Effective Date: 29/11/2023

Overview

DOT.WON Real Estate is committed to protecting the privacy and security of personal data. This GDPR Compliance Policy outlines our practices concerning collecting, using, and protecting personal data in compliance with the EU General Data Protection Regulation (GDPR).

Scope and Responsibilities

This policy applies to all personal data processed by DOT.WON Real Estate. All employees and contractors are responsible for ensuring that any personal data that DOT.WON Real Estate handles are processed by this policy and data protection laws.

Principles of Data Processing

Under GDPR, DOT.WON Real Estate adheres to the principles of data processing, ensuring that data is:
  • Processed lawfully, fairly, and transparently.
  • Collected for specified, explicit, and legitimate purposes.
  • Adequate, relevant, and limited to what is necessary.
  • Accurate and kept up to date.
  • Stored no longer than necessary.
  • Processed in a manner that ensures its security.

Lawful Basis for Processing

DOT.WON Real Estate processes personal data based on the following lawful bases:
  • Consent: We may process data based on your explicit consent.
  • Contractual Necessity: Processing is necessary for the performance of a contract.
  • Legal Obligation: Processing is necessary for compliance with a legal obligation.
  • Legitimate Interests: Processing is necessary for legitimate interests pursued by us or a third party.

Data Subject Rights

Individuals have the following rights under GDPR:
  • Right to Access: The right to request access to personal data we hold about them.
  • Right to Rectification: The right to request correction of inaccurate personal data.
  • Right to Erasure: The right to request deletion of personal data.
  • Right to Restrict Processing: The right to request restriction of processing personal data.
  • Right to Data Portability: The right to request the transfer of their data to another organization.
  • Right to Object: The right to object to the processing of their data.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular cybersecurity assessments.

Data Breach Response

In case of a data breach, we have in place procedures to deal with the breach effectively and will notify you and any applicable regulator where we are legally required to do so.

Data Transfers

Personal data may be transferred outside the European Economic Area (EEA) only when appropriate safeguards are in place as per GDPR requirements.

Policy Review and Updates

This policy will be reviewed regularly and updated as necessary to ensure continued compliance with GDPR.

Contact Information

For any inquiries regarding our GDPR policy or the handling of personal data, please contact us at hello@dwold.ini.bg .  
Scroll to Top