In connection with the entry into force and implementation of Regulation (EU) 2016/679 (General Data Protection Regulation—GDPR) and the applicable Bulgarian legislation in the field of personal data protection, and in light of AGENZIA EOOD’s commitment to fulfill its obligations as a personal data controller correctly and in good faith, we hereby provide you with this Privacy Policy.
- Data Controller Information
AGENZIA EOOD, UIC: 208628443, with its registered office and address of management at: Sofia, 7 Stefan Karadzha Street, 3rd floor, represented by the manager, Mihaela Lyudmilova Georgieva.
Contact Information:
- Correspondence address: 7 Stefan Karadzha St., floor 3, Sofia;
- Contact person: Mihaela Lyudmilova Georgieva;
- Phone: 0877 884 448;
- Email: [email protected];
- Website: https://agenzia.bg/.
The company is not required to appoint a data protection officer pursuant to Article 37 of Regulation (EU) 2016/679.
- 2. Categories of Data Subjects
In the course of its business activities, AGENZIA EOOD processes personal data of the following categories of individuals:
- Employees (current and former);
- Job applicants;
- Customers, counterparties, and suppliers—individuals and/or representatives of legal entities;
- Visitors to the website https://agenzia.bg/ who provide their personal data by using its features.
The purpose of these rules is to inform you about what personal data we process, for what purposes, and what your rights are.
- Privacy Policy Regarding Employees
AGENZIA EOOD processes the personal data of its employees in its capacity as an employer.
The personal data processed includes: full name, personal identification number (EGN)/date of birth or other identification number, address, information from an identity document (if necessary), contact information, education, professional experience and qualifications, marital status (where applicable), bank account, salary information, as well as health-related data in the cases provided for by law.
Personal data regarding health status constitute special categories of personal data and are processed only when there is a legal basis—to fulfill obligations under labor and social security laws, for occupational health purposes, or where explicit consent has been provided.
The purposes of the processing are:
- the conclusion and performance of an employment contract;
- compliance with legal obligations;
- protection of the company's legitimate interests;
- when explicit consent has been given.
"Legitimate interest" refers to the protection of the company's rights and legitimate interests, including in labor and legal disputes, internal organization, and security.
Personal data is retained for the periods specified in applicable law, after which it is deleted or securely destroyed.
- Privacy Policy for Job Applicants
AGENZIA EOOD processes the personal data of job applicants in connection with the conduct of recruitment procedures.
The data processed includes: names, contact information, education, professional experience, qualifications, a resume, a cover letter, and other information voluntarily provided by the applicant.
The personal data of unsuccessful candidates is retained for up to 6 (six) months after the conclusion of the procedure, unless the candidate has consented to a longer retention period.
- Privacy Policy Regarding Customers and Business Partners
The company processes the personal data of customers and business partners for the purpose of entering into and fulfilling contractual relationships.
The data processed may include: names, identification numbers, addresses, contact information, banking information, and professional information.
Personal data is retained for the duration of the contract and thereafter for the periods specified in applicable law.
- Online Processing and Use of the Website
The website https://agenzia.bg/ can be used without providing personal data, except in cases where the visitor voluntarily provides such data through the available features (e.g., the contact form).
The Website Terms of Use, as well as the rules regarding the use of “cookies,” are set forth in separate documents— “Website Terms of Use” and “Cookie Policy,” published on the company’s website.
- Disclosure of Personal Data to Third Parties
Personal data may be disclosed to public authorities, as well as to providers of accounting, legal, IT, and other services, when necessary to fulfill contractual or legal obligations. Personal data is not disclosed or transferred outside the European Union and the European Economic Area.
- Rights of Data Subjects
Every data subject has the right of access, rectification, erasure, restriction of processing, objection, and data portability, as well as the right to withdraw consent.
Applications may be submitted by email to [email protected] or to the company's registered office.
If your rights are violated, you may file a complaint with the Personal Data Protection Commission or the competent court.
- Changes to the Policy
This Privacy Policy is effective as of January 5, 2026, and may be updated from time to time; data subjects will be notified of such updates in an appropriate manner.
