How and why we process personal data

The majority of data processing operations are intended to give Users the opportunity to purchase electronic vignettes.

In certain cases, the applicable national and European legislation requires Yettel to process Users personal data for certain purposes, in a specific manner and / or for a specified period. The following are the main cases in which Yettel processes personal data in order to fulfill its regulatory obligations.

We process personal data when, under applicable law, we are required to provide information to competent authorities.

Subject to the conditions laid down by law and in accordance with the procedure laid down, personal data processed by Yettel should be made available to the competent authorities.

We process personal data of Users when, under applicable law, we are required to assist competent state and / or municipal authorities in carrying out their inspections.

The commercial activity carried out by Yettel is subject to control by various state and municipal authorities, for example: the Communications Regulation Commission (CRC), User Protection Commission (CPC), Commission for Personal Data Protection (CPDP), etc. In the course of exercising such control, these authorities have the power to carry out inspections and to require Yettel to provide the documents and information held therein. Such requested documents and information may contain personal information of Users who have purchased electronic vignettes through Yettel.

For example, upon a signal or a complaint from a User, CRC, CPC and PDPC have the power to require Yettel to provide relevant documents and information that may contain data about a User who has purchased an electronic vignette through Yettel..

We process personal data in order to fulfill our obligations under the accounting and tax laws.

The tax and accounting legislation in the Republic of Bulgaria requires Yettel to compile certain accounting and business information, and to store for a limited period of time this information, as well as any other information and documents relevant to taxation. In fulfillment of this obligation, the relevant information and documents containing personal data of the Users shall be kept by Yettel for the terms stipulated by the respective laws. These time terms are quite long (for example, tax control documents should be kept for a period of eleven years).

We process data to deliver and improve customer service.

It is important for us to provide fast, convenient and effective assistance to Users in the event that they find a problem with e-vignettes purchased through us. Quality assurance of customer service is critical to improving Yettel processes and meeting customer expectations and needs.

We process data to maintain information and network security.

•Third parties from whom Yettel has received personal data for the relevant Users in accordance with this Privacy Policy; or
•Third parties to whom Yettel has disclosed personal data for the relevant Users in accordance with this Privacy Policy.

Accordingly, it is possible that the above-mentioned entities, as well as the Users themselves, may file an out-of-court claim or bring a case against Yettel. In such cases, it may be necessary for Yettel to process the personal data of certain Users in order to be able to organize and enforce the defense against the respective claim or case (thus Yettel aims to defense itself against unlawful encroachment on its property and / or reputation).The type and volume of personal data processed depend on the nature of the extrajudicial claims or cases brought.
Examples::

•A User claims to have purchased an electronic vignette for a vehicle with a different registration number. This requires Yettel to carry out an internal review of the case in order to establish the validity of the User's claim and to provide the necessary evidence;
•A competent authority to which Yettel has refused to provide User information shall penalize Yettel and Yettel shall challenge the sanction imposed, which requires the processing of personal data of the relevant User and the provision of evidence before the relevant court.

We process Contact Information to inform Users of the successful purchase of e-vignettes or the unsuccessful purchase attempt.

In the e-vignette purchase process, we require Users to provide Bulgarian mobile numbers and / or email addresses so that we can send them a confirmation of a successful e-vignette purchase or to inform them that the purchase process has failed. If the User has provided an email and the process for purchasing an electronic vignette is completed successfully, the User will receive, in addition to the confirmation, also a receipt.

We process Contact Information to inform Users of the expiration of an e-vignette purchased.

Yettel will process the Contact Information provided by Users in order to notify them of the expiration of the electronic vignettes purchased through Yettel.

Most of the data processing operations are intended to give users the opportunity to register with the Solution and to make full use of it, using it for authentication in the digital services of Yettel and its partners.
(Supplemented on 11.03.2020) For example, when you have a Solution account and want to take advantage of the Single-Sign-On functionality that allows you to access other digital services securely and easily without having to authenticate each time, you need to provide us with basic information and we need to verify it (e.g. by sending a one-time SMS or email password) and create an identifier to share with the digital service you want to sign in to through the Solution. These steps require us to process data that is relevant to you.