Privacy policy

Using the website of Professional Care Marketing & Top Assistance EOOD is generally possible without providing any personal data. However, if a data subject wishes to use particular services of our company through our website, processing of personal data may become necessary.

Professional Care Marketing & Top Assistance EOOD takes the protection of your personal data very seriously and strictly observes the legal provisions when collecting, processing and using it - in particular the General Data Protection Regulation (GDPR) of the European Union and the Bulgarian Personal Data Protection Act (Zakon za zashtita na lichnite danni - ZZLD). The following statement explains how we safeguard your privacy and personal rights, and informs you under Art. 13 GDPR about the nature, scope and purposes of the collection and use of personal data on this website.

1. Controller

Professional Care Marketing & Top Assistance EOOD
Makedonia 8 Str, 6100 Kazanlak, Bulgaria
Email: info@careassistant.eu

2. Your rights as a data subject

Using the contact details of the controller given above, you may exercise the following rights at any time:

• information about the data we store about you and how it is processed (Art. 15 GDPR),
• rectification of incorrect personal data (Art. 16 GDPR),
• erasure of the data we store about you (Art. 17 GDPR),
• restriction of processing, where we are not yet permitted to erase your data because of legal obligations (Art. 18 GDPR),
• objection to the processing of your data by us (Art. 21 GDPR),
• data portability, where you have consented to the processing or concluded a contract with us (Art. 20 GDPR).

Where you have given us consent, you may withdraw it at any time with effect for the future.

3. Purposes and legal bases of processing

We process your personal data only for the purposes named in this privacy policy. Your personal data is not passed on to third parties for purposes other than those stated. We only pass your personal data to third parties if:

• you have given your explicit consent (Art. 6(1)(a) GDPR),
• the processing is necessary to perform a contract with you or to take pre-contractual steps (Art. 6(1)(b) GDPR),
• the processing is necessary to fulfil a legal obligation to which we are subject (Art. 6(1)(c) GDPR),
• the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in your data not being passed on (Art. 6(1)(f) GDPR).

4. Erasure or blocking of data

We follow the principles of data avoidance and data minimisation. We therefore store your personal data only for as long as is necessary to achieve the purposes named here, or for as long as the statutory retention periods require. Once the respective purpose no longer applies or those periods expire, the corresponding data is routinely blocked or erased in accordance with the law.

5. Collection of general information when you visit our website (log files)

When you access our website, information of a general nature is automatically recorded by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and similar details. This is exclusively information that does not allow any conclusions to be drawn about you personally.

It is processed in particular for the following purposes:

• ensuring the website connects without problems,
• ensuring our website can be used smoothly,
• evaluating system security and stability, and
• other administrative purposes.

The processing is based on our legitimate interest (Art. 6(1)(f) GDPR) arising from the purposes of data collection named above. We do not use your data to draw conclusions about you personally. The recipients of the data are only the controller and, where applicable, IT service providers acting as processors.

6. Contact form and email contact

If you contact us by email or through the contact form with questions of any kind, we process the details you provide voluntarily in order to deal with your enquiry and any follow-up questions. For this, a valid email address and your name are required so that we can assign and answer the enquiry.

Processing for the purpose of making contact takes place either on the basis of your consent (Art. 6(1)(a) GDPR) or in order to take pre-contractual steps (Art. 6(1)(b) GDPR). Once your enquiry has been dealt with in full, the personal data is deleted automatically, unless statutory retention obligations prevent this.

7. Care questionnaire

When the care questionnaire is completed for the use of our personalised placement and care services, personal data is collected (for example name, address, contact details such as telephone number and email address, and any details necessary for the service).

This data is collected and processed on the basis of Art. 6(1)(b) GDPR in order to take pre-contractual steps or to perform a contract. Where health data or other sensitive data is collected in the questionnaire, this is done exclusively on the basis of your explicit consent under Art. 9(2)(a) GDPR. We are glad to correct or erase this data at your request, as long as no statutory retention obligations prevent it.

8. SSL encryption

To protect the security of your data during transmission, we use encryption methods that correspond to the current state of the art (for example SSL/TLS) over HTTPS.

9. Use of Google Analytics

This website uses Google Analytics, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses so-called “cookies”, which allow your use of the website to be analysed.

Legal basis and withdrawal: Google Analytics is used exclusively on the basis of your explicit consent (Art. 6(1)(a) GDPR), which you give through our cookie consent banner. You can withdraw this consent at any time with effect for the future through the cookie settings on our website.

Because IP anonymisation is activated on these pages, your IP address is shortened by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

You can prevent the collection of the data generated by the cookie by downloading and installing the browser plug-in available at the following link: Browser add-on to disable Google Analytics.

10. Data transfers to third countries (USA)

Some of the service providers we use (such as Google and Meta/Facebook) have their headquarters in the USA. Data is transferred to the USA on the basis of the EU-US Data Privacy Framework (DPF). The providers named are certified under the DPF, which ensures a level of data protection adequate to EU standards. Where in individual cases a subcontractor does not hold DPF certification, the transfer is safeguarded by concluding the European Commission’s Standard Contractual Clauses (SCC).

11. Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements, or in order to reflect changes to our services - for example when new services are introduced. The new privacy policy will then apply to your next visit.