Privacy Policy

This Website, careersbg.adastracorp.com (“Website”) is owned and operated by Adastra Bulgaria EOOD (” We”, “our”) . We understand that as a visitor to our Website, you may have questions about the information you provide to us and how we process it.

We respect your data privacy rights and with this Privacy notice would like to explain what information we collect via the Website and how we use it.

This Privacy notice applies solely to information collected by this Website , including when using any of the forms for applying for a job position, and does not apply to information collected and processed by us on the basis of other legal means, subject to other types of regulation.

Legislative changes or changes in our internal processes may make it necessary to adapt this Privacy notice. Therefore, we ask you to read it regularly.

Personal data controller

The personal data controller in the sense of GDPR is:

Adastra Bulgaria EOOD, UIC 175397143, Sofia 1407, 32 Atanas Dukov Str.

Data protection officer

You can contact our data protection officer at: [email protected]

What information we collect about you and how we are using it?

I. Personal data collected when accessing our website

a) Scope and purpose of processing:

We collect and use only personal data of users to the extent necessary to ensure the functionality of our Website.

When you access our Website, we collect only personal information that your browser automatically transferred to our server. The information is temporarily stored in the so-called log-file. The following information is recorded without your intervention and stored until it is automatically deleted:

IP address of the computer from which the request is sent
Date and time of access
Name and URL of the extracted file
Website accessed (reference URL)
The browser used and, if applicable, the operating system of your computer

The specified data will be processed by us for the following purposes:

General administration of the Website
Improving the security of the Website
Statistics and analysis

b) Legal basis of processing

Article 6 (1), (f) of the GDPR serves as the legal basis for data processing. The processing of these data is necessary for the provision of our services and thus serves to protect our legitimate interest.

Article 6 (1), (a) of the GDPR serves as a legal basis for the processing of the data we receive when you agree to the use of cookies, other than those which are strictly necessary for the proper functioning of our Website .

c) Data deletion and retention period

Personal data is deleted or blocked once the purpose of processing it has been met. Collecting the data for the provision of the Website and storing it in log-files is essential for the functioning of our Website. Therefore, there is no possibility for the user to object. Further storage may be required in individual cases if required by law.

More information for the purpose of processing of your personal data can be found in our Cookie policy.

II. Personal data collected by subscribing to our e-newsletter

a) Scope and purpose of processing

You can subscribe for our free e-newsletter. The newsletter informs you about current news, services and activities related to Adastra Bulgaria EOOD. Only your email address will be processed for the subscription for our e-newsletter.

When you register for the e-newsletter we also save the IP address used by your IT system at the time of registration, which is issued by your Internet Service Provider as well as the date and time of registration. We must collect this data to investigate any (possible) misuse of your email address at a later stage and it is therefore lawful for the purposes of our security.

Personal data collected for our e-newsletter service are not shared with third parties. You may terminate your subscription to our e-newsletter at any time. You can at any time withdraw your consent to the storage of the personal data you shared during registration. A link is provided in each newsletter to allow you to withdraw your consent.

b) Legal basis

The processing of your personal data for the e-newsletter is based on the following freely given consent in accordance with Article 6 (1), (a) of GDPR.

If you have registered to receive an e-newsletter, you have provided the following statement of consent:

“I have read and understood the Privacy notice and agree to it.

I would like to subscribe to the e-newsletter of Adastra Bulgaria EOOD

I am informed that I can withdraw my consent at any time without giving a reason for it using the link to unsubscribe visible and in the email, that I receive e- newsletter.

I am informed that the controller will not process my personal data after the withdrawal of my consent, and that the withdrawal of consent will not affect the lawful processing of my personal data before that moment. “

c) Data deletion and retention period

Your email address will be stored while you are subscribed to the e-newsletter. Once you unsubscribe from the newsletter, your email address will be deleted. Further storage may be required in individual cases if required by law.

III. Personal data collected through the application forms for a vacant job position

a) Scope and purpose of processing

To apply for a job in our company, we need the following information:

Two names
Telephone
E-mail
CV
Location of our office (Sofia, Plovdiv or Varna)for which you want to apply.

The information provided to us will be processed by the Human Resources Department. Your personal data will be processed exclusively for the purpose of conducting the recruitment process (selection and selection of candidates), namely: identifying the candidate, assessing the skills and professional qualities of the candidate, checking the knowledge of the candidate and his/her good reputation, connecting with him/her for an interview and conducting interviews, creating an appropriate environment for the selection of the job candidate, establishing the necessary trainings to adapt to the requirements of the workplace, preparing the conditions for signing the employment contract with the selected job candidate.

This Privacy notice covers the pre-checks that we carry out and the documents submitted by the applicant in the recruitment process. Selected job applicants will receive a separate Privacy notice for the processing of personal data of employees.

b) Legal basis

The processing of your personal data for applying for a job is based on the following freely given consent in accordance with Article 6 (1) (a) of the GDPR.

When you apply for a job through our Website, you have provided the following statement of consent:

” I have read and understood the Privacy notice and agree to it .

By filling in my two names, telephone number and e-mail, enclosing my CV and clicking on the “apply “ button, I give my consent to Adastra Bulgaria EOOD to use my personal data for the purposes of the recruitment process for this vacant job position.

I am informed that I can withdraw my consent at any time and without giving any reasons, by sending an email to [email protected] .

I am informed that the controller will not process my personal data after the withdrawal of my consent, and that the withdrawal of the consent will not affect the lawful processing of my personal data before that moment. “

c) Data deletion and retention period

The personal data of applicants who do not meet the our requirements or who refuse the offer of employment will be retained for 6 months or 6 months after the completion of the recruitment process, unless you have explicitly stated that you wish to keep your personal data for a period of 3 years.

IV. Personal data, collected through our activities in social networks

a) Scope and purpose of processing

To allow us to communicate with you on social networks and inform you about our services, we run our own pages on these social networks. If you visit one of our social media pages, we and the provider of the social media network are joint controllers (Art. 26 of the GDPR) regarding to the processing operations triggered thereby, which concern personal data.

We are not the original provider of these pages, but only use them within the scope of the options offered to us by the respective providers.

We would therefore like to point out as a precautionary measure that your data may also be processed outside of the European Union or the European Economic Area. Use of these networks may therefore involve data protection risks for you since the protection of your rights may be difficult, e.g. your rights to information, erasure, objection, etc. Processing on social networks frequently takes place directly for advertising purposes or for the analysis of user behaviour by network providers, and we have no control over this. If the provider creates user profiles, cookies are often used or user behaviour may be assigned directly to your own member profile on the respective social network (if you are logged in).

b) Legal basis

The processing operations of personal data described are carried out in accordance with Art. 6 (1), (f) of the GDPR on the basis of our legitimate interests and the legitimate interests of the respective provider in order to communicate with you in a timely manner or to inform you about our services.

If you have to grant your consent to the respective providers to process your data as a user, the legal basis for this processing is Art. 6 (1), (a) of the GDPR in conjunction with Art. 7 of the GDPR.

Recipients of your data

Your data will be shared with employees of the Human Resources, Marketing and Information Technology departments. In some cases, your data may be provided to our clients, partners and/or other companies in the Adastra Group. In such cases We will request your prior consent.

We can transfer your personal data to third parties only if:

You have given your explicit consent in accordance with Art. 6 (1), (a) of the GDPR;
The transferis legally admissible and necessary for the performance of the contractual relationship with you in accordance with Art. 6 (1), (b) of the GDPR;
If there is legal obligation for us to transfer data under Art. 6, (1), (c) of the GDPR.

Automated decision making

We do not make automated decisions, including profiling you, based on personal data provided by you for the above purposes of processing.

What Rights Do You Have Regarding Your Personal Data?

You have certain rights with respect to your personal data, including those set forth below. For more information about these rights, or to submit a request, please email [email protected] .

Please note that in some circumstances, we may not be able to fully comply with your request, such as if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need to you to provide us with additional information, which may include personal data, if necessary, to verify your identity and the nature of your request.

Access: You can request more information about the personal data we hold about you and request a copy of such personal data.

Rectification: If you believe that any personal data we are holding about you is incorrect or incomplete, you can request that we correct or supplement personal data by emailing us at [email protected] .

Erasure: You can request that we erase some or all of your personal data from our systems.

Withdrawal of Consent: If we are processing your personal data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your personal data, if such use or disclosure is necessary to enable you to utilize some or all of our services.

Portability: You can ask for a copy of your personal data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.

Objection: You can contact us to let us know that you object to the further use or disclosure of your personal data for certain purposes, such as for direct marketing purposes.

Restriction of Processing: You can ask us to restrict further processing of your personal data.

Right to File Complaint: You have the right to lodge a complaint about our practices with respect to your personal data with the supervisory authority Commission for Personal Data Protection, Sofia, 2 Prof. Tsvetan Lazarov Blvd.

This document has been updated as of April, 2021.