Privacy Notice

This Privacy Notice contains information regarding the collection and processing of your personal data by “Americaneagle.com” EOOD.

Contact Details and General Information

Contact Details

General Information About the Controller

“Americaneagle.com” EOOD is a global full-service digital agency providing web design and development, integrations, strategic consulting, hosting services, digital marketing, support, and maintenance of comprehensive online solutions.

The company develops software products and their distribution and/or sale, carries out domestic and foreign trade activities, consulting services, maintenance of internet space and websites, remote system administration, and services provided electronically.

For more than 25 years, our unmatched experience has been consistently recognized by a wide range of the most prestigious organizations in our industry.

What Personal Data We Process and Why We Collect It

“Americaneagle.com” EOOD processes your personal data for the following purposes:

When Applying for a Job

Names, address, mobile phone number, email address, Unified Civil Number (USN), information regarding completed level and degree of education, work experience, completed courses, knowledge, acquired skills, and other personal data required for the advertised vacant position, as contained in the CV submitted by the candidate.

Legal basis: taking steps at the request of the job applicant prior to entering into an employment contract (Art. 6(1)(b), second proposal of the GDPR).

Upon Conclusion, Performance and Termination of an Employment Contract

Names, Unified Civil Number (USN), diploma for completed secondary or higher education, specialty, address, bank account number, email address, phone number, photo, sick leave certificates, medical certificate, total work experience, professional experience, names, date of birth and USN of child, name, date of birth and UCN of spouse, emergency contact person and phone number Official Certificate of Taxable Employment Income, performance improvement plan, and others.

Legal basis: Processing is necessary for the performance of a contract to which you are a party (Art. 6(1)(b), first proposal GDPR); processing for occupational medicine purposes (Art. 9(2)(h) GDPR); and compliance with a legal obligation (Art. 6(1)(c) GDPR) applicable to “Americaneagle.com” EOOD.

Accounting Purposes

Full name, Unified Civil Number (UCN), address, education degree and specialty, total work experience and professional experience, bank account number, sick leave certificates, maternity declarations, TEMC (Territorial Expert Medical Commission) / NEMC (National Expert Medical Commission) decisions, official notes under the Personal Income Tax Act, statements of paid amounts under civil contracts, report under Art. 73 of the Personal Income Tax Act.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and compliance with a legal obligation (Art. 6(1)(c) GDPR).

Video Surveillance

Images.

Legal basis: Prevention, reduction, detection and/or investigation of violations of internal company rules or incidents (Art. 6(1)(f) GDPR); protection of life and health of employees (Art. 6(1)(d) GDPR); protection of company property (Art. 6(1)(f) GDPR); assisting investigation or proving alleged violations or crimes (Art. 6(1)(c) GDPR).

Purposes of Collecting and Processing Your Personal Data

We process your personal data for the following purposes:

  • Conducting a lawful and transparent recruitment and selection process;
  • Conclusion, performance, and termination of a contract with you;
  • Accounting purposes;
  • Purposes determined by the legislation of the Republic of Bulgaria.

Storage of Personal Data and Retention Period

Your personal data are collected, processed, and stored in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), the Personal Data Protection Act, and applicable legislation. The period for which "Americaneagle.com” EOOD retains your personal data is either legally prescribed or no longer than necessary to achieve the purposes for which the personal data were collected.

Personal data of unsuccessful job applicants are retained for up to six (6) months after the completion of the recruitment procedure. If the applicant wishes their personal data to be stored for a longer period for the purpose of participation in future recruitment processes, the applicant must provide their consent.

We guarantee that we will take all foreseeable technical and organizational measures to ensure the protection of your data against unauthorized access.

Your Rights Under the GDPR

Right of Access

You have the right to obtain confirmation from "Americaneagle.com" EOOD as to whether your personal data is being processed, and if so, you have the right to access the processed personal data and to receive a copy of the personal data that are being processed.

Right to Rectification

You have the right to request correction of inaccurate or outdated personal data.

Right to Erasure (“Right to be Forgotten”)

You have the right to request that "Americaneagle.com" EOOD delete your personal data without undue delay, and we have the obligation to erase the personal data without undue delay when the request for deletion meets the requirements of the GDPR.

“Americaneagle.com" EOOD may refuse erasure where processing is necessary:

  • For exercising the right to freedom of expression and information.
  • For compliance with a legal obligation requiring processing under EU law or the law of a Member State applicable to the controller, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • For reasons of public interest in the area of public health;
  • For archiving purposes in public interest, scientific or historical research purposes, or statistical purposes;
  • For the establishment, exercise, or defense of legal claims.

Right to Restriction of Processing

You have the right to request restriction of processing where:

  • You contest the accuracy of the personal data, for a period enabling the company to verify the accuracy of the personal data; or
  • The processing is unlawful, but you do not wish the personal data to be erased and instead request restriction of their use; or
  • “Americaneagle.com” EOOD no longer needs the personal data for the purposes of processing, but you require the data for the establishment, exercise, or defense of legal claims; or
  • You have objected to the processing pending verification whether the legitimate grounds of the company override your interests.

Right to Data Portability

You may obtain your processed data at any time or request transfer to another controller.

Right to Object

You have the right to object to processing by stating your grounds.

Right to Lodge a Complaint

You have the right to lodge a complaint regarding the processing of your personal data or the violation of your rights related to personal data protection, either through administrative proceedings before the competent supervisory authority – the Commission for Personal Data Protection – or through judicial proceedings before the competent administrative court.

Commission for Personal Data Protection:

Right to Notification in Case of Personal Data Breach

In the event of a breach of the security of your processed personal data, and where the breach is likely to result in a high risk to your rights and freedoms as a data subject, “Americaneagle.com” EOOD shall inform you about the specific breach without undue delay.

Right to Withdraw Consent

Where you have given your consent for the processing of your personal data, you have the right to withdraw that consent at any time.

The processing of personal data carried out prior to the withdrawal of consent remains lawful, and the withdrawal applies only to future processing of personal data.

Right Not to Be Subject to Automated Decision-Making

We do not carry out automated decision-making. Profiling within the meaning of Article 4(4) of the GDPR is also not performed. If in the future we introduce automated decision-making, including profiling, you will be informed in advance. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.

Exercising Your Rights

You may exercise your rights:

  • In person by submitting a written application using our template;
  • Electronically via email. In this case, your request must contain the information specified in Article 37v of the Personal Data Protection Act, including your Personal Identification Number (EGN). The request must be prepared as an electronic document within the meaning of the Electronic Document and Electronic Trust Services Act and signed with a qualified electronic signature (QES) in PKCS #7 MIME Message (.p7m) format. The request must be submitted from the email address contained in the issued qualified certificate of the electronic signature for a natural person.

Sharing of Personal Data

  • “Americaneagle.com” EOOD may transfer your personal data to individuals or legal entities with which we have entered into a contract. (for example, external service providers such as IT support providers, law firms, medical specialists, insurance companies, and banking institutions).
  • “Americaneagle.com” EOOD has a legal obligation to provide your personal data to public authorities and institutions.
  • “Americaneagle.com” EOOD may also transfer your personal data to public authorities for the purposes of the prevention, investigation, detection, or prosecution of criminal offenses.

Transfer of Personal Data to Third Countries

The sole owner of the capital of the single-member limited liability company "Americaneagle.com" EOOD is “Svanaco, Inc.,” a company incorporated and existing under the laws of the United States of America, registered with the Illinois Secretary of State, USA, under number 5249-591-1, with its registered office and management address at 2700 S. River Road, Des Plaines, Illinois, USA.

As an affiliated entity, “Svanaco, Inc.” receives information containing personal data related to the activities of "Americaneagle.com" EOOD In this regard, "Americaneagle.com" EOOD carries out data transfers to the USA.

The transfer of personal data to the USA is carried out fully in compliance with the law, in accordance with the requirements of Chapter V of Regulation (EU) 2016/679, and more specifically based on Article 45 of the General Data Protection Regulation. The data transfer is based on the decision regarding an adequate level of protection —  Commission Implementing Decision (EU) 2023/1795 of 10 July 2023, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, regarding an adequate level of protection of personal data in the EU-US Data Privacy Framework.

By adopting a decision on an adequate level of protection, personal data may be freely transferred from the EEA to third countries without requiring additional safeguards; that is, such transfers are considered equivalent to internal transfers within the EEA.

The decision regarding an adequate level of personal data protection for the United States of America is publicly available on the official website of the supervisory authority in the Republic of Bulgaria - the Commission for Personal Data Protection at: www.cpdp.bg.

"Americaneagle.com" EOOD does not carry out data transfers to international organizations.

View this policy in Bulgarian. | Запознайте се с тази политика на български език.