntarily by choosing to send us your details. Without this data, we would not be able to provide the respective services. If you do not provide identification data, we cannot conclude a contract for a product or service with you. Depending on the services you use, we may collect and process the following information about you:

• General data to identify you:
• Full name
• Contact information – address, phone number, and email
• Letters and emails we receive from you during our communication
• Video surveillance recordings when you visit our commercial and administrative sites for security purposes

Purpose and Legal Grounds for Processing Your Data

We process the personal data we collect most often for the following purposes and legal grounds:

Processing data necessary for concluding or performing a contract:

• Verifying the client’s identity across all sales channels
• Preparing offers, contracts, and all other documents accompanying the contract; managing and executing your orders
• Performing delivery, installation, maintenance, etc.
• Preparing accounting documents such as invoices for purchased goods and services, including deliveries and installation
• Providing comprehensive service, including electronically; providing warranty service; notifications related to our products and services

Processing data necessary for fulfilling a legal obligation:

• Obligations provided in the Accounting Act, the Tax and Social Insurance Procedure Code, and other related legal acts regarding proper and lawful bookkeeping
• Obligations to provide information to all government commissions and regulatory bodies
• Obligations related to remote sales, sales outside the commercial site, as provided by the Consumer Protection Act
• Providing information to the court and law enforcement agencies

Processing data based on your consent:

• Direct marketing for our products and services

Processing data based on our legitimate interest:

• Video surveillance in our commercial and administrative sites

Sharing Your Information

BREAKTIME uses third parties to support certain contractual activities or fulfill a legal obligation. We do not share your personal data with third parties without ensuring that all technical and organizational measures have been taken to protect this data, and we strive to maintain strict control over achieving this goal.
Some recipients of personal data may include:

• Companies or specialists providing delivery, installation, maintenance, courier companies, external consultants and specialists, debt collection companies, legal firms, banks, security companies, commercial agents, etc.

Providing personal data is mandatory in some cases to comply with our legal obligations, such as:

• Regulatory bodies, including government commissions, institutions, and agencies, the National Revenue Agency, the National Social Security Institute, courts, prosecutors, and others, to whom we are obliged to provide personal data under applicable law

Automated Decision-Making

We do not use tools for automated decision-making.

Security

BREAKTIME takes measures to protect your personal data from accidental loss, unauthorized access, use, alteration, or disclosure. We have policies and procedures in place to safeguard the information from loss, misuse, and unauthorized disclosure. Additionally, we implement extra measures for information security, including access control, strict physical protection, and reliable practices for collecting, storing, and processing information.
We also apply technical measures such as encryption, pseudonymization, and anonymization of the collected personal data.

When Do We Delete Your Personal Data?

We retain all the information we have collected about you and destroy it within the legally established deadlines, or if there are no such deadlines, within the periods determined by us and after all our financial relations have been settled. We do not keep your data indefinitely.
Some of the retention periods are:

• 5 years from the fulfillment of the contract, according to the limitation periods for filing claims under the Obligations and Contracts Act
• 10 years under the Accounting Act for storing and processing accounting data
• 30 days from the recording in case of video surveillance

Data Transfer Between Countries

BREAKTIME does not transfer your data outside the EU.

Access, Correction, and Withdrawal

You can request at any time that BREAKTIME provides you with information about the personal data collected and stored about you. You can also request that BREAKTIME corrects, deletes, or updates such personal data. BREAKTIME ensures your right to object and restrict the processing of personal data and your rights in case of automated decision-making.
You may withdraw your consent for the collection, storage, and use of your personal data by BREAKTIME at any time. However, the withdrawal will not affect the lawfully processed data until the withdrawal.
Some of your rights, such as data deletion or objection to processing, may be limited by applicable law.
Applications for access to information or correction can be submitted in person or by an expressly authorized person, through a written power of attorney. Applications can also be sent electronically, in accordance with the Electronic Document and Electronic Signature Act.
Please note that under current legislation, you also have the right to complain about how your data is processed to the supervisory authority – the Commission for Personal Data Protection, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd. or www.cpdp.bg.

Changes to This Personal Data Protection Policy

This personal data protection procedure may change over time. Such changes will take effect immediately after their announcement. Regularly reviewing this page ensures that you are always aware of what information we collect, how and for what purposes BREAKTIME uses it, and under what circumstances (if any) we will share it with other parties.

If you have questions or wish to exercise your rights regarding data protection, you can contact BREAKTIME employees in the following ways:
– E-mail: office@breaktime.bg
– Phone: 02 / 839 04 19
– Or in person at the company’s commercial sites.

This Personal Data Protection Policy was last updated on May 25, 2018.