Privacy Policy
What is the scope of this Privacy Policy?
This Privacy Policy, in accordance with the EU General Data Protection Regulation (GDPR), explains how Evhod Ltd. processes your personal data. It may also include personal data of other individuals when you share their personal data with us. It contains detailed information about how we collect your personal data, why we collect it, and with whom we may share it. This Privacy Policy also explains your rights regarding personal data. This applies to all your personal data, including personal data stored electronically or in paper form.
What personal data may we collect about you?
Evhod Ltd. collects and processes your personal data, which may be provided directly by you, obtained from publicly available sources, or received from third parties with whom we have concluded agreements, such as companies conducting market research, companies providing accounting services, and others.
Personal data includes all information that identifies you or can be used to identify you. The types of personal data we collect depend on the nature of your relationship with Evhod Ltd. and the applicable legislation. The personal data we process about you includes data that we collect directly from you as part of your relationship with us or through other interactions you may have with us.
Depending on the purposes, the information we process about you may include the following personal data:
- name;
- personal contact information, including address, telephone number, and email address;
- Personal Identification Number, if necessary;
- demographic data, if necessary;
- health and other sensitive personal data, if necessary;
- data collected through cookies, if necessary;
- data collected through the use of websites/mobile devices and analytics, if necessary;
- programmes and activities in which you have participated, if necessary;
- opinions about us or about our products and services, if necessary;
- communication and other personal preferences, if necessary;
- requests for product information, if necessary;
- payment-related information; and/or
- financial information, including bank accounts and codes, credit card numbers, if necessary.
How will we use your personal data?
The processing of your personal data includes operations in which we may record, organise, structure, store, adapt or modify, retrieve, consult, use, disclose your personal data by transmission, dissemination, or otherwise making the data available, arrange or combine, restrict, erase, or destroy it.
We may process your personal data for the following purposes:
- communicating information about the safety of products and services;
- responding to your enquiries for information, products, or services;
- corporate compliance and security considerations related to facilities and networks;
- authorising, providing, administering, monitoring, and terminating access to or use of Evhod Ltd.’s websites, systems, facilities, records, property, and/or infrastructure;
- internal investigations of possible breaches or non-compliance with our policies and procedures;
- auditing our programmes and services for compliance purposes;
- legal proceedings and governmental investigations, such as orders, subpoenas, and court orders;
- determining your eligibility for certain products, services, or programmes;
- when we are legally required to process personal data;
- communication related to market research and product development;
- communication related to product information;
- business and marketing research;
- product orders;
- improvement and development of our products and services;
- statistical analyses;
- payment processing; and/or
- website administration.
For any other purposes for which your notification and consent are required, including purposes required by local legislation, we will obtain your consent before processing your personal data for those purposes.
On what legal basis do we process your personal data?
The applicable legal basis on which we process your personal data for the specific purposes listed above includes the following:
Based on your consent: In some cases, we may request your consent to collect and process your personal data and your sensitive personal data. If you choose to provide us with your consent, you have the right to withdraw it later, or opt out, by contacting us using the contact details in the “How to contact us” section below. Please note that withdrawing your consent will not affect the processing of your personal data that has already taken place. Where we process your personal data based on consent, we will provide you with more detailed information at the time we obtain your consent.
Compliance with applicable legislation or performance of a contract: In certain circumstances, we may need to process your personal data in order to comply with the relevant legal provisions/regulations or to fulfil our obligations under a contract to which you are a party. Where we process your personal data in order to fulfil our legal obligations, you may not be permitted to object to this processing activity, but you will usually have the right to access or review this information, unless doing so would prevent us from fulfilling our legal obligations. Where we process data in order to fulfil obligations under a contract to which you are a party, you may not be able to object to such processing, or if you choose to opt out of or object to the processing, this may affect our ability to fulfil a contractual obligation that also concerns you.
Our legitimate interests: We may process your personal data based on our legitimate interests when communicating with you and managing our interactions with you in connection with our products and services, research, and training opportunities. In addition to the other rights described below, you have the right to object to such processing of your personal data. You may exercise this right by contacting us using the contact details in the “How to contact us” section below.
To whom and when will we disclose or share your personal data?
We will share or disclose your personal data with the following entities:
- State authorities, institutions, and persons to whom we are legally obliged to provide personal data;
- Third parties with whom we enter into agreements for the provision of services on our behalf, in order to perform activities or functions related to the purposes of processing your personal data described above. In this case, we will require these third parties acting on our behalf to maintain the confidentiality and protect the security of the personal data we share with them. These third parties must contractually agree not to use or disclose your personal data for any purposes other than those necessary to provide the services, to perform the services on our behalf, or to comply with applicable laws and regulations.
- Potential or actual third-party buyers. If we decide to restructure or sell our business through a sale, merger, or acquisition, we may share your personal data with actual or potential buyers. We will require these buyers to treat your personal data in accordance with this Privacy Policy.
How do we protect your personal data?
We use standard administrative, technical, and physical measures to protect your personal data against loss, theft, misuse, unauthorised access, alteration, disclosure, and destruction. We restrict access to your personal data only to those employees and third parties acting on our behalf who have a legitimate business need for such access. We will transfer your personal data only to third parties acting on our behalf from whom we have received written assurance that your personal data will be protected in a manner consistent with this Privacy Policy and our privacy policies and procedures.
How long will we retain your personal data?
Your personal data will be retained for the duration of your relationship with us. We will store and retain the personal data we collect about you in accordance with the Company’s records retention policy, after which it will be archived or deleted. Please note that certain information may be retained for a longer period if we have ongoing obligations to you or if this is required by local legislation.
What are your rights?
You have the right to see and obtain a copy of the personal data we hold about you, including an electronic copy, and to request that we correct inaccurate or incomplete personal data we hold about you. You may also request that we delete your personal data when it is no longer necessary for the purposes for which you provided it, restrict how we process your personal data to certain purposes where deletion is not possible, or object to our processing of your personal data. In certain circumstances, you may request that we send a copy of your personal data to a third party of your choice.
To exercise any of these rights, please contact us using the company’s contact details. If you believe that your rights have been violated, you also have the right to file a complaint with the Company.
What happens if we revise this Privacy Policy?
We may periodically make changes to this Privacy Policy in order to reflect changes in our legal obligations or in the ways we process your personal data. We will inform you of any material revisions to this Privacy Policy, and it will take effect once you have been notified.
How can you contact us if you have questions or concerns?
You can contact us using the contact details below in order to:
- ask questions;
- express concerns or file a complaint;
- opt out of a programme or service; and/or
- exercise any of the rights listed above, including access, correction, portability, objection, restriction, and deletion.
Contact person: S. Youssef
Correspondence address: Sofia, 50 Ekzarh Stefan Blvd.
E-mail address: contact[at]evhod.com
What remedies are available to you?
For more information about your privacy and data protection rights, or if you are unable to resolve an issue directly with us and wish to file a complaint, please contact the Commission for Personal Data Protection.