Privacy Policy

PRIVACY DECLARATION

(NOTICE ON THE CONFIDENTIAL PROCESSING OF PERSONAL DATA)

Administrator Information:

“I Estates” Ltd. is a limited liability company, registered with UIC 201595624 in the Commercial Register and the Register of Non-Profit Legal Entities at the Registry Agency. The company’s seat and registered address are: Burgas, “Adam Mickiewicz” Street No. 7, ground floor.

Contact details for “I Estates” Ltd.:

Country: Bulgaria
Address: Burgas, “Adam Mickiewicz” Street No. 7, ground floor
Email: info@atlantisestates.bg

Contact with the Data Protection Officer:

You may contact the Data Protection Officer directly via email: info@atlantisestates.bg


Personal data we collect and process from you:

  • “Ordinary” personal data – names, address, email, IP address, and other explicitly provided data;

  • Personal identification number, ID card number, passport number, and other explicitly provided data;

  • Special / sensitive personal data – health data and other explicitly provided information required for fulfilling the legal obligations of “I Estates” Ltd.


We declare that the personal data we collect will only be used for the following legal grounds and purposes:

  • Processing based on your freely given consent;

  • Employment relations, social and health insurance obligations, company accounting activities, and other similar legally required purposes;

  • Processing necessary for the performance of a contract with you or for taking steps prior to entering into a contract;

  • Processing necessary for compliance with our legal obligations;

  • Processing necessary to protect your vital interests (or the interests of another person);

  • Processing necessary for direct marketing purposes (unsolicited advertising messages) sent via email and/or mobile number;

  • Processing necessary for the purposes of the legitimate interests pursued by the administrator or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

The following organizations/persons will receive your personal data:

  • Third parties, natural and legal persons, public authorities, institutions, supervisory and regulatory bodies, when required for fulfilling legal or contractual obligations of “I Estates” Ltd., or on other valid legal grounds, such as prevention or investigation of fraud, technical issues, or security-related matters.

  • “I Estates” Ltd. may transfer ordinary and/or special personal data to third parties for accounting, legal, employment, insurance, or other legally justified services.


Security measures undertaken by “I Estates” Ltd.:

Protecting customer information and data is a key priority for “I Estates” Ltd. The company continuously implements and updates technical and organizational measures necessary to ensure a high level of data security and protection.


Consent:

By agreeing to this Privacy Declaration (Notice on the Confidential Processing of Personal Data), you give us permission to process your personal data solely for the purposes listed above.
Consent is required to process both types of personal data (ordinary and special) and must be explicit.
For special (sensitive) data, we will always justify why and how such data will be used.
You may withdraw your consent at any time by submitting a request using the contact information provided.


Transfer of personal data outside the EU or to an international organization:

“I Estates” Ltd. does not intend to transfer your personal data outside the EU or to an international organization (without first obtaining your consent).
Currently, no third country or international organization receives your personal data from us.


Data retention period:

“I Estates” Ltd. stores your personal data according to the following rules:

  • Personal data is processed for the periods established by applicable national legislation. Data without an explicit legal retention requirement will be deleted once the purposes for which it was collected have been achieved;

  • Some personal data may be stored longer until the expiration of applicable limitation periods to protect against potential client claims, or until the final resolution of legal disputes;

  • Video recordings from visits to “I Estates” Ltd. offices – up to one year from the date of recording;

  • If “I Estates” Ltd. intends to process personal data for a purpose different from that for which it was originally collected, the data subject will be informed beforehand and processing will occur only in compliance with legal requirements. Data will be stored using adequate technical and organizational security measures.


Your rights as a data subject:

At any time while we store or process your personal data, you have the following rights:

  • Right to request a copy of your personal data and access to it;

  • Right to request your data in a transferable format or to request that we transfer it directly to another data controller;

  • Right to request correction of inaccurate or outdated personal data;

  • Right to request deletion of your personal data without undue delay when:

    • the data is no longer necessary for its original purposes;

    • you withdraw your consent;

    • you object to processing;

    • processing is unlawful;

    • deletion is required to comply with EU or national law;

    • the data was collected in relation to the offer of information society services;

  • Right to request restriction of processing, where data will be stored but not processed;

  • Right to withdraw your consent at any time;

  • Right to object to certain types of processing, such as direct marketing;

  • Right to object to automated processing, including profiling;

  • Right not to be subject to a decision based solely on automated processing, including profiling.

We may refuse data deletion when:

  • Processing is necessary for freedom of expression and information;

  • Processing is required for legal obligations or tasks of public interest;

  • Processing is carried out under official authority;

  • Processing is necessary for public health interests;

  • Processing is for archiving, scientific, historical research, or statistical purposes, where deletion would make such purposes impossible or seriously hinder them;

  • Processing is required for establishing, exercising, or defending legal claims.

If new processing purposes arise, we will provide a new privacy notice and obtain consent where required.

All requests will be forwarded to third-party recipients (including outside the EU), if applicable.


Right to lodge a complaint with a supervisory authority:

You have the right to submit a complaint directly to the supervisory authority:
Commission for Personal Data Protection
Address: Sofia 1592, “Prof. Tsvetan Lazarov” Blvd. No. 2
(www.cpdp.bg)

If you wish to submit a complaint regarding the processing of your data through “AI Estates” Ltd., you may do so using the contact information provided above.


Additional Information

What is personal data?

Under the General Data Protection Regulation (GDPR), personal data is defined as:
“Any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to identifiers such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.”

Why does “I Estates” Ltd. collect and store personal data?

We collect your personal data to provide services, to fulfil legal obligations, to exercise our rights, and to perform any other lawful activities communicated to you.
For advertising and marketing communications, additional consent will be requested.

Will your data be forwarded or shared?

We do not sell your personal data to third parties.
We may share your data with service providers under contract with us.
All third parties must protect your data and use it only for fulfilling their obligations.
Special (sensitive) data will be shared only with your explicit consent, unless required by law.
Data may also be provided to state authorities when required by law.

How do we store and protect your personal data?

“I Estates” Ltd. processes your personal data in compliance with GDPR.
We ensure data accuracy and do not store it longer than necessary.
Legal retention periods may apply.
We implement technical and organizational security measures to prevent unauthorized access.

Can you find out what data we hold about you?

Upon request, “I Estates” Ltd. must inform you which personal data is stored and how it is processed.
You may request information including:

  • Contact details of the organization and Data Protection Officer;

  • Purposes and legal basis for processing;

  • Categories of personal data processed;

  • Data recipients;

  • Transfers outside the EU and safeguards;

  • Retention periods;

  • Your rights;

  • Whether providing data is mandatory and consequences of failure to do so;

  • The data source (if not collected directly from you);

  • Information on automated decision-making, including profiling.

How to access your data?

Submit a request to “I Estates” Ltd. using the provided contact information.
To verify your identity, please include:

  • Full name;

  • Country;

  • Address;

  • Phone;

  • Email.

For additional inquiries, contact: info@atlantisestates.bg