Available in Bulgarian

Since the security and observance of the legal rights and freedoms of job applicants are crucial to us, the protection of your personal data is among our priorities.

This Privacy Statement (“Statement”) describes the way in which we process your personal data and specifies the information to be provided by the companies of EVN Bulgaria group in their capacity as data controllers, pursuant to Regulation 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“the Regulation”).

This Privacy Statement applies to all cases where we collect personal data of job applicants (such as when receiving documents at career forums, through job vacancies websites or in case of proactive job application).

 
Updates and changes to the Statement
In order to update the Statement in line with the requirements of the applicable European and national framework, the document may undergo changes. You can get informed about the latest changes in the Statement on the web pages of the companies: www.evn.bg, www.elyug.bg and www.evn-trading.com/.
Last update: 10.01.2025 


Data about data controllers
Elektrorazpredelenie Yug EAD, UIC: 115552190,
Registered office in: Plovdiv city, 37 Hristo G. Danov Str.
Data about the data protection officer: Pepa Stoyanova, email: [email protected]

EVN Bulgaria Elektrosnabdiavane EAD, UIC: 123526430,
Registered office in: Plovdiv city, 37 Hristo G. Danov Str.
Data about the data protection officer: Elena Valcheva, email: [email protected]

EVN Bulgaria Toplofikatsia EAD, UIC: 115016602,
Registered office in: Plovdiv city, 37 Hristo G. Danov Str.
Data about the data protection officer: Elena Valcheva, email: [email protected]

EVN Service Center EOOD, UIC: 200530627,
Registered office in: Plovdiv city, 37 Hristo G. Danov Str.
Data about the data protection officer: Elena Valcheva, email: [email protected]

EVN Trading South East Europe EAD, UIC: 175370769,
Registered office in: Sofia city, 2 Pozitano Sq., fl. 8.
Data about the data protection officer: Elena Valcheva, email: [email protected]

EVN Bulgaria EAD, UIC: 131329518, 
Registered office in: Sofia city, 2 Pozitano Sq., fl. 8.
Data about the data protection officer: Elena Valcheva, email: [email protected]

EVN Bulgaria Renewables EOOD, UIC: 200335716, 
Registered office in: Plovdiv city, 37 Hristo G. Danov Str. 
Data about the data protection officer: Elena Valcheva, email: [email protected]

Purposes and legal basis for the processing of personal data
The companies process personal data of job applicants for the purposes of ongoing selection for announced positions, other selection, as well as in the case of proactive job application.

Taking steps at the request of the data subject prior to the conclusion of a contract: In case of announced open positions, as well as in case of proactive job application, we collect and use your personal data on the basis of taking steps on your part to conclude a contract with a relevant company of EVN Bulgaria group as an employer.
Consent: We may rely on your consent to collect and use your personal information for other selection purposes, and it is important to know that you can withdraw your consent at any time by writing to email address: [email protected].
The companies may also process personal data on the other legal grounds provided for in the Regulation.

Types of personal data collected by the companies
The companies process only the required set of personal data for each individual case related to the selection of personnel. These are data from your CV, cover letter and other documents that you provide to us. They contain information about names, gender, nationality, phone number, address, email address, work experience, personal interests and achievements, signature, etc.
 
You can obtain specific information about what personal data of yours we process by submitting a request for this to one or more companies.

* The companies are not entitled to process information and documents related to the health and social status of job applicants or other persons related to them. Please note that we destroy all attached documents concerning this status, and please do not send us or do not submit such documents to us on site in the future. When communicating by phone or email, we do not require such information from you and we ask you not to provide it in any form.

Categories of recipients of your data
Third parties, service providers, including persons related to the companies: We may use the services of providers to process your personal data on our behalf. This data processing is carried out for several purposes, such as assessing the information received. Third parties and service providers will be bound by confidentiality rules and are not entitled to use your personal data for other purposes. 

The companies’ subcontractors that are processors of personal data: Processors of personal data carry out the processing in accordance with a contract/other legal act concluded with the companies and according to the instructions of the controller. The transfer of the data is carried out for the purpose of recruitment and selection of personnel. The companies use only processors of personal data that provide sufficient safeguards for the implementation of appropriate technical and organizational measures to comply with Regulation 2016/679.

For what period your personal data is stored
The period of storage of your information with us is 6 (six) months after the selection is completed. The period of storage of personal data on proactive job applications received by us is 6 (six) months from their receipt.

What actions the companies apply in terms of storage and protection of your personal data
In accordance with the current legal framework, we follow the necessary procedures to process the personal data in a way that ensures an appropriate level of security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by using appropriate technical or organizational measures.

Your rights in relation to the personal data provided to us
Right of access to the processed personal data about you
You have the right to obtain confirmation as to whether personal data related to you are being processed and, if so, to obtain access to the data and the following information:

• the purposes of the processing
• the categories of personal data
• the recipients/categories of recipients to whom the personal data have been or will be disclosed
• the envisaged period for which the personal data will be stored or the criteria used to determine that period
• the source of personal data
• the existence of automated decision-making, including profiling.

You have the right to a copy of the personal data that are being processed; however, the companies may charge a reasonable fee for additional copies.

Right to rectification
As a data subject, you have the right to obtain from the companies the rectification of inaccurate personal data concerning you or to declare a change or completion of the already provided data.

Right to erasure (“right to be forgotten”)
You have the right to obtain from the companies the erasure of personal data concerning you where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you have withdrawn your consent on which the data processing is based, and there is no other legal ground for the processing;
• you have objected against the data processing in the manner provided for and in the cases provided for;
• the personal data have been processed unlawfully;
• personal data have to be erased in order to comply with a legal obligation.

The right shall not apply insofar as the data processing is necessary for compliance with a legal obligation, for performance of a task in the public interest or for the establishment, exercise or defence of legal claims


Right to restriction of processing
You have the right to obtain from the companies restriction of processing of your personal data where:

• you contest the accuracy of the personal data;
• you consider the data processing to be unlawful, but you oppose the erasure of the personal data and instead you request the restriction of their use;
• the companies no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.

Right to data portability
You have the right to receive your personal data, which you have provided to the companies, in a structured, commonly used and machine-readable format and you have the right to transmit that data to another company where:

• their processing is based on consent or on a contractual obligation, and
• the processing is carried out by automated means.

You have the right to have the personal data transmitted directly from the companies to another controller, where this is technically feasible and does not adversely affect the rights and freedoms of others.


Right to object to the processing of personal data
You have the right to object to the processing of your personal data where the companies process them on the grounds of:

• performance of a task in the public interest or
• for the purposes of the legitimate interests of the companies.

The companies are to terminate the data processing, unless proven that there are compelling legitimate grounds for the processing. You have the right to object at any time to processing of your personal data for direct marketing purposes, which includes profiling.

Automated individual decision-making, including profiling 

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you, unless such decision:

• is necessary for entering into, or performance of, a contract with you;
• is allowed according to the law;
• is based on your explicit consent.

 

Right to a complaint with a supervisory authority
If you believe that the processing of your personal data is performed in violation of the applicable regulations, you have the right to lodge a complaint with the Commission for Personal Data Protection.

This Statement is part of the companies’ general privacy statement for employees, which everyone is made aware of when starting work.