Privacy Statement

This Privacy Statement applies to your personal data that Fabnet "EOOD" (hereinafter referred to as "Fabnet "EOOD"") collects in order to provide you with services ("Services") according to its scope of activity.

Through this Privacy Statement, we inform you about our practices applied in protecting your data, about your rights regarding the personal data collected about you through our websites and mobile applications and/or collected by us through other methods mentioned above.

If you have questions, you can contact us by sending an email to our Data Protection Officer.

General information

When collecting and processing your personal data, Fabnet "EOOD" complies with a number of laws and regulations that dictate how these actions should be performed, for what purposes, and what guarantees for the protection of personal data should be applied. The applicable regulatory framework includes, but is not limited to, the General Data Protection Regulation (Regulation (EU) 679/2016), the Personal Data Protection Act, as well as related acts.

Principles for collecting, processing, and storing your personal data

We adhere to the following principles when processing your personal data:

• lawfulness, good faith, and transparency;

• limitation of processing purposes;

• minimization of collected data;

• accuracy and currency of data;

• limitation of storage to achieve the purposes;

• integrity and confidentiality of processing and ensuring an appropriate level of security of personal data;

• accountability.

Why we collect personal data and what we use it for

Fabnet "EOOD" processes your personal data for the purposes described below:

- for registration and management of your profile, including to use services that require registration and/or payment on our websites;

- for registration and admission to events organized or co-organized by Fabnet "EOOD";

- to measure and track user behavior on the websites of Fabnet "EOOD" in order to improve our products and your user experience;

- to show you relevant ads and content;

- to manage your subscriptions to the publications of Fabnet "EOOD";

- to send you email newsletters to which you have explicitly subscribed;

- to send you messages about our products and services if you have explicitly given your consent for this;

- to send you messages about products and services from our Partners when you have explicitly given your consent for this.

What personal data we collect from you

In most cases, we collect data from you that is explicitly specified by law or that is necessary for the conclusion and execution of a specific contract between us.

We will inform you clearly and transparently if it becomes necessary to collect personal data from you that is not explicitly stated in the law as mandatory, but Fabnet "EOOD" finds necessary and/or has a legitimate interest in collecting or needs to protect your vital interests.

Data for the purposes of using services and registration in the network of Fabnet "EOOD" websites

In the forms where personal data is entered, we clearly indicate which data is mandatory to provide. These are data without which it is impossible to provide the respective Service or part of it.

Registration/Profile Creation. Some of the Services provided under the Terms and Conditions, which constitute a contract between us, are accessible after registration. To register and create a profile, you need to enter: email address and password. Additionally, information about the registration and agreement to the Terms of Use (date, time, and IP address) is stored.

You can also register using your profiles on Facebook, Google+, or LinkedIn. In these cases, we collect data from your profile on the respective social network, which may include your email, names, photo, age, professional information, and more. Please note that we collect this data only if you have given permission to the respective social network through the privacy option shown just before you register on our sites.

Regardless of how you choose to register, each profile becomes part of the network of registered users of Fabnet "EOOD".

Data stored in your profile. For the purposes of some of the provided Services, you have the option to create and/or store information in your profile such as a photo, short biography, information about your social network profiles, information about your gender, age, education, professional status, and income. You decide independently whether and what data related to you to store in your profile.

Photo

Including a photo in your account is entirely optional. It is part of your public profile in the network of registered users of Fabnet "EOOD" and is visible to other registered users. The photo is displayed, for example, next to your comments under articles and helps other users recognize that you left the respective comment. Please note that if you use the option to log into your profile through your account on one of the social networks Facebook, Google+, or LinkedIn, your profile photo from the respective network may replace the photo you uploaded to your profile, depending on whether you have allowed this option in your settings on the respective social network.

Username

The username is a unique string of letters and numbers that the system automatically assigns to you upon registration. It is used for the functioning of Fabnet "EOOD" and cannot be changed.

Your names

When registering, you can fill in your names, but this is not mandatory. If you do, other users in the network will be able to recognize you more easily and connect with you. For example, your names will appear next to the comments you leave under articles. If you have not filled them in, your username will appear there.

Data about your demographic characteristics, work, income, and professional status

In your profile, you have the option to fill in data about your gender, year of birth, education, country and city where you are located, form of employment, industry you work in, position in the company hierarchy, number of employees in the company, monthly income, and the type of department you work in. Filling in this data is entirely your choice. We use it for statistical purposes to understand the registered users of Fabnet "EOOD". If you explicitly give us your consent, we may use this data to send you email messages about our and our partners' events, products, and services that we believe may be of interest to you.

We also use this data to show you content or advertisements that may be of interest to you. You have the right to object to this by writing to us at sales@FABNETSTUDIOBG.COM .

Data for the purposes of your public profile in the network of registered users of Fabnet "EOOD"

In your profile at id.capital.bg, you have the option to fill in data about your social media profiles on LinkedIn and Twitter, a short biography, the internet address of your personal website/blog, as well as your signature in the forums of Fabnet "EOOD", which will appear under your comments on articles. Filling in this data is entirely your choice. It is visible to other users. With this, you become more recognizable to other users.

Data related to the email newsletters you have subscribed to

You voluntarily subscribe to the media newsletters offered by Fabnet "EOOD". For most newsletters, this is done from your profile settings, and the subscription to each newsletter can be canceled at any time when you are logged into your profile, in the Newsletters menu.

Some newsletters are available for subscription outside your profile. When you subscribe to them, we send you a confirmation and activation email and save the IP, date, and time (timestamp) when you did this.

Logs (Log files) related to security, technical support, development, and more.

Logs are files that record events within and interactions between systems and/or between users and a given system.

Our websites use logs for the following purposes:

To ensure the reliable operation of the Services and to identify technical issues;

To ensure the security of the services and detect malicious actions;

To develop and improve the services on the site;

To measure site traffic and usability;

Account login log

This log allows unauthorized access attempts to accounts to be detected and automatically blocked. It contains the date and time of account login and information on whether the login was via mobile version, app, or desktop browser, whether the login was with a social network profile (social login), and the IP address.

Server logs, security device logs (Web Application Firewalls), and other devices falling into this category

These logs are necessary to identify technical problems, detect malicious actions, and other purposes mentioned above. Logs may contain the following information: date and time, IP address, URL, browser and device information.

Data we collect when registering for events organized by Fabnet "EOOD"

When you register for an event organized or co-organized by Fabnet "EOOD," we collect the following data from you: first and last name, position in the company, company you work for, company address, postal code (optional), contact phone, email. The data is necessary for providing the service and identifying you for admission to the event.

For events with special access control, we may collect other data for admission purposes.

Data we collect for the purposes of subscriptions to publications and services

For the purposes of subscriptions to our publications, we collect the following data from you:

First and last name, phone, email, position, UIC (when invoicing the person is required), address, document certifying that the person is a student, issued by the respective institution (for student subscriptions).

The data is necessary for providing the service.

Processing of personal data of persons under 14 years old

It is important for us to take additional protective measures for the safety and security of children. For this reason, children under 14 years old are not allowed to create profiles on the Fabnet "EOOD" websites without the explicit consent of a parent/guardian. Fabnet "EOOD" will delete any profile created by a child under 14 years old without parental/guardian permission as soon as we are informed about it.

If you are under 14 years old, please do not send or post any information about yourself, including but not limited to name, address, phone number, email address, and others.

Cookies and other passive technologies

Fabnet "EOOD" uses "cookies" and other tracking technologies that collect information from you when interacting with our websites to improve their performance and your experience.

What are cookies?

Cookies are small text files that a website can save on your computer or mobile device when you visit a page or site. A cookie helps the site or other sites recognize your device the next time you visit. Web beacons or similar files can do the same. We use the term cookies in this policy to refer to all files that collect information in this way.

Cookies perform many different functions. For example, they help us remember your username or preferences, analyze how well our websites perform, show you ads that we believe are relevant to your interests, or even allow us to recommend content that we think will be interesting to you.

More about cookies, as well as ways to refuse the use of cookies on your device, can be found in our Cookie Policy.

Video surveillance

Our premises are under video surveillance. The video surveillance is based on our legitimate interest to protect the premises and assets of Fabnet Ltd. The surveillance is conducted respecting the rights and freedoms of individuals and is limited only to the extent necessary for security purposes. Necessary technical and organizational measures have been taken to protect your privacy. The recordings are stored for no longer than 30 days, after which they are destroyed.

Data collected from other sources

We may collect information about you from other lawful sources in order to provide you with quality services. Such sources include information from our partners (if you have consented) and publicly available information.

This information includes:

- contact data to reach you;

- publicly available information with data about the persons representing your organization.

We collect other publicly available information only after we have an explicit declaration from the person sharing it with us that you have agreed for it to be shared with us.

When we contact you, we will tell you where we obtained your personal data from, in case we did not collect it directly from you.

Your consent and our legitimate interest

Except in cases where we collect personal data based on law, contract, legitimate interest, or to protect your vital interests, we will ask for your consent.

We will use your personal data only after your explicit consent for the specific purpose.

You have the right to withdraw your consent at a later stage if you change your mind.

In cases where it is necessary to collect your personal data due to our legitimate interest or to protect your vital interests, we will inform you promptly and explain your rights.

You have the right to object to our collecting your personal data if you believe we do not have a legitimate interest in collecting it. We will take additional measures and provide you with further information and our reasons within no more than 1 month from your request.

Disclosure of your data to third parties

Fabnet "EOOD" discloses your personal data only in the following cases:

- only to state authorities, institutions, and persons to whom we are legally obliged to provide personal data;

- persons who maintain equipment, software, and hardware used for personal data processing on our behalf;

- our partners who work on behalf of Fabnet "EOOD" based on contractual relationships and help us provide our services, with whom we have confidentiality and personal data protection agreements.

Fabnet "EOOD" takes measures to ensure that all these parties apply the same protection to your personal data as our own employees and comply with Fabnet "EOOD"'s Personal Data Protection Policy. It is important for us to use services only from those who responsibly handle personal data protection and apply appropriate technical and organizational measures.

We use service providers for processing personal data for certain purposes, such as measuring and tracking user behavior on websites, sending email messages, sharing user content, logging in with social network profiles, and more. These companies include (without this list being exhaustive):

- Google (with Google Analytics, Google Tag Manager, DoubleClick for Publishers, AdX, AdSense, AdWords, Google Plus): https://privacy.google.com

- Facebook (with Facebook Tracking Pixel, Facebook Tools – Plug-in "like" button, Sign in with Facebook profile, etc.): https://www.facebook.com/privacy/

- LinkedIn: https://www.linkedin.com/legal/privacy-policy

- onthe.io: https://iotechnologies.com/pp

- Yandex (with Yandex Metrica): https://metrica.yandex.com/about/info/privacy-policy

- Gemius: https://www.gemius.com/privacy-policy.html

- Digital Metrics (with MailMaker)

- Mail Chimp: https://mailchimp.com/legal/privacy/

- Twitter widgets: https://twitter.com/en/privacy

- Viber (with Viber share button): https://www.viber.com/terms/viber-privacy-policy/

Protection measures

Fabnet "EOOD" collects, processes, and stores personal data in compliance with all legal requirements and by applying adequate technical and organizational security measures.

For maximum security during processing, transfer, and storage of personal data, we use additional protection mechanisms where necessary, such as encryption, pseudonymization, and others.

The period (term) during which we store your personal data.

Your personal data is stored for the period specified in the applicable laws, depending on the purpose for which it was collected.

In cases where there is no such legal period, Фабнет "ЕООД" assumes that it will store your personal data for a reasonable period, determined based on additional criteria. The criteria for determining the period are aligned with our desire to provide you with high-quality services, as well as the normal development of our partnership relations.

Our goal is to store your personal data in a way that requires minimal actions from you regarding re-registrations or re-providing data.

When the personal data we collect is no longer necessary for the specified purposes, we delete, anonymize, or destroy it in another appropriate manner.

Without the list being exhaustive, here are the periods for which we store some of the data we process:

Traffic data

According to the Electronic Communications Act, traffic data is stored for a period of 6 months.

The data you have entered in your profile

For the period of maintaining your profile or until you delete them.

Cookies

For the validity period for which the respective cookie is recorded.

Exercising your rights as a data subject under GDPR

The Personal Data Protection Regulation grants you certain rights as a data subject, which are listed below. To exercise any of these rights, you must send us a Request to exercise your rights under GDPR. The request must be submitted personally by you, as the data subject, or by a person explicitly authorized by you through a notarized power of attorney.

The request must include the name, address, and other identification data of the individual to whom the request relates, a description of the request, which personal data it concerns, preferred form of response and actions under the Regulation, signature, date, and correspondence address. The request can also be submitted electronically according to the Law on Electronic Documents and Electronic Certification Services.

If we have reasonable concerns regarding the identity of the individual submitting the request, we may ask for additional information necessary to confirm the identity.

You can fill out the form with a Request to exercise your rights under GDPR here.

Your right to access and receive information

You have the right to request access to your personal data at any time.

You have the right to know what personal data we process about you and what we use it for, how we store it.

With this Privacy Statement, we inform you how we process personal data and how we store it.

You can access your data at any time through the functionalities provided in your profile or by sending us a Request to exercise your rights under GDPR at sales@Фабнет "ЕООД".COM

In the rare cases where we cannot provide access to your personal data within a period not exceeding 1 month, we will inform you of the reasons.

Your right to correction

You also have the right to request Fabnet "EOOD" to correct any inaccuracies in your personal data. You can correct your data yourself through the functionalities provided in your personal profile.

For questions and clarifications, please write to sales@fabnetstudiobg.com

To request a correction, you must send us a Request to exercise your rights under GDPR at the same email.

Right to have your personal data deleted (right to "be forgotten")

Under certain circumstances, you have the right to request that your personal data be deleted. Such circumstances are:

- your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

- if you have withdrawn your consent to the processing of your personal data;

- if your personal data is processed unlawfully;

- if you have objected to the processing of your personal data;

- other cases provided for in the legislation governing personal data protection;

To exercise the right to "be forgotten," you need to send us a Request to exercise your rights under GDPR.

In some cases, we are legally obliged to retain your personal data. In these cases, it will not be possible to delete your personal data from our systems.

Other rights

Besides the above rights, you have the right to request:

- to request restriction of the processing of your personal data for a certain period of time;

- to object to the processing;

- data portability.

For this purpose, you also need to send us a Request to exercise your rights under GDPR.

The listed rights depend on the specific reason for which we process your personal data.

Contact our employees if you have any questions.

Our employees;

- will assist you in exercising your rights;

- will inform you additionally about each of your rights.

We always strive to satisfy your requests when they are permissible and justified, and to respond within the legally established timeframe.

In rare cases, it may be necessary to extend this period, but not beyond the legally allowed maximum period.

Right to complaint

If you believe that we are violating your rights, you can contact us to investigate the matter.

Our "Data Protection Officer" is available to you at the email: sles@FABNETSTUDIOBG.com

You also have the right to file a complaint with the Commission for Personal Data Protection:

Name

Commission for Personal Data Protection

Registered office and management address

Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2

Correspondence address

Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2

Phone

02 915 3 518

Website

www.cpdp.bg

Update/renewal

This statement is regularly reviewed and updated by us to be as clear, accurate, and transparent as possible and to cover any new changes that arise (if necessary).

Date of last update – August 2020