Privacy and Data Protection Policy

At RISE, we take the protection of your personal data very seriously. Our purpose is to safeguard the privacy of the data you provide us and to comply with all applicable regulations on the protection of personal data.

In compliance with Act 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, which transposes Regulation (EU) 2016/679 (GDPR), we inform you of the following details about our privacy and data protection policy:

What is the purpose of processing your data?

We process your personal data for the following purposes:

1. To respond to requests, complaints, and incidents submitted through our website contact channels.

2. To understand user behavior on our website to detect potential security threats or cyberattacks.

3. To comply with legal obligations directly applicable to us and that regulate our activity.

4. To protect and exercise our rights or respond to claims.

5. To send newsletters related to the services or activities of the organization.

What is the legal basis for processing your data?

The legal basis for processing your data includes:

· Consent: According to Article 6.1(a) of the GDPR, based on your voluntary agreement to provide the data.

· Legitimate Interest: According to Article 6.1(f) of the GDPR, when processing is necessary for the legitimate interests pursued by the controller.

The data we request is appropriate, relevant, and strictly necessary. You are not obliged to provide this data, but failure to do so may prevent us from fulfilling the intended service.

How long will we keep your data?

We will retain your personal data for the duration necessary to provide the requested service and to comply with legal obligations, including those that may arise from this processing.

Who will receive your data?

During the processing of your data, [Organization Name] may share your data with:

· On Projects Advising SL: As service providers for web management and maintenance.

What are your rights?

You have the following rights under the GDPR:

· Right of Access: To obtain confirmation of whether your personal data is being processed and to access such data.

· Right to Rectification: To request corrections to your personal data.

· Right to Erasure: To request the deletion of your personal data.

· Right to Restriction of Processing: To limit how your personal data is processed.

· Right to Data Portability: To receive your data in a structured format or transfer it to another controller.

· Right to Object: To object to the processing of your data.

Please note that the controller may restrict these rights under certain conditions, as provided in Article 23 of the GDPR, when necessary to safeguard fundamental rights or freedoms.

Where can you make a complaint?

If you believe your data is not being handled properly, you may submit a complaint to the following email address: boryana@cleantech.bg

The data subject declares they have received this information in full.