Information regarding the competent supervisory authority for personal data protection:
Name: Commission for Personal Data Protection
Headquarters and management address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
Correspondence address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg
“STUDIO X DIGITAL LTD” (hereinafter referred to as “StudioX” or “STUDIO X DIGITAL LTD”) operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data. This information is intended to inform you about all aspects of StudioX’s processing of your personal data and the rights you have in relation to this processing.
StudioX collects and processes personal data both as a data processor on behalf of data controllers, and as a data controller for certain operations specified below.
Basis for Collection, Processing, and Storage of Your Personal Data
Article 1. StudioX collects and processes your personal data under Article 6(1) of Regulation (EU) 2016/679, specifically based on the following:
Explicit consent obtained from you as a client;
Performance of obligations under a contract with you;
Compliance with a legal obligation applicable to StudioX;
Taking steps at your request prior to entering into a contract, if you are a job applicant.
Purposes and Principles of Personal Data Processing
Article 2.
We collect and process personal data you provide to StudioX for purposes such as entering into contracts with StudioX, using the company’s website https://www.studiox.bg/, and running online campaigns for StudioX clients, including:
Identification of the contracting party;
Accounting purposes;
Statistical purposes;
Information security;
Ensuring performance of the respective service contract.
We adhere to the following principles in processing your personal data:
Lawfulness, fairness, and transparency;
Purpose limitation;
Data minimization and relevance;
Accuracy and up-to-date information;
Storage limitation;
Integrity and confidentiality, ensuring appropriate security.
StudioX may process and store personal data to protect its legitimate interests, including obligations to the National Revenue Agency, Ministry of Interior, and other government or municipal bodies.
Types of Personal Data Collected, Processed, and Stored
Article 3. StudioX performs the following operations on personal data provided by you:
Employment contract processing: for recruitment, contract execution, and administration;
Contracts with clients or partners: for contract conclusion, execution, and administration;
Handling inquiries: to contact the requester and respond appropriately.
Article 4. Categories of personal data processed include:
Job applicants: data in CVs for identification, communication, and selection purposes.
Clients/partners (legal entities): names of legal representatives, authorized persons’ names, and national IDs for identification and contract purposes.
Clients/partners (individuals): names, national ID, email, phone for contract execution and communication.
Inquiry responses: names, phone, email for contacting and responding.
Data collected for online campaigns: names, emails, social media profiles, phone numbers for campaign purposes, processed under a Data Processing Agreement with clients.
IP addresses: for service security, localization, and anonymous statistical/marketing purposes.
Restrictions: StudioX does not collect sensitive personal data revealing racial or ethnic origin, political/religious/philosophical beliefs, union membership, genetic or biometric data, health data, sexual life, or orientation (except under GDPR Art. 9(2) exceptions). No automated decision-making occurs. Personal data of individuals under 14 is collected only with parental consent.
Retention Period
Article 5. Personal data of job applicants is stored for a maximum of 6 months after completion of recruitment procedures. After this period, StudioX deletes or anonymizes all data unless explicit consent is given for further storage and processing.