Yettel shall take action at the request of an individual to exercise a right under this section only if he is able to identify the person concerned.
Only persons who can be identified by Yettel have the opportunity to exercise their rights under this section. If the purposes for which Yettel processes personal data do not require or no longer require the identification of an individual, Yettel has no obligation to maintain, obtain or process additional information in order to identify the person for the sole purpose of acting upon a request of this person.
Yettel notifies individuals of the action taken within one month of receiving a request under this section, and in certain cases this period may be extended by another two months.
Yettel shall provide individuals with information on actions taken in connection with their requests for the exercise of rights under this section without undue delay and in any event within one month of receipt of the request. If necessary, this period may be extended by another two months, taking into account the complexity and number of requests. Yettel shall inform the person concerned of any such extension within one month of receipt of the request, indicating the reasons for the delay.
In the event of a refusal to comply with a data subject request, Yettel shall notify the individuals concerned of their rights.
If Yettel does not take action on the request of an individual, Yettel shall notify that individual without delay, and within one month at the latest, upon receipt of the request for reasons for not taking action, as well as for the possibility of filing a complaint with the Commission for personal data protection, and for the right to file a claim wit the courts.
In certain cases, Yettel may request additional information to verify the identity of individuals.
In the event that Yettel has reasonable concerns about the identity of the individual who submits a request under this section, Yettel may request the provision of additional information necessary to confirm the identity of the individual.
The actions taken by Yettel in connection with requests for the exercise of rights under this section shall be completely free of charge to the individuals, unless their claims are manifestly unfounded or excessive.
The actions taken by Yettel in and for the exercise of the Visitors' rights are completely free of charge. Where a person's request is manifestly unfounded or excessive (eg because of its repetitive nature), Yettel shall have the right, at its sole discretion: (a) to refuse to comply with the request; or (b) request payment of a reasonable fee, determined on the basis of the administrative costs necessary to provide the requested information or to take the requested action.
Visitors have the right of access to personal data relating to them.
Visitors are entitled to receive information from Yettel whether personal data relating to them is being processed. If so, Visitors have the right to access the relevant data
Visitors have the right to request the correction of personal data relating to them when they are inaccurate or out of date.
In certain cases, Visitors have the right to request the deletion of personal data relating to them.
Visitors have the right to request Yettel to delete their personal data in the following cases:
personal data are no longer needed for the purposes for which they were collected or processed;
The Visitor has withdrawn his consent on which the processing of personal data is based and there is no other legal basis for the processing of the personal data;
The Visitor has objected to the processing of personal data based on Yettel's legitimate interest, unless there are other legitimate grounds for processing that take precedence over the Visitor's interests, rights and freedoms, or the processing of data is necessary for the establishment, exercise or the defense of legal claims;
The Visitor objected to the processing of personal data for the purposes of direct marketing and there are no other legitimate grounds for the processing of this data;
The personal data relating to the Visitor concerned were unlawfully processed;
Personal data must be deleted by Yettel in order to comply with a legal obligation arising from the law of the Republic of Bulgaria or the law of the European Union.
