first – Dream Express

When using the dreamexpress.com website, your personal data is processed by Dream Express Ltd. with UIC: 205515604, with registered office and address of management: Sofia, 81B Bulgaria Blvd., 5th floor.
Dream Express Ltd. is a controller of personal data within the meaning of the General Regulation on Data Protection (Regulation (EU) 2016/679) of the European Parliament and of the Council.
You can contact the Administrator by email: ???
Person responsible for personal data protection: Valeri Dimitrov
This POLICY contains information about the collection, processing and storage of personal data by “Dream Express” Ltd., as well as the rights of individuals in connection with the protection of their personal data.

We would like to introduce you to the following concepts:

Defenitions:

A “administrator” of personal data, a natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by EU law or the law of a Member State, the controller or the specific criteria for determining it may be laid down in EU law or in the law of a Member State.
“Processor of personal data” means a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller.
“Processing of personal data” means any operation or set of operations carried out with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using , disclosure by transmission, dissemination or other means of making the data available, arranging or combining, restricting, deleting or destroying.
“Personal data” means any information relating to an identified or identifiable living natural person. Individual data which, when put together, may lead to the identification of a specific person, also constitute personal data. Examples of personal data: first name and surname, home address, identity card number, PIN, etc.
Dream Express Ltd. operates in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) and all relevant legislation at national and supranational level in the field of personal data protection. Dream Express Ltd. has the following principles, which it observes when processing your personal data:
• legality, good faith and transparency;
• restriction of the purposes of processing (collection of personal data for specific, explicitly stated and legitimate purposes);
• correction (if the data is inaccurate);
• expediency, according to the purposes of personal data processing;
• limiting storage in order to achieve the objectives (“minimizing data”);
• accuracy and timeliness of the processed data;
• ensuring security at an appropriate level regarding the protection of personal data;
• storage of data for a period not longer than necessary for the purposes for which personal data are processed.
We would like to inform you that you can browse our website without entering any personal data. In cases when you want to send an inquiry to us, we need to receive your personal data (name, email address and telephone number) so that we can respond to your inquiry and provide you with the requested information. In this case, we need to obtain your consent to the processing of your personal data. Dream Express Ltd. collects, processes and stores personal data in connection with the conclusion and execution of transactions with its customers. The administrator processes your personal data only in the following circumstances:

with your consent;
when there is a contractual obligation;
to fulfill a legal obligation (according to EU or national law);
when processing is necessary to perform a task performed in the public interest (according to EU or national legislation);
to protect the vital interests of the individual;
for the legitimate interests of “Dream Express” Ltd., but only after checking that the fundamental rights and freedoms of the person whose data are processed are not seriously affected.
in the course of the usual professional activity of the Administrator
Dream Express Ltd. collects, processes and stores personal data that you provide to us for the following purposes:
individualization of a party to the contract and the persons for contact in connection with its implementation;
management and execution of your requests for products and services;
notification of everything related to the products and services you use with us
Fulfillment of obligations provided in the law for keeping or providing information in view of our tax obligations of the company to the state (for example on the basis of the Accounting Act and other tax laws – VAT, VAT Act, CITA, TPSC, etc.)
Administration of the Company’s relations with third parties, in order to carry out the company’s activities and provide legal services.
Fulfillment of the rights and obligations of the Company in its capacity as an employer, including payment of wages and fulfillment of the related obligations of the employer for withholding and payment of health and social insurance of employees, taxes and other rights. and obligations of the Company related to human resources management
• In fulfillment of their official duties – by order of the law – to be provided to state institutions / NRA, judicial authorities, police, etc./.
Dream Express Ltd. collects, processes and stores the following types of personal data:

names, PIN, address, e-mail address (email), telephone number – for the clients-individuals, or of the natural persons who manage and represent the clients-legal entities. These data are necessary for the conclusion and implementation of contracts with customers of “Dream Express” Ltd., as well as to contact the customer and send information to him, including with explicit consent – and to send promotional and advertising messages.
• information about your use of our website – IP address, operating system, browser, search queries and content viewed. This information is collected in order to improve and personalize user searches.
Dream Express Ltd. collects, stores, processes special categories of data (so-called “sensitive data”), which are subject to specific processing conditions, namely: personal data revealing racial or ethnic origin, political views, religious or philosophical beliefs; membership in a professional organization; genetic data, biometric data processed solely for the purpose of identifying you as a human being; health data; data on a person’s sexual life or sexual orientation, and does not perform automated decision-making with sensitive data.
Dream Express Ltd. stores your personal data when determining the appropriate storage period, we take into account the amount and nature of personal data, the purposes for which we process them, and whether we can achieve these goals by other means. The controller also complies with the relevant legal requirements for storage of certain categories of data in order to fulfill our obligations arising from a regulatory act or a contract, as well as to protect our legal rights in the event of a claim. “Dream Express” Ltd. will not store your personal data for a period longer than necessary to achieve the purposes for which we process them. When the need for the storage of personal data ceases to exist, Dream Express Ltd. will delete or destroy your personal data in a secure manner and without undue delay.
The administrator independently collects and processes your personal data provided by you. All personal data is stored on the territory of the Republic of Bulgaria, and the Administrator does not transfer your personal data to third countries. Only in the cases provided for in a normative act, the personal data will be provided to third parties.

Your rights in connection with the processing of your personal data:

Right to information – You have the right to ask us for information on whether and to what extent we process and store personal data, for what purpose and on what grounds we process and store personal data;
Right of access to your personal data (the so-called “request for access to data”). This allows you to receive a copy of your personal data held by the Administrator and to check whether we process them in the manner prescribed by law;
Right of correction – In case we process incomplete or wrong / wrong data, you have the right, at any time, to request that we correct or supplement them;
Right to be deleted (“right to be forgotten”) – This allows you to ask us to delete or remove without undue delay all or part of your personal data, if there is no reason to continue to process and store them;
Right to restrict processing – You can request a restriction on the personalized data being processed if: you dispute the accuracy of the data, for the period in which we have to check its accuracy; the processing of the data has no legal basis, but instead of deleting them, you want their limited processing; we no longer need this data (for the specified purpose), but you need it to establish, exercise or defend legal claims; you have filed an objection to the processing of the data, pending verification of the legal grounds of the controller;
Right to data portability – This allows you to request that we present to you the personal data that you have entrusted to our care in a suitable electronic format, and you have the right to transfer them to another administrator in a suitable electronic format;
Right to withdraw your consent – You can withdraw your consent for all or only part of your personal data, as well as for specific or all purposes of processing. If you have consented to the collection, processing and storage of your personal data for a specific purpose, you have the right to withdraw it at any time in respect of that particular type of processing. Once you notify us that you are withdrawing your consent, we will stop processing them for the purpose or purposes you originally agreed to, unless there is another reason to continue that processing;
• Right to object – You have the right to object to the processing of your personal data if we do not prove that there are compelling legal grounds for the processing that take precedence over your interests, rights and freedoms as your data subject or to establish, exercise or defend legal claims, the Administrator will terminate the processing immediately.

Right to complain – In case you think we are violating the applicable regulations, please contact us to clarify the issue. Of course, you have the right to lodge a complaint with the Data Protection Commission. You can also lodge a complaint with a regulatory body within the EU;
• The right to be notified in the event of a breach of the security of your personal data, which may pose a high risk to your rights and freedoms. The administrator will inform you without undue delay and in an appropriate manner when such a violation is established, as well as about the measures that have been taken or are to be taken.
To exercise any of your rights listed above, please send a free text request or notification to the following email address: ?????. Please note that we may ask you for specific information to help us verify your identity and respect your right of access to information or any of your other rights. The purpose of this additional security measure is to ensure that your personal data will not be disclosed to persons who are not entitled to receive it. The exercise of the above rights does not require the payment of a fee on your part. However, we may charge a reasonable administrative fee if your request for access is clearly unfounded or if the requests are repeated or excessive. In such circumstances, we may also refuse to comply with the request.
If you believe that your rights to personal data protection have been violated, you have the right to file a complaint to the national competent authority for personal data protection, namely: Commission for Personal Data Protection (CPDP), address: Sofia, Blvd. . „Prof. Tsvetan Lazarov ”№ 2, e-mail: kzld@cpdp.bg, website: www.cpdp.bg. You can appeal against actions and acts of the personal data controller in court before the respective Administrative Court or the Supreme Administrative Court under the general rules of jurisdiction.
The administrator ensures the protection of your personal data by following strict procedures and certain internal security rules when storing your personal data in order to protect them to the highest degree and to prevent unauthorized access, accidental loss, damage, destruction. The team of Dream Express Ltd. strives to improve security measures, taking into account the progress and implementation of new technologies.
In order to apply the latest protection measures and in order to comply with current legislation, we will regularly update this Privacy Policy. If the changes we make are significant, we may post a notice of the changes on our website. All changes, additions and amendments to this privacy policy will be made in compliance with the requirements of applicable law.