ITCE (Hereinafter referred to as ITCE, “we”, “us”, “our”) is committed to the protection of your personal data. It is impossible to provide our services without collecting and processing a certain set of your personal data. Their processing should be carried out in accordance with the applicable European and national legislation.
Who is the personal data controller of your personal information?
The administrator of your personal data is ITCELtd, UIC 121673816 and address of management: Bulgaria, 1784, Sofia, Tsarigradsko shosse Blvd., Megapark Business Center, fl. 1, office 6; Phone: +359 2 44 00 444. E-mail address: email@example.com, website: https://www.itce.com/
Who is the personal data processor of your personal data?
As an Authorized Testing Center for Exam Partners, ITCE Ltd is a Personal data processor for personal information that Exam Providers require to be collected, processed, stored, transferred / transmitted in order to complete the exam delivery service. Information about the particular exam provider (Personal Data Administrator in connection with therespectiveexam) will be provided to you at the time of your registration (collection of your data) for this exam.
Who is the supervisor?
The Supervisory Authority in relation to the processing of personal data by ITCE is the Bulgarian Personal Data Protection Commission, address: Bulgaria, 1592, Sofia, “Prof. Tsvetan Lazarov “№2; Telephone: +359 2 91 53 518; Fax: +359 2 91 53 525; e-mail address: firstname.lastname@example.org, website: https://www.cpdp.bg/
What personal data do we collect?
In order to provide the services you request, ITCE collect the following personal data:
- Name (name and surname)
- E-mail address
- ITCE Account details: name, e-mail address, Personal Identification Number, postal address
- Messages information:
- General information about using our website– IP address, browser used, individual pages, date and time of visit
- Financial information for billing and transactions
How do we collect your personal information?
The personal information we collect online through our Website or email provided includes information such as your name, email address, user IDs and passwords as well as professional information (the company you are working for) necessary to create a profile and make an exam registration; to subscribe to marketing communications, and / or provide comments, feedback, or inquiries about our services.
What cookies do we use?
You can prevent the installation of cookies or block them by setting your browser to refuse all or some cookies. In addition, already set cookies can be deleted at any time via your internet browser or other software programs. If you choose to disable the cookie setting in the Internet browser you are using, not all features on our website can be fully used.
Please note that there are also mandatory cookies that cannot be excluded if you wish to use our Website.
We may also collect your personal information offline when you visit our office using the forms provided there. The relevant information regarding the processing of the offline provided personal data will be received in our office at: Sofia, Tsarigradsko shosse Blvd., Megapark Business Center, 1st floor, office 6.
Automated decision making and profiling
ITCE do not process your personal data for automated decision making or profiling.
Sources of personal data
Through the above described methods, we collect personal data provided to us directly byyou. However, we may receive information about you from third parties in connection with the services we provide. (e.g.from your employer for your training or certification). In these cases, specific information on how your personal data provided by third parties will be processed, including information about the source of such data, will be received in our office at the following address: Sofia, Tsarigradsko shose Blvd. “Megapark Business Center, floor 1, office 6, except when you already have this information.
For what purpose do we process your data?
ITCE collect and processe your personal information in order to provide the requested servicesby you,and in particular for the following purposes:
• Create and maintain a profile on our website;
• Enhance security and verify identity or access to our services;
• Processing of your requests to use servicesthat we offer;
• Providing requested services and transaction processing;
• Providing feedback and responses to your inquiries and orders
• Improve the reliability, functionality and personalization of our website according to your preferences;
• Providing marketing and advertising messages when we have the right to do so and / or we have your explicit consent.
Legal basis for processing:
We process your personal data when:
• You have given your explicit consent to this for one or more specific purposes;
• This is necessary for the performance of a contract / service provision to which you are a party or that you wish to conclude/order;
• we are legally bound;
• processing is necessary to protect your vital interests or interests of another individual;
• processing is necessary for the purposes of our legitimate interests or those of a third party unless such interests violate your rights and legitimate interests.
How long are personal data stored?
ITCE keep your personal data for no longer than is necessary to meet the purposes for which this personal data has been collected. Upon expiration of this period, your personal data will be securely deleted, as long as it is no longer required for the conclusion or performance of a contract, for securing court proceedings or if the applicable law explicitly does not require your personal data to be processed for a longer period of time.
Who do we share your personal information with?
Sometimes we need to share your personal information with our partner organizations. When this is necessary, ITCE comply with all aspects of applicable European and national data protection legislation.
Whenever necessary or required, we share information with:
• Public authorities of the Republic of Bulgaria, if the applicable legislation explicitly requires this;
• our business partners;
• lecturers and exam providers;
Do we transfer your data to countries outside the European Economic Area?
We do not transfer your personal data to countries or territories outside the European Economic Area unless that country or territory guarantees a sufficiently high level of protection (such as the US where Privacy Shield is in force) or if you explicitly agree to transfer your data in other countries.
The General Privacy Protеction Regulation guarantees you a certain set of rights that you may exercise in relation to your personal data processed by us. Specifically, you have:
Right to information: At any time to receive information from us whetherITCE process any of your personal data
The right of access: Get free information about the nature, volume and way ITCE use your personal data, and get a copy of this information. In addition, you have the right to receive information about whether your personal data is being transferred to a countryor an international organization located outside the European Union. If such a transfer takes place, you have the right to be informed of the appropriate precaution measures taken to protect your personal information.
Right of Correction: You may requestfrom uswithin a reasonable time to supplement and / or correctincomplete, inaccurate or outdated personal data.
Right of Deletion: You declare the deletion of your personal data without undue delay and the administrator is required to delete the personal data without needless delay when there are legal grounds to the extent that the processing is not necessary or it is mandatory under the current legislation.
Right to Limitation of Processing: In the event that personal data that we process is inaccurate or obsolete, you have the right to ask ITCE to limit / suspend the processing of such data for a period that allows us to verify the accuracy of the information and correct it accordingly, or update it.
Data portability: Get your personal data in a structured, machine-readable format.
Right of objection: To object at any time on grounds relating to your particular situation when processing your data on the basis of a legitimate interest of ITCE or a third party
Right to withdraw consent: When processing your personal data is based on your explicit consent, you are entitled to withdraw it at any time. This can be done online by contacting us via email: email@example.com in our office. Withdrawal of your consent does not affect the legality of the publication of the above information prior to its withdrawal
Right to Appeal to the Surveillance Authority: If you believe that your privacy and dataprotection rights have been violated, you have the right to contact the Bulgarian Data Protection Commission. CPDP data is contained at the top of this Policy.
To exercise any of the above rights, you may contact us at any time via firstname.lastname@example.org personally at our office. Before we can fulfill your request, we may ask for additional information to verify your identity.
Security of processing
As Personal Data Administrator, ITCE maintain and require from their partners and suppliers appropriate technical and organizational measures to protect and safeguard your personal data processed but we can not guarantee it with absolute certainty.
Changes to this Policy
This Policywas last updated on 24/05/2018. We may change its content by updating this page to reflect changes to the law or privacy practices. However, we will not use your personal data in new ways without your consent.
Our Website and services may provide links to other websites through direct links or through third party applications. ITCE do not control these sites or their privacy practices, so we recommend that you familiarize yourself with their privacy practices before sharing your personal data with these platforms.