PRIVACY NOTICE

1. Terms Used

In this document, we use the concepts as defined by the applicable legislation in the Republic of Bulgaria.

2. Introduction

2.1. About Us

We are: "HAIR PROFESSIONAL" Ltd.

Our address is: ………………………........................................ ..…………..

You can contact us by phone: ……………………………. , fax: ………………….............. and email address for correspondence: ……………………

2.2. Purpose of the Document

We acknowledge that it is important for you to understand how we collect, store, share, and use information about our employees, which constitutes personal data. Therefore, through this Privacy Notice, we inform you about the processing carried out and the possibilities for you to exercise control in accordance with the requirements of European and national legislation.

Please read this document carefully.

The privacy notice may be updated periodically, and we will inform you in due course.

2.3. Scope

This notice applies to all information containing personal data that is stored or processed in any other way. The information may be contained (the list is not exhaustive) in:

· PAPER MEDIA;

· ELECTRONIC MEDIA;

2.4. Recipients

The recipients of this document are the individuals whose information we process in connection with the services we provide.

3. Personal Data We Process

The types of personal data we process will depend on the service we provide to you. Typically, the types of personal data will include, but are not limited to:

• Names, ID card, address, phone, and email;

In some cases, providing your personal data is necessary to enter into a contract with us or to comply with applicable law. If you do not provide us with such information, we may not be able to fulfill our contract with you (we will inform you when providing information is necessary).

Legal Basis and Purposes of Processing Your Personal Data

We use your personal data for several purposes, which we detail in sections 3.2 and 3.3 below. Section 3.1 specifies the legal basis for processing your personal data.

3.1. Legal Basis for Processing

When we process your personal data, we do so only when there is a legal basis for such processing. Additionally, the processing of special categories of personal data (including data related to health, sex life, racial or ethnic origin, or religious beliefs) is always based on a separate legal basis.

In most cases, the processing of your personal data will be based on one of the following grounds:

· Legal basis

· Performance of a contract

3.2. Purposes of Processing

The Company may process your personal data for the following purposes:

· Performance of a contract, processing of wages, maintenance of personnel records, recruitment.

3.3. Establishment, Exercise, and Defense of Legal Claims

The Company may process your personal data for the purposes of establishing, exercising, and defending potential legal claims.

4. Sources of Personal Data

Primarily, the personal data we process about you will be provided by you when entering into or performing our contract.

At times, we may receive personal data about you from third parties such as clients, other business partners, government authorities, and local self-government bodies.

5. Storage of Personal Data

Our general approach is to retain personal data only for as long as necessary to fulfill the purpose for which it was collected by us or provided by you, within the framework of the applicable statutory period.

For more information on our data retention practices, please request information.

6. Disclosure and Transfer of Personal Data

For the purposes listed above, we may share your personal data with colleagues within the company, third parties, or suppliers (such as IT providers or accounting service providers).

7. Security of Your Personal Data

We take reasonable physical, technical, and administrative security standards designed to protect your personal data from loss, misuse, alteration, destruction, or damage, in accordance with the requirements of our national legislation.

You also play an important role in protecting the security of your personal data and should be mindful of whom you disclose your personal data to and how you secure your communications and devices.

8. Your Rights

The Company will take steps in accordance with applicable law to assist you in exercising your data subject rights. With respect to our processing of your personal data, you have the following rights:

● Right to information about and access to my personal data stored by you;

● Right to request correction, deletion, or restricted processing of my personal data;

● Right to object to processing for reasons related to your legitimate interests, public interest, or profiling, unless the Controller demonstrates compelling legitimate grounds that override my interests, rights, and freedoms, or that the processing is for the establishment, exercise, or defense of legal claims;

● Right to data portability;

● Right to lodge a complaint with the Data Protection Commission;

● Right to withdraw my consent for the collection, processing, and use of personal data going forward at any time;

Access Request

To exercise these rights, except for your right to complain, please contact us at the following:

Address: …………………………….

Phone: …………………………..

Fax: ………………………………

We will provide you with detailed information on how to exercise your rights.

Please note that we may request proof of identity and reserve the right to charge a fee, for example, if your request is clearly unfounded or excessive. We will strive to respond to your request within the applicable deadlines – up to 1 calendar month from receiving the request, with the possibility of an extension of another two months, taking into account the complexity and number of requests. In case of an extension, we will notify you and provide the reasons for the extension.

9. Contact Us

If you have any questions or concerns about the processing of your personal data or wish to exercise any of your rights, please contact us.