Privacy Policy

Basic information on the General Data Protection Regulation

This Privacy Rights Policy of Online Services Ltd has been developed based on the requirements of the General Data Protection Regulation (GDPR) of the European Union, which is effective from 25 May 2018.

The EU’s General Data Protection Regulation (GDPR) replaces the Data Protection Directive 95/46/EC and aims to harmonise data privacy laws across Europe, ending the malicious practice of invading the privacy of EU citizens and changing the way organisations in the region use this information.

As a personal data controller providing services related to accessing information and databases via the internet, creating, storing and processing electronic documents, Online Services Ltd meets all the requirements of the new regulation by only collecting individuals’ data to the extent that it is necessary for the provision of the service and protecting it responsibly and lawfully.

Information about the Data Controller

Name: “Online Services” Ltd.
VAT : 201851739
Registered office and registered address: Sofia, Bulgaria 1113 Izgrev district Tintiava No 15-17 Newton Technocenter
Address of business activity Sofia 1113 district Izgrev Tintiava No 15-17 Technocenter Newton
Correspondence data. Sofia 1113 district Izgrev Tintiava No 15-17 Technocenter Newton
E-mail: info@icash.bg
Phone: (+359) 2 960 7123;

Information on the competent supervisory authority:

Name: Commission for Personal Data Protection
Registered office and registered address. “1592 Proff. No 2 Tsvetan Lazarov
Correspondence data. 1. “Proff. No. 2 Tsvetan Lazarov
Phone: 02 915 3 518
Email: kzld@government.bg, kzld@cpdp.bg
Website: www.cpdp.bg

“Online Services Ltd. carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Basis for collecting, processing and storing your personal data

Art. 1. (1) Online Services Ltd. collects and processes your personal data in connection with the provision of services related to access to information and databases via the Internet, the creation, storage and processing of electronic documents and, in particular, on the basis of the following:

• Your explicit consent as a customer;
• Compliance with a legal obligation applicable to Online Services Ltd;
• For the purposes of the legitimate interest of Online Services Ltd.

(2) Online Services Ltd is the data controller in respect of your data as a user of our services. Online Services Ltd acts as a processor in relation to the personal data that you process using our services.

Purposes and principles of collecting, processing and storing your personal data

Art. 2. (1) Online Services Ltd. collects and processes the personal data you provide to us in connection with your use of our services, and to register for participation in our events, including for the following purposes:

• creating a profile and providing full functionality in the provision of our services;
• registering as a participant in an event organised by Online Services Ltd;
• accounting purposes;
• statistical purposes;
• information security protection;
• sending informational messages, service change notifications, recommendations to improve the use of the platform, new and upgraded subscription plans, etc.
• improving and personalising the service by offering you relevant renewal offers, events and other products and services that may be of interest to you;
• providing technical support;

(2) Online Services Ltd complies with the following principles in processing your personal data:

• lawfulness, fairness and transparency;
• limitation of the purposes of processing;
• relevance to the purposes of the processing and minimisation of the data collected;
• accuracy and timeliness of data;
• limitation of storage to achieve the purposes;
• integrity and confidentiality of processing and ensuring an appropriate level of security of personal data.

(3) In processing and storing personal data, Online Services Ltd may process and store personal data in order to protect its following legitimate interests:

• Performance of its obligations to the National Revenue Agency, the Ministry of the Interior and other state and municipal authorities.

What types of personal data does Online Services Ltd. collect, process and store?

Art. 3 (1) Online Services Ltd. performs the following operations with personal data for the following purposes:

• User registration on the website and related to accessing information and databases via the Internet, creating, storing and processing electronic documents
• Conclusion and execution of a commercial transaction with a customer or partner
• Sending information messages – the purpose of this activity is to administer the process of sending messages to customers relating to service enhancements or changes, overages and expiring services.
• Newsletter Sending – the purpose of this operation is to administer the process of sending newsletters to customers who have indicated they wish to receive them;

(2) Online Services Ltd processes the following categories of personal data and information for the following purposes and on the following grounds:

• Data: your personal data (name and surname, e-mail, country, telephone)
• Purpose for which the data is collected: 1) User registration; 2) To contact the user and send information to the user, including, if requested, to send newsletters and advertising messages;
• Basis for processing your personal data – By accepting the terms and conditions and registering on the website and purchasing a service, a contractual relationship is established between Online Services Ltd. and you, on the basis of which we process your personal data – Art. 1 (b) GDPR.

(3) Online Services Ltd does not collect or process personal data relating to the following:

• reveal racial or ethnic origin;
• disclose political, religious or philosophical beliefs, or trade union membership;
• genetic and biometric data, data concerning health or data concerning sex life or sexual orientation.

(4) Personal data is collected by Online Services Ltd from the individuals to whom it relates.

(5) The company does not perform automated decision-making with data.

Duration of storage of your personal data

Art. 4. (1) Online Services Ltd. stores your personal data for a period no longer than the existence of your profile on the website. After the expiry of this period, Online Services Ltd shall take reasonable care to delete and destroy all your data without undue delay.

(2) Online Services Ltd. shall notify you in the event that the data retention period needs to be extended in order to fulfil the purposes, for the legitimate interests of Online Services Ltd. or otherwise.

(3) Online Services Ltd shall keep the personal data that it is required to keep under applicable law for the relevant prescribed period, which may exceed the duration of your registration.

Transfer of your personal data for processing

Art. 5. (1) Online Services Ltd. may, at its own discretion, transfer part or all of your personal data to processors for the purposes of processing, subject to the requirements of Regulation (EU) 2016/679.

(2) Online Services Ltd. shall notify you in the event that it intends to transfer some or all of your personal data to third countries or international organisations.

Your rights in the collection, processing and storage of your personal data

Withdrawal of consent to the processing of your personal data

Art. 6. (1) If you do not wish all or part of your personal data to continue to be processed by Online Services Ltd. for any or all of the processing purposes, you may withdraw your consent to processing at any time by a free text request sent by mail.

(2) Online Services Ltd may ask you to verify your identity and identity with the data subject.

(3) By withdrawing consent to the processing of personal data that is required to create and maintain your registration to use the Services, your account will become inactive.

Right of access

Art. 7. (1) You have the right to request and obtain confirmation from Online Services Ltd. as to whether personal data relating to you is being processed.

(2) You have the right to access the data relating to it and the information relating to the collection, processing and storage of your personal data.

(3) Online Services Ltd shall provide you, upon request, with a copy of the personal data processed relating to you in electronic or other appropriate form.

(4) Providing access to the data is free of charge, but Online Services Ltd reserves the right to charge an administrative fee in the event of repetitive or excessive requests.

Right to rectification or completion

Art. 8. You may correct or complete inaccurate or incomplete personal data relating to you directly through your website profile or by making a request to Online Services Ltd.

Right to be deleted (“to be forgotten”)

Art. 9.(1) You have the right to request Online Services Ltd. to delete the personal data relating to you, and Online Services Ltd. has the obligation to delete them without undue delay where any of the following grounds apply:

• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• you withdraw your consent on which the processing is based and there is no other legal basis for the processing;
• You object to the processing of the personal data relating to you, including for direct marketing purposes, and there are no lawful grounds for the processing which override;
• the personal data have been unlawfully processed;
• the personal data must be erased in order to comply with a legal obligation under EU or Member State law to which Online Services Ltd is subject;
• the personal data has been collected in connection with the provision of information society services.

(2) Online Services Ltd is not obliged to delete personal data if it stores and processes them:

• for the exercise of the right to freedom of expression and the right to information;
• to comply with a legal obligation requiring processing provided for in EU or Member State law applicable to the Controller or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
• for reasons of public interest in the field of public health;
• for archiving purposes in the public interest, scientific or historical research or statistical purposes;
• for the establishment, exercise or defence of legal claims.

(3) In order to exercise your right to “oblivion”, you should submit a request through the option in your profile or a written request sent to Online Services Ltd, and verify your identity and identity with the data subject before Online Services Ltd, by presenting your ID card on the spot for identification purposes and, if necessary, entering your login details in the data subject’s profile before an employee of Online Services Ltd.

(4) Online Services Ltd. shall not delete the data which it has a legal obligation to store, including for the purpose of defending legal claims made against it or proving its rights.

Right to restriction

Art. 10. You have the right to require Online Services Ltd. to restrict the processing of data relating to you where:

you contest the accuracy of the personal data, for a period that allows Online Services Ltd to verify the accuracy of the personal data;
the processing is unlawful, but you do not wish your personal data to be erased, only for its use to be restricted;
“Online Services Ltd no longer needs the personal data for the purposes of the processing but you require it for the establishment, exercise or defence of legal claims;
You have objected to the processing pending verification that Online Services Ltd’s legitimate grounds override your interests.
Right to portability

Art. 11. (1) You may, at any time, retrieve the data stored and processed about you in connection with the use of the services of Online Services Ltd by email request.

(2) You may request Online Services Ltd. to transfer your personal data directly to a controller designated by you, where this is technically feasible.

Right to receive information

Art. 12. You may request Online Services Ltd to inform you of any recipients to whom the personal data for which rectification, erasure or restriction of processing has been requested has been disclosed. “Online Services Ltd may refuse to provide this information if it would be impossible or would require a disproportionate effort.

Right to object

Art. 13. You may object at any time to the processing of personal data concerning you by Online Services Ltd, including if it is processed for profiling or direct marketing purposes.

Your rights in the event of a personal data security breach

Art. 14. (1) If Online Services Ltd. identifies a breach of security of your personal data that may pose a high risk to your rights and freedoms, we shall notify you without undue delay of the breach, as well as of the measures that have been taken or are to be taken.

(2) Online Services Ltd is not obliged to notify you if:

• has taken appropriate technical and organisational protection measures in respect of the data affected by the security breach;
• has subsequently taken measures to ensure that the breach will not result in a high risk to your rights;
• notification would require a disproportionate effort.
• Persons to whom your personal data are disclosed

Art. 15. To carry out the registration of a domain in or outside the .BG area and after a request from you, Online Services Ltd. transmits the necessary information to the relevant domain registrar, which processes your data as controller for the purposes of the registration of the requested domain.

Art. 16. The controller does not transfer your data to third countries.

Other regulations

Art. 17. You may exercise all your rights concerning the protection of your personal data through the forms attached to this information. Of course, these forms are optional and you may make your requests in any form that contains a statement to this effect and identifies you as the data holder.

Art. 18. If the consent relates to a transfer, the Data Controller shall describe the possible risks for the transfer of the data to third countries in the absence of an adequate protection solution and appropriate means of protection.

Art. 19(1). When you entrust Online Services Ltd. to process personal data of a third party for the purpose of using the service, Online Services Ltd. acts as a processor of the personal data.

(2). In the cases referred to in par. (1), Online Services Ltd. acts only on your instruction as a user of the service and only insofar as it can have control over the personal data that you process. “Online Services Ltd has no control over the content and data that you, as a service user, choose to load into the service (including whether or not such data includes personal data). In this case, Online Services Ltd has no role in deciding whether the user uses the service to process personal data, for what purposes and whether the data is protected. Accordingly, Online Services Ltd’s liability in this case is limited to providing information about the service and the functionalities through its interface.

Cookie Policy

Last update: 21.03.2022.

The website of Online Services Ltd. uses cookies, which are important for its correct operation. By visiting our site, you accept the use of cookies.

Reason for collecting, processing and storing your personal data

Types of cookies we use:

• Mandatory cookies
  These cookies are necessary for the correct operation of the website. For example, with these cookies we show you the information on our website in the correct language and the prices according to the currency and VAT for the respective country. Such cookies are also the ones to enable caching, etc.

• Analytical cookies
  Thanks to these cookies, we monitor the traffic on our website and can analyze how easy our users find it to work with it (Google Analytics cookies). These cookies do not give us any information about your personal data. They show us which pages of our site you have viewed, whether you have visited our site via a mobile or desktop device and other anonymous data. For Google Analytics, we also use IP anonymisation using _anonymizelp. The maximum period for which we keep analytics data in Google Analytics is 26 months.
• Functional cookies- These cookies allow you to use the full functionality of our site, watch the videos on it, chat to us and remember your preferred language in which to load information on our site.
• Cookies for precise targeting- These cookies contain information about how you have used our site and may be triggered by our advertising partners. They do not store any personal information. Thanks to them, you will not be shown information that is irrelevant to you. These are dynamic cookies of Facebook, Google, etc. In addition, most advertising networks offer the possibility to unsubscribe from profiled advertising. For more information, please visit http://www.aboutads.info/choices/ or https://youronlinechoices.eu/.

The cookie settings you receive from our site can be made in the browser you use. Please note that if you restrict certain types of cookies, our site may not work properly and you may not be able to use its full functionality.

Changes to the cookie policy

This Cookie Policy may be updated at any time in the future. When that happens, the changed policy will be posted on this website with a new “Last Updated” date at the top of this Cookie Policy and will be effective from the date of posting.