This Privacy Policy is meant to help you understand what Personal Data we collect, why we collect them and what we do with them. Please take time to read our Privacy policy carefully. We want you to be aware of how we use your information and how you can exercise your rights.
This Privacy Policy applies to your Personal Data when you visit https://businessmap.io/ (the “Website”) and you use our services related to downloading materials/books, etc. and/or you register (through the website or through specially created forms) for participation in events/trainings, etc., organized by us alone or in partnership with third parties. This Privacy Policy does not apply to online Websites or services that we do not own or control. By using any of our services through the Website you agree to have read and understood this Privacy Policy.
WHO WE ARE?
The company providing you services in the capacity as Personal Data Controller is Businessmap Ltd., a company duly organized under the law of Bulgaria, registered in Bulgaria, having its working address at “84 "Aleksandar Stamboliyski" blvd., 4th floor, office 18, 1303 Sofia, Bulgaria”, represented by Dimitar Karaivanov (hereinafter referred to as “we”, “us”, “our”).
If you have any questions, please, contact us at: dpo (@) businessmap.io
We take your right to privacy seriously and work continuously to keep the data we process minimized. Nevertheless, in order to be able to provide you with our services, we need to process some Personal Data .
WHAT PERSONAL DATA WE COLLECT AND HOW WE USE IT?
Personal Data is data that describes and is linkable to someone as a person. We collect some Personal Data in order to provide the services to all our clients and end users. We will only process Personal Data for legal reasons, if we are obliged to do so by legal authorities. We don’t sell or otherwise distribute your Personal Data.
We may share it with our selected service providers only when it is vital for the provision of our services as explicitly described below. We may process your Personal Data for the following purposes:
I. PERSONAL DATA RECEIVED WHEN OBTAINING MATERIALS (BOOKS, DEMOS, PRESENTATIONS, ETC.) FROM OUR WEBSITE AND COMPANY REPRESENTATIVES.
When you want to download a book and/or materials offered on our Website, we will process the following Personal Data - first and last name, phone number, email address and job title (position).
We will process your name, phone and email address so that we can contact you with questions and/or need assistance, and we will process your job title for internal analysis of what products in what jobs/positions are of interest.
We will not provide your Personal Data to third parties.
We will store your Personal Data for up to 1 (one) years from the relevant download of materials/books, etc.
2. PERSONAL DATA RECEIVED FOR PARTICIPATION IN OUR EVENTS AND EDUCATIONS
When you register through the Website or through specially created forms to participate in our events/training etc., we will use the contact information you provide (first and last name, phone number, email address, company and job title/position) to contact you and provide you with relevant information about the upcoming event/training and materials related to the event/training, if any.
Your Personal Data for the relevant event/training may also be processed by our respective partner with whom the event/training is organized. Details of the relevant event partner, if any, will be provided on the event/training registration form. The relationship between us and the relevant partner is regulated by signing a Personal Data Processing Agreement.
By registering for the relevant event/training and attending it, you accept and agree that your personal data, including but not limited to photos/videos from the event/training, may be used by us and/or the relevant event/training partner for marketing/PR purposes, through publications in media and social networks, in order to advertise the relevant partner of the event/training held.
At the end of each event/training, we may ask you to fill out a feedback form, which is linked to a QR code that is projected on a slide in front of the participants in the event/training. In case you fill out a feedback form, we may use your email address to thank you for participating in the event/training. After the event/training, we may use your email address to send you a feedback form regarding the event/training.
We tore the registration Personal Data for the relevant event/training for up to 1 (one) months after the relevant event/training.
3. NEWSLETTER/BLOG/RECEIVING MORE INFORMATION FROM US
If you have subscribed to our newsletter or blog through our website and/or consented to receive more information from us, we may use your names, email address and phone number to send you the latest news about us, information about upcoming events, information about our new products and/or services, information about promotions, discounts, etc., and/or other information that we think may be of interest to you. By subscribing to our newsletter you have given your express consent to receive our e-newsletter. Your consent is voluntary and we will not refuse any of our services if you do not subscribe to our newsletter. You may withdraw your consent to receive such information from us at any time by sending a notice to the above email (dpo (@) businessmap.io) or by using the link in the emails.
HOW WE COLLECT PERSONAL DATA?
We collect Personal Data only from the person concerned. As entering Personal Data is personal and voluntary for everyone, each person shall be responsible not to provide third person’s Personal Data.
We provide Services to, allow registration and collect Personal Data only to persons aged 18 and over. If aged under 18, please ask for the assistance of a person aged at least 18 in order to use our Services.
If we obtain actual knowledge that we have collected Personal Data from a person under the age of 18 in violation of the legal requirement, we will promptly take appropriate measures and we may delete it, unless we are legally obligated to retain such data. Please, contact us, if you believe that we have mistakenly or unintentionally collected information from a person under the age of 18 in violation of the legal requirements.
HOW WE PROTECT YOUR INFORMATION?
We take appropriate technical and organisational measures to protect your Personal Data against loss or other forms of unlawful processing. We make sure that Personal Data is only accessible by only those who need access to do their job, and that they are properly trained and authorised. Our staff is required to conduct themselves in a manner consistent with the company’s guidelines regarding confidentiality, ethics, and appropriate usage of data. Staff is required to execute a confidentiality agreement and are provided with proper training in online privacy and security.
WHAT PROCESSORS WE USE?
For providing quality services, уе engages third-party service providers - processors, carefully selected according to their capacity for Personal Data protection and processing in compliance with our obligations under the applicable data protection legislation. We provide Personal Data to our processors to process it for us, only based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.
We might transfer data we collect from you to persons/legal entities (‘Recipients’) outside the European Economic Area (‘EEA’).
Based on the above we stores and processes data out of the EU, including in the United States of America, where some our processors are based. By using our website and services, you consent to your Personal Data being transferred to other countries, including countries that have different data protection rules than your country.
When we do such transfers to third countries, we do so in accordance with the terms of this Privacy Policy, the EU data protection rules, in particular with the GDPR. This may include (i) the transfer of data to Recipients located in countries, territories or part of specified sectors within such countries that are recognized as ensuring an adequate level of protection of the natural persons concerned; (ii) transfers pursuant to data transfer agreements that incorporate the Standard Contractual Clauses approved by the EU Commission/Commissioner; or (iii) derogations for specific situations provided for in the EU data protection law, etc.
WHAT WE SHARE?
We generally do not share personal information with companies, organizations, and individuals.
We may share Personal Data in case one of the following circumstances applies:
- With your consent - we will share personal information with companies, organizations or individuals when we have your consent to do so.
- For making some services possible – to third-party processors, as described above.
- For legal reasons - we will share personal information with companies, organizations or individuals, if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:
- meet any applicable law, regulation, legal process or enforceable governmental request;
- enforce the applicable Terms of Use, including investigation of potential violations;
- detect, prevent, or otherwise address fraud, security or technical issues;
- protect against harm to the rights, property or safety of our company, our users or the public as required or permitted by law.
WHAT ARE YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA?
You have the following rights regarding the processing of Personal Data:
- Right of information. This Policy aims to inform you in detail about the processing of your Personal Data by Businessmap Ltd.
- Right of access. You are entitled to receive confirmation whether your Personal Data are being processed, to receive access to such data, as well as information about the processing and your rights.
- Right of rectification. You are entitled to have your Personal Data rectified in case it is incomplete or inaccurate. Your Personal Data may be rectified by us upon your request.
- Right of erasure. You have the right to ask for your Personal Data to be erased where one of the respective grounds provided by the GDPR applies. Please note that after deleting your Personal Data, you shall not be able to use the Services adequately. You have the right to delete Personal Data in a manner consistent with the functionality of the Services, if such deletion is in accordance with the GDPR. We will comply with this instruction as soon as reasonably practicable and within a maximum period of 30 days, unless the applicable data protection legislation requires storage. Please note that we may keep some of the Personal Data for legitimate business or legal purposes or be required (including by contract or law) to keep certain of information and not delete it (or to keep this information for a certain time, in which case we will comply with the deletion request only after we have fulfilled such requirements).
- Right of restriction of the processing. The GDPR provides for the possibility of restricting your Personal Data processing in case there are grounds for this as set forth therein.
- Right of data portability. You have the right to receive the Personal Data you have provided, and which are related to you in a structured, commonly used, machine-readable format, and to use such data with another controller at your discretion, if the conditions provided for in the GDPR are present.
- The right not to be subject to a decision based solely on automated processing, including profiling which produces legal effects concerning you or similarly significantly affects you unless there are grounds provided for in the applicable data protection legislation, as well as appropriate safeguards to protect your rights, freedoms and legitimate interests.
- Right to withdraw consent. You have the right to withdraw at any time your consent for Personal Data processing that is based on prior given consent. Such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.
- Right to object. You have the right to object, in respect to data processed, based on legitimate interest. In the event of such an objection we will examine your request and, if justified, we will comply with it. If we believe there are enough legal grounds for the processing or where necessary for establishing, exercising or defending legal claims we will inform you accordingly. You have an absolute right to object against personal data processing for marketing purposes.
If you wish to access, delete (when applicable) or correct your personal information please use the contacts listed on top. Please state clearly in the subject that your request concerns a privacy matter, and more specifically whether it is a request for access, rectification or deletion. Bear in mind that we may ask for additional information to determine your identity.
You can at any moment unsubscribe from our newsletters and notifications if you have already subscribed for, by sending a notification to the email stated on top (dpo (@) businessmap.io) or by using the link in the mails.
We may reject requests that are unreasonably repetitive, require disproportionate technical effort (for example, developing a new system or fundamentally changing an existing practice), risk the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup systems). Where we can provide information access and correction, we will do so for free, except where it would require a disproportionate effort.
Your complaints can be addressed to the above email address - dpo (@) businessmap.io . If you file a privacy-related complaint, we will collect your name and/or company name, name of a complaint-related person, email, and country location and details that gave rise to your complaint. We will use the information you provide to investigate your complaint and to send you an answer once your complaint is reviewed.
WHICH SUPERVISORY AUTHORITY YOU CAN CONTACT?
If you think we have infringed your privacy rights, you can lodge a complaint with the supervisory authority of Bulgaria, which is the Commission for Personal Data protection. More information can be found at: www.cpdp.bg. You can also lodge your complaint in particular in the country where you live, your place of work or place where you believe we infringed your right(s).
HOW WE MAY MAKE CHANGES TO THIS PRIVACY POLICY?
We may, at its discretion, change and supplement this Privacy Policy at any time by publishing a new version on the Website. In the event that this Privacy Policy is amended, we will specify the date of the amendment and such amendment will become effective in respect of you and your Personal Data after the date of such amendment or on such later date as is expressly stated.