This privacy policy takes effect from 25.05.2018

1. Who are we?

Panda Cooperative, exclusive owner of the Office 1 brand, UIC 000885099, address Sofia, 139 Tsarigradsko Shose Blvd., is a personal data controller within the meaning of the General Regulation on the Protection of Personal Data (Regulation (EU) 2016/679-GDPR) and local legislation.

We strive to provide you with maximum transparency about why we need your data and how we store it

Panda Cooperative respects the right of privacy of all individuals. This Privacy Policy provides information on how Panda Cooperative processes your personal data, regardless of whether you are our customer, a visitor to our website or contractor.

2. Getting in touch with us

If you have any questions about this Policy, would like to exercise any of your rights, or suspect that your personal data may be processed in violation of the law or against your wishes, you may contact us at the following address, phone number or email:

Panda Cooperative

139 Tsarigradsko Shosse Blvd.

1784 Sofia

tel.: 0899 944446

email: [email protected]

3. What information do we collect from you?

Panda Cooperative mainly processes personal data that you, as our client, provide voluntarily in the course of our business relationship or by registering on our website www.office1.bg. We may also receive information containing your personal information from our sub-franchisees, business partners, or public registers.

We may process the following personal data:

• Name, surname, phone number, email address, occupation/profession, delivery address; date of birth, voice recording data, video data, bank card;
• Name, surname, phone number, occupation/profession - when communicating by phone;
• Name, surname, email address - when you register on our website;
• Email address - when you subscribe for our newsletter on our website;
• Name, surname, phone number, email address, occupation/profession, delivery address - when we process inquiries and orders/contracts for the products/services offered by the company;
• Date of birth - when sending notifications and greetings for birthdays, name days and professional holidays;
• Voice recording – recording of incoming and outgoing calls from Office 1 Customer Service Center;
• Video recording - during visits to the company’s premises, Office 1 shops;
• Bank card - when you pay online for products/services

If you don't provide us with the above personal data, we will not be able to perform the services you expect from us.

4. Why do we need your data?

We process your personal data only for the following purposes:

4.1. To process inquiries and orders/contracts for the products/services offered by the company or for supply of goods and services for the needs of the company and the business relationship that arises in connection with that;

4.2 To provide you with information and offers for existing, promotional and new products and services;

4.3. To send notifications and greetings for birthdays, name days and professional holidays;

4.4. To send satisfaction surveys and opinion forms for completion;

4.5. To provide them to third parties (couriers, subcontractors, sub-franchisees, referred to in item 6).

5. On what grounds do we process your personal data?

In order to process your personal data lawfully, valid legal basis is required.
Depending on the purpose, we process your personal data on the following grounds:

• execution of a contract/order or preliminary steps for execution of a contract - for the purposes of items 4.1 and 4.5;
• your consent - for the purposes of items 4.2, 4.3, 4.4.;
• legitimate interest - in the case of voice recordings and video recordings.

When we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time which will not affect the lawfulness of processing based on your consent prior to its withdrawal.

6. What do we do with the collected personal data?

Panda Cooperative processes your personal data using electronic devices for recording and storing information or on paper. All electronic and paper media containing personal data are protected by appropriate organizational and technical measures as required to prevent the accidental or wilful destruction, accidental loss, unauthorized access, alteration or dissemination, as well as other illegal forms of processing.

Your personal data in electronic form is stored by the Panda Cooperative on the territory of the Republic of Bulgaria on restricted access servers in secure premises whose security measures are subject to ongoing review. The servers are protected by antivirus software, firewall, etc.

Panda Cooperative stores your personal data in electronic form and on cloud systems of reliable providers. The servers of these companies are located in Bulgaria/within the EU. If you want to find out which providers store your data, you can exercise your rights under item 8 of Section "What Are Your Rights".

In connection with the processing of inquiries and orders/contracts for products/services, Panda Cooperative provides your personal data to third parties. These can be companies of the group of Panda Cooperative, sub-franchisees - regional representatives of the Office 1 brand, couriers and subcontractors, supplying and installing furniture, warranty service of equipment operating within the European Economic Area. In the latter case, Panda Cooperative is committed to providing your data only to parties bound by contracts containing standard data protection clauses approved by the European Commission.

7. How long do we store your personal data?

We store your data for the time period specified in the applicable regulatory requirements. If no such time period is specified, your data shall be destroyed after the purposes for which they were collected are fulfilled.

We store your data for the following time periods:

• data on completed orders such as invoices, records, dispatch notes are stored in accordance with current legislation.
• bank card data when payments are made for products/services are not stored.
• voice record data are stored for 1 year
• video data is stored for 30 days
• the remaining types of data are stored as long as they are necessary to fulfil the purposes or until you withdraw your consent.

8. What are your rights?

• To be informed about the processing of your personal data;
• To request access to them;
• To ask for correction when they are inaccurate;
• Require removal of your data;
• Require blocking of your data (limiting their processing);
• Require transfer your personal data to another party;
• Object to the processing of your personal data;

If you wish to exercise any of your rights or have any questions regarding the processing of your personal data, please contact us at the contacts listed in item 2 of this Privacy Policy.

If you believe that your personal data protection rights have been violated, you have the right to refer the matter to the competent court, as well as the Personal Data Protection Commission at the address: Sofia 1592, 2 Prof. Tsvetan Lazarov Str., tel. 02 / 91-53-518, email: [email protected], website: www.cpdp.bg

PRIVACY POLICY 

for VISITORS to the premises of

LOGISTICS CENTRE OFFICE 1 LOGISTICS

Ravno pole village, 38 Verila Str.

This privacy policy is effective as of 01.06.2018, updated on 21.01.2019 and applies to all visitors to the premises of LOGISTICS CENTRE OFFICE 1 LOGISTICS.

1.    WHO ARE WE?

Panda Cooperative, exclusive owner of the trademark Office 1, UIC 000885099, address: Sofia, 139 Tsarigradsko Shose Blvd., is a personal data controller within the meaning of the General Regulation on the Protection of Personal Data (Regulation (EU) 2016/679-GDPR) and local legislation.

We strive to provide you with maximum transparency about why we need your data and how we store it.

Panda Cooperative respects the right of privacy of all individuals. The privacy policy provides information about how Panda Cooperative processes your personal data.

Panda Cooperative has entrusted the management of the property and the maintenance of LOGISTICS CENTRE OFFICE 1 LOGISTICS to PI AR EM OOD by virtue of a management and maintenance contract. PI AR EM OOD has assigned to VIP Security EOOD security activities (physical, through technical means, control points) by virtue of a security contract.

 2.     WHAT INFORMATION (PERSONAL DATA) DO WE COLLECT ABOUT YOU?

In the context of security activities performed by VIP Security EOOD as a Subcontractor and the provision of regulated access to and in the buildings and premises of LOGISTICS CENTRE OFFICE 1 LOGISTICS, it is necessary to collect and process information about visitors to the buildings. Information is collected directly from you - Data subjects under the Law on Private Security Activity, and in particular pertains to your name, Civil ID number and video image, as long as certain surveillance activities are carried out in certain locations on the territory of LOGISTICS CENTRE OFFICE 1, which is indicated on the corresponding information plates and signs.

The Personal data of visitors, Bulgarian citizens, includes their video images, as well as full name as per an identity document and Civil ID number. Information about the full name and Civil ID number is recorded by a scanning program, whereby the reader scans from the ID card only the full name and Civil ID number.

For visitors who are nationals of other countries, personal information includes their video images, as well as full name as per identity document and number of the document, which are recorded on paper carrier.

3.  WHO PROCESSES YOUR PERSONAL DATA WHEN ACCESSING THE BUILDINGS AND PREMISES OF LOGISTICS CENTRE OFFICE 1 LOGISTICS?

Employees of VIP Security EOOD, in accordance with the security contract, process your personal data upon entering and staying in the buildings and premises of LOGISTICS CENTER OFFICE 1 LOGISTICS.

The employees of Panda Cooperative are in charge and process personal data collected from you in connection with their storage.

Employees of PI AR EM OOD will receive access to process your personal data only the event of a crime and/or violation of the internal rules and/ or encroachment of the buildings and premises of LOGISTICS CENTRE OFFICE 1 LOGISTICS.

4.  WHY DO WE COLLECT YOUR PERSONAL DATA?

The main reason for collecting your personal data is to be able to identify you and ensure your security and safety, security and safety of the assets of the owners and tenants in the buildings of LOGISTICS CENTRE OFFICE 1 LOGISTICS, as well as to prevent violations of the internal rules, crimes and encroachments on the premises and buildings of LOGISTICS CENTRE OFFICE 1 LOGISTICS.

VIP Security EOOD also processes your personal data in order to fulfill its obligations under national legislation, including, but not limited to, the Law on Private Security Activity.

 5.  ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?

The legal basis for processing of your personal data by VIP Security EOOD and Panda Cooperative are provided in:

- Art. 6, para. 1 (f) of Regulation (EU) 2016/679 - processing is necessary in order to realize the legitimate interests of Panda Cooperative and PI AR EM OOD, namely, to ensure the personal integrity and safe working conditions of the employees/ staff working in the buildings, premises, facilities of Panda Cooperative and PI AR EM OOD, protection of the production and commercial secrecy of Panda Cooperative and PI AR EM OOD, guarantee the safety and security of buildings, premises/sites of Panda Cooperative and PI AR EM OOD, in order to prevent encroachment and internal rule violations.

 6.  HOW LONG DO WE KEEP YOUR PERSONAL DATA?

As a visitor, personal data about your stay at the buildings and premises of LOGISTICS CENTRE OFFICE 1 LOGISTICS shall be stored for a period not exceeding 6 (six) months, except in cases of violations of internal order or crimes on the territory of the buildings and premises of LOGISTICS CENTER OFFICE 1 LOGISTICS, or in connection with a visit to the buildings and premises of LOGISTICS CENTER OFFICE 1 LOGISTICS.

Video recordings from the video surveillance system shall be stored for a period not exceeding the statutory time limit of 60 days as per the Law on Private Security Activity, unless they contain information about a violation of the internal rules or a crime.

 7.  WHAT MEASURES FOR PERSONAL DATA PROTECTION DO WE IMPLEMENT?

The Company processes your personal data using automatic (fully or partially) and non-automatic resources as follows:

• Automatic processing - via electronic means for recording and storing information;

• Non-automatic way of processing - by keeping paper copies (for nationals of other countries).

All electronic and paper media containing personal data are duly protected by appropriate organizational and technical measures as required by the General Data Protection Regulation (Regulation (EU) 2016/679).

 The protection and security of your personal information is important to us. In order to prevent loss, misuse, or unauthorized access, we use all reasonable measures and safeguards. However, in the event of suspected infringement, we ask you to contact us immediately using the contact details below.

 8.  HOW DO WE SHARE YOUR DATA WITH THIRD PARTIES?

In order to ensure protection of the buildings and premises of LOGISTICS CENTRE OFFICE 1 LOGISTICS, we may disclose your personal information to third parties for the purposes below:

•          Judicial and law enforcement authorities, as well as other competent public authorities, in accordance with applicable law, as required;

•          Companies which act as Personal data processors and which guarantee the security and confidentiality of personal data. For the purposes of maintaining the access control system, only Panda Cooperative as data controller and VIP Security EOOD as a Subcontractor-Co-Processor have access to the data as required. PI AR EM OOD will be given access to process your personal data only in the event of a crime and/or violation of the internal rules and/ or encroachment of the buildings and premises of LOGISTICS CENTRE OFFICE 1 LOGISTICS.

 9.  WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH THE PROCESSING YOUR PERSONAL DATA?

Regulation (EU) 2016/679 provides for a number of options for the protection of individuals with regard to the collection and processing of personal data, in particular:

• the right of access and information regarding the processing of your data;

• the right to object to processing when the data is processed on the basis of the legitimate interest of the controller;

• the right to withdraw your data processing consent when the data is processed solely on the basis of your explicit consent;

• the right to restrict processing;

• the right to portability of data processed on the basis of a contract or consent, if technically possible;

• the right to correct the data, if the data we store about you is incorrect;

• the right "to be forgotten" when the legal basis for processing the data is no longer in effect, or the processing is in principle contrary to the applicable legal provisions.

• the right to lodge a complaint with a supervisory authority (see more below).

If you would like to obtain access, correct or delete the information collected from you, you have suspicious that your data has been accessed through unauthorized means, you want to file an objection, you want us to provide you with your personal data in a machine-readable format for transfer to another controller, or if you have any questions or comments regarding this Policy, you can contact us as follows:

•          To contact a data protection officer:

Panda Cooperative

139 Tsarigradsko Shosse Blvd.

1784 Sofia 

Tel:0899 944446

E-mail:[email protected]

 10.  HOW CAN YOU CONTACT THE COMPETENT SUPERVISORY AUTHORITY?

Notwithstanding the foregoing, in the case of complaints you may contact the Commission for Personal Data Protection:

• personally, at the address: Sofia, 2 Tsvetan Lazarov Blvd.;

• by letter, to the address: Sofia, P.O.Box 1592, 2 Tsvetan Lazarov Blvd;

• via email to the email of the Commission for Personal Data Protection [email protected];

• via the website of the Commission for Personal Data Protection at: https: //www.cpdp.bg/.

In view of legislative requirements, the above information may be modified by Panda Cooperative as personal data controller. For questions and updated information regarding the processing of your data, please contact us using the contact details provided.