Welcome to www.estat.bg
Thank you for visiting our website. We, ESTAT Ltd. (“ESTAT”, “we”, “our” or “us”), take your privacy seriously. We are committed to protecting the privacy of any personal information you give us. We will comply with the Bulgarian Personal Data Protection Act and all applicable regulations. We are registered on the public register of data controllers maintained by the Commission for Protection of Personal Data in Bulgaria.
When submitting request or question to the Website, you will be asked to provide certain information, such as name and email. If you do not provide us with this information, we will be unable to answer your request or question.
What Information Do We Collect About You?
We will collect and process the following information about you:
- Information you give us. This is information about you that you give us by filling in forms on the Website or by corresponding with us by phone, e-mail or otherwise. The information you give us may include your name, address, e-mail address and phone number..
- Information we collect about you. With regard to each of your visits to our Website we will automatically collect the following information:
- Google Analytics: when you use the Website, we use analytics services provided by Google (“Google Analytics”) which collect and process information about your actual location and other technical information about your visit. The information collected by Google Analytics includes the Internet protocol (IP) address used to connect your computer to the internet, clickstream to, through and from our site (including date and time), and page interaction information (such as scrolling, clicks, and mouse-overs)). Google Analytics use various technologies to determine location, including IP address, GPS, and other sensors that may, for example, provide Google with information on nearby devices, Wi-Fi access points and cell towers. For more information on how Google Analytics uses this information, please see the site “How Google uses data when you use our partners' sites or apps”, (located at google.com/policies/privacy/partners/, or any other URL Google may provide from time to time). Please refer back to this Google site for any changes or updates to these terms and the information collected by Google Analytics from time to time.
How and Why We Collect Your Information?
As a general matter, you can browse the Website without submitting your personal information to us. However, there are a number of circumstances in which you may need to provide us with your personal information.
We collect your personal information in the following ways:
- When you make a request through “Contacts” menu;
- When you participate in surveys, panels, or research;
- When you request information or assistance;
- In conjunction with your employment inquiries;
- When you participate with social media accounts involving Foundation properties;
- In conjunction with investigations into any activity that may violate the law or the Website’s terms and conditions;
- When you communicate with us through the Website;
- When you provide user-generated content on any part of the Website that permits it; and
- In conjunction with any other place on the Website where you knowingly volunteer personal information.
When you interact with any ESTAT page or account on a social media platform, such as Facebook, Twitter, Google+, LinkedIn, Tumblr, YouTube, or Pinterest, or when you use your social media account or credentials to log in to the Website, we may also collect the personal information that you make available to us on that page or through that account, including your account ID or “handle.”
How Do We Use Your Information?
Our primary reason for collecting your information is to personalize your visits to the Website, to carry out our obligations arising from any contracts entered into between you and us and to notify you about changes to our organization and services. In addition, we use your personal information in the following ways:
- For editorial purposes;
- Responding to your inquiries;
- Communicating with you about changes to our policies;
- Personalizing content and experiences on our Website, including providing you with recommendations based on your preferences;
- Processing your employment application;
- Event or program registration;
- Optimizing or improving our programs, services, and operations;
- Research and development;
- Verifying your account and account activities;
- Detecting, investigating, and preventing activities that may violate our policies or be illegal;
- Performing statistical, demographic, and marketing analyses of users of the Website and their usage patterns; and
- Managing our organization.
Where We Store Your Information
We won't retain your personal information for longer than is reasonably necessary or required by law.
How Do We Protect Your Information?
All information you provide to us is stored on our secure servers. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.
Disclosure of Your Personal Information
ESTAT is committed to applying the highest standards of ethical and lawful practices in all our operations and is dedicated to protecting the privacy of all visitors to our Website. Except as set out below, we will not sell, give away, or permit anyone outside the Foundation to use or access your personal information.
You agree that we have the right to share your personal information with selected third parties, including: (i) analytics and search engine providers that assist us in the improvement and optimization of our Website. These third parties are contractually obligated to maintain the confidentiality and security of any personal information collected from the Website. They are restricted from using, selling, distributing, or altering this information in any way other than to provide the requested services to us.
We will disclose your personal information in the cases and under the conditions prescribed by law.
You have the right at any time to access the information held about you. If you would like to make such a subject access request, please send us a letter at the following address: 9Sv. Sedmochislenitsi Street, floor 6, ap. 29, Sofia 1421, Bulgaria or send us an email to: firstname.lastname@example.org the words “Subject Access Request” in the subject line.
You are also able to challenge the accuracy and completeness of any recorded personal information that we hold about you and have it amended as appropriate, upon written notice to email@example.com
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer, if you agree. Cookies contain information that is transferred to your computer's hard drive.
We use the following cookies:
- Strictly necessary cookies. These are cookies that are required for the operation of our Site. They include, for example, cookies that enable you to log into secure areas of our Site.
- Analytical/performance cookies. These cookies allow us to recognise and count the number of visitors to our Site and see how visitors use our Site. This cookie helps us to improve the way our website works.
- Functionality cookies. These cookies are used to recognise you when you return to our Site. This enables us to personalise our content for you, greet you by name and remember your preferences.
- Targeting cookies. These cookies record your visit to our Site, the pages you have visited and the links you have followed. We will use this information to make our Site and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
Policy regarding survey participation
ESTAT respects the following principles, which are explained in more detail later, concerning Personal Data and sensitive data and that they are:
- Processed fairly and lawfully.
- Processed for limited purposes and in an appropriate way.
- Adequate, relevant and not excessive for the purpose.
- Not kept longer than necessary for the purpose.
- Processed in line with Data Subjects' rights.
- Not transferred to people or organisations situated in other countries without adequate protection.
- Lawfulness, Fairness and Transparency
Personal Data must be processed and collected lawfully, fairly and in a transparent manner in relation to the Data Subject. Furthermore, Data Subjects must be informed of how his/her data are being handled. In general, Personal Data must be collected directly from the individual concerned. Where this is not the case the legal basis on which the processing is nevertheless justified must be documented. The relevant DPO has to be consulted on whether a Data Protection Impact Assessment (DPIA) must be conducted (see also the separate guidance on DPIAs that can be found on the intranet.
- Purpose Limitation
Personal Data must only be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. Subsequent changes to the purpose are only possible to a limited extent and require substantiation and validation. The relevant DPO has to be consulted on whether a Data Protection Impact Assessment (DPIA) must be conducted (see also the separate guidance on DPIAs that can be found on the intranet.
- Data Minimisation
Personal Data must be adequate, relevant and limited what is necessary in relation for the purpose for which they are processed. It must be determined whether and to what extent the 6 processing of Personal Data is necessary to achieve the purpose for which the processing is undertaken. Where the purpose allows and where the expense involved is in proportion with the goal being pursued, anonymized data must be used instead of Personal Data.
Personal Data must be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that Personal Data that are inaccurate, having regard for the purpose for which they are processed, are erased or rectified without delay.
- Storage Limitation
Personal Data must not be retained in a form which permits identification of Data Subjects for longer than is necessary for the purpose for which the Personal Data are processed. ESTAT will not keep Personal Data longer than is necessary for the purpose or purposes for which they were collected. ESTAT will take all reasonable steps to destroy, or erase from its systems, all Personal Data which are no longer required.
- Integrity and Confidentiality
Personal Data must be processed in a manner that ensures appropriate security of the Personal Data from being revealed, disseminated, accessed or manipulated. Therefore, where methodologically possible and the expense is not disproportionate to the Data Subject’s risks, pseudonymised data must be used for the processing – REMINDER: pseudonymised data remain and are Personal Data!
- Restriction on Transfers
Personal Data must not be transferred to other countries that do not offer an adequate level of protection. ESTAT has introduced various measures to adduce such adequate level of protection on a general basis, however, various countries may have further and/or different requirements that must be adhered to.
- General Measures and Considerations
Additionally in respect of its market research business ESTAT complies with the ICC/ESOMAR International Code on Market, Opinion, and Social Research and Data Analytics and Esomar’s Data Protection Checklist.
Legal Grounds for Data Processing
- Consent to Data Processing
Rights of the Data Subject
Every Data Subject has the following rights. Their request is to be handled immediately by ESTAT and may not result in any disadvantage to the Data Subject.
- Right of access: The Data Subjects may request information on which Personal Data relating to him/her have been stored, how the data were collected and for what purpose. If Personal Data are transmitted to 3rd parties, information must be given about the identity of the recipient or the categories of recipients.
- Right to rectification: If Personal Data are incorrect or incomplete, the Data Subject can demand that they are corrected or supplemented.
- Right to withdraw consent: Where the Personal Data are processed on the basis of Consent (see also the separate guidance on Consent), the Data Subjects can object to the processing at any time. These Personal Data must be blocked from the processing that has been objected to.
- Right to erasure. The Data Subject may request his or her data to be deleted if the processing of such data has no legal basis, or if the legal basis has ceased to apply. The same applies if the purpose behind the data processing has lapsed or ceased to be applicable for other reasons. Existing retention periods and conflicting interests meriting protection must be observed.
- Right to object: The Data Subjects generally has a right to object to his/her data being processed and this must be taken into account if the protection of his/her interest takes precedence over the interests of the data controller owing to the particular personal 13 situation. This does not apply, if a legal provision requires that the Personal Data are data to be processed. The employment agreements with
- Right to data portability. The Data Subject has the right to request for the Personal Data provided by him/her to be made available to such Data Subject in a easily readable format, like a Word or Excel document.
Our Contact Details