Privacy Policy

1. Introduction

NTL MARKETING SERVICES LTD. ("NTL") respects the privacy of its clients and guarantees the protection of their data as much as possible. The present Privacy and Personal Data Protection Policy (hereinafter referred to as "Privacy Policy") has been prepared. It is based on the current Bulgarian and European legislation in personal data protection.

This Privacy Policy governs the processing of personal data of individuals or representatives of legal entities who are our clients or potential clients, as well as users of our website www.b-and-e.com  (the "Website"), in connection with the services provided by NTL, including those provided through and available on the Website.

This Privacy Policy along with the Cookies Usage Policy and any other documents mentioned on the Website set out the rules that NTL will observe when processing personal data that we collect from you or for you, or which you provide us with. This Privacy Policy does not affect, limit, or invalidate your rights under the Personal Data Protection Act ("PDPA") or other relevant legislation.

If you have any questions or comments regarding this Privacy Policy, please contact us at office@ntlmanagment.com

Please read carefully this Privacy Policy before using the Website or providing your data, whether electronically on the Website or on paper, as with the provision of your data, you agree to its terms and conditions. If you do not wish to process your data in the manner described in this Privacy Policy, please do not provide it to us. The provision of personal data on your behalf is voluntary, to use certain services provided by us and the use of the Website and/or the access thereto. Please note that in some cases we will not be able to provide you with the service you have requested if you do not provide us with the necessary information. Please also keep in mind that in certain cases your consent to the processing of personal data may not be necessary, if NTL has another legal basis, for example, compliance with statutory obligations.

II. Who processes and is responsible for your data?

NTL Management Ltd. (NTL/ we) is a business company registered in the Commercial Register of the Registry Agency under UIC 175265145, which collects, processes, and stores your data under the terms of this Privacy Policy. NTL is a personal data controller within the meaning of the Personal Data Protection Act (PDPA). You can contact us at any of the following contact details:

Registered office:
NTL Marketing Services Ltd.
26-28-30 Bacho Kiro street, Platinum Business Center, Sofia

Telephones: +359 886 010 261
E-mail: office@ntlmanagment.com

III. Categories personal data processed by NTL

1. NTL may process publicly available personal data and/or personal data provided by you. The main types of personal data processed are:

(I) Personal identification information (including name, personal identification number, identity card number, place of residence, nationality, language of communication, etc.);

(II) Information about the field of activity (including education, educational establishment, workplace, position occupied, etc.);

(III) Contact details (including postal and e-mail addresses, telephone and fax numbers, etc.);

(IV) Financial information (bank account, etc.);

(V) Information about a representative (legal representative or proxy of such) of our client's legal entity;

(VI) Data from the communication between us and you, your habits, preferences, and satisfaction with our services (activity when using our services, complaints, requests, etc.);

(VII) Information about Website visits and use of the Website, including operations and usage history of the Website;

(VIII) Data obtained in the performance of obligations deriving from regulatory acts (ie data arising from inquiries, regulations, investigative bodies, notary, tax offices, court, and enforcement agents);

(IX) Data obtained from the performance of contractual obligations (including name, PIN, address, telephone and/or e-mail address, etc.).

2. NTL may process data prepared and generated by NTL during the provision of services:

(I) Data on the terminal electronic communication device used, the type of device, operating system used, IP address, and location;

(II) Data on the products and services preferred by you;

(III) Video recording upon visiting the NTL office;

3. To ensure the proper performance of the services and the obligations arising from client contracts, NTL is entitled to process any information available in public registers (including a public database and data disclosed on the Internet) as well as information obtained from third parties regarding the implementation of legal provisions regarding clients.

4. NTL has the right and obligation to verify the accuracy of the personal data stored in the database by requiring you to verify the data and, if necessary, correct or verify its correctness.

5. Various types of personal data may be processed individually or in combination.

IV. Purposes and legal bases for the processing of personal data

1. Processing of personal data that is necessary for concluding or performing contracts with us or in connection with preparing for concluding contracts with us.

NTL processes your data for the following purposes:

(I) Identifying clients upon signing a new or amending an existing contract with us; clarifications on the services used; performance of a contract signed;

(II) Making proposals for signing contracts, forwarding pre-contractual information and a draft of a contract;

(III) Data obtained from you in the performance of obligations arising from contracts entered into with you or a company represented by you, exercising of rights and ensuring the performance of contracts by our clients;

(IV) Servicing and responding to client complaints/ inquiries/ appeals/ objections;

(V) Payment of obligations and rescheduling of amounts due.

2. In performing its legal obligations, NTL processes your data for the following purposes:

(I) Issuing of invoices;

(II) For carrying out tax and social security supervision by the relevant competent authorities;

(III) Obligations provided by the Accountancy Act and the Tax-Insurance Procedure Code and other related statutory instruments about the conduct of proper and lawful accounting.

3. NTL processes the relevant data provided with the explicit written consent of the client for their processing for the following purposes: For direct marketing of products and services;

4. The processing is required for the legitimate interests of NTL.

(I) To protect and ensure the interests of visitors and employees, NTL uses video surveillance equipment to make a video recording when visiting the NTL office.

(II) Assessing and establishing customer satisfaction as well as the effectiveness of the advertising we offer to you and others and meeting your expectations by presenting adequate advertising;

(III) Analysis of purchase history data, customer preference and behavior;

V. Categories of third parties who have access to and process your data

(I) Transportation/ courier companies and postal operators to perform our contractual obligations, dispatch of correspondence and communications, in connection with the contract between us;

(II) Persons to whom NTL has assigned to maintain equipment and software used to process your data;

(III) Debt collection providers, notaries, attorneys, enforcement agents, or any other third party, if the client has breached the obligation arising from a contract with us;

(IV) Banks serving payments made by you;

(V) Persons to whom NTL has provided the performance of part of the activities or obligations related to a particular service which we have undertaken to provide to you;

(VI) Persons performing consultancy services in different fields - lawyers, accountants, etc.;

(VII) Bodies, institutions, and individuals to which we are required to provide personal data under current legislation;

(VIII) Security companies holding a license to perform private security activities processing the video recordings of NTL sites/offices and/or maintaining other registers in the process of ensuring the access regime in the same sites;

VI. For what period your data shall be retained?

The period of storage of your data depends on the processing purposes for which it was collected:

1. Personal data processed to sign/amend and perform contracts between NTL and you or a company represented by you - for the duration of the contract and until the final settlement of all financial relations between the parties. NTL may retain some of your data for a longer period until the expiration of the applicable limitation period in order protection against any customer claims in connection with the execution/ termination of contracts with us as well as for a longer period in case of a legal dispute that has already arisen until its final decision has been reached with a court/ arbitration ruling enforced;

2. Personal data processed to issue accounting / financial documents for the implementation of the tax and social security supervision, but not limited to invoices, debit, credit notes, delivery protocols, service/ goods contracts shall be kept at least 11 years after the expiry of the limitation period for repayment of the public claim unless the applicable law provides for a longer period.

3. Video recordings from security cameras - no more than 30 days after the recording was created.

4. Personal data processed for direct marketing - to the explicit withdrawal of the consent given for direct marketing or the receipt of an objection to the processing of personal data for direct marketing.

VII. Your right regarding personal data processing

1. General rights

To the processing of personal data, you have the following rights that you may exercise at any time while we store or process your data by sending a request to the address of the NTL listed above or electronically at e-mail: office@ntlmanagment.com.

You have the right to request from NTL:

• A copy      of your data and access to them at any time;
• To      rectify without undue delay your inaccurate personal data as well as data      that has already not up to date;
• Your      personal data in a form convenient to transfer them to another personal      data controller, or to ask us to do so without being impeded by ourselves      (the right of portability);
• To      delete your data without undue delay in the presence of any of the legal      grounds for doing so;
• To      limit the processing of your data, in which case your data will only be stored      but not processed. Our refusal to limit the processing will be explicit      only in writing, and we are obliged to provide you grounds by specifying      the legitimate reason;

You also have the right to:

• Withdraw      your consent to the processing of your data at any time with a separate      request addressed to NTL for consent-based processing;
• Oppose      the processing of your data;
• Oppose      the automated processing, including profiling;
• Not be      the subject of a decision based solely on automated processing including      profiling.

2. You have a right to file a complaint to the supervisory authority

You have the right to file a complaint directly to the supervisory body and the competent authority is the Personal Data Protection Commission, address: 1592 Sofia, 2 Prof. Tsvetan Lazarov (www.cpdp.bg).

In case you wish to file a complaint about the processing of your data performed by NTL, you can do so at the specified contact details of the Data Controller (at the above-mentioned contact details).

3. Automated decision making

The data controller does not use your data for automated decision-making. If we intend to use your data for automated decision making, you have the right to be informed and therefore to receive information about the logic of any automated processing of personal data relating to you.

4. Objection against direct marketing use

You have the right to object to the future processing of your data for direct marketing and advertising as well as to disclosure to third parties and their use on their behalf for direct marketing and advertising by withdrawing your consent anytime. To do so, you may send an e-mail with the request to discontinue the use of your data for direct marketing purposes at: office@ntlmanagment.com

5. Can you refuse to provide personal data to NTL and what shall be the consequences of this act?

To conclude a contract with you and/or to provide you with the requested products or services following our statutory and consequent contractual obligations, NTL needs certain data to identify the contracting party, its proxy, contact details, and details related to payment of obligations.

Your refusal to provide such data prevents us from signing a contract with you.

VIII. How we shall protect your data

NTL applies organizational, physical, IT, and other necessary measures to ensure the security and protection of your data and the monitoring of personal data processing.

Among other things, such security measures include the following activities:

• NTL has      established the requirements for the processing, registration, and storage      of personal data by the adopted internal procedures, the observance of      which is constantly observed;
• The      access of NTL employees to personal data and the permission to process the      personal data in the NTL database is limited, depending on their duties;
• NTL has      established confidentiality obligations for its employees;
• The      access to NTL office equipment and computers of any employee is limited;
• We      apply all the necessary organizational and technical measures provided by      the Personal Data Protection Act, as well as the best practices of      international standards;
• For      maximum security when processing, transferring, and storing your data, we      may use additional protection mechanisms such as encryption,      pseudonymization, etc.;
• Our      security measures are subject to constant improvement and adaptation to      state-of-the-art technologies.

IX. Links to other websites

Sometimes, the Website may contain links/ hyperlinks to other websites. We do not operate linked websites or approve the content, services, and products on these sites. We encourage you to use the linked websites carefully and with due attention to their content and terms of use. NTL is not responsible for the privacy policy or the content of such websites, and we advise you to review their privacy policies. However, as soon as NTL receives information about illegal activities or illegal information on such websites, NTL will immediately remove the electronic links (hyperlinks) to them.

X. Biscuit Usage Policy

To get familiar with the Cookie Policy, please visit the page Cookie Policy

Personal data of children

We do not consciously collect personal data from children under the age of 16. If we learn that we have collected personal data of a child under the age of 16, we will take steps to delete such information as soon as possible or to obtain the consent of the person exercising parental responsibility for the child.

Amendments to the Privacy Policy

We may periodically update our Privacy Policy. In the event of a change in the current Privacy Policy, a notice will be published on our website as well as the updated Privacy Policy. All amendments and additions to the Privacy Policy will be applied only after publishing its up-to-date content available on our Website.