ST6 Privacy Policy

Version 1.0, last updated: Oct 21, 2021

In this Privacy Policy, we describe the types of data, including personal data (collectively, "data"), that we collect from you when you use ST6 Website as described in this Privacy Policy (collectively, our "services"), how we use and disclose that data, and your options to access or update your data.

This Privacy Policy may be amended from time to time. The respective latest version of the Privacy Policy at the point of time of using the ST6 Website shall apply. The data controller is ST6 OOD with BULSTAT Unified Identification Code (UIC) 204654800.

Should you have any questions about this Policy then please contact ST6 Compliance via the Contact us page or in writing to ST6 OOD, Data Privacy Officer, 110B Simeonovsko Shose Blvd, fl. 3, 1700 Sofia, Bulgaria.

Why We Collect Data and What We Collect

We collect data for various reasons, such as:

• Job applicants, past and present ST6 personnel. In the course of human capital activities, we may collect and process contact details, educational & health data, résumé, personnel files and other data required by special laws for compliance with a legal obligation. The collected data is used exclusively for the above-mentioned purposes and shared with third parties only when required by law.

• To provide you with software, services, or information. ST6 processes personal data of customers under signed contracts for provisioning of services and software delivery. In such cases, the data being processed is minimized and is being limited to just the contractual relationship between ST6 and its customers.

• To improve our content and services based on usage. We may collect data based on your use of the ST6 Website, and we do not associate these data with your name. We use these data to better understand the usage patterns of our website and the behaviours of our collective audience. At times we may share this information in aggregated anonymous form with third parties. The legal basis for this data processing is our legitimate interest in improving our software and services. ST6 may use cookies to collect individual statistics. We may use third-party services for this purpose. You can revoke your consent at any time by visiting the Opt-Out page.

Transparency

To respect your privacy, before using your personal data, we will inform you about the categories of data we collect and the purposes we use them for. We will also inform you about the data management options that you may have.

Sharing

In the exercise of its business activities, ST6 may transfer data with third parties only once it makes sure that data privacy and security is guaranteed appropriately.

When transferring Personal Data to a third party country outside the EU/EEA, ST6 shall ensure that binding rules, in the agreement or otherwise, require the third party to provide adequate guarantees for the protection of Personal Data are in place.

Security

To secure your personal data, our products and services are designed with security and privacy in mind.

We encrypt your data in transfer and at rest where it is technically feasible. External web resources are protected by SSL encryption.

We review the processes of personal data usage before implementing them. This is done to minimize data usage and to make sure that you as the data owner is informed about the processing. When the reason for data storage expires, we remove your personal data from our servers or anonymize it for further usage. By the nature of the activity within which your data is collected, it may appear in datasets used for research.

We use partners to host our services and websites and to process your data in accordance with this Privacy Policy. While choosing the partners, we ascertain their compliance with legal regulations and security standards to make sure your data are stored in a secure location with appropriate security measures in place.

Third-Party Links

ST6 Website may contain links to other websites provided by third parties, not under ST6 control. When following a link and providing information to a third-party website, please be aware that ST6 is not responsible for the data provided to that third party. This Privacy Policy only applies to ST6 Website, so when you visit other websites, even when you click on a link posted on ST6 Websites, you should read their own privacy policies.

Data retention, withdrawal of approval, access to data and your rights

At any time you may ask for your data to be removed from our servers by sending a request via the Contact us page. After the data removal, we may keep pseudonyms of your personal data solely for a record about the data removal. Generally, we retain your data as long as we need to in order to achieve the purpose for which it was collected. We may retain your information if it is required to comply with legal obligations and/or defense in case of violation of ST6 Terms of Use and/or Privacy Policy. We may also have copies of your information in weblogs, and/or backups made for security and support purposes if this is mentioned in an ST6 Terms of Use or consent text accepted before the personal data collection. These backups will not be accessible as separately delineated information. We may store data pertaining to a customer or user for as long as they are entitled to a contract for ST6 services. Further, we may keep the data to protect ourselves from damage in case of litigation in accordance with the current legislation. Please note, however, that you must retain a copy of all data that you have placed on our servers in the case of any loss; further, if you cease using our software and/or services, we will not be responsible for the retention of any of your data.

You may opt out of certain kinds of data collection. You are responsible for the correctness of the Personal Data you provide to us. We expect you to check the Personal Data you provide to us and if any inconsistency takes place, report the inconsistency to ST6.

As permitted by applicable law, EU residents may request a copy of the information that we hold about them. To do so, please contact us. We may charge a fee in accordance with applicable law for this service.

Moreover, as set out in locally applicable personal data protection law, you may have the right to (i) request access to your personal data; (ii) request rectification of your personal data; (iii) request erasure of your personal data; (iv) request a restriction on the processing of your personal data; (v) request personal data portability; or (vi) object to the processing of your personal data.

• Right of access. You may have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, to request access to your personal data. The information about personal data processing includes the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom your personal data have been or will be disclosed, etc. However, this is not an absolute right and the interests of other individuals may restrict your right of access. Further, you may have the right to obtain a copy of your personal data undergoing processing. For additional copies requested, we may charge a reasonable fee based on administrative costs.

• Right to rectification. You may have the right to obtain from us the rectification of inaccurate personal data. Depending on the purposes of the processing, you may have the right to have incomplete personal data made complete, in particular by providing a supplementary statement.

• Right to erasure (right to be forgotten). Under certain circumstances, you may have the right to require us to delete your personal data.

• Right to a restriction on processing. Under certain circumstances, you may have the right to require us to restrict the processing of your personal data. In this case, the respective personal data will be marked and may only be processed by us for certain purposes.

• Right to personal data portability. Under certain circumstances, you may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit these personal data to another entity.

• Right to object. Under certain circumstances, you may have the right to object, on grounds relating to their particular situation, at any time to the processing of your personal data by us and we can be required to no longer process your personal data.

These rights can be exercised via the Contact us page.

Changes to this Policy

This Privacy Policy is current as of the Effective Date set forth above. We may change this Privacy Policy from time to time, so please be sure to check back periodically. We will post any changes to this Privacy Policy on ST6 Website. If we make any changes to this Privacy Policy that materially affect our practices with regard to the personal information we have previously collected from you, we will endeavour to provide you with advance notice of such change by highlighting the change on ST6 Website.

Reaching out

If you have any questions or concerns, or you feel that this Privacy Policy has been violated in any way, please let us know immediately by contacting us.