PRIVACY POLICY


I. Subject
This Privacy Policy aims to indicate which personal data we process within the scope of our activity in connection with the Site www.pollset.com, for what purposes and on what grounds we carry out this processing, as well as to provide additional information and assistance in this regard.
Please read this Policy carefully before using our services. It is important to know that:
By registering on our Site, you agree to the General Terms and Conditions for using the services of www.pollset.com and this Policy and confirm that you accept them.
Providing the mandatory personal data is voluntary, with a view to using the services of our Site or accessing them. Any refusal by you to provide the necessary personal data to use the services on our Site would mean a refusal to use the relevant services or to access the Site.
In certain cases, the processing of your personal data may be carried out on another legal basis, such as compliance with the Administrator's legal obligations; necessity for the performance of a contract, etc. In these cases, your express consent to the processing of personal data may not be necessary.
I. Definitions
1. Personal data - any information that is related to a specific natural person (individual) that is identified or can be identified;
2. Processing of personal data - any activity that takes place in relation to personal data, including storage, use, recording, organization, adaptation, transmission, disclosure, combination, deletion, etc.;
3. Personal data administrator - the person who determines the purposes and means of personal data processing;
4. Site - www.pollset.com (including title page and subpages);
5. Basis for processing personal data (basis) - a condition that must be met in order for personal data to be lawfully processed.
III. Types of Subjects of personal data, Categories of processed data, Purposes of processing, Storage period
Our users visit and use the Site and the services we provide in different ways, which is why we have distinguished several categories of users. For each of them, we have determined a corresponding amount of data that we collect and process, purposes and grounds, storage periods and others. The same user can fall into more than one category.
  1. Data that may be automatically collected for all users: In relation to all our users (registered and unregistered), in certain cases we automatically collect and process the following categories of personal data:
IP address. When you visit the Site, our web server automatically recognizes and collects your IP address, which is assigned by your Internet service provider and does not identify you personally.
 
Summary Information: Log files providing a set of system information about the user, namely: IP address; ISP (Internet Service Provider); the browser you use when you visit our Site (eg Google Chrome, Internet Explorer and Mozilla Firefox, etc.); the time you spent on the Site and which pages on the Site you visited. The information contained in these files includes:
Cookies ("Cookies'): We use cookies to offer you relevant information and a better and more personalized service when you visit our websites, enabling you to find what you are looking for more easily. The cookies that our websites use allow us to store data about you that does not show personally identifiable information. More information about this can be found in our Cookie Policy.
Web beacons: These are files that allow a website to collect information about the number of users who have visited it and access their cookies.
2. Data that can be collected according to the category of users:
2.1. Visitors
A visitor is any person who loads the Site in their web browser.
Categories of data that can be processed: Online identifiers stored in local cookies on the visitor's device/browser; Location data provided by the visitor; Country/city data based on the IP address of the user's device, an invariable part of the information received from each website; Information about actions performed by the entity on the Site; Preferences of the subject regarding specific aspects and settings of the platform's functionalities; Information about the type of browser/device used.
Purposes of processing: Provision of basic and auxiliary functions necessary for the correct and full functioning of the Platform; Counting visits to the Platform; Provision of necessary conditions for implementation of services on marketing platforms.
Storage period: Until the expiration of the validity of each "cookie" (up to 1 year from the moment of its recording), carrier of the relevant information, or until it is deleted by the subject in whose device/browser it is stored.
Legal basis for processing: Consent to the Cookie Policy.
 2.2. Registered users
A registered user is any Visitor who has registered on the Site, thereby creating a so-called profile or account. Registering an account on our Site gives you the opportunity to use a wider range of services and features, such as writing comments under surveys and posting surveys on the Site. Depending on which services they use, users may enter additional data that is not mandatory.
2.3. Categories of data of registered users that can be processed:
Mandatory data - marked with an asterisk next to the corresponding field in the registration form: E-mail; Password
 
Optional data - provided at your request:
 
Name/Nickname; gender; date of birth; Country, City; marital status, education; Avatar;
Additional information (Description): e-mail, ICQ No, Skype, GSM, Personal page, , Address for contacts, interests; occupation/profession etc.
Purposes of processing:
a) Providing the possibility for the user to register his account, enabling the use of services on the Site, maintenance of a user profile, interaction with other users, etc.
b) Processing purposes related to and/or necessary for the performance of a contract with the data subject:
Providing the information services available through the Site, including providing various functionalities;
Communicating with registered users, including electronically, regarding the services provided through the Site.
The storage of certain log files is necessary for the provision of the services itself.
c) Purposes for processing personal data necessary for the purposes of the legitimate interests of the Company or of third parties:
Proof of declarations of will and other actions taken by the user when creating and managing a user profile and using the services of www.pollset.com (including by collecting and storing log files).
Ensuring the normal functioning and use of the Site.
Protection of the rights and legitimate interests of the site owner and its business partners/other 3rd parties against claims.
Storage period: until receipt of a request to delete the registered profile sent by the User to the e-mail info@pollset.com.
Legal basis for the processing of mandatory data: Consent to the General Terms and Conditions for using the services of www.pollset.com (the performance of a contract with the data subject) and in view of the legitimate interests of the owner or of third parties (in accordance with the above-mentioned purposes of processing). Legal basis for the processing of optional data: Consent of the user (provided at his request).
2.4. Visitors using the "Log in with Facebook" functionality
When a User uses his Facebook account for the purpose of registration, with this action he authorizes the Administrator to receive partial data from his profile in the relevant external service, permitted by the User to be provided through his settings in the relevant external service, whereby:
a) The Administrator may receive User data such as Names, Gender, Age, Residence, Photo/Avatar, which data is added to the User's created account on the Site.
b) The Administrator may be enabled through the relevant external service to send notifications to the User, sent within the framework of the relevant external service, for communication purposes (for example: private notifications on Facebook).
The information that, through automatic technical means, the Administrator can receive and process in the manner described, is determined entirely by the user - through his settings within the relevant external service (Facebook) in which he has an account and which account he has decided to link to the account you are on the site. The user's login with this external service is taken as consent to process the data provided through them.
IV. Post, modify and delete User Content on the Site. Visits to the Site by unregistered users and commenting by unregistered users.
User Content from both registered and non-registered users is published on the Site. There may be personal data in the user content and the relevant user is fully responsible for the lawful processing of the data contained in the content uploaded by him, as well as he will be obliged to compensate the Owner in case of damages suffered by the latter (property sanctions or compensations) in relation to personal data contained in User Content.
In this regard, the categories of data that may be processed are:
a) Identification data:
nickname
e-mail address, password, profile avatar and other optional data specified at the User's request in his profile information (for registered users);
b) Others:
Any other information contained in the posted User Content (including names, video images, photos, etc.);
IP address and its activity (resources visited from the Site), history of activity (behavioral interests) - which addresses were visited, how much time was spent on them.
Processing purposes necessary for the fulfillment of legal obligations:
Taking measures to prevent/remove illegal user content (child pornography, hate speech, copyright infringement, etc.);
Fulfilling government authority requests for information (e.g. IP addresses of commenters);
Fulfillment of other legal obligations.
Processing purposes related to and/or necessary for the performance of a contract with the data subject:
Provision of the information services available through the Site
Purposes for processing personal data necessary for the purposes of the legitimate interests of the owner or third parties:
Proof of completed declarations of will and other actions taken by the user when creating and managing a user profile and using the services of www.pollset.com;
Ensuring the normal functioning and use of the Site;
Protection of the rights and legitimate interests of the owner and its partners/other 3rd parties against claims;
Business planning, including analysis and evaluation of the functioning of the Site and planning of its development.
Retention period: Five years from the download of the content from the Site.
Legal basis for data processing: Agreement with the General Terms and Conditions for using the services of DIR.BG (the performance of a contract with the data subject) and in view of the legitimate interests of the Company or of third parties (in accordance with the above-mentioned purposes of processing).
V. On what basis we process your personal data
We process the data, which is mandatory for the registration of a profile on our Site, on the basis of our contractual relations, regulated by our General Terms and Conditions for using the services of www.pollset.com, under which we provide you with a number of services. We use this data for the purposes of registration and maintenance of your account; to provide specific services that are available only after registration, including: to write comments and publish materials, to resolve disputes and to fix problems that have arisen, to communicate with you.
The data that you provide to us during your registration, and the provision of which is not mandatory for the purpose of registration, we process on the basis of your consent.
Your data can be used for the purposes of direct marketing of our services and services of our partners, as well as for the provision of other additional services, only with your consent.
We process the data we collect from log files, cookies and web directories for the following purposes: to provide you with access to our Site; to personalize ads on our products and on our partners' products; to measure and track statistical dependencies in order to increase the quality of our services, and hence the interest in them.
The recognition and collection of the IP address is carried out for the following purposes: revealing the identity of the users of the Site, in compliance with the law and by-laws, to protect our rights and legitimate interests; to analyze traffic to our Site and to protect against malicious attacks; display advertisements and information related to your location, service information. We carry out these actions based on our legitimate interests to develop our business and to protect our rights and legitimate interests in case of disputes, as well as in certain cases based on the mandatory prescriptions of the law.
In certain circumstances, we may use your personal data to protect our rights and legitimate interests, as well as the rights and legitimate interests of third parties, for example in the event of a legal or out-of-court dispute.
NB! An important requirement for consent to the processing of personal data of persons under 16 years of age is that consent be given by the person's parent, guardian or guardian.
VI. Who has access to your personal data and how we protect your personal data
Maintaining the privacy and security of your personal data is extremely important to us. In this regard, access to your personal data is provided only to the extent necessary to fulfill the above-mentioned purposes for which we process your personal data, to the following categories of persons:
Our employees and persons engaged under a non-employment contract for the performance of certain work.
Persons providing hosting services (servers) for our sites and other technical services for the maintenance of our systems (including their employees and subcontractors), for which we have entered into the necessary contract with a data processor according to the applicable regulations;
Professional consultants (lawyers, accountants, etc.), insofar as this is necessary for the realization and protection of our rights and legitimate interests.
State authorities, at their request in connection with the exercise of their public powers granted to them by Bulgarian legislation, as well as when taking actions to protect our rights and legitimate interests.
To ensure the security of our Site, the personal data you provide to us is protected using SSL (Secure Socket Layer) technology - a method of encoding personal data. The password you provide when registering on our Site is encrypted to ensure protection against unauthorized access to your personal data.
We make every effort to protect your personal information, but you should be aware that the transmission of information over the Internet can never be completely secure. The Site may include links to third-party websites, plug-ins and applications. Clicking on or activating these links may allow third parties to collect or share data about the data subject. www.pollset.com does not control these third party websites and is not responsible for their privacy statements. When the data subject leaves the Site, he should carefully read the privacy statement for each website he visits.
 VI. Periods in which we store your personal data
We store your personal data for as long as necessary to ensure the effective functioning of our Site, the performance of the contracts concluded by us and the realization of our legitimate interests. The specific storage periods for certain categories of data are indicated in the appropriate places in this Policy.
In the general case of processing personal data of registered users, we store the personal data as long as your profile on the Site exists or until you explicitly wish your personal data to be deleted.
It is important to know that at any time you can refuse to use our services, as well as withdraw the express consents provided for the use of your personal data - when the consent is the basis for their processing. In these cases, we will cease using your data and providing our services to you as far as possible.
In certain cases, even if the use of your personal data has ceased, due to the deletion of the account due to inactivity, or due to the explicit withdrawal of consents provided by you, we may retain an archive of your personal data to the extent necessary for protection of our rights and legitimate interests, for a period until the expiration of limitation periods provided for in the applicable legislation. In general, these terms are 5 years, but in certain circumstances they can be shorter or longer.
You should be advised that your IP address is automatically collected each time you visit our Site, regardless of whether you have opted out of our services. In these cases, if you do not want us to access your IP address, you should not visit our Site.
VII. Your rights in relation to your personal data
As a person whose personal data we process, the applicable legislation in the field of personal data protection provides you with certain rights that you can effectively exercise in the cases provided for by the legislation.
In short, your rights are:
Right of access. You have the right to request confirmation from us as to whether we are processing your personal data and, if so, to receive such data as well as additional information;
Right of correction. If you find that your personal data that we process is incomplete or inaccurate, you can request that it be corrected or supplemented.
Right to erasure (right to be forgotten). In certain circumstances - such as if your personal data has been processed unlawfully, you can ask us to delete all personal data about you. In certain cases, this right is also related to your right to withdraw the consent given to us (if the processing of personal data is based on consent) and there is no reason to continue processing them, to process your personal data.
Right to restriction of processing. In certain circumstances - such as if you doubt the accuracy of your personal data or you have objected to our legitimate purpose for processing your personal data, you can request that we restrict the processing of your personal data, in which case the active use of the data without, however, permanently deleting/destroying it.
Right to data portability. Where we process your personal data on the basis of your consent or on a contractual basis and the processing of your personal data is carried out in an automated manner, you have the right to receive the personal data you have provided to us in a structured, widely used and machine-readable format, as well as transfer them to another administrator or require us to transfer them to another administrator.
Right to object. In certain circumstances - such as if you doubt our legitimate interest in processing your personal data, you could object to the processing of your personal data on grounds related to your particular situation, against such processing in the event that we carry out this activity on on the basis of a legitimate interest or in the performance of a task in the public interest.
You can exercise these rights by submitting an application that meets the requirements of the Personal Data Protection Act. More information about the content and the conditions under which you can exercise the above rights can be found in the applicable legislation in the field of personal data protection. If necessary, you can also turn to us for assistance.
 
The administrator may provide personal data in countries outside the European Union. The provision of personal data in this case may be carried out in compliance with the requirements under Chapter V of Regulation (EU) 2016/679 and applicable international agreements between the European Union and third countries (eg Privacy Shield).
Our contact details are: e-mail: info@pollset.com, website: www.pollset.com
In the event that you consider that we violate your rights in connection with the protection of your personal data, you have the right to file a complaint with the competent supervisory authority in the Republic of Bulgaria - Commission for the Protection of Personal Data, or with a court.