Login to see your personalised offers Log in

Login to see your personalised offers

Rights of the data subjects

You are here

Yettel shall take action at the request of an individual to exercise his / her right under this section only if it is able to identify the person concerned..

Only persons who can be identified by Yettel have the opportunity to exercise their rights under this section. If the purposes for which Yettel processes personal data are no longer required or no longer require the identification of an individual, Yettel has no obligation to maintain, obtain or process additional information in order to identify the person for the sole purpose of acting upon a request of this person.

Yettel notifies individuals of the action taken within one month of receiving a request under this section, and in certain cases this period may be extended by another two months.

Yettel shall provide individuals with information on actions taken in connection with their claims for the exercise of their rights under this section without undue delay and in any event within one month of receipt of the request. If necessary, this period may be extended by another two months, taking into account the complexity and number of requests. Yettel shall inform the person concerned of any such extension within one month of receipt of the request, indicating the reasons for the delay.

In the event of a refusal to comply, Yettel shall notify the individuals concerned, of their rights.

If Yettel does not take action on the request of an individual, Yettel shall notify him / her without undue delay and within one month at the latest of receipt of the request for the reasons for not taking action, as well as for the option of filing an appeal to the Commission for Personal Data Protection and seeking judicial remedy.

In certain cases, Yettel may request additional information to verify the identity of individuals.

In the event that Yettel has reasonable concerns about the identity of the individual who submits a request under this section, Yettel may request the provision of additional information necessary to confirm the identity of the individual./p>

The actions taken by Yettel on, and in connection with, claims for the exercise of rights under this section shall be completely free of charge to these individuals, unless their claims are manifestly ill-founded or excessive.

The actions that Yettel takes upon and in the exercise of User rights are completely free of charge. Where a person's request is manifestly ill-founded or excessive (e.g. because of its repetitive nature), Yettel shall have the right, at its sole discretion: (a) to refuse to comply with the request; or (b) request payment of a reasonable fee, determined on the basis of the administrative costs necessary to provide the requested information or to take the requested action.

Users have the right to receive information from Yettel whether personal data relating to them is being processed. If so, Users have the right to access these data.
Users have the right to request the correction of personal data relating to them when they are inaccurate or out of date.

Users have the right to request Yettel to delete their personal data in the following cases:
When these personal data are no longer needed for the purposes for which they were collected or processed;
The User has withdrawn his / her consent on which the processing of personal data is based and there is no other legal basis for the processing of the personal data;
The User has objected to the processing of personal data which is based on Yettel's legitimate interest, unless there are other legitimate grounds for processing which take precedence over the interests, rights and freedoms of the User, or the processing of data is necessary for the establishment, exercise or the defense of legal claims;
The User has objected to the processing of personal data for the purposes of direct marketing and there are no other legitimate grounds for processing that data;
Personal data relating to the respective User were processed illegally;
Personal data must be deleted by Yettel in order to comply with a legal obligation arising from the law of the Republic of Bulgaria or the law of the European Union./p>

Users have the right to request Yettel to restrict the processing of personal data related to them in the following cases:
Where the accuracy of personal data is disputed by the User for a period allowing Yettel to verify the accuracy of the personal data;
Where the processing is unlawful, but the User does not want the personal data to be erased, but calls for restricting their use instead;
Where Yettel no longer needs the personal data for the purposes of processing, but the User requires it for the establishment, exercise or defense of legal claims;
Where the User has objected to the processing of personal data based on Yettel's legitimate interest, pending verification that Yettel's legitimate grounds have priority over the Yettel's interests.

Users have the right to receive from Yettel the personal data they provide in a structured, widely used and machine-readable form, and to transfer this data to another administrator without hindrance by Yettel, insofar as:
Yettel processes this data for the purpose of entering into or executing a contract with the User, or on the basis of the latter's consent; and
The processing of the relevant data is done in an automated manner.

Users have the right to request Yettel to transfer their personal data directly to another administrator, when technically feasible.

Users have the right, at any time and on grounds relating to their particular situation, to object to the processing of personal data relating to them when Yettel processes their data to protect its legitimate interests.

Users have the right to file complaints or alerts to the Commission for Personal Data Protection (CPDP) in case they believe Yettel violates personal data protection legislation. Complaint instructions are published on the CPDP website: https://www.cpdp.bg
Users may also lodge complaints with other supervisory authorities within the territory of the European Union as provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing of Directive 95/46 / EC.