Privacy Policy

General Information A new Data Protection Regulation (General Data Protection Regulation), adopted by the European Union, came into effect on 25 May 2018. The regulation aims to ensure the protection private entities’ data of all EU Member States and to harmonize the regulations for their processing. “Yara Bulgaria” Ltd, in its capacity of a data controller of personal data on providing “Agro Office” ® software and hardware products and services to end customers, hereinafter referred to as “Provider”, meets all the requirements of the new Regulation, as collecting only the persons’ data insofar as it is necessary for the provision of the service, and shall keep them responsibly and legally. Information about the Privacy Data Controller Name “Yara Bulgaria” Ltd UIC/BULSTAT: 204081311 Headquarters and registered office: city of Varna, No.115 Osmi Primorski Polk Str. Address for activity operation: city of Varna, No.115 Osmi Primorski Polk Str. Correspondence data: city of Varna, No.115 Osmi Primorski Polk Str. E-mail: info@agro-office.com Telephone: +359 52 60 15 18 Information about the Data Protection Officer Name/ Company name: UIC / PIN: Headquarters and registered office: Correspondence data: Telephone: E-mail: Information on the competent Supervisory Authority Commission for Personal Data Protection Headquarters and registered office: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Data for correspondence: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Telephone: 02 91 53 518 Email: kzld@government.bg, kzld@cpdp.bg Website: www.agro-office.com “Yara Bulgaria” Ltd operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and the Council dated 27 April 2016 on the protection of private entities regarding the processing of personal data and on the free movement of such data. Reason for collecting, processing and keeping of your personal data Art. 1. (1) “Yara Bulgaria” Ltd collects and processes your personal data in connection with the provision of “Agro Office”® software and hardware products and services related to precision fertilization systems Yara N-Sensor and Yara N-Tester, soil and leaf analyzes and recommendations – Megalab and the precision farming range of AgLeader and contracting with the company on the grounds of Art. 6,paragraph 1, Regulation (EU) 2016/679, and in particular on the basis of the following:

Explicitly obtained your consent as a customer;
“Yara Bulgaria” Ltd execution of the obligations in accordance with the contract with you;
Compliance with a legal obligation that is applied to “Yara Bulgaria” Ltd;
For the purpose of “Yara Bulgaria” Ltd legitimate interest.

(2) “Yara Bulgaria” Ltd is the data controller of personal data concerning your data as users of our services. In relation to the personal data you process using our services, “Yara Bulgaria” Ltd acts in its capacity of processing personal data. Aims and principles of collecting, processing and storing your personal data. Art. 2. (1) Upon conclusion of a contract with a commercial partner we collect and process personal data about the names of the legal entity’s legal representative – a party to the contract, for the purposes of individualization of the party under the contract and its performing. (2) The legal representative’s contact details or the contact person are official information and as such it is not considered as personal data. (3) Upon conclusion of a contract with a partner – private entity, we collect and process personal data about the full names, a personal identification number, for the purposes of individualization of the party to the contract and its execution. Art. 3. (1) We collect and process the personal data that you provide us by applying for a job position in “Yara Bulgaria” Ltd, including for the following purposes:

individualization of the applicant;
making contact with you and communication conducting;
selecting candidates.

(2) We keep your personal data you have provided us for the entire period of the job announcement, and in case that we would like to continue keeping your data after this period for the purpose of further communication with you, we shall send you a request by e-mail, in order to receive your explicit consent that your data to be stored. Art. 4. (1) “Yara Bulgaria” Ltd collects and processes the personal data you provide us in connection with the use of our services and for the conclusion of a contract with the company, including for the following purposes:

Creating a profile and providing full functionality in providing our services;
Individualization of a party to the contract;
Accounting purposes;
Statistical objectives;
Protection of information security;
Ensuring the implementation of the contract for the provision of the respective service;
Sending informational messages, messages for changes in the service, recommendations to improve the platform using;
Customer Service: The provider has the right to access a set of your non-anonymous data, in order to provide by the contract the specific service and to perform orders for products or services, as well as other services related to your order such as product delivery, support , warranty service, leasing, etc.;
Product and customer support: support providing, including monitoring and managing the products availability that you purchase, delivering improvements and product improvement of the program communications, as well as diagnostics and repair, product safety and reminders, if needed;
Marketing: providing quotations for products and services by us or our merchants, suppliers and partners, including quotations based on your interest, personal and business characteristics, as well as location;
Researches and promotional events: for administration of sociological surveys, inquiries, lotteries, competitions, loyalty programs and other promotional events;
Right of Participation: To determine whether you are entitled to certain products, services or quotations;
Communications: Providing information that may be of interest to you, such as product news, company magazines, catalogs, announcements, reminders and technical newsletters;
Managing our daily business needs: such as payment processing and financial account management, product development, product safety, contract management, website administration, web forum management, order execution or contracts, analyzes, prevention fraud, corporate govmanagement, , reporting and compliance the laws.

(2) We comply with the following principles upon processing your personal data:

Legitimacy, diligence and transparency – processing in the presence of a legal basis, upon due diligence and informing the data subject presenting;
Purposes limitation – collecting data for specific, explicit and legitimate purposes and prohibiting further processing in a manner incompatible with these purposes;
Data minimization – the data should be appropriate, relevant and limited to what is necessary for the purposes of the processing;
Accuracy – keep up-to-date and take all reasonable steps to ensure timely erasure or correction of inaccurate data, taking into account the purpose of the processing;
Storage limitation – data must be processed for a minimum duration period according to objectives. Their keeping for longer periods is acceptable for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, provided that technical and organizational measures are appropriate.
Entirety and confidentiality – processing in a way that ensures an appropriate level of personal data security by applying the technical or organizational measures which are appropriate;

(3) Upon processing and keeping the personal data, “Yara Bulgaria” Ltd may process and keep personal data in order to protect its following legitimate interests:

fulfilling its obligations to the National Revenue Agency, Ministry of the Interior and other state and municipal authorities.

What types of personal data “Yara Bulgaria” Ltd collect, process and store? Art. 5. (1) “Yara Bulgaria” Ltd processes the following categories of personal data and information for the following purposes and on the following grounds:

Your individualization data (name and family name, phone number, username, post address, e-mail address, and your preferred language);
Relationship information that helps us understand who you are and what you need, in order to offer products and services that are exactly for you in a manner that is in your interest, such as property, farm or business information, your location (at work), as well as other demographic information;
Information about transactions, how you interact with us, our merchants and business partners, including purchases made, queries, and customer accounts.
Financial profile information that is needed to complete your purchase, such as company data, Bulstat, legal representative, etc.;
Machine data – these are data generated by the usage, collected or kept in your equipment or hardware (e.g. server), mobile or other electronic device interacting with your equipment, as well as data input through another system interface (e.g., interface or application development interface, etc.). Machine data includes location of the equipment, number of engine hours, usage data (such as fuel used: service history, humidity, block boundaries, documentation cards, etc.)
Data collected by “Agro Office”® software and hardware products such as Geographical location of agricultural land; arable area; cultivated crops; Megalab soil and leaf analysis (leaf and soil samples); element contents; ratio between soil elements; pH; EC; organic matter; soil structure; fertilization recommendation on the basis of analyzes; results of the N-Sensor measurements; biomass index; fertilizing standards; used fertilizing products; results of N-Tester measurements; contents of Nitrogen in crop during the N-Tester measurement; recommendation for nitrogen fertilization based on the measurement performed; prime cost per unit area (Ares); type of machines and inventories, etc.
Other data processed by “Yara Bulgaria” Ltd – upon entering our website or in your profile, “Yara Bulgaria” Ltd collects data about the used IP address. This processing is necessary for the performance of a contract by which the data subject is a party – Art. 6, paragraph 1, b. (b) of the GDPR. Until the creation of a user profile, the IP address is collected on the basis of the data controller’s legitimate interests – Art. 6, paragraph 1, b. (e) by GDPR.
Your Personal Invoice Data (for private entity) – If you would like to be issued an invoice in your capacity of private entity, you should provide your personal identification number. The purpose for which the data is collected is the issue of an invoice for making payments under a contract for the provision of services.

(2) We may process and/or keep information from external systems (such as Google Maps, Microsoft Bing Maps, etc.) or to link the information to provide you with the services you have requested (3) If it is offered as a service or as a function improvement, we may collect the information on your behalf for the purpose of providing the service, by means of GSM technology – location data, as well as points, journals and/or borders. You should be aware that you can only use geolocation systems to track a person’s position, but only if the person has previously given written consent about. (4) For mobile applications that depend on devices or operating system specifics, our mobile application has access to:

Approximate location (web based);
Exact location (GPS and web based);
Change or delete contents from your USB memory;
Read the contents on your USB memory;
Show Wi-Fi connections;
Display network connections;
Full network access;
Bluetooth connection information;
Bluetooth settings;
Bluetooth compatibility;
Connect and terminate the Wi-Fi connection;
Changing system settings;
Starting on switching on;
Invalid locations;
Vibration control;
Protect the device from “falling asleep”.

How do we collect information and data? Art. 6. (1) We collect personal data and information directly from you. We will ask you for Personal Information (e.g., Information Link and Relationship Information) when you contact us, as well as when you make registration on our site or make a purchase. We can collect additional information from third parties, information providers that enrich our files and help us understand our customers more easily, or through social networks like Facebook, if you “Like” our pages or join our groups. We also collect personal information when you use our mobile application or contact us about customer services. (2) By our supervised partners, dealers and other business partners – when you buy or rent a product, we collect personal information (e.g., transaction information and account financial information) from our dealers and financial partners. We may also collect personal information by any third parties (the Commercial Register) to finalize your purchase. (3) From our website – if you contact us online, we use “Cookies” and other technology tools to collect information about your computer, our site and applications usage. We treat this information as personal when it is associated with the contact information. For more details on “Cookies” and other technologies, please have a look at the sections “Cookies” and “Related Technologies” below. (4) From your device – if your settings allow it, we collect machine data from your devices using wireless data transfer technologies. We can also get your location information from your smart phone or other geo-location devices. We accept it as personal information and associate it with the contact information. How do we store information and data and what is our storage policy? Art. 7. Your data is stored on our servers centrally located at the corporate level, in Bulgaria and Romania, subject to confidentiality, non-disclosure and contractual arrangements. Unless you request removal of our access and use of personal information or machine data, the data shall be stored provided that such data storage complies with all applicable laws and regulations in the territory of which it is kept. We have the right, but not the obligation, to keep the data indefinitely, or to erase any such data after expiry of the storage periods specified in the terms of use of our products or in the contract with you, provided that the storage of the data is in accordance with all applicable laws on the territory of which it is stored. You acknowledge and agree that data once deleted from the server(s) cannot be recovered or recreated again. “Cookies” and similar technologies Art. 8. (1) When you visit our site or use our mobile applications, we collect certain information through automated means using technologies such as “Cookies”, pixel tracking, browser analysis tools, server logs, and web beacons. By visiting our site, you accept the use of cookies. For example, when you visit our site, we put “Cookies” on your computer. “Cookies” are small text files that web sites send to your computer or other device connected to the Internet to uniquely identify your browser or store information or settings in the browser itself. The “Cookies” allow us to recognize you when you return. They also help us to provide a more personalized practical work and enable us to detect some types of fraud. (2) We use the so-called “Flash Cookies” (also known as “Local Stored Objects), “Microsoft Silverlight” and similar technologies to personalize and enhance your online experience. Adobe Flash Player is an application that allows the quick development of dynamic content such as video clips and animations. Flash “Cookies” (and similar applications) use the technology to store settings, preffered and used, similar to “Cookies” in the browser, but they are managed by another interface different than that provided by your web browser. To manage Flash and Silverlight cookies, please take a look at the Adobe and Microsoft websites. (3) Pixel tags and web beacons are small graphic images placed on the pages of the website or in our emails that allow us to determine if you have made a specific action. When you access these pages, open them or click email, pixel tags and web beacons generate a notification for this action. These tools allow us to measure the responsiveness of our communications and improve our web pages and promotions. Art. 9. (1) We collect many different types of information from “Cokies” and other technologies. For example, we may collect information from the device you use to access our website, depending on your operating system, browser type, domain, and other system settings, as well as the language used by the system, country and time zone where the device is located. Our server logs can also record IP addresses or a derivative of the device you use to connect to the Internet. An IP address is a unique identifier that devices communicate with each other over the Internet. We can also take information about the website you visited before ours and the one you visited afterwards. (2) In many cases, the information we collect by using “Cookies” and other tools are used only in an unidentified manner, without reference to details of personal information. For example, we use the information we collect for site visitors to optimize our sites and understand the site traffic trends. (3) In some cases, we associate the data we collect by using “Cookies” and other technologies with your personal information. Additionally, if the settings of your discoverable mobile device allow the mobile application to collect location information, it shall be automatically collected. This privacy statement arranges how we use all this information when associating it with your personal information. Art.10. We have a relationship with third-party advertising companies for tracking and reporting features for our web processing. These third-party advertising companies may place “Cookies” on your computer to display relevant advertisements for you. These third-party advertising companies should not collect personal information in this process, and we do not provide them such information. Reason for processing your personal data Art.11. (1) By accepting the general terms and conditions and registration on the website and purchasing a service, between “Yara Bulgaria” Ltd and you a contractual relationship is creating, on which basis we process your personal data – art. 6, paragraph 1, b. (b) GDPR. (2) Your personal data are processed on the basis of your consent – Art. 6, paragraph 1, b. (b) GDPR. Art. 12. (1) “Yara Bulgaria” Ltd performs the following operations with the personal data provided by you as job applicants for the following purposes:

Concluding and fulfilling an employment or civil contract: For the selection of job applicants, we process the personal data you have sent in your CV.

(2) “Yara Bulgaria” Ltd does not collect and process personal data that referring the following when:

it shows racial or ethnic origin;
it shows political, religious or philosophical beliefs, or membership of trade-union organizations;
it shows genetic and biometric data, health data, or data on sexual life of sexual orientation.

(3) The personal data are collected by “Yara Bulgaria” Ltd from the persons to whom they refer. (4) The Company does not take automated data decision. (5) The Company does not process data for persons under 16 years except with the explicit consent of their parents or representatives. Period of your personal data storage Art. 13. (1) “Yara Bulgaria” Ltd keeps your personal data for the period of the existence of your account, and upon your express consent your personal data may be stored further for……. years. Upon expiration of this period, “Yara Bulgaria” Ltd shall undertakes the necessary cares to erase and destroy all your data without undue delay. (2) “Yara Bulgaria” Ltd informs you in case the data storage period needs to be extended in order to meet the objectives, performance of the contract, in view of the legitimate interests of “Yara Bulgaria” Ltd or otherwise. (3) „Yara Bulgaria” Ltd keeps your data provided by consent by its explicit withdrawal, and this does not affect any publications and comments made in order to preserve the meaningful integrity of the comments. (4) “Yara Bulgaria” Ltd keeps the personal data that it is required to keep under the applicable law for the relevant term, which may exceed the term of your registration. Art.14. (1) “Yara Bulgaria” Ltd keeps your personal data as a job applicant for a period no longer than a current job offer, published on our website or elsewhere. Upon expiration of the notice or completion of the selection, “Yara Bulgaria” Ltd takes the necessary care to erase and destroy all your data without undue delay or to make them anonymous (i.e. to bring them in a form that does not reveal your personality), unless you expressly agree that your data shall continue be stored and processed for future reference. (2) “Yara Bulgaria” Ltd keeps the personal data of the legal representatives of the legal persons – parties to the contract or the private entities-partners under contract with the company indefinitely, in order to preserve the legitimate interest of “Yara Bulgaria” Ltd and to fulfill its legal obligations to the state authorities and institutions. “Tell a Friend” Function Art.15. We offer the “Tell a Friend” function on our sites. If you choose to use this feature, we shall automatically send to your friend a single e-mail with the information you provide and an invitation from you to visit our site. We use this information solely for the purpose of this one-time email and we do not store the information. Transferring your personal data for processing Art. 16. (1) “Yara Bulgaria” Ltd may, at its own discretion, transfer all or part of your personal data to processors for the purposes of processing in compliance with the requirements of Regulation (EU) 2016/679. (2) “Yara Bulgaria” Ltd notifies you in case of intent to transfer all or part of your personal data to third countries or international organizations. Your rights upon collection, processing and storage/keeping of your personal data A Consent withdrawal to process your personal data Art. 17. (1) If you do not like all or part of your personal data continuation to be processed by “Yara Bulgaria” Ltd for concrete or all processing purposes, you may at any time withdraw your consent to processing by filling in the form in your account or by request written in free text. (2) “Yara Bulgaria” Ltd may ask you to certify your identity and identity with the person to whom the data relate. (3) By your withdrawal of consent for personal data processing that is required to create and maintain your registration for using the services, your account shall become inactive. Right of access Art. 18. (1) You have the right to request and obtain from “Yara Bulgaria” Ltd a confirmation whether the personal data relating to you are being processed. (2) You have the right to access the data related to it as well as the information relating to the collection, processing and storage of your personal data. (3) “Yara Bulgaria” Ltd provides you with a copy of the processed personal data relating to you on request in electronic or other appropriate form. (4) The provision of access to the data is free of charge but “Yara Bulgaria” Ltd. reserves the right to impose an administrative fee in case of repeatability or excessive demand. Right of correction or filling in Art. 19. You may correct or fill in inaccurate or incomplete personal data relating to you directly through your website profile or by requesting to “Yara Bulgaria” Ltd. Right for delete (“to be forgotten”) Art. 20. (1) You have the right to request from “Yara Bulgaria” Ltd the deletion of the personal data related to you and Yara Bulgaria Ltd has the obligation to delete them without undue delay when there is any of the following reasons:

personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
You object to the processing of your related personal data, including for the purposes of direct marketing, and there are no legitimate grounds for processing that have an advantage;
personal data has been illegality processed;
personal data must be deleted to comply with a legal obligation under EU law or the law of a Member State that applies to “Yara Bulgaria” Ltd;
personal data have been collected in connection with the provision of information society services.

(2) “Yara Bulgaria” Ltd is not obliged to delete the personal data if it is stored and processed:

for the exercise of the right to freedom of expression and the right to information;
Compliance with a legal obligation that requires treatment provided by EU law or the law of the Member State applicable to the Data controller or for the performance of a public interest task or the exercise of official authority conferred on him;
for reasons of public interest in the field of public health;
for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
for the establishment, exercise or protection of legal claims.

(3) In order to exercise your right of “to be forgotten”, you should submit a request through the option in your account or a written request sent to “Yara Bulgaria” Ltd, as well as to certify your identity and identity with the person to whom they relate the data before “Yara Bulgaria” Ltd. by presenting your identity card for the identification purposes and, if necessary, enter your login data in the profile of the person to whom the data relate to an officer of “Yara Bulgaria”” Ltd. (4) “Yara Bulgaria” Ltd. does not delete the data, which has a legal obligation to store, including for protection against claims against him/her or proving his / her rights. Right of limitation Art. 21. You have the right to require “Yara Bulgaria” Ltd to limit the processing of your related data when:

contest the accuracy of personal data for a period that allows “Yara Bulgaria” Ltd to verify the accuracy of personal data;
the processing is illegal, but you do not want your personal data to be erased, but only to limit their use;
“Yara Bulgaria” Ltd. no longer requires personal data for the purposes of processing, but you require them to establish, exercise or protect your legal claims;
You have reproached the processing pending verification that the legal grounds of “Yara Bulgaria” Ltd have an advantage over your interests.

Right of portability Art. 22. (1) You may at any time download the data that is stored and processed for you in connection with the use of the services of “Yara Bulgaria” Ltd directly through your account or by e-mail request. (2) You may request “Yara Bulgaria” Ltd to transfer your personal data directly to an data controller shown by you when it is technically feasible. Right to receive information Art. 23. You may request from “Yara Bulgaria” Ltd to inform you of all recipients to whom personal data for which correction, erasure, or limitation of processing has been requested were disclosed. “Yara Bulgaria” Ltd may refuse to provide this information if this would be impossible or would require disproportionate effort. Right of objection Art. 24. You may at any time object to the processing of personal data by “Yara Bulgaria” Ltd that apply to you, including whether processed for profiling or direct marketing purposes. Other rights Article 25. (1) You may limit the information you provide to us. You may also limit the messages we send to you. To opt out of marketing emails, you can visit our site and claim your declination on the specified phones. You can also opt out of future marketing emails by clicking “unsubscribe” at the bottom of the e-mails we send you. (2) Please note that even if you opt out of receiving marketing materials, we may still need to contact you with important information about your user or equipment transactions. For example, even if you opt out of marketing emails, we shall send you a confirmation when you buy something from our site and for product safety purposes. (3) You can manage and disable “Cookies” and other similar technologies by adjusting your browser or interface settings. All browsers and interfaces are different, so visit the section Help of the browser you are using to learn about “Cookies” and other privacy settings that may be available. (4) You can manage how your mobile device and mobile browser share location information as well as how your mobile browser and related technologies handle “Cookies” and by adjusting your privacy settings and mobile device security. Please refer to the instructions provided by your mobile service provider or device manufacturer to adjust your settings. (5) You can also opt out of sharing device data with us. To do this, or go to the sector/tab “Settings” of the software product you are using, or ask a Customer Service Officer, in order to stop the telematics service on your device. Please note that if you opt out of the telematics service, you will no longer have access to device data. In addition, we shall not be able to provide you with products or services that require telematics access. (6) You have access to the personal information you have entered and/or generated from our software and hardware products and services and what the system holds for you. We take reasonable steps to allow you to correct, modify, or delete information that has been proven to be untrue or incomplete. You may rewrite your data or upload new ones yourself. Your name and email address are saved so we can track your activity. The password generated by the User is used to activate the secure access procedure. Persons to whom your personal information is provided Art. 26 . For the purpose of processing of your personal data and executing the contract, “Yara Bulgaria” Ltd may provide your data to third parties who process personal data that comply with all legal and security requirements for the processing and storage of your personal data. Art. 27. “Yara Bulgaria” Ltd is headquartered in Bulgaria and its controlled subsidiaries are located in different countries around the world. Personal information and device data may be accessed or transferred from Bulgaria or controlled subsidiaries and data processors elsewhere in the world for the purposes described in this “Privacy Policy”. When we enter or transfer personal information and data about the machine, we do so in accordance with applicable law. In addition, we protect personal information and machine data, regardless of where it is processed or stored. Third Party Privacy Policy Art. 28. This Statement is addressed only to the use and disclosure of information and data by the Provider. Other websites and applications that can be accessed through our site have their own privacy policies and practices. Our independent traders, suppliers and business partners also have their own privacy policies and practices. We encourage you to familiarize yourself with the privacy policy provided by all third parties before providing them with information or taking advantage of their offers or promotions. Access and Corrections Art. 29. “Yara Bulgaria” Ltd has the applicable right to enter, correct or delete your personal information. If you have an online account, you may log in to your account, log in and update certain information you have provided us with. If you need help with updating or deleting your personal information, please contact us at the address above. If you send us a paper letter, please provide your name, address, email address, and detailed information about the change you wish to make. Children’s privacy Art. 30. The Supplier’s website and applications are not intended to collect personal information from children. If you think your child is using our site, please contact us at the address above, so we can investigate and delete any inappropriate information. Forums, product reviews and other public demonstration Art. 31. Our website and social networking pages may contain forums and other areas in which you can publicly post comments, communicate with others, and present media content. Before posting in these areas, please read carefully the applicable “Terms of Use”. You do not have privacy privileges in public messages. All the information you post shall be accessible to anyone with access to the Internet and any personal information you post may be read, collected, and used by others. For example, if you post your email address along with a product review, you may get unwanted messages. Please be careful when publishing personal information. Job Applicants Art. 32. If you have applied for employment with us, personal information will be used for recruitment and other internal human resources purposes when applying for a job. Your rights upon violation the security of your personal information Art. 33. (1) ) If “Yara Bulgaria” Ltd establishes a breach of the security of your personal data, which may pose a high risk to your rights and freedoms, we shall notify you without undue delay of the violation as well as of the measures taken or to be taken. (2) “Yara Bulgaria” Ltd is not obliged to notify you if:

has taken appropriate technical and organizational protection measures with respect to the data affected by the security breach;
has subsequently taken measures to ensure that the violation will not lead to a high risk for your rights;
notification would require disproportionate efforts.

Art. 34. In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Commission for Personal Data Protection as follows: Commission for Personal Data Protection Headquarters and registered office: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Data for correspondence: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Telephone: 02 91 53 518 Email: kzld@government.bg, kzld@cpdp.bg Website: www.cpdp.bg Art. 35. You may exercise all of your rights to protect your personal data through the forms enclosed with this information. Of course, these forms are not mandatory and you can make your claim in any form that contains a statement about it and identifies you as the data holder. Art. 36. If the consent relates to a transfer, the Data controller shall describe the possible risks for the transfer of data to third countries in the absence of a decision on adequate protection and appropriate remedies. Art. 37. (1). When assigning “Yara Bulgaria” Ltd to process personal data to a third party for the purpose of using the service, “Yara Bulgaria” Ltd acts as a personal data processor. (2) In the cases under para. 1, “Yara Bulgaria” Ltd only acts on your instructions, as the user of the service and only to the extent that it may have control over the personal data you are processing. “Yara Bulgaria” Ltd has no control over the content and data that you, as the user of the service, you choose to upload to the service (including whether or not this data includes personal data). In this case, “Yara Bulgaria” Ltd has no role in the process of deciding whether the user uses the personal data processing service, for what purposes and whether these are protected. Accordingly, the liability of “Yara Bulgaria” Ltd in this case is limited to 1) compliance with the instructions of the user of the service, according to the contract and the General conditions, and 2) the provision of information about the service and the functionalities through its interface. What security measures have we taken in “Yara Bulgaria” Ltd regarding the security of the personal data you store on our infrastructure? Art. 38. (1) The security of all types of information, including personal data, located on our infrastructure is a priority for us as a company. Security is something we cannot afford to compromise. (2) We have introduced a security program for information and data that contains administrative, technical and physical controls intended to reasonably protect the personal information and data about the machine. For example, we use industry-standard encryption technology for user passwords and other personal information. Changes to the privacy policy Art. 39. From time to time, we may update this Privacy Policy to reflect new or different privacy practices. We shall post a notice on our page when major changes are made to this. In addition, if the changes significantly will affect the way personal information is used or collected, we shall notify you of the change by sending a private message. Conclusion Art. 40. By entering your personal data into our software / hardware products and the service “User Profile” and clicking the “I agree to the Terms & Conditions of the Provider”. Full account now on the signup page, you agree that we will collect, process and, in the limited cases described above, disclose personal information in the manner described in this Privacy Policy and our Terms and Conditions. This Mandatory Information was last updated on ……… .2018 Application No 1 – Form of consent withdrawal for processing purposes Your name: ……………………………………………………………………………………….. Your contact details (e-mail, telephone):……………………………………………………….. To Company name: “Yara Bulgaria” Ltd Name “Yara Bulgaria” Ltd UIC/BULSTAT: 204081311 Headquarters and registered office: city of Varna, No.115 Osmi Primorski Polk Str. Address for activity operation: city of Varna, No.115 Osmi Primorski Polk Str. Correspondence data: city of Varna, No.115 Osmi Primorski Polk Str. E-mail: info@agro-office.com Telephone: +359 52 60 15 18 Website: www.agro-office.com .Certificate number for the data administrator No ………………. ◻I withdraw my consent to collect, process, and store the following personal information I provide: ◻All the personal data I provide ◻Only for this data …………………………………………………………………………… .. for the following purposes: ◻The following objectives: ……………………………………. …………………………………………… ◻All purposes ◻I declare that I am aware of the company’s terms of service after the withdrawal of the consent. In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows: Commission for Personal Data Protection Headquarters and registered office: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Data for correspondence: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Telephone: 02 91 53 518 Email: kzld@government.bg, kzld@cpdp.bg Website: www.cpdp.bg Person’s signature:…………………………. Annex No.2 – Request “to be forgotten” – to delete my personal data and information related to me Your name: ……………………………………………………………………………………….. Your contact details (e-mail, telephone): ………………………………………………………. To Company name: “Yara Bulgaria” Ltd Name “Yara Bulgaria” Ltd UIC/BULSTAT: 204081311 Headquarters and registered office: city of Varna, No.115 Osmi Primorski Polk Str. Address for activity operation: city of Varna, No.115 Osmi Primorski Polk Str. Correspondence data: city of Varna, No.115 Osmi Primorski Polk Str. E-mail: info@agro-office.com Telephone: +359 52 60 15 18 Certificate number for the data administrator No ………………. Please all personal data you collect, process and store provided by me or third parties that are related to me according to the identified identification to be deleted from your databases. I declare that I am aware that some or all of my personal data may continue to be processed and stored by data controller for the purposes of performing its legal obligations. In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows: Commission for Personal Data Protection Headquarters and registered office: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Data for correspondence: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Telephone: 02 91 53 518 Email: kzld@government.bg, kzld@cpdp.bg Website: www.cpdp.bg Person’s signature:…………………………. Application No.3 – Request for portability of personal data Your name:…………………………………………………………………………………………… Your contact details (e-mail, telephone): ……………………………………………………….. To Company name: “Yara Bulgaria” Ltd Name “Yara Bulgaria” Ltd UIC/BULSTAT: 204081311 Headquarters and registered office: city of Varna, No.115 Osmi Primorski Polk Str. Address for activity operation: city of Varna, No.115 Osmi Primorski Polk Str. Correspondence data: city of Varna, No.115 Osmi Primorski Polk Str. E-mail: info@agro-office.com Telephone: +359 52 60 15 18 Certificate number for the data administrator No ………………. Please all personal data relating to me that are collected, processed and stored in your databases be sent to: ◻ e-mail: Please submit my personal data in the following format: ◻ XML Please all personal data relating to me that are collected, processed and stored in your databases to be sent to:……………………………………………………………………………………………………. In case of violation of your rights under the above or applicable data protection laws, you have the right to file a complaint with the Personal Data Protection Commission as follows: Commission for Personal Data Protection Headquarters and registered office: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Data for correspondence: city of Sofia 1592, No.2 “Prof. Tsvetan Lazarov” Blvd. Telephone: 02 91 53 518 Email: kzld@government.bg, kzld@cpdp.bg Website: www.cpdp.bg Person’s signature:…………………………. Application No. 4 – Request for data correction Your name: ……………………………………………………………………………………….. Your contact details (e-mail, telephone): ………………………………………………………. To Company name: “Yara Bulgaria” Ltd Name “Yara Bulgaria” Ltd UIC/BULSTAT: 204081311 Headquarters and registered office: city of Varna, No.115 Osmi Primorski Polk Str. Address for activity operation: city of Varna, No.115 Osmi Primorski Polk Str. Correspondence data: city of Varna, No.115 Osmi Primorski Polk Str. E-mail: info@agro-office.com Telephone: +359 52 60 15 18 Certificate number for the data administrator No ………………. Please provide the following personal data you collect, process and store provided by me or third parties that relate to me to be corrected as follows: Data to be corrected:………………………………………………..…………………….…… Please to be corrected as follows: …………………………………………………………………………………………………………………………………… Please to be corrected as follows: …………………………………………………………………………………………………………………………………………