Uploaded on: 12/01/2022

Last revised: 01/20/2022

Personal data protection policy - HR Platform

General information: Please read carefully everything contained in this document below. Effective May 25, 2018 regulation (EU) 2016/679, on the protection of personal data (General Data Protection Regulation) of the citizens of The European Union. "Plegi" OOD, with EIK: 205945851, with headquarters and management address: Sofia, Bulgaria 1303, district Vazrazenia district, "Sredna Gora" street No. 48, floor 4, apartment 8 (hereinafter referred to as “Pleggi” for brevity) complies fully comply with the legal requirements, including but not limited to the regulation, the law on the protection of personal data, as well as all related legal acts and collects only the personal data necessary for the quality provision of your services. Our privacy policy (declaration) is completely transparent. We have a lot takes the protection of your personal data on the Internet seriously. With this policy (declaration) for privacy Pleggi presents you with how it protects the personal data it processes in relation to you. The policy for protection of personal data for Pleggi's HR platform is applicable only to Employers (in the sense of the general conditions for the HR platform, referred to as "Employers"), their representatives and contact persons (whose personal data are collected on the Platform) on the Pleggi Platform - www.pleggi.com (for short the "Platform" or "Site") and the personal data provided by them. The platform is owned by "Plegi" OOD, with EIC: 205945851, with registered office and management address: Sofia, Bulgaria 1303, district Vazrazenia, 48 "Sredna Gora" street, floor 4, apartment 8, with the company being the administrator of all personal data collected through the Platform. In connection with the services provided on the Platform and this policy (declaration) Pleggi processes information regarding the following Data Subjects:

(a) natural persons, users of the Site, with registration and access rights to an employer account - Representatives of the employer;

(b) Employers - natural persons registered on the Site;

(c) Natural persons designated by the Employer as contact persons (administrative contact, financial contact and etc.) - "Contact persons".

As if you fall into any of the above groups of persons, this policy (declaration) applies to you, if or not, it does not apply to you and perhaps you need to orient yourself in our Site, for which, if necessary, you can Yes contact us. Please note that the privacy policy will be regularly updated to reflects changes in the way we process your personal data and any changes in applicable regulations acts. This privacy statement (policy) provides an overview of the most common activities of Pleggi on the processing of your personal data on the Platform, such as any processing of personal data outside of those specified in this one policy (declaration) will be carried out only after written consent from you. Please note that some specific processing activities may be subject to a separate and individual privacy statement. This one personal data policy is applicable only to Employers, Employers' Representatives and persons for contact on the Platform and shall not apply to any other third party website and/or services referred to The platform. Detailed information about the procedures we follow for processing, storage and deletion on this personal data will be detailed below. In this policy you may find:

Section 1 - Information about the controller of personal data;

Section 2 - Information about the competent supervisory authority;

Section 3 - What personal data we collect about you;

Section 4 - Why we collect your personal data;

Section 5 - How We Collect Personal Data;

Section 6 - How We Protect Your Personal Data;

Section 7 - The storage and processing of personal data;

Section 8 - For what periods we store them;

Section 9 - Data Subject Rights;

Section 10 - With whom and why we share your personal data;

Section 11 - How You Can Get Full Information about what personal data we store about you;

Section 12 - How you can ask us to forget you - to delete any personal data we hold about you and who we have no duty to protect under applicable law. In case of questions, you can always contact us by email: info@pleggi.com. We will endeavor to respond to you within 72 hours unless we are prevented by technical reasons or force majeure circumstances. Pleggi as a personal data controller provides the data subject with information on the actions taken in relation to his request under Articles 15-22 (data subject's right of access, right to rectification, right to erasure (right to be forgotten), right to restriction of processing, obligation to notify when correcting or deleting personal data or restricting processing, right on data portability, the right to object and the data subject's right not to be subject to Automated Collection on individual decisions, including profiling) of the regulation (GDPR), without undue delay and in all cases in term of one month from receipt of the request. If necessary, this term can be extended by another two months, as everything takes into account the complexity and number of requests. Pleggi will inform you of any such extension within one month from receipt of the request, indicating the reasons for the delay. If Pleggi does not act on the request You according to the previous sentences, will notify you without delay and at the latest within one month of receiving the request for the reasons for not taking action and the possibility of submitting a complaint to a supervisory authority and seeking protection by court order.

Section 1 - Information about the controller of personal data: Name: Pleggi OOD; EIK: 205945851; Headquarters and address of management: Bulgaria, Sofia 1303, Vazrazenia district, "Sredna Gora" street No. 48, fl. 4, app. 8; Email: info@pleggi.com; Phone: +359 89 420 2086. Pleggi operates in accordance with the Personal Data Protection Act (PDPA) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data.

Section 2 - Information about the competent supervisory authority: Name: Commission for the Protection of Personal Data; Headquarters and management address: Bulgaria, Sofia 1592, "Prof. Tsvetan Lazarov" No. 2; Address for correspondence: Bulgaria, Sofia 1592, "Prof. Tsvetan Lazarov" No. 2; Phone: +359 2 915 3 518; Email: kzld@government.bg, kzld@cpdp.bg; Website: www.cpdp.bg.

Section 3 – What Personal Data We Collect About You: We collect the personal data of Employers - natural persons, Employer Representatives and persons for contact, when you fill out forms on the Platform. This includes information on Employers - FL, Representatives and persons for contact provided during registration, adding or changing your profile information to use our Site, subscribe to our paid or free services or request additional services. We may ask you for information when you report a problem/s with the Platform. If you contact us via email or other social media (Facebook, LinkedIn and/or Instagram) we may keep a copy of it correspondence. IN case you want to use a product, it is necessary to create a profile, in order to optimal quality of the service provided, as well as because the services we offer, due to their nature and purposes, require the provision of certain information, which is evident even more clearly from the General Terms and Conditions. The information (including personal data, but also data that is not classified as personal data) that we collect from you may include: Your company, EIK/BULSTAT, number of employees you have, name, surname, phone number, email address and photos of Representative(s) and/or contact person(s), their position/in what capacity are the Representative(s)/contact person(s); IP address, plus any information, details about your visits to our Site, including but not limited to traffic data, data for location and other communication data, regardless of whether this is required for our own payment aims or for any other reason that you voluntarily provide. You yourself decide if and how you use the services, provided through the Platform. In the forms through which personal data is entered, we clearly indicate the mandatory or the voluntary nature of providing the data. The data, the filling of which is mandatory, are such, without who it is impossible for us to provide the relevant service or part of it. Employers, representatives and persons for contact may voluntarily provide other personal data without being required by Pleggi and influencing the services provided through the Platform, but this is done entirely at your risk and responsibility. It is possible to we demand and additional information, but only with your express permission, in the event that such information is necessary for the performance of a service that you have stated that you wish to use.

(a) Employer Account Registration, Representatives and Contacts. When creating and using employer account on the Site requires information about the Employer (required), Representatives of The employer (mandatory), Contact Persons (optional) and Data Protection Officer within the meaning of the regulation, if any. In addition, information is stored about the registration and acceptance of the general conditions (date, time and IP address). The data that you provide when registering an account, adding Representatives and/or contact persons may be: Employers - natural persons: name, seat and address of management, other contact details (address for correspondence; telephone; email address), photos; EIK/ BULSTAT - these data will be placed in the profile of the Employer and will not be visible to other users; Representatives of Employers ("Representatives") - name and surname, position/in what capacity is the representative, official phone, work email address, photos - these data will be placed in the profile of the Employer and will be visible only for users who have applied according to the Employer's advertisement; Contact persons - name and surname, position/in what capacity is the contact person, business phone, business email address, photos - these data will be placed in the profile of the Employer and will be visible only to users, who have applied according to the Employer's announcement. By accepting this policy, Employers, their representatives and contact persons agree to the said above information to be placed in the profiles of the respective Employer and to be visible to users in The platform, applied according to their ads. This data is only for contact between us and you, as well as from users with you in connection with the positions you have created on the Platform.

(b) Additional representatives and contacts. According to the general conditions, in case it is necessary and you have the necessary rights, you can add additional company users with access to the employer account, such as for this purpose everything fill in information such as: name, surname, position/in what capacity is the representative, official e-mail address, official phone, photos access rights. When adding additional contacts to the employer account, You you declare and warrant that you have the necessary authorization and that you have informed the relevant persons in advance of this one Politics.

(c) Contracts and Declarations. The documents exchanged between you and Pleggi related to the conclusion and performance of contract with you (additional agreements; powers of attorney; declarations; invoices, etc.) may contain name, job title, contact information, manual/electronic signature, etc.

(d) Correspondence, complaints and reports. In order to resolve submitted complaints, reports, disputes, inquiries, requests or other questions addressed in communication to us, received through electronic forms on the Site, by sending by e-mail, we store and process this information for the purposes set out in this policy.

(e) Special categories of (sensitive) data. The services of Pleggi and the functionalities provided on the Site they are not intended for the collection, storage and processing of special categories of data within the meaning of Art. 9 and Art. 10 of The regulation. You undertake not to store such data in your account. In addition, you should not require Platform Users to submit such data through the Site. Pleggi is not obliged and no traces for the availability of the data specified here on the Site.

(f) Other data. Pleggi may process other data relating to You, Your Representatives and individuals for contact, in cases where you voluntarily provide such data by filling in relevant electronic forms on the Site, adding preferences, settings, etc. Data related to the process of using the services provided through the Platform:

(a) Contractual and Financial Information. In connection with the conclusion and execution of contracts for providing The services between you and Pleggi, it is possible to process the following data: Information about contractual arrangements; Information related to the payments made and due for the Services (when validating an account and using paid services on the Site, the information may include name, bank, bank account number, etc.); Information related to the administration and provision of the Services; History and information about requested Services; History and information about the use of the Services; Other information created or provided in the process of using the Services.

(b) Settings and Notifications. Settings and notifications (including by email) are available for some of the Services, facilitating your work with the Site. Pleggi processes the relevant information for this purpose. In connection with this, information may be stored about the actions made by you and/or your representatives and/or persons for contact with the right to access instructions through the functionalities available on the Site, as well as for actions, linked to processing of personal data. Such information includes: Actions such as accessing and making changes to the account, requesting services, posting and editing listings, etc. Actions related to data access, such as access, deletion, export, etc. The stored information includes: action, the Representative who performed the action, date and time, IP address, etc. You are the sole owner of your personal information and you can object to the processing at any time her as detailed below. We process the personal data and information provided by you based on one or more of the following grounds: Your explicit consent; Fulfillment of Pleggi's obligations under a contract with you; Compliance with a legal obligation that applies to the Administrator; For the purposes of Pleggi's legitimate interest. Special categories of (sensitive) data: The services of Pleggi and the functionalities provided on the Site are not intended for the storage and processing of special categories of data within the meaning of Art. 9 and Art. 10 of Regulation (EU) 2016/679 of the European Parliament and of Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and regarding the free movement of such data. You agree not to store or send through the Site to anyone, in any form, information containing special categories of data and sensitive data such as: - data revealing your, your representatives and contact persons, racial or ethnic origin, political views, religious or philosophical beliefs, membership of trade unions, nor your genetic data, biometric data, data about your state of health, about your sex life or your sexual orientation, or data related to your convictions and offences. - identity documents, as well as social security number, passport/identity card number, etc. similar. Pleggi has no obligation and does not monitor the availability of the data specified here on the Site. Providing one information is entirely at the risk and responsibility of the person providing it. You should not store any of the above such as sensitive data and the documents mentioned in the previous paragraph in your account, as well as to send such data and documents to anyone through the Site.

Section 4 - Why we collect your personal data: We collect personal data from you to: We provide you with a higher quality of our services; Make visiting our Platform pleasant and useful; We provide you with technical support at the highest possible level; To provide you with access to certain functionalities of the Platform; For our marketing purposes, consisting of sending messages by email or other social media (Facebook, LinkedIn and/or Instagram) in connection with the services provided by Pleggi; To be able to contact you when necessary; For compliance with Pleggi's legal obligations - the purposes related to compliance with Pleggi's legal obligations, include the fulfillment of obligations provided for by law to preserve or provide information upon admission on corresponding order from competent state or judicial authorities, providing an opportunity for implementation of the control powers of the competent state authorities, in fulfilling Pleggi's legal obligations to you informs about various circumstances related to your rights, the Services provided or the protection of your data and others. under. For these purposes, it may be necessary to process some or all of the above categories; For the fulfillment of obligations under contracts with you - these are the goals necessary for the steps to conclude and the performance of a contract between you and Pleggi, including the necessary data processing during performance on registration, account creation and the activities of providing the Services available through the Site. Additional these purposes include communicating with you, including by e-mail, necessary in connection with the provision of The services and/or notifying you of changes to the Services provided. This may require machining of a part or on all of the above categories of data. Pleggi does not perform and does not intend to perform automated decision-making through the Platform in the future, relative to Employers, their Representatives and their contact persons, including profiling in the sense of the General Regulation for personal data protection (GDPR). The specific reasons why we collect personal data are: Create a profile in our internal system; Accounting purposes; Statistical purposes; Protection of information security; Sending information messages, recommendations to improve the use of the services we offer, new ones platform versions and/or product upgrades; Offers for related Pleggi products and/or services; Provision of technical support; contacting you when necessary; Legitimate interests of Pleggi - these are goals related to legitimate interests of Pleggi and/or third parties. These aims include: Ensuring the normal functioning and use of the Site by you and by other Employers and Users, maintenance and administration of the Services, resolution of disputes, establishment and preventing malicious acts; Detect and resolve technical or functionality issues; Communicating with you, including electronically, on important matters related to the Services; Receiving and processing received signals, complaints, requests and other correspondence; Exercise and protection of the rights and legal interests of Pleggi, including by court order, and providing assistance in the implementation and protection of the rights and legitimate interests of other users of the Site and/or affected third parties. For these purposes, it may be necessary to process some or all of the above categories. Pleggi collects personal data for the purposes of providing, developing and personalizing the Site. Personal data is necessary of Pleggi for direct communication with Employers, representatives and contact persons on the Site, for providing answers to questions asked by Employers, representatives and contact persons, as well as fulfillment of their requests. Personal data will only be used with consent from Employers, the representatives and contact persons of the Site and for the purposes of direct marketing by e-mail, under the phone or other social media (Facebook, LinkedIn and/or Instagram), the purpose of which is to conduct research and informing or receiving feedback about inactive past, present and upcoming products and/or services. When an inquiry is sent to the Site, it is possible to have direct contact with the Employers, representatives and persons for contact to obtain additional information necessary to process or fulfill a submitted request and/or request. Except where disclosure of such information to third parties is required by law, personal data may be disclosed only after the prior approval of Employers, representatives and the contact persons on the Platform. Employers, representatives and contact persons agree to place in the employer accounts information (mandatory and optional of this information is clearly indicated by Pleggi on the Site), which is required in order for users to be able to contact them about positions created by You. We guarantee that we won't collect personal data from you if we do not need it.

Section 5 - How We Collect Personal Data: Pleggi collects personal data through the following channels and through the following channels: Our site, with this data provided by the Employer, personally, through representatives and/or contact persons - at registration, modification of your account data and completion of other forms on the Platform requiring the completion of personal data ; Our contact numbers, if applicable, when contacting us or you; Contact emails, if applicable, when contacting us or you; The technical support sections, if applicable, when contacting us or you; Our social media accounts such as Facebook, LinkedIn and/or Instagram – via private message, comment or by another way. Through Google Analytics - We use Google Analytics to collect statistical information about visitors on The platform. Such data is, for example, the website, the country in which you are located, your language, online behavior, the browser you use, the network, etc. This information may include your IP address, but you may not be identified through it as a natural person. We collect the specified data to analyze what type visitors use the Platform and how they use it, which helps us make it even more useful for you. This document describes the policies and procedures governing the collection and processing of the information from the above-mentioned sources and in particular that through which an individual subject can be identified data and can be used to contact him. For the purposes of this document, it will be referred to as “Personal data” or “Personal information”.

Section 6 – How We Protect Your Personal Data: Pleggi is committed to protecting the personal data of Employers, representatives and contact persons in The platform. We work hard to maintain physical, electronic and procedural safeguards to protect Yours personal data. Your personal data is behind secure networks and is only accessible to a limited number of individuals who they have special rights to access our systems and are required to maintain the confidentiality of your personal data. IN addition, all the personal data you provide has gone through a process of pseudonymization (encryption) through technology "hedging" and "encryption". However, we pay special attention to the fact that there are also risks in providing personal information data, whether that data is given in person, by telephone, internet or other media. There is no system yet or technology that is completely safe and protected from "hackers". Pleggi has laid down the necessary reasonable maximum of efforts and has provided for appropriate measures to prevent and minimize the risks of unauthorized access, misuse and inaccuracies of personal data. Our Site is regularly scanned for security holes and known vulnerabilities to make your visit possible safest. We use SSL to protect communications between you and the Platform. We protect access tokens, used by the Platform, which could contain information sufficient to impersonate you, s cryptography with a public key of sufficiently large length, guaranteeing maximum security and unreadability at least in the next 10 years. Pleggi uses Amazon.com Services LLC (https://www.amazon.com/) (as colocation centers where deployed servers, network equipment, etc.). Pleggi warrants that Amazon.com Services LLC undertakes similar or at least on the same level as the poets from Pleggi defended. Amazon.com Services LLC solely stores and protects additionally on Pleggi's servers, it does not have access to your personal data on any legal basis. For more information about its protections can be found on their website or by contacting us at specified contact email.

Section 7 - The storage and processing of personal data: Pleggi does not buy personal data from intermediaries and other similar companies, nor does it sell personal data to Employers, representatives and/or contact persons. Pleggi does not use the Platform to make automated decisions, including towards Employers, Their representatives and contact persons within the meaning of the General Data Protection Regulation (GDPR). Pleggi on its own initiative (to the extent that it is informed of changes, incompleteness and inaccuracies in personal data, which processes) or at the request of Employers, will complete, edit or delete any incomplete, inaccurate or outdated personal information stored in connection with the operation of the Site. According to the current legislation, persons under the age of 14 cannot send information (quality like personal data) through the Site. The employer undertakes not to indicate such persons as contact persons and/or Representatives. The principles that guide us when working with personal data are: Legality, good faith and transparency; Limitation of objectives; Minimizing the data collected; Accuracy and timeliness of data; Integrity and confidentiality; Limitation of storage in order to achieve the objectives; Accountability.

Section 8 – How long we keep them: In order to provide maximally adequate services and fulfill its obligations to the National Agency for revenues, the Ministry of the Interior and other state and municipal bodies and to you, we store the personal You data for a period of up to 1 (one) year after ceasing to maintain your account in our system or for period no longer than legally required (which is longer unless there is a specified legal maximum) unless you no delete or request that we delete personal information about you earlier. The information related to correspondence, which we have kept is kept for a period of 6 months after receiving the last message on it. In the event of a legal dispute or proceeding requiring data retention and/or a request from a competent authority state authority, it is possible to retain data for longer than the specified periods until the final completion of the arising dispute or proceedings before all courts. The stated deadlines are subject to change in case it is established a different requirement to retain information under current legislation.

Section 9 - Data Subject Rights: Information - you have the right to know if and what personal data we have about you; Access to your personal data collected - you can request information from Pleggi about what personal data of yours we have and for what purpose we process and store them. We reserve the right to impose an administrative fee in case of excessive number of requests or suspected malpractice. As for excessive requests will we count more than 3 within a calendar week. These 3 requests must be satisfied, and for the fourth will be a fee in double the amount of the necessary consumables for the provision of the information; Correcting or completing your personal data - if your personal data is inaccurate, you can request that it be updated and aligned with objective reality; Deletion ("the right to be forgotten"): Pleggi will comply with Employers, representative/s and contact person/s wish to be forgotten - yes delete all non-anonymized information stored by us when: we no longer need the personal data for the purposes for which they were collected or processed; there is no longer a legal basis for the processing of personal data; if you object to the processing of your personal data; personal data has been stored unlawfully or must be deleted to comply with legislation. Pleggi reserves the right to refuse to delete personal data, in cases where it is justified by law or another reason for this. Limitation of processed information and its minimization: You have the right to ask us to restrict the processing of your data in the following cases: You dispute the accuracy of the personal data, for a period that will allow us to verify its accuracy; The processing is illegal, but you do not want the personal data to be deleted, but only to be used limited; We no longer need the personal data for processing purposes, but you require it for the establishment, the exercise or defense of your legal claims; You have objected to the processing pending verification of whether the controller has legal grounds precedence over your interests. Portability of personal data: If you have already given us consent to process your personal data or the processing is necessary for performance of the contract with Pleggi or if your data is processed in an automated way, you can after you authenticate yourself in front of us: To request that we provide you with your personal data in a readable format and transfer them to another administrator; To ask us to directly transfer your personal data to a controller you have specified, when this is the case technically feasible. Objection - you can object at any time to the processing of personal data by Pleggi, including if process for the purposes of profiling or direct marketing; Withdraw consent to the processing of your personal data - You can do this at any time; The person's right not to be subject solely to automated decision-making, including profiling by the meaning of the current legislation on personal data, if you do not want this. Pleggi does not use automated taking of decisions towards the Employers in its Platform. Rights in the event of a breach of the security of your personal data: If we detect a breach of the security of your personal data that may pose a high risk to your rights and freedoms, we undertake to notify you without undue delay of the breach, as well as of the measures we undertaken or about to undertake. You may not be notified if: We have already taken appropriate technical and organizational safeguards with respect to the data affected by the breach of security; We have subsequently taken measures to ensure that the breach will not result in a high risk to your rights; Notification would require a disproportionate effort. Data subjects have the right to complain to the relevant supervisory authority if they think their rights are being violated, under anytime. Coordinates of the supervisory authority can be found at

Section 2. You may exercise any of the above rights by contacting us at info@pleggi.com. We may ask you to verify your identity in order to verify a match to the person who wishes to exercise any right and the person who is the holder of the relevant personal data. What are Pleggi's rights: Pleggi reserves the right to change, modify, amend the Platform at any time, as for the material changes will notify Employers on the Platform by email and/or posting in an appropriate place on the Platform of notification. Pleggi may also deny access to the Site or its content without prior notice if refuse to accept this privacy policy, because without the information we require from you, the Platform will not can to perform the functions for which it was created.

Section 10 - With whom and why we share your personal data : Personal data provided by you will not be provided to third parties. If you provide personal data yourself, on your representative and/or contact person publicly, through the Platform you do so at your own risk. Data like name, last name, work phone and email of your representative(s) and/or contact person(s) will be visible to users on The Platform so that they can contact you if necessary in connection with positions that you have created.

Section 11 - How you can get full information about what personal data we hold about you: Information about the personal data we hold about you and the exercise of any other right hereunder You can get the policy by email: info@pleggi.com.

Section 12 - How you can ask us to forget you - to delete any personal data we hold about you and who we have no obligation under applicable law to keep: You can request all or part of the personal data related to you to be deleted (to be forgotten) at email : info@pleggi.com. On the Platform, it is possible to publish information about third parties, which contain links to others electronic pages (Third-party electronic pages). If you choose to visit any of these pages, such as use the links published on the Platform, you will be redirected to the page of the relevant third party country. Regardless of the fact that the link to the given electronic page is published on the Platform, You you reach the page by clicking on a link from the Platform and/or we offer you the opportunity to you interact (even if you provide personal data to) the third party, this in no way indicates the affiliation of Pleggi to the given third party. Accordingly, it should not be construed as an endorsement of their policies and practices for privacy and information security. By accepting this policy, you agree to everything, included in it. If you do not agree to these terms, you will not be able to use the Platform to its full potential. The changes in the current one policy will be posted here, in an appropriate place on the Platform, and you will also be sent an email which is possible and applicable. The changes take effect from the moment you agree to them. This Pleggi data privacy policy (statement) was published on 01.12.2022 and is last updated on 09.12.2022