Privacy Statement
Privacy Statement Regarding the Processing of Personal Data
This Privacy and Personal Data Protection Statement of Dalsia (“Privacy Statement”) is based on the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“Regulation (EU) 2016/679”).
This Privacy Statement concerns your personal data processed by Dalsia for the purpose of providing you with services in accordance with the Organization’s scope of activity. It also applies to the personal data processed on Dalsia’s website
www.dalsia.com
The purpose of this Privacy Statement is to explain clearly and understandably why and how we process and protect your personal information.
Who we are and how to contact us
Dalsia OOD
Sofia 1618
85 Baxton Blvd.
Tel.: +359 2 9155 701
To contact our Data Protection Officer, you may send an email to:
gdpr@dalsia.com
, or send regular mail or courier to:
Dalsia Ltd., 85 Baxton Blvd., 1618 Sofia, Bulgaria — addressed to the attention of the Data Protection Officer of Dalsia.
What personal data we collect and process
We process your personal data lawfully, fairly, and transparently, in accordance with applicable legislation. We collect only the minimum amount of personal data required for the purposes for which they are needed.
As a data controller, and in some cases a data processor, Dalsia strives to ensure an adequate level of protection for its customers’ personal data and to process them in compliance with applicable laws.
Depending on specific purposes and legal grounds, Dalsia collects and processes the following data independently or in combination:
Data provided by you necessary for identification and fulfilment of contractual obligations: name, Personal Identification Number (EGN), date of birth, address, telephone, email, subscriber number with the district heating company;
Data provided via our online platform during registration and form submissions: names, address, telephone, email, IP addresses, logs, cookies;
Data provided through letters, complaints, requests, feedback, and other correspondence;
Video recordings — captured in the course of security activities to protect customers and employees in Dalsia’s offices and to improve service quality.
Dalsia processes personal data in various ways. As a data controller, Dalsia uses personal data solely for the provision of contracted activities, customer service, feedback, and marketing purposes. Advertising use of the data is possible only for our own market research, analysis, and advertising activities. We do NOT provide personal data to third parties without your explicit consent, unless required by law or necessary to protect the Company’s legitimate interests.
As a data processor, personal data may be provided to Dalsia by district heating companies, water utilities (when legally permitted), individuals and legal entities and/or their authorized representatives, persons authorized by homeowners’ associations, as well as in response to requests from public authorities.
Purposes and legal grounds for processing your personal data
Dalsia processes your data for the following purposes:
To fulfil contractual obligations and provide services, as well as to manage customer relationships for services delivered by Dalsia;
To perform the service of heat cost allocation and customer service related to it, in compliance with legal and contractual obligations under the Energy Act, the Heat Supply Ordinance, and the General Terms of district heating companies, as well as contractual obligations to which the relevant person or entity is a party. Personal data processing is also required to comply with tax and accounting legislation;
To create and manage a profile on our corporate website and online services;
To protect Dalsia’s legitimate interests, including legal claims or defense against claims.
When processing personal data, we adhere to the principles of:
lawfulness, fairness, transparency; purpose limitation; data minimization; accuracy and currency; storage limitation; confidentiality; and appropriate data security.
How long we store your personal data
Dalsia must store the necessary personal data for the duration of contractual relationships with us, with district heating/water utility companies, and/or with consumers of heat energy and recipients of heat cost allocation services, in accordance with statutory limitation periods. In cases of ongoing legal or complaint proceedings, data may be stored for a longer period as needed.
Personal data are destroyed when legal or contractual grounds for processing cease to exist, following prescribed procedures and appropriate security measures. You may withdraw your consent when processing is based solely on your consent.
Categories of third-party recipients
In accordance with Regulation (EU) 2016/679, Dalsia may disclose personal data only when necessary for performing assigned activities and only when a written agreement and guarantees ensure that processors comply with all legal data protection obligations.
Personal data may be provided to data controllers and processors such as: district heating companies, state authorities, and contractors performing activities on our behalf (courier services, metrological checks, IT services, lawyers, etc.).
Dalsia takes all necessary measures to ensure that data processors strictly comply with data protection laws and instructions, and that they apply appropriate technical and organizational security measures.
Security measures for protecting personal data
We are committed to guaranteeing the security of personal data by applying appropriate:
organizational measures;
technical and physical protection measures;
information system and network protection;
personal security measures;
regulatory and administrative measures.
Regular reviews of all data processing procedures, rules, and system security measures are conducted.
Your rights regarding the processing of your personal data
As a customer, you have the following rights regarding your personal data:
Right to be informed;
Right of access to your personal data;
Right to rectification (correction of inaccurate data);
Right to restrict processing;
Right to data portability;
Right to erasure (“right to be forgotten”) when legal grounds exist;
Right to object to processing.
To exercise your rights, Dalsia may request identification by presenting an ID document to our employee.
The conditions for exercising these rights are laid out in Chapter III (Articles 12–23) of the Regulation.
You also have the right to judicial or administrative protection if your rights are violated. You may submit a complaint to the local supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP):
Sofia, 2 Prof. Tsvetan Lazarov Blvd.
Tel.: +359 2 91-53-515, +359 2 91-53-519
Email:
kzld@cpdp.bg