ORBIT LTD. is a personal data controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679) and the national legislation.
This personal data Privacy Notice provides information on how ORBIT LTD. processes the personal data of its customers, contractors and www.orbit.bg website users that have been collected or received.
Who are we?
ORBIT LTD, UIC BG 121184049
16 ‘Prodan Tarakchiev’ St,
1540 Sofia Airport Area, Bulgaria
Tel: +359 2 970 6300, -6400, -6500
E-mail address: email@example.com
What personal data do we collect?
ORBIT LTD. processes the described personal data that you as our client/contractor provide to us voluntarily in the course of our business relations in connection with our primary business activity – forwarding, transport, logistics and warehousing services. We may also obtain information containing your personal data from our business partners in the supply chain or from public registers.
The personal data we can process in the course of our activity are:
- Name, surname, telephone, e-mail (of representatives of the assignor/depositor/sender/recipient/carrier, etc.); loading/delivery addresses – in the process of requesting, bidding and executing of services;
- Documents containing personal data and proving identity, the reason for residence, property, marital status, etc. according to the requirements of the customs authorities, in addition to those mentioned in the previous paragraph – when transporting personal belongings of foreign nationals;
- Drivers’ (ORBIT LTD. employees or external carriers’) PIN, and ID card data – in connection with providing access to loading/unloading points with special crossing regimes;
- Name, surname, e-mail, telephone, the company of our suppliers’ employees – in connection with communications related to requests and deliveries;
- Video recording – when visiting the company’s sites;
- Name, email, telephone – for commercial communications.
If we do not have the possibility to process the described personal data, we will not be able to execute/assign the services subject to our business relationships.
Why do we need them?
In order for us to process your personal data lawfully, there must be a specific legitimate purpose and a valid legal basis. Depending on the purpose, we process your personal data on the following grounds:
2.1. Processing of inquiries and execution of orders/contracts for forwarding, transport, logistics and warehousing services – on the grounds of performing a contract or preliminary steps for performing a contract;
2.2. Communicating with our suppliers and their employees when purchasing goods and services for the needs of the company – on the grounds of performing a contract or preliminary steps for performing a contract;
2.3. Submitting data to third parties – senders, receivers, subcontractors and supply chain partners – on the grounds of performing a contract or preliminary steps for performing a contract;
2.4. Submitting data to third parties – authorized state bodies (customs, Ministry of the Interior, border police, etc.), on the grounds of ORBIT’s legal obligations;
2.5. Guaranteeing the security of ORBIT’s employees, goods, buildings and assets – on the grounds of ORBIT’s legitimate interests;
2.6. Sending commercial messages – on the grounds of ORBIT’s legitimate interests.
What do we do with the personal data collected?
Your personal data is processed by ORBIT LTD. on the territory of Bulgaria. The hosting and storage of your data are carried out within the borders of the European Union or in third countries with a decision for an adequate level of protection.
The company processes your personal data by (fully or partially) automated and non-automated (paper medium) means.
All electronic and paper media containing personal data are duly protected by the appropriate organizational and technical measures as required by the General Data Protection Regulation (Regulation (EU) 2016/679).
In connection with the performance of the service/contract, the Company provides your personal data (contact details, loading/delivery points, etc.) to third parties such as carriers, agents and partners operating within the borders of the European Economic Area, as well as outside it.
Based on the legitimate interest of the company, our Sales Department sends communications to or contacts by phone representatives of legal entities, using the contact information available in public registers, to present the ORBIT’s services or to present new and attractive offers to you. You can object or unsubscribe from receiving this type of correspondence through the link available in each email, containing a commercial communication.
In order for our site to work properly, we use ‘cookies’. Cookies are small text files which are stored on your computer or mobile device when you visit a particular website. They allow the website to retain your actions and preferences for a certain period of time, so that you do not have to enter them every time you visit the site or move from one page to another.
Our site uses only its own, strictly mandatory cookies, which are necessary for you to navigate through our website and use its various functions. We do not need your consent to use this type of cookies.
Use: We use WordPress for the functionality of the site. Read more
Data sharing: This data is not shared with third parties
Use: We use Polylang to manage the languages of the site. Read also
Data sharing: This data is not shared with third parties.
How long do we store your personal data?
We store your data for the period of fulfillment of the purposes for which the data were collected and in compliance with the relevant legal requirement, as follows:
– The accounting documents and the accompanying information related to the execution of contracts/requests are stored for 10+1 years, according to the Accountancy Act;
– All the other documents are archived for a 3-year period, in accordance with the requirements of the management system implemented on the basis of ISO 9001.
After the expiration of the given period, your data will be destroyed.
What are your rights?
Right of access and right to receive a copy of your personal data
You have the right to receive confirmation of our processing your personal data. When this is the case, you can have access to your personal data and to certain information about how it is processed.
Right to have your personal data rectified
You have the right to request the rectification of your personal data that is inaccurate or incomplete.
Right to erasure (‘right to be forgotten’)
You have the right to request the erasure of your personal data when they are no longer needed for the purposes for which they were collected or otherwise processed, as well as in other cases provided for in the Regulation, for example if you wish to withdraw your consent given or the data have been unlawfully processed.
Right to restriction of processing
If you contest the accuracy of your personal data for a period that enables us to verify it, as well as in other cases provided for in the Regulation, you may request a restriction of the processing of your personal data.
Right to portability
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, as well as the right to transmit this personal data to another personal data controller when the processing of such personal data:
– is based on consent or on a contract with us and
– is carried out by automated means.
When you have exercised your right of portability, you have the right to ask the Company to directly transmit your personal data to another controller, when this is technically feasible.
Right to object
You have the right, on grounds related to your particular situation, to object to the processing of personal data concerning you, which is based on the legitimate interests of the Company. You may object or at any time refuse to receive commercial communications, after which we will stop processing your data for this purpose.
If you wish to exercise any of your rights or have questions regarding the processing of your personal data, please contact us at firstname.lastname@example.org or at the contacts published on our website. We will consider your inquiry/complaint and you will receive a response within 30 days of our receiving it. If necessary, this period may be extended by up to two months, taking into consideration the complexity and number of requests, of which you will be informed in a timely manner, including the specific reasons for the delay.
If you think that your personal data have not been processed lawfully, you can contact the Commission for Personal Data Protection and lodge a complaint by telephone No 02/91-53-518 or e-mail: email@example.com.