Your privacy is important to us. We have taken all the necessaryorganizational and technical measures in order to process your personal data in a manner that is lawful, appropriate, and transparent. In this privacy statement by “STEAM-A” Private Limited Company., we explain which of your personal data we will process, for what purposes and on what grounds, to whom we could provide them, and for how long we will store them.
We recommend that you read this information carefully so that you know more about the manner of processing of your personal data as a client, potential client, related party to a client of ours, counter party, contact person, representative of a legal entity, or any other interested party. Regardless of what are thepurposes and the grounds on which we process your personal data, STEAM-A will treat your data with equal care. This document also contains information about your rights and the manners in which you can exercise them.
STEAM-A may update this privacy statement and its most recent version will be available at Steam-A.com. "STEAM-A" Private Limited Company. will inform you of all material changes to its terms via its website or other communication channels.
INFORMATION BY STEAM-A PRIVATE LIMITED REGARDING PERSONAL DATA PROCESSING
3. Rights of Data Subjects
In the cases when you are exercising your rights as a data subject, it would be necessary for you to make a detailed description of your request in the application submitted to Steam-A. When exercising your rights, Steam-A will need to verify your identity so as to avoid anyone else trying to impersonate you. For this purpose, we may require an ID card or other identification document when providing you with the information you request.
You may ask in writing various questions about the processing of your personal data by Steam-A, electronically at the e-mail indicated above. If you do not agree with the Steam-A’s position regarding your inquiry or if you wish to receive more information, please visit the website of the Commission for Personal Data Protection at www.cpdp.bg where you could file a complaint.
In the cases when Steam-A has received your personal data from third parties, e.g. your employer is processing them for its own purposes, you may file a complaint against the actions of these third parties directly to them.
The exercise of your rights can not be opposed to the provision of your personal data to the competent authorities for the prevention, investigation, and detection of criminal offences.
If you are a person whose personal data is processed by STEAM-A under the General Personal Data Regulation, effective since 25.05.2018, you have the following rights:
Right to access – Upon your request, as the data subject, STEAM-A shall provide information about the categories of the personal data relating to you, which are being collected and processed by us, and information about the purposes of the processing, the recipients, or categories of recipients to whom your data are disclosed and the sources of this data, except the cases when the data was collected directly from you.
Right of rectification, blocking (restriction of processing), and/or erasure (deletion) – Upon your request, the STEAM-A shall correct, erase or cease the processing of your personal data. In such cases, STEAM-A shall notify all third parties to whom your personal data has been disclosed regarding all rectifications and erasures that have been made or all cases of restriction of processing of your personal data.
Right to data portability – As a data subject, you have the right to request to receive the personal data concerning you, which you have provided to STEAM-A, in a structured and commonly used and machine-readable format and you have the right to transmit/transfer those data to another Controller without hindrance from STEAM-A as personal data controller, to whom the data was provided, where the processing is based on consent or on a contract or the processing of your personal data is carried out by automated means.
Right to object – As a data subject, you have the right to object to the processing of your personal data when the processing of personal data is based on the Steam-A‘s legitimate interest. Steam-A shall review your objection and shall provide its opinion inwriting within 30 days unless this term needs to be extended, for which we willnotify you in due time. After reviewing the objection, Steam-A will generally discontinue the processing of your personal data and will notify all interested parties to whom the personal data has been submitted of the objection received and of the measures taken in this regard. In some cases, however, Steam-A hasan indisputable legal basis to continue the processing of your personal dataeven after receiving your objection (for example, in cases of unsettled contractual relations, lawsuits etc.). In such cases, Steam-A will contact you to clarify the reasons why it will continue to process your personal data. If your objection concerns the processing of personal data for direct marketing, the Steam-A will suspend unconditionally the processing of your for that purpose.
4. Types of processed personal data
Steam-A may process different types of personal data related to your physical, social or economic identity. Such data may be obtained from you as the data subject or from third parties.
Steam-A may process some or all of the data categories listed below in order to achieve the purposes described below, only if it has a good reason to do so.
to identify you:
permanent address (street, number, post code, city, country)
current address (street, number, post code, city, country)
to contact you:
phonenumber – mobile/fixed
address(street, number, post code, city, country)
Steam-A sometimes processes public information such as from official public registers, which are responsible for keeping this information legally or purchasing them from companies that are responsible for the lawful collection of personal data.
Such public data may be processed for the purposes listed by Steam-A inthis document.
5. Recipients of personal data
Personal data is generally processed by the employees of Steam-A. The processing of personal data may also be carried out by personal data processors with whom Steam-A has signed a contract for this purpose. Where there is a legitimate reason, personal data may be provided to other administrators to usefor their legitimate purposes.
6. Purposes of personal data processing
Steam-A collects personal data for the following purposes:
To provide, personalise, maintain and improve our products and services, andenable features to personalise your Steam-A account;
To carry out our obligations arising from any contracts entered into between you and us and to provide you with the relevant information and services;
To administer and enhance the security of our platform and for internal operations, including troubleshooting, data analysis, testing, research,statistical and survey purposes;
To provide you with information about services we consider similar to those that you are already using, or have enquired about, or may interest you. If you area registered user, we will contact you by electronic means (e-mail or SMS ortelephone or other internet based instant messaging systems) with information about these services;
To understand our users (what they do on our Services, what features they like,how they use them, etc.), improve the content and features of our Services (such as by personalizing content to your interests), process and complete your transactions, make special offers, provide customer support, process and respond to your queries;
To generate and review reports and data about, and to conduct research on, our user base and Service usage patterns;
To allow you to participate in interactive features of our Services, if any; or
To carry out research with our partners.
7. Term of storage of personal data
Steam-A shall use your personal data only when Steam-A has a clear purpose in mind. Personal data cannot be kept for longer than it is necessary for the purpose(s) for which such personal data is used.
The grounds for storing your data are rooted in the legal retentionperiod. The term may be longer when this is necessary for us to be able to exercise our rights. Where there is no legally defined time limit, the periodmay be shorter.