{"title":"\u003Cmeta http-equiv=\u0022Content-Type\u0022 content=\u0022text\/html; charset=utf-8\u0022 \/\u003EGDPR Privacy Policy","content":"\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EBulgarian Industrial Association \u0026ndash; Union of the Bulgarian Business \u003C\/strong\u003E\u003Cstrong\u003E(BIA)\u003C\/strong\u003E \u003Cstrong\u003Eis a\u003C\/strong\u003E \u003Cstrong\u003Enon-profit association, which operates for the benefits of its members \u0026ndash; Bulgarian and foreign legal and \u003C\/strong\u003E\u003Cstrong\u003Esui juris individuals, performing economic activity. \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EBIA actively participates in the social dialogue system at national and international level and works for the achievement of economic and social progress in the country. In its activity, BIA defends the interests of business by pursuing policies and activities based on \u003C\/strong\u003E\u003Cstrong\u003Ethe principles of respecting the law, promoting free enterprise, transparency, competence and correctness. \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EBIA is a controller of personal data within the meaning of Regulation (EU) 2016\/679 Of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) and the Personal Data Protection Act. \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EBIA has been assessed and certified in accordance with the requirements of ISO\/IEC 27001:2013 \u0026ldquo;Information Security Management Systems\u0026rdquo;. \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EAs a controller of personal data, BIA processes the personal data of natural persons in accordance with the principles of data legality, expediency and proportionality and applies the necessary technical and organizational measures to ensure their confidentiality. For this purpose, internal rules and procedures for protection of personal data, compliant with the legal requirements, as well as a policy for transparency in the processing of personal data of natural persons have been developed. \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E1. Contact details of the Bulgarian Industrial Association\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003ERepublic of Bulgaria, Sofia, 16-20 Alabin Str. \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EPhone: +359 02\u0026nbsp;932 09 11\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EE-mail: \u003C\/strong\u003E\u003Ca href=\u0022mailto:office@bia-bg.com\u0022\u003Eoffice@bia-bg.com\u003C\/a\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EWebsite: \u003C\/strong\u003E\u003Ca href=\u0022http:\/\/www.bia-bg.com\/\u0022\u003Ewww.bia-bg.com\u003C\/a\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E2. Contact details of BIA on the protection of personal data\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EPhone: +359 02\u0026nbsp;932 09 11\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EE-mail: \u003C\/strong\u003E\u003Ca href=\u0022mailto:office@bia-bg.com\u0022\u003Eoffice@bia-bg.com\u003C\/a\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E3. Personal data, which BIA collects and processes\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E\u0026ldquo;Personal data\u0026rdquo; means any information relating to an identified natural person or identifiable person (data subject).\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EBIA collects and processes personal data in accordance with the \u0026ldquo;data minimisation\u0026rdquo; principle exclusively and only for specific, explicit and legitimate purposes. \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EThe source of the personal data BIA processes are: \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cul style=\u0022text-align: justify;\u0022\u003E\r\n\u003Cli\u003E\u003Cstrong\u003EThe data subject; \u003C\/strong\u003E\u003C\/li\u003E\r\n\u003Cli\u003E\u003Cstrong\u003EPublic registers with personal data to which free access is provided;\u003C\/strong\u003E\u003C\/li\u003E\r\n\u003Cli\u003E\u003Cstrong\u003EDocuments issued by competent authorities; \u003C\/strong\u003E\u003C\/li\u003E\r\n\u003Cli\u003E\u003Cstrong\u003EThird parties, in connection with or on the occasion of their participation in contractor selection procedures. \u003C\/strong\u003E\u003C\/li\u003E\r\n\u003Cli\u003E\u003Cstrong\u003EThe categories of personal data BIA processes are: \u003C\/strong\u003E\u003C\/li\u003E\r\n\u003C\/ul\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E3.1. Ordinary categories of personal data:\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E(a) names, national identification number, date and place of birth, age, gender, nationality, photographs;\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E(b) contact details \u0026ndash; telephone numbers, current and permanent address, email address;\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E(c) data on marital status and children under 18 years of age (if processing is necessary to protect employees\u0026rsquo; rights);\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E(d) data on labor and civil relations income (if processing is necessary to meet the statutory obligation of the data controller); \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E(e) data on education, qualification, length of service, professional biography;\u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E(f) data on bank accounts in connection with employment contacts, contracts concluded, etc. \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E3.2. Special categories of personal data: health status data (if processing is necessary to protect the rights of the data subject in performing employment and related to it relations). \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E3.3. Personal data collected under a statutory instrument on criminal law status \u0026ndash; conviction status certificate; a certificate that the person is not under trial and consequence (if applicable for taking up a job or performing a specific activity). \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E3.4. Personal data collected in CCTV for security purposes, in compliance with the requirements of the Private Security Act and the Personal Data Protection Act. \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E4. Objectives of the processing of personal data: \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003EThe personal data BIA processes are used only for the following purposes: \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E4.1. Human resource management: \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cul style=\u0022text-align: justify;\u0022\u003E\r\n\u003Cli\u003ERecruitment;\u003C\/li\u003E\r\n\u003Cli\u003EOccurrence, modification and termination of employment and related to it relations, which are exercised by law;\u003C\/li\u003E\r\n\u003Cli\u003EAccounting for remuneration for tax and social security purposes;\u003C\/li\u003E\r\n\u003Cli\u003EEstablishing contact with the persons by telephone, email, home address and for sending correspondence related to work, statutory, membership, management and other relations;\u003C\/li\u003E\r\n\u003Cli\u003EProtection of legal rights of data subjects;\u003C\/li\u003E\r\n\u003Cli\u003EProtection of the interests of the data controller.\u003C\/li\u003E\r\n\u003C\/ul\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E4.2. Execution of obligations under concluded contracts; to exercise rights deriving from contracts concluded; for the purposes of reporting on the performance of contracts; auditing the performance of contracts.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E4.3. For purposes explicitly stated in the subject\u0026rsquo;s declaration of consent for the processing of his or her personal data. For example:\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(a) for communication with informational, advertising and\/or marketing purposes;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(b) when collecting data for statistical surveys;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(c) when subscribing to newsletters prepared by BIA.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe declaration of consent explicitly states what personal data are collected by BIA and what the purpose of their processing is. The data subject is entitled at any time to withdraw his or her consent to the processing of personal data at a written request or in a free form.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E4.4. When processing the data for a purpose other than the original one, BIA informs the data subject and requires his\/her consent.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E5. Consequences of refusal to provide personal data \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EWhere the reason for the collection and processing of data is the consent or execution of a contract\/pre-contract relations, the refusal to provide personal data results in impossibility of establishing a relation and\/or service provision and\/or conclusion of a contract in respect of which the data have been requested.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E6. \u003C\/strong\u003E\u003Cstrong\u003ETransfer of personal data \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe collected personal data may be provided to third parties only in the following cases:\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E6.1. In fulfilling legal requirements related to:\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(a) labor relations: data are provided to public authorities, in view of their powers and competencies (National Revenue Agency, National Social Security Institute, Executive Agency \u0026ldquo;General Labour Inspectorate\u0026rdquo; and others);\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(b) member legal relations \u0026ndash; Council of Ministers, Ministry of Labor and Social Policy, court;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(c) arbitration cases \u0026ndash; court, bailiffs;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(d) issuance of certificates of origin of goods \u0026ndash; data are provided to the customs authorities in the country and abroad, Ministry of Finance;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(e) other public authorities which receive the data by virtue of a law.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E6.2. On a contractual basis \u0026ndash; to pay salaries and fees and to fulfill legal obligations related to the obligations of BIA for ensuring healthy and safe working conditions (Occupational Health Service, accounting offices).\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E6.3. On the basis of consent to data processing \u0026ndash; in accordance with the consent of the data subject.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E7. Personal data storage periods \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E7.1. Statutory data storage periods:\u003C\/p\u003E\r\n\u003Cul style=\u0022text-align: justify;\u0022\u003E\r\n\u003Cli\u003Eon employment relations, incl. salary payroll \u0026ndash; 50 years;\u003C\/li\u003E\r\n\u003Cli\u003Eaccounting records \u0026ndash; 10 years from the 1st of January of the accounting period following the reporting period to which they relate.\u003C\/li\u003E\r\n\u003C\/ul\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E7.2. Data storage periods for the precluding of statutory limitation periods related to obligations under civil and commercial contracts:\u003C\/p\u003E\r\n\u003Cul style=\u0022text-align: justify;\u0022\u003E\r\n\u003Cli\u003Efor periodic payments \u0026ndash; 3 years;\u003C\/li\u003E\r\n\u003Cli\u003Ein other cases \u0026ndash; 5 years from the date of the due date of the claim.\u003C\/li\u003E\r\n\u003C\/ul\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E7.3. Data storage periods related to the processing objectives: contractual deadlines, deadlines for completion and reporting of contractual and financial relations under contracts related to national, European and international funding.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E7.4. Data storage periods for information for tax and accounting purposes, tax audits and public financial control.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E7.5. BIA sets the following storage periods for data collected by using information technologies:\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(a) data collected using information technology \u0026ndash; Internet Protocol (IP) address, cookie ID \u0026ndash; 3 months;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(b) internet traffic on personal computers \u0026ndash; 1 week;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(c) logs related to security, technical support, development, etc. \u0026ndash; 3 months;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(d) server logs, Web Application Firewalls logs and other devices falling under this category \u0026ndash; 3 months;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(e) data collected on the basis of consent of the data subject to receive information and other newsletters from the BIA website and other information systems administered by BIA \u0026ndash; until the consent is withdrawn, respectively \u0026ndash; termination of the account\/registration;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(f) data on the withdrawn consent of the data subject \u0026ndash; indefinitely;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(g) data collected by video surveillance \u0026ndash; 1 week;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(h) data of applicants for appointment to the controller \u0026ndash; 30 days after completion of the application and selection process.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E7.6. After expiry of the storage periods, unless otherwise justified, the data on a technical medium shall be erased and, in paper form, if they are not subject to a statutory transfer, shall be destroyed.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cstrong\u003E8. Rights of personal data subjects and order of their exercise \u003C\/strong\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cem\u003E8.1. Right to information and access \u003C\/em\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe data subject is entitled to information about his or her personal data processed by BIA, as well as the right to access to them.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe data subject is entitled to receive a copy of the personal data that are being processed by BIA in electronic or paper form. For this purpose, a written request must be submitted personally or through an authorized person to BIA, including electronically.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cem\u003E8.2. Right to data confidentiality \u003C\/em\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EPersonal data processed by BIA are confidential, subject to the obligation of professional secrecy. BIA employees sign a confidentiality statement about the personal data they are working with, within their professional responsibilities.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cem\u003E8.3. Right to rectification of processed data \u003C\/em\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe data subject has the right to request from BIA the rectification, without undue delay, of inaccurate personal data related to him or her, as well as data that are not up to date. For this purpose, a written request must be submitted personally or through an authorized person to BIA, including electronically.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cem\u003E8.4. Right to erasure (\u0026ldquo;right to be forgotten\u0026rdquo;) \u003C\/em\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E8.4.1. The data subject may request BIA to erase his or her personal data without undue delay in any of the following circumstances:\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(a) personal data are no longer necessary for the purposes for which they were collected;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(b) upon withdrawal of the given consent for the processing of personal data;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(c) in objection of processing;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(d) where the processing of personal data is unlawful;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(e) where personal data must be erased in order to comply with an obligation under European Union or national legislation of the Republic of Bulgaria that applies to BIA as a personal data controller;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(f) where personal data have been collected in relation to the provision of information society services.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EIn order to exercise the right to erase data, the data subject must submit a written request personally or through an authorized person to BIA, including electronically.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E8.4.2. BIA may refuse to erase the data subject\u0026rsquo;s personal data for the following reasons:\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(a) for compliance with a statutory obligation by BIA or the performance of a task of public interest;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(b) in exercise of the right to freedom of expression and the right to information;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(c) in exercise of official authority (if applicable);\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(d) for the establishment, exercise or protection of legal claims.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cem\u003E8.5. Right to restriction of processing \u003C\/em\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe data subject has the right to request BIA to restrict the processing of his or her personal data. In this case, the data will be stored within the specified data storage periods (referred to in para 7 of this Transparency Policy) but not processed unless there is a legal basis for this. For this purpose, it is necessary for the data subject to submit a written request personally or through an authorized person to BIA, including electronically.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cem\u003E8.6. Right to object to processing\u003C\/em\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe data subject has the right to object to the processing of his or her personal data by BIA (for example, see Article 21 (2) and (6) of the General Data Protection Regulation). In order to exercise the right to object to the processing, the data subject must admit a written request personally or through an authorized person to BIA, including electronically.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cem\u003E8.7. BIA does not carry out automated decision-making, including profiling. \u003C\/em\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cem\u003E8.8. Right to data portability\u003C\/em\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe data subject has the right to receive the personal data that concerns him or her and which he or she has provided to BIA in a structured, commonly used and machine-readable format, as well as to request such data to be transmitted to another data controller when the processing is based on consent or a contractual obligation, provided that BIA carries out the processing by automated means.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u003Cem\u003E8.9. Right to lodge a complaint \u003C\/em\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe data subject has the right to lodge a complaint concerning the processing of his or her personal data through BIA by using the contact details given in para 2 of this Transparency Policy.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EA complaint may also be lodged with the supervisory authority \u0026ndash; Commission for Personal Data Protection, address: Sofia, 1592, \u0026ldquo;Prof. Tsvetan Lazarov\u0026rdquo; 2 Blvd., email: \u003Ca href=\u0022mailto:kzld@cpdp.bg\u0022\u003Ekzld@cpdp.bg\u003C\/a\u003E, website: \u003Ca href=\u0022http:\/\/www.cpdp.bg\/\u0022\u003Ewww.cpdp.bg\u003C\/a\u003E\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E8.10. The exercise of the rights under item 8.1., item 8.3. \u0026ndash; 8.6. is free of charge. Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, BIA may:\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(a) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested;\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E(b) refuse to act on the request.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E8.11. The period for consideration of the requests under item 8.1., item 8.3. \u0026ndash; 8.6. and for their pronouncement by BIA, as a data controller, is 30 days from the receipt of the request and may be extended by 2 months, taking into account the complexity and the number of requests.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003EThe Bulgarian Industrial Association reserves the right to amend and supplement this \u003Cem\u003ETransparency Policy for the processing of personal data of natural persons\u003C\/em\u003E in the event of changes to the applicable data protection legislation.\u003C\/p\u003E\r\n\u003Cp style=\u0022text-align: justify;\u0022\u003E\u0026nbsp;\u003C\/p\u003E"}