This Privacy Policy sets out how we from NESTWORK Ltd. (hereinafter “NESTWORK”, “We”, “Us”, “Our”) handle your personal data. This privacy policy (the “Privacy Policy”) sets out the bases on which we collect any personal data from you, why and how they will be processed.
NESTWORK provides for rent workplaces and offices located in shared workspaces, as well as additional services related to the use of the respective workspaces. For the provision of the said services NESTWORK enters into agreements with individuals or legal entities (hereinafter “Clients”).
Please read this Privacy Policy carefully before providing any personal information. It describes our data processing when using our website https://nestwork.bg (the “Website”), renting workplaces and/or offices in our shared workspaces and/or using any of the additional services we may provide to you. If you do not agree to abide by these terms, you shall stop using our services.
- Who processes your personal data?
Your data is processed by: NESTWORK Ltd., UIC 206258098, having its seat and registered office in the city of Bansko, 56 “Tsar Simeon” Str. We are a data controller and as such we are responsible for the processing and storage of your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 (the General Data Protection Regulation) and the applicable Bulgarian legislation.
If you have any questions, comments and requests regarding this Privacy Policy, you are welcome to address them to: e-mail: [email protected] , phone number: +359 895 787 373, address: Tsar Simeon 56, Bansko 2770, Bulgaria.
- What is the data we collect?
Creating an individual profile
As a precondition for concluding an agreement with us, the Client shall have an individual profile on our Website. If the Client is a legal entity, then the Client`s profile is in the name of a representative of the same entity. Upon registration, the following data is collected: two names, phone, e-mail. After you create your account, you have the option to upload a profile picture.
We also provide an option to register by logging in via Facebook or Google. In this case the respective platform shares the following personal information from your existing account: two names, e-mail.
Concluding an Agreement
When a Client decides to purchase any of the services, we process the data from the individual profile, as well as any billing details. The specific details will depend on the method of payment that you choose and whether you’d like us to issue an invoice to a legal entity or to an individual. Payments may be done via a virtual POS terminal, provided by Stripe Inc. We do not receive any information regarding your bank card, except for a few numbers of it (which cannot be considered personal data).
Contacting Us:
Whether you have a question about features, pricing or anything else, you may decide to contact Us. No matter the contact form you decide to use, you will need to provide us with: two names, e-mail, telephone and any other data you may decide to provide us with.
Direct Marketing:
We perform direct marketing by sending advertising messages by email only if we have collected your express consent to use your e-mail for such a purpose. You have the right to withdraw your consent at any time by clicking on the unsubscribe link available in each advertising email that you receive from Us.
Video surveillance:
In order to protect the health and life of Our employees, guests and clients, as well as Our property and the property of our Clients, the territory of our shared workspaces is permanently under video surveillance. Video surveillance data is stored for a period of 60 days under strict security measures. Further information regarding the Video surveillance is available right next to the entrance of the monitored premises.
What are the purposes for processing your personal data?
In order to make our Website and our services available to you, or to meet a legal obligation, we need to collect and user your personal information.
We may use your information for the following purposes:
- create and manage individual accounts;
- conclude agreements;
- provide services in our shared workspaces;
- run and operate our Website;
- answer to any of your messages;
- legitimate interest;
- respond to legal requests and prevent them;
- exercise or defend legal claims;
- comply with legal obligations and law enforcement requests;
- other purposes, which may be required by law and may put NESTWORK under the obligation to process your personal data, or where NESTWORK has received your explicit consent.
Which is the legal basis for processing your personal data?
Legal obligations
Processing of personal data by NESTWORK for purposes related to the compliance with legal obligations include:
- administration of alerts, complaints, requests to exercise rights and the like;
- accounting, invoicing and reporting in relation to tax and accounting legislation;
- other activities in fulfillment of legal obligations.
Performance of agreements
We process personal data for purposes related to the performance of agreements or taking steps at you request prior to entering into an agreement, including:
- registering on our Website;
- conclusion of an agreement and its performance;
- correspondence;
- financial and accounting activities and administration, processing and collection of payments due for services provided.
Legitimate interest
Processing of personal data for purposes related to the realization of the legitimate interests of NESTWORK or of third parties include:
- official proceedings;
- video surveillance for the purpose of protecting Our property and the property of our Clients, ensuring the security of visitor to our shared workspaces, as well as labour discipline.
Consent
Processing of personal data for purposes justified by your consent include:
- correspondence;
- sending marketing and advertising messages for services, special offers, packages, events and the like;
- other purposes for which you have specifically provided your consent.
Who can we disclose your information to?
We may disclose your personal data:
- if we are required or authorized to disclose it by law;
- to our business partners or subsidiaries, in case this is necessary to provide our services to you or generally to conduct our business.
How long do we retain your information?
We process your data for the purposes of creating your individual profile until you request a deletion of your account.
We will further retain your data, including correspondence, collected for the conclusion of an agreement and the provision of our services, for a period of 5 (five) years from the date of providing the said service / termination of the agreement / deletion of your account.
Financial and accounting documents shall be retained for the minimum time required by the relevant legislation.
Data generated from the video surveillance shall be kept for 60 days.
Any data processed on the basis of your explicit consent shall be processed until you withdraw the latter.
The data mentioned in this Privacy Policy may be processed for a longer period of time, if this is necessary to achieve the purposes, for which they’ve been provided, or to protect any rights or legal interests of NESTWORK, or if the current legislation provides for the processing of the data for a longer period.
What rights do you have regarding your personal information that we process?
You have the following rights, whose exercise we will facilitate at any time:
- Right to information
You have the right to receive information at the time we collect your personal data regarding the data we collect, who will process it, for what purposes and for what reasons.
- Right to access
You may request access to your personal data that we store. You also have the right to request a free copy of your personal data that are being processed.
- Right to rectification
You have the right to request that we amend or update any inaccurate or out-of-date personal data.
- Right to erasure (‘right to be forgotten’)
You have the right to obtain the erasure of your personal data where they are no longer necessary in relation to the purposes of the processing or where there is no legal ground for the processing.
- Right to restriction of processing
In certain cases, you have the right to request that we temporarily or permanently stop processing all or some of your personal data.
- Right to data portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller provided that this is possible and feasible.
- Right to object
You have the right to make a reasoned objection to the processing of your personal data, when we use them on the basis of legitimate interest. Thus, we will be required not to use them in the future.
- Right to withdraw consent
When we process your personal data on the basis of consent, you can withdraw it at any time. Thus, we will be required not to use them in the future.
- Right to complaint
You have the right to seek protection of your rights by the Commission for Personal Data Protection (CPDP). CPDP is an independent state body that oversees the lawfulness of personal data processing activities. You can file complaints to CPDP in person or by letter at: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592; by fax – 029153525; electronically to the CPDP’s e-mail address – [email protected]. More information about the procedure could be found at the following internet address: https://www.cpdp.bg/.
How to exercise these rights?
You can exercise any of the listed rights by submitting a written application to our address, stated at the beginning of this document. The application should contain: name and address, personal identification number, description of the request, preferred form for receiving information, signature, date of submission of the application and address for correspondence. If the application is submitted by an authorized person, an explicit proxy should also be attached.
An application may also be submitted electronically. It has to be signed with a qualified electronic signature.
When describing your request, please include sufficient details that will allow us to properly understand the request and respond to it.
How do we ensure the security of your personal data?
We have adopted appropriate technical and organizational measures to protect your personal data against any accidental or unlawful destruction, loss, alteration or unauthorized disclosure/access. Our measures, inter alia, ensure compliance with all principles in relation to the processing of personal data: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, accountability.
Can we make changes to the current Privacy Policy?
We reserve the right to change this Policy at any time by updating, supplementing and amending it. When changes are made, we will revise the updated date at the bottom of this page.
Last updated on 28.04.2023.