Privacy policy

Who are we?

In these Privacy Policies we have summarized the key points regarding the protection of your personal data and the ways we process it.


If you want more information about specific processes, you can contact us through the contacts below.


Urban Mobility Center is a commercial company registered in the Commercial Register at the Registry Agency with UIC 202218735, with registered office and address of management: Sofia 1202, 84 Knyaginya Maria Luiza Blvd., tel .: 0700 13 233 , e-mail address: office@sofiatraffic.bg is a personal data administrator in accordance with the provisions of the Personal Data Protection Act.


How to contact us?

Address: Sofia, 84 Knyaginya Maria Luiza Blvd., 0700 13 233, e-mail address: office@sofiatraffic.bg


How to contact our Data Protection Officer?

BN Group BG Ltd.

Tel: 0700 10 797

Email: dpo@bngroup.bg, dpo@sofiatraffic.bg


Urban Mobility Center respects the confidentiality of your personal data.

The protection of your personal information throughout the process of personal data processing, as well as the security of all data, is an important issue for us. We process the personal data collected during your visit to our website, confidentially and in accordance with legal provisions at national and European level.


Data protection and information security are included in our corporate policy. This means that we will protect the personal information of all visitors who have access to our websites or services through any mobile application, platform or device, as well as visitors to our offices and ticket and ticket sales centers.


What is the Privacy Policy and what is the purpose of this document?

This Privacy Policy aims to provide you with key points and information in easily accessible, understandable and clear language about what actions are taken with the personal data you provide to the Urban Mobility Center (hereinafter referred to as the Urban Mobility Center) including:


What personal data do we collect about you?

What is the purpose of their collection?

For how long do we store the provided personal data?

Who do we share your personal information with?

How do we notify you of a change to our Privacy Policy?

Do we use cookies? Where and how to learn more about their use?

What are your rights regarding the personal data provided?


With this Privacy Policy, the Urban Mobility Center declares that it applies all technical and organizational measures for the protection of personal data of individuals, which are prescribed by law or other regulations at national and European level.


What is personal data?

Any information and data that can identify an individual directly or indirectly constitutes personal data.


What personal data does the Urban Mobility Center collect for you?

In order to provide you with effective access to its services, Urban Mobility Center views the following information about you:


Name, surname, telephone, e-mail, location, address, bank account details, subscriber number, etc. when filling in the various forms posted on our website, including creating an initial registration, subscribing to our newsletter, filling out the form for giving opinions and / or comments;

Technical data that is automatically sent to us when you use our website - IP address, GPS coordinates, information about the device from which you visit the website;

Cookies - to identify your browser or device.

On what grounds does the Urban Mobility Center process your personal data?

The processing of personal data includes the collection, transmission, correction, updating, deletion, destruction and all other actions that are performed with your personal data.

Urban Mobility Center collects your personal data in order to fulfill its contractual obligations under contracts concluded with you for the provision of services - on a contractual basis.

Urban Mobility Center collects personal data even after obtaining explicit, clear, free and unambiguous consent from you for the purposes of processing. For example, for marketing purposes and receiving newsletters.

Consent to the processing of your personal data is provided when visiting the site in our office or when using the contact forms on our website.

The consent you provide can always be revoked by visiting one of our offices, as well as sending a letter to the email specified in these Policies.

The Center for Urban Mobility also processes personal data in fulfillment of legal obligations, as necessary in order to protect the life and health of the individual to whom the data relates.

An urban mobility center may also process personal data if it has a legal (legitimate) interest, except where the interests of the individual take precedence over those interests, which the data relate.


For what purposes do we collect your personal data?

The personal data received from you will be used so that we can fulfill our obligations to you, as well as to help fulfill your rights, including, but not limited to:


- To provide you with the services offered by Urban Mobility Center;

- In order to provide you with access to our web page, for this purpose we show you content that is relevant, personalized and limited according to the criteria set by you;

- To answer your questions, opinions and recommendations;

- To send you information related to special campaigns and our new products and services.


In addition to the above, we have a legal interest in collecting your personal data, because without them we cannot provide you with the service / product you are interested in.


How do we process your personal data?

In order to provide its services, Urban Mobility Center (collects) the personal data provided by you regarding the physical, economic, social and family identity in the following ways:


- by filling in your applications, forms and declarations, which are provided to you by employees of Urban Mobility Center. The forms are provided and filled in our Offices, in case you submit a request for services;

- by visiting the web portal for using the services of our web page;

- when updating data at your request and filling in an update form on paper or in electronic environment;

- by processing information about your visits to the web portals of the Urban Mobility Center;

- by processing information about IP addresses, cookies, operating system and browser type.


How long do we store and process your data before we destroy it?

Depending on the basis of which processing of your personal data, the period of storage of personal data is different.


Your personal data is stored by us for a period of 5 years from the termination of our contractual basis, if we process personal data for the performance of contractual obligations to you. After the expiration of this period and in the event that there is no legal basis for the continued storage of your personal data, the information about you is destroyed. The records for you are permanently deleted from our system, as well as the paper files containing your personal data are destroyed.


To whom can we transfer the personal data provided by you?

Urban Mobility Center undertakes not to provide your personal data without your explicit consent to third parties, except when necessary to fulfill contractual obligations to you.


In order to fulfill the assumed obligations under contractual and / or pre-contractual relations with you, it is possible that the Urban Mobility Center will disclose your personal data to the following persons:


- Companies providing courier services;

- The company that provides hosting services related to this website.


The Urban Mobility Center has the right to provide your personal data to affiliated companies that are positioned on the territory of the Republic of Bulgaria, provided that there is a legal interest related to the processing of your personal data for administrative purposes and needs. Such transfers are permissible in strict compliance with the requirements for confidentiality and protection of your personal data.


Are there other cases in which we may share your personal information?

Your personal data is also provided to third parties in the following cases:


- At the request of the natural person who provided the data, a subject of personal data protection;

- At the request of competent authorities in accordance with the current legislation of the Republic of Bulgaria and the European Union.


In all the above cases, the persons to whom we provide your personal data have declared that they provide an adequate level of protection of your personal data, including foreign companies positioned within the EU and the EEA. In the case of companies located outside the EU and the EEA, on a case-by-case basis, the company concerned shall ensure that it provides an adequate level of protection of personal data, in compliance with the requirements of European law.


Use of cookies

General

Cookies are small text files that are saved on your computer when you visit our website. In case you have access to this web page at another time, your browser sends back the contents of the cookies to the respective provider and thus allows the re-identification of the terminal device. Reading cookies allows us to design our website optimally for you and makes it easier for you to use it.


Disable and delete cookies

The browser allows you to delete all cookies at any time. To do this, please refer to the help functions of your browser. This may cause individual features of our website to no longer be available to you.


You can get an overview of the cookies we use by reading our Cookie Policies on our website.


What are your rights regarding the personal data provided?

Subject to Bulgarian and European legislation, including EU and Council Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) on personal data protection, you may exercise the following rights:


The right to access the personal data that the Urban Mobility Center processes for you and to receive a copy of them;

The right to request a correction from the Urban Mobility Center, in case you find inaccuracies or the need to update your personal data by sending an email to office@sofiatraffic.bg;

The right to request the blocking of your personal data or the restriction of the processing of personal data, in the cases specified by law and the Regulation;

Right to request deletion, ie. deletion of your personal data from the Urban Mobility Center in case the conditions for this are met;

The right to object to the processing of your personal data for the purposes of direct marketing using the "unsubscribe" link we have included in each email sent to you containing advertising information about our products;

The right to object to the provision of your personal data to third parties by logging in to your personal profile on our website and unchecking the provision of personal data to third parties;

The right, when you wish, to withdraw your consent for your personal data to be processed for the purposes for which you have given consent, for example for marketing, by sending an email to: office@sofiatraffic.bg;


The right to request the portability of your personal data in a structured, machine-readable format that is commonly used; The right to file a complaint or a request for protection of your rights before the Commission for Personal Data Protection, in case the prerequisites for that are present;


You can exercise all rights at any time during the processing of your personal data. 


What does each of the above rights mean?

Right of access to personal data.


This right shall enable the data subject to obtain information as to whether personal data relating to him are being processed and, if so, to have access to the data and the following information:

(a) the purposes of the processing;

(b) the relevant categories of personal data;

(c) the recipients or categories of recipients to whom the personal data are or will be disclosed, in particular recipients in third countries or international organizations;

(d) where possible, the intended period for which the personal data will be stored and, if that is not possible, the criteria used to determine that period;

(e) the existence of a right to require the Controller to correct or delete personal data or to restrict the processing of personal data relating to the data subject, or to object to such processing;

(f) the right to appeal to the CPDP;

(g) where personal data are not collected by the data subject, any available information on their source; (h) the existence of automated decision-making, including profiling.


Right to correct and delete ("right to be forgotten")


The data subject has the right to ask the Administrator to correct without undue delay the inaccurate personal data related to him. Taking into account the purposes of the processing, the data subject has the right to fill in the incomplete personal data, including by adding a declaration.


The data subject has the right to request from the Administrator the deletion of the personal data related to him, and the Administrator has the obligation to delete without undue delay the personal data when any of the following reasons apply:

(a) the personal data are no longer necessary for the purposes for which they have been collected or otherwise processed;

(b) the data subject has withdrawn his consent on which the data processing is based and there is no other legal basis for the processing;

(c) the data subject objects to the processing and there are no legitimate grounds for such processing to take precedence;

(d) personal data have been processed unlawfully;

(e) personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State applicable to the controller;

(f) personal data have been collected in connection with the provision of information society services.


Right to object


The data subject has the right to object to the processing of his personal data, including when the personal data are processed for the performance of a task in the public interest or in the exercise of official authority conferred on the Administrator, or for reasons related to the legitimate interests of the controller. third side.


The right to object is also present in the processing of personal data for the purposes of direct marketing and profiling.


Right of portability


The data subject has the right to receive the personal data concerning him and which he has provided to the Administrator, in a structured, widely used and machine-readable format and has the right to transfer this data to another controller without hindrance from the controller. data are provided when:


(a) the processing is based on consent or in performance of a contractual obligation; and

(b) the processing is carried out in an automated manner.


Right of appeal or request to the Commission for Personal Data Protection The data subject has the right to refer to the Commission for Personal Data Protection.


In case of violation of your rights, you have the right to appeal against actions and acts of the Administrator by administrative or judicial order. The court cannot be seised if there is a pending proceeding before the Commission for Personal Data Protection for the same violation or a decision of the CPDP on the same violation has been appealed and no court decision has entered into force in this regard.


Do you have an obligation to provide us with your personal data?

In order to provide products and services on our part, as well as entering into contractual relationships, we collect and process your personal data. We also process them in order to fulfill legal obligations.


In case of refusal to voluntarily provide the required personal data on your part, the Center for Urban Mobility will not be able to provide its products and services, respectively to conclude a contract / to continue the implementation of an already concluded contract.


Changes to the Privacy Policy

To reflect relevant changes in legislation, we may update and amend our Privacy Policy, so we encourage all our visitors to check for updates in a timely manner and, when necessary, review the latest version of the document, here on our website, to stay informed. for the rights and methods of processing your personal data.


This will give you the opportunity to stop using some or all of the services and / or to exercise your rights, some of which are expressly stated above. In addition, we will take all possible measures to inform in case of changes regarding the protection of personal data by placing messages in the offices and on the web portals of the Urban Mobility Center.


This Privacy Policy has been adopted by the Urban Mobility Center and is effective from 25.05.2018.