Login to see your personalised offers Log in

Login to see your personalised offers

Rights of natural persons in relation to processing of personal data

You are here

Yettel shall take action further to a request from a natural person to exercise a right under this section only if Yettel can identify the respective person.

If the purposes for which Yettel processes personal data do not require or do not require anymore the identification of a natural person Yettel is not obliged to maintain, acquire or process additional information in order to identify the person for the only purpose of taking actions based on a request from that person.

Yettel shall notify natural persons of the actions taken within one month following the receipt of a request as in certain cases this period may be extended by not more than two months.

Yettel shall provide natural persons with information concerning the actions taken in relation to their requests to exercise rights under this section without unnecessary delay and in any cases within one month after the receipt of the request. If necessary this period may be extended by two more months by taking into consideration the complexity and number of requests. Yettel shall inform the relevant person of any such extension within one month after the receipt of the request by also stating the reasons for delay.

In case of refusal to carry out a request Yettel shall notify the respective natural persons of their rights.

If Yettel fails to take actions further to the request of a natural person Yettel shall notify such person without delay and not later than one month after the receipt of the request of the reasons for Yettel’s failure to take actions as well as of his/her option to file a complaint to Commission for Personal Data Protection and to seek protection as per the legal procedure.

In certain cases Yettel may request additional information to verify the identity of natural persons.

In case that Yettel has reasonable concerns in relation to the identity of the natural person who files a request under this section Yettel may request the submission of additional information necessary for verification of such person’s identity.

The actions taken by Yettel upon and on the occasion of submitted requests to exercise rights under this section shall be free of any charge for the persons unless their requests are patently unjustified or excessive.

The actions taken by Yettel upon and on the occasion of the exercise of Participants’ shall be free of any charge. Where the request of a person is patently unjustified or excessive (e.g. because of its repetitiveness), Yettel has the right, at its own discretion: (а) to refuse to comply with the request; or (b) to demand the payment of a reasonable fee determined on the basis of the administrative costs necessary for the provision of the requested information or for the requested actions to be taken.

The Participants in the Campaign have the right to receive from Yettel information as to whether any personal data related to them are being processed. If yes, the Participants и have the right to get access to the relevant data.

The Participants have the right to demand that Yettel delete personal data related to them in the following cases:
the personal data are not necessary anymore for the purposes for which they have been collected or processed;
the Participant has withdrawn his/her consent on which personal data processing is based and there is no other legal ground for the processing of the same;
the Participant has objected to the processing of personal data based on Yettel’s lawful interests unless there are other legal grounds for processing overriding the user’s interests, rights and freedoms or data processing is necessary for the establishment, exercise or protection of legal claims;
the Participant has objected to the processing of personal data for the purpose of direct marketing and there are no other legal grounds for the processing of such data;
the personal data related to the respective Participant user have been processed unlawfully;
the personal data must be deleted by Yettel in view of the fulfillment of legal obligation arising out of the law of the Republic of Bulgaria or European Union.

As from 25 May 2018 the Participants shall have the right to request that Yettel restrict the processing of personal data related to them in the following cases:
processing is unlawful but the Participant does not want his/her personal data to be deleted and, instead, demands such restriction of the use thereof;
the Participant has objected to the processing of personal data based on Yettel’s lawful interests pending an inspection of whether the Yettel’s legal grounds override Yettel’s interests.

The Participants in the Campaign have the right to object, at any time and for any reasons related to their specific situation, to the processing of personal data related to them where Yettel processes their data for protection of its lawful interests. Depending on the nature of the objection and the circumstances sated by the respective Participant, Yettel will make an internal inspection regarding the objection and will pronounce a decision regarding the objection in compliance with this section by notifying the user.

(Amended on 02.12.2021, effective as of 02.12.2021) Campaign participants have the right to submit complaints or alerts to the Commission for Personal Data Protection (CPDP), in case they believe Yettel violates the laws for the protection of personal data. The instructions for filing complaints are published on the website of CPDP: www.cpdp.bg

Campaign participants may also file complaints with other supervisory authorities on the territory of the European Union, as provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.