gdpr

PERSONAL DATA PROTECTION INFORMATION

You and your personal data are important to us!

Plovdiv Airport EAD, with corporate seat and registered address at Village of Krumovo, Plovdiv Airport. BG-4009, is an airport operator of a public civil airport in Plovdiv. Our business is the management and operation of Plovdiv Airport, and function as an employer, airport administration, aircraft ground handling, passengers, cargo, and mail operator, as well as a commercial partner of our counterparties and commercial partners providing services in the passengers and airport guests commercial establishments. Performing its diverse functions, Plovdiv Airport" EAD, in its capacity of Administrator and/or Personal Data Processor, recognizes the need for appropriate protection and management of any personal information you share with us. To help you understand this better, we provide this information in the form of Personal Data Protection Information that explains our practices and the choices you can make about how your information may be collected and used.

The personal data provided by you and/or collected on our websites are stored and processed in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), (OJ, L119/1 of 4 May 2016).

We respect the confidentiality of your personal data!

We will not provide third parties with your personal data unless we have your written consent or are required to do so by law, we will not use or share your personal data in ways and for purposes inconsistent with those specified, when you provided your personal data.

We use appropriate physical, technical, and administrative measures to protect your personal data against any unauthorized access, misuse, disclosure, or alteration.

What data do we collect:

This Personal Data Protection Information applies to all personal data collected by or submitted to us, in our capacity of natural persons' personal data Administrator, Processor, and/or Recipient.

“Personal Data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

You are not required to provide us with personal data if you only browse our website and obtain any public information you may need.

We collect personal data in the following cases:

• you apply for a job with us;

• you are our employee working under an employment contract and/or you participate in trainings;

• you are external parties participating in trainings and/or providing services under freelance contracts;

• you are a user using specialized airport services;

• you request access to airport security areas;

• you send questions, comments or correspondence to us;

• if you are a passenger or visitor at the airport, you are subject to video surveillance and video recording in the airport area.

The types of personal data collected may include:

• Your name/Personal ID No/Foreigner’s Personal ID No or date of birth;

• Your position and the name of the company you are employed in;

• Your address, (including street name, city name, state/province, postal code);

• Your e-mail address and any other identifier that allows the

Plovdiv Airport EAD to contact you physically or online;

• Your telephone number;

• For employees and for job applicants – information from an identity document, education degree, health status and fitness for work, criminal record certificate for admission to work at an airport, previous work experience and positions held, qualification documents; • Any other information you voluntarily provide us when you communicate with us.

What are our objectives when using your personal data

We use your personal data provided by you in order to meet the requirements of: The Labor Code, the Social Security Code, the Occupational Health and Safety Act, Natural Persons Income Tax Act, as well as the statutory regulations for their implementation arising upon the execution, performance, and termination of an employment contract; Complying with the obligations to assist the bodies of the Ministry of Interior and the judicial authorities in the exercise of their powers and to establish, exercise or defend legal claims; Complying with the obligations to assist the State Agency for National Security in the exercise of their powers and to establish, exercise or protect national security; Complying with the obligations to provide information to the National Revenue Agency, the National Social Security Institute or any other public authority that has statutory grounds to obtain the relevant data for financial, insurance, control, and other legal purposes; Complying with the obligations to provide information to Directorate-General for Civil Aviation Administration in the exercise of their powers and in their capacity as an authorized authority for aviation security in the civil aviation of the Republic of Bulgaria; Complying with the requirements of the Civil Aviation Act, the National Civil Aviation Security Program of the Republic of Bulgaria, the National Civil Aviation Security Training and Certification Program of the Republic of Bulgaria, the National Civil Aviation Security Quality Control Program of the Republic of Bulgaria; We will use your personal data in order to communicate with you.

In case we intend to process your personal data for purposes other than those stated above, you will be informed of the new purposes and provided with all necessary information prior to the further processing of your personal data. Your rights as a data subject:

• You have the right to request access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to the processing as well as the right to data portability;

• In the event that the processing of your personal data is the result of your explicit and voluntary consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

• You have the right to lodge a complaint with the supervisory authority – the Commission for Personal Data Protection of the Republic of Bulgaria;

• In order to achieve the goals indicated above, we hereby inform you that you are providing your personal data in order to meet the aforementioned legal requirements and/or to meet a contractual requirement, and/or due to the need to execute a contract.

Keeping your personal data secure

Physical security is intended to prevent unauthorized access to a database, equipment, and hard copies of documents.

Technical security measures such as firewalls, access restrictions, and encryption provide protection against hacking or other unauthorized access.

How long do we keep your personal data?

We retain your personal data for as long as is reasonably necessary to fulfill the objective(s) for which it was collected and to comply with applicable laws, and your consent to such objective(s) remains valid even after the termination of our relations with you, if applicable. According to the objective of processing your personal data, you will be informed about each specific storage period, when the data is provided by you.

• Data processed within internal telecommunications networks may be disclosed to team members and will be stored throughout the duration of our contract.

• In terms of contact details: Contact data immediately becomes anonymous upon request by the registered person. 1.5 years after the last login of the user, the data will become inactive, i.e. will no longer be visible to the general public. 3 years after the last login of the user, the data becomes anonymous permanently and will be stored only for statistical purposes.

Personal data of children and minors

We do not collect information from children and minors.

We strongly encourage parents and legal guardians to take an active role in their children's or wards' online activities and interests.

Links to other websites

Some of the pages on our websites may contain links to third party websites. We cannot guarantee and have no control over the personal data protection practices or content of such websites. We advise you to carefully read the privacy policy of each site you visit.

How you can contact us to access, review or rectify your personal data

If you wish to contact us, access, update or rectify your personal data, please contact us at any time or write to us:

e-mail – office@plovdivairport.com

or

to the following postal address:

Plovdiv Airport, BG-4009

Attn: Data Protection Officer

Your right to object in the event of any dispute concerning personal data:

In the event of a dispute concerning the protection of personal data, you can contact and/or submit a complaint to the administrator at the address above and the functional electronic mailboxes.

In the event that the dispute is not resolved by the administrator, you may submit a complaint to the Competent Data Protection Supervisory Authority in the Republic of Bulgaria at any time.

Personal Data Protection Commission: https://www.cpdp.bg/

Consent and agreement

By using this website, you agree to the general terms and conditions of this Personal Data Protection Information. If you do not agree to these terms and conditions please do not provide any personal data on this website.