General terms of service for employers

Please read carefully this document. It contains the terms (“Terms”) for access to and use of the website www.jobs.bg (“Website”). If You do not accept the Terms set forth below, it is not possible to use the Services!

In relation to the provided Services JOBS.BG processes personal data of natural persons – business users according to the Privacy Policy for Employers (“Policy”), which is available here. The Policy is an integral part of the Terms.

Last update: May 17th, 2018

GENERAL TERMS OF SERVICE FOR EMPLOYERS

1. Registration

1.1. JOBS.BG (“JOBS.BG”/ “We”), with registered address: 26 Rayko Alexiev Str., 1113 Sofia, UIC: 175050954, by means of the website www.jobs.bg (“Website”) provides to legal entities and natural persons with a valid registration in the Trade register/BULSTAT register – Employers (“Employer/s”) – free and paid information society services (“Services”), including, but not limited to, publishing of job offers by Employers and storage of received job applications to published job offers.

1.2. The use of the Services is possible only after registration and activation of a company account.

1.3. A company account can be registered by a capable person who is authorized to represent the Employer, to accept the Terms and perform the activities related to the use and management of the company account on behalf of the Employer. By registering an account, You declare that You meet these conditions and the information You have filled in to identify yourself and the Employer is accurate and complete.

1.4. The Employer may choose to provide an administrative contact person different from the person making the registration. In this case, the person making the registration can fill in the details of the administrative contact person during the registration. The administrative contact person is the contact person with whom our employees can communicate on important issues regarding the use of the Services. The Employer shall keep the contact details up-to-date.

1.5. The Employer may also add additional company users with access to its account (“Representatives”/“Employer Representatives”). Each of these users should accept these Terms before using the Services. The user who made the registration and/or other previously added company users with appropriate rights can add new users and manage their access rights. By adding an additional company user, You declare that You have been authorized by the Employer to do so.

1.6. In relation to its obligations under the General Data Protection Regulation (“Regulation (EU) 2016/679”), the Employer undertakes to provide contact details that Applicants can use in relation to personal data protection matters. As requests could arise after expiry of the job offers, the Employer undertakes to keep the contact details up-to-date at any time, regardless of whether there are current job offers on the Website. These contact details, as well as the data identifying the Employer, are publicly available on the Website.

1.7. The Employer and each of its Representatives shall provide correct, complete and current data upon registration, when using the Services and keep it up to date thereafter. In case of inaccuracies You shall immediately rectify them and shall not be entitled to use the Services until You do so.

1.8. In addition to the information provided during the registration, JOBS.BG reserves the right to request additional documents, including signed documents (with physical or electronic signature) for extended identification of the Employer and/or its Representatives before activating the account or at any time thereafter if there are reasons to believe that the provided information is inaccurate or incomplete.

1.9. You are responsible for all actions carried out through your account accessed via your username and password. You shall immediately notify JOBS.BG in case of an actual or possible unauthorized access.

2. Contract Conclusion

2.1. By clicking the ‘Registration’ button, the person representing the Employer makes an electronic statement by which the Employer and the Representative conclude a contract with JOBS.BG under these Terms (“Contract”) and undertake to abide by them. The information provided in the registration form can be modified before clicking the “Registration” button.

2.2. The Contract is deemed concluded as of the time of activation of the account by JOBS.BG.

2.3. When using paid Services, a separate order shall be placed for each Service. The provision of the Services is based on this Contract and Terms.

2.4. By accepting these Terms You agree to be addressed and to receive communication in electronic form in relation to the Contract and the provided Services from JOBS.BG.

3. Publication of Information

3.1. You undertake to use the Website in compliance with these Terms, the additional terms and instructions applicable to particular Services published on the respective pages of the Website, and the Bulgarian legislation in force.

3.2. You undertake to only publish jobs offers for actual and open positions, and:

(a) the selected location shall correspond to the workplace; publication of offers specifying more than one work locations is not allowed;
(b) publication of more than one position in one and the same job offer is not allowed.

3.3. It is not allowed to use job offers to promote business opportunities, partnerships, products, services or websites, or to include requirements for joining social media websites, registrations, participation in games, pyramid schemes, etc. You agree that the Applicants are not required in any manner to buy trainings or any other services.

3.4. Your job offer shall not contain:
(a) requirements of discriminatory nature;
(b) content violating or not respecting third persons’ rights or legal interests, including fundamental human rights, intellectual property rights, etc.;
(c) or any content of illegal, discriminatory, uncensored, offending, threatening, defamatory, hateful or indecent nature, or such that might insult or put a third person in an undesired position.

3.5. JOBS.BG reserves the right to delete or require editing of offers/elements of offers or other content published by You which is not in compliance with the Terms or the additional terms and instructions published on the Website.

3.6. You guarantee that You have the right to use any content You publish on the Website. Otherwise, You shall be liable for all related damages caused to JOBS.BG or any third parties.

3.7. You give the right to JOBS.BG to make publicly accessible (both in Bulgaria and abroad) the offers You publish and other public content for the purposes of providing the Services, and JOBS.BG shall owe no remuneration therefor.

3.8. By publishing content on the Website You grant its users the right to access and use it in compliance with the Terms of service and the law.

3.9. JOBS.BG reserves the right to refuse, to temporarily suspend or terminate the provision of a Service:
(a) in case of unfair behavior of the Employer (e.g. publication of inaccurate or misleading offers; references to competitors’ websites, etc.);
(b) in case the Employer has similar business activities to the activities of the Website;
(c) in case of suspected violations of these Terms or the law;
(d) in case of overdue or partially unpaid invoices.

3.10. To guarantee the reliability and security of the Service, JOBS.BG reserves the right to contact the competent authorities in case of gross violations of these Terms.

4. Use of Content

4.1. The Website and the content are owned by JOBS.BG and/or its partners, suppliers and clients. You are not allowed to copy, modify, disseminate or use in any manner content which is not yours for purposes other than or incompatible with the use of the Services and the Website, without prior written consent of JOBS.BG or the respective third parties.

4.2. Contact details of Employers and their Representatives may be used only for the intended purpose, i.e. in relation to applications to published job offers. You undertake not to use these contact details for any other purpose, including but not limited to, for marketing and promotional purposes.

4.3. You undertake not to act in a manner which might impede the normal operation of the technical or software applications and computer systems of JOBS.BG or the Website users.

5. Personal Data Processing

Matters related to personal data processing in relation to the provision of the Services are regulated by the Data Processing Agreement, which is an integral part of this Contract.

6. Financial Terms and Conditions

6.1. The prices of the paid Services are calculated automatically, depending on the selected parameters and according to the prices and payment terms published on the Website at the time of placing the order for the specific Service.

6.2. The financial terms and prices may be unilaterally amended by JOBS.BG. Such changes do not affect the provision of Services already ordered and confirmed by JOBS.BG.

6.3. The payment should be made using one of the available at the Website payment methods and according to the relevant payment terms. All invoices and other financial documents are accessible in the Employer’s account on the Website. The Employer shall observe and abide to the terms of payment of the issued documents.

6.4. After a Service order has been confirmed, the latter may not be terminated by the Employer. In such cases, the ordered Service shall be paid in full, and paid amounts are not subject to reimbursement.

6.5. JOBS.BG reserves the right to refuse the publication of an offer or the provision of a Service in case of a non-compliance with the Terms and/or at its own discretion.

6.6. In case of a delayed payment, the access to the Services on the Website will be restricted.

6.7. Free Services are provided only for job positions in Bulgaria and if the administrative contact person is located in Bulgaria and no international communication for verifying the registration or for subsequent maintenance is required.

6.8. Credits packages. A credits package may be used in full or in parts for ordering Services on the Website. In case a credits package has not been used in full, the unused part is not subject to reimbursement. Upon ordering a Service with credits from a credits package, credits equal to the Service price (in credits) specified in the price list at the time of purchase of the respective Service shall be deducted from the credits available.

7. Liability and Termination

7.1. In case You delay or fail to make the due payments for Services, JOBS.BG shall be entitled to:
(a) restrict your access to the Services;
(b) terminate the Contract and your account.

7.2. JOBS.BG may block your account:
(a) in case of suspected violations of law, of these Terms or other terms published on the Website;
(b) at your request.

7.3. JOBS.BG may terminate the Contract and your account:
(a) in case the account has not been used for a long period of time – more than 3 /three/ years;
(b) with a reasonable notice in case of termination of the Services provided by the Website;
(c) in other cases as provided for in the Terms or by law.

7.4. JOBS.BG shall not be liable for any damages or lost profits incurred by You or by third parties resulting from execution of orders issued by competent state authorities.

7.5. Except in case of intent or gross negligence, JOBS.BG shall not be liable for damages and lost profits caused:
(a) as a result of use or inability to use the Website and/or the Services;
(b) due to restriction, termination or blocking of your account and/or your content in compliance with the Terms.

7.6. In any case, JOBS.BG’s liability in relation to a provided Service on the Website is limited to the amount You have paid for the specific Service, unless otherwise provided for under the legislation in force.

8. Changes of the Terms and the Services

8.1. As far as the Services provided by JOBS.BG are diverse and continuously supplemented and upgraded, as well as in connection with legislative changes, JOBS.BG reserves the right to add new Services, modify or remove existing Services, without prior notification of such changes.

8.2. Upon making changes in the Terms, JOBS.BG brings such changes to your knowledge by posting them at a visible place on the Website or in your account. Changes to the Terms will not affect the provision of Services ordered and paid before the change.

8.3. In case You use the Services after the changes of the Terms enter into force, the changes will be deemed binding on You.

8.4. In case of a merger, acquisition or sale of assets, we reserve the right to transfer our rights and obligations in relation to these Terms. In such a case, You will be given an advance notice.

9. Other Provisions

9.1. These Terms govern the relationship between the parties and replace all previous Terms. Additional terms can be concluded only via the functionalities provided for in the Website or by mutually signed explicit agreement provided by JOBS.BG.

9.2. In case any of the clauses under these Terms proves to be void, this will not make void concluded contracts or other clauses.

9.3. Any disputes under these Terms will be settled by the competent court in Sofia.

9.4. For any unsettled issues the legislation of the Republic of Bulgaria shall apply.

Data processing agreement

This agreement applies to applications stored in the Website/JOBS.BG and is an integral part of the Terms. Job ads with external application links to an ATS or company site are outside of JOBS.BG’s scope of responsibilities.

Last update: March 28th, 2019

1. Personal data processing

Personal data processing (“Processing”) refers to any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2. Employer Representatives

2.1. To allow access and to provide the Services, JOBS.BG processes data regarding the persons representing the Employer ("Representatives") in relation to the use of the Services.

2.2. JOBS.BG processes personal data of the Employer Representatives as a Data Controller in correspondence with the Privacy Policy for Employers, available here, which is an integral part of the Terms.

2.3. By adding users and contact persons to the Employer's account, You declare that You have the necessary authorization and that the persons have been informed of and are acquainted with the Privacy Policy for Employers of JOBS.BG.

3. Job Applications

When publishing a job offer:

3.1. The Employer is a Data Controller with respect to the applications received in its account.

3.2. The Website is a technological platform that allows Employers to receive and store applications submitted by Applicants to the Employer’s job offers. As a provider of this Service, JOBS.BG acts in the role of a Data Processor.

4. Obligations of the Employer

As part of these Terms, the Employer:

4.1. determines the purposes and means for processing of personal data, as the processing necessary to publish job offers for open positions and to receive and store applications to these offers in the Employer’s account; The Employer shall not process personal data for purposes other than or incompatible with this objective.

4.2. as a Controller is responsible to choose appropriate legal basis for processing the Applicants data in accordance with the Regulation (EC) 2016/679;

4.3. undertakes to ensure and bear full responsibility that the requirements of the Regulation (EU) 2016/679 and these Terms will be respected and complied with by its Representatives, personnel and all other persons to whom it might provide data regarding the Applicants;

4.4. should Applicants request to exercise their data protection rights, the Employer shall fulfill these requests and/or provide the Applicants with confirmation or reasoning for rejecting the request within the terms set by the Regulation (EU) 2016/679;

4.5. undertakes to provide up-to-date contact details to allow Applicants to contact the Employer regarding personal data protection matters, including contact details of its Data Protection Officer (if applicable);

4.6. shall not require in any way from Applicants to its job offers to send special categories of personal data within the meaning of Art. 9 and Art. 10 of Regulation (EC) 2016/679 through the Website. The Website is not intended for collecting, processing and storing of such data.

5.Data Processing for the purpose of providing the Services

JOBS.BG provides technical solution that allows You to receive and store job applications in your account, with regards to this Service JOBS.BG processes data on your behalf as a Data Processor.

5.1 By accepting these Terms, You assign to JOBS.BG to process personal data for the purposes of providing the Services subject to this Agreement on your behalf, strictly complying with these Terms and Your Instructions (i.5.3).

5.2. JOBS.BG undertakes not to process information regarding Applicants to your job offers for purposes other than those specified in these Terms, except when required to do so under applicable law or in cases where it acts as a Controller.

5.3. Instructions for data processing. These are the instructions outlined in this Agreement, as well the instructions made through the functionalities available in the Website. You agree that You will submit your instructions in the manner provided for in the Website and that your instructions shall be in compliance with the Regulation (EC) 2016/679.

5.4. By accepting these Terms You declare that You have been informed that in some occasions set forth by law, JOBS.BG may be required to keep and disclose certain data that it has processed on your behalf to the competent authorities. JOBS.BG undertakes to inform You of such orders, except in the cases when it is prohibited by law.

5.5. The Data Processing, related to the provision of the Services, takes place in Bulgaria. JOBS.BG shall not use any equipment located outside the EU to process personal data of Applicants to your job offers.

5.6. Subcontractors. JOBS.BG works with subcontractors (such as data centers for the collocation of servers and network equipment, etc.). If applicable, should a subcontractor process Employer’s personal data, it will be required to commit to similar to JOBS.BG’s contractual obligations and level of protection. Subcontractors will be required not to process such data for any other purpose than in relation to the Services provided by JOBS.BG to the Employer. You agree to the use of subcontractors by JOBS.BG for the provision of the Services. JOBS.BG maintains an up-to-date list of the subcontractors here. In the event of any change, You will be explicitly notified prior to the change.

6. Storage, erasure and export of data

By accepting these Terms, You assign and JOBS.BG undertakes to:

6.1. provide technical solution to enable the storage of applications submitted by Applicants in your account until deleted by You (by your Representative), but no longer than 6 /six/ months from the publication date of the job offer;
Regarding applications to job offers published prior to the current Agreement update, the previous one-year storage period applies. The company has the option to choose to apply the new six-month storage period to the previously published job offers as well. In case the company does not select this option, it obliges to review and remove in a timely manner applications it no longer has a lawful reason to store;

6.2. ensure automatic erasure of applications to job offers in your account after the technical storage period listed in p. 6.1. expires (unless the applications have been deleted earlier by You, using the functionalities provided in the Website);

6.3. provide technological functionality in the Website to enable Applicants to delete applications they have sent to You from your account, at any time. However, Applicants are under no obligation to use the functionalities of the Website and are entitled to send requests directly to You at any time;

6.4. to automatically erase all applications in your account upon termination of your registration in the Website, except when this is prohibited by law. If would like to keep this data, you should do this prior to closing the account using the export functionality.

6.5. items 6.1. - 6.4. do not waive your obligation as Data Controller to review and erase in due time personal data (applications) for the processing of which You have no legal basis or the legal basis has become invalid.

6.6. Export. In case You would like and have a lawful ground to store applications outside of your account, You can use the functionality for exporting applications. You undertake not to store in your account and not to retrieve and process data for the processing of which You have no legal ground or the same has become invalid.

6.7. Consent. In case You would like to use information received by Applicants to your job offers for future recruitment purposes, You undertake to obtain explicit consent from the respective Applicants. JOBS.BG is not responsible for any subsequent processing of Applicants data for which You have not received proper consent for processing.

7. Scope of the assigned activities

The scope of the processing activities assigned by the Employer to JOBS.BG with the acceptance of these Terms and with the use of the Services is defined as follows:

7.1. Objective: to provide the Services subject to this Agreement.

7.2. Data subjects: Applicants who have applied to your job offers on the Website.

7.3. Data: The information and documents contained in the applications sent to You.

7.4. Subject and nature: provide technical solution that enables You to receive applications to your job offers in your account, to review, store, export, and erase them, etc.

7.5. Term: for the duration of the agreement between You and JOBS.BG, unless otherwise stated in these Terms or in the applicable legislation.

8. Security

JOBS.BG undertakes to:

8.1. apply technical and organizational measures (with regard to personnel, buildings, software, hardware, networks, servers, encryption, control, reporting and monitoring, vulnerability testing, etc.) to ensure level of protection against unauthorized or incidental access, loss, change, disclosure or erasure of data, that takes into consideration the relevant risks. You can find a detailed description of the technical and organisational measures here;

8.2. guarantee that all persons authorized by JOBS.BG to process data shall be bound by obligation of confidentiality and shall undergo regular trainings on the protection of personal data in accordance with their activities;

8.3. shall not disclose personal data belonging to the Employer to any third party in any circumstances, except for the provided for in the Terms or by law.

9. Audits on personal data processing

9.1. JOBS.BG undertakes to provide the necessary assistance to a competent supervisory authority in carrying out audits and checks of the personal data processing activities assigned by You.

9.2. JOBS.BG shall periodically provide information on the available certificates, audits, etc. in a form and manner that ensure the security of the Services is not impaired. In case in relation to your personal data processing obligations additional checks are required, it is possible to assign an audit after signing a preliminary agreement with JOBS.BG, specifying the scope, duration and a mutually agreed certified auditor under the Regulation (EC) 2016/679. In performing such an audit, the Employer undertakes to pay all fees, remunerations and costs for the performed activities and services, both by the auditor and by JOBS.BG. An audit may be conducted only in a manner and to an extent that do not prejudice the obligations and rights of other users of the Website with regards to personal data protection.

10. Notification of the Employer

JOBS.BG undertakes to inform You:

10.1. in the event of an inspection undertaken by a supervisory authority in relation to the data processing of information related to Applicants data received in your account, except in cases where this is prohibited by law;

10.2. if it is unable to fulfill its obligations under these Terms for any reason;

10.3. without undue delay (but no later than 24 hours of becoming aware) if it detects a security breach of Applicants data stored in your account, including information about the nature of the personal data breach, where possible, the categories and approximate number of data subjects concerned and the categories and approximate number of personal data records concerned; description of likely consequences of the personal data breach and description of the taken or proposed measures to address the data breach or mitigate its adverse effects.

11. Employer assistance

JOBS.BG undertakes to:

11.1. assist You if You need to demonstrate the performance of your obligations in relation to the data processing assigned to us;

11.2. assist You in performing your obligations to notify the supervisory authority in the event of a security breach;

11.3. assist You, as far as possible and reasonably expected, by providing functionalities in the Website and organizational and technical measures in performing your obligations related to requests regarding data protection rights by Applicants to your job offers;

11.4. You assign and JOBS.BG undertakes, upon receipt of a request for exercising of rights under the Regulation (EU) 2016/679 from an Applicant, who has sent an application to You, to inform the Applicant that he/she should contact You directly using the contact details provided by You. With respect to this, You have the obligation to keep your contacts on the Website up to date, at any time (i. 4.5).

12. Liabilities

A processor shall be liable for the damage caused by processing only where it has not complied with obligations of the Regulation specifically directed to processors or where it has acted outside or contrary to lawful instructions of the Controller. Where a Controller or Processor has paid full compensation for the damage suffered, that Controller or Processor shall be entitled to claim back from the other Controllers or Processors involved in the same processing that part of the compensation corresponding to their part of responsibility for the damage.

Organizational and technical measures

This document contains the technical and organizational measures in relation to the Services provided in JOBS.BG and is an integral part of the Data Processing Agreement.
In order to protect the personal data JOBS.BG applies technical and organizational measures (with regard to personnel, buildings, software, hardware, networks, servers, encryption, control, reporting and monitoring, vulnerability testing, etc.) to ensure level of protection against unauthorized or incidental access, loss, change, disclosure or erasure of data, that takes into consideration the relevant risks and impact;

Last update: May 17th, 2018

ORGANIZATIONAL AND TECHNICAL MEASURES

1. Data protection

The Employer is the sole Controller with respect to the data in its account. JOBS.BG as a Processor will treat the Employer’s data as confidential and will process it only with regards to and to the extent necessary to provide the Services or in cases provided for in the Terms and the Policy.

2. Security Policies

2.1. JOBS.BG will follow security policies that take into consideration both the legislation and the best practices in its data processing activities in order to ensure confidentiality, integrity and availability.

2.2. To determine adequate level of technical and organizational measures and appropriate level of protection JOBS.BG performs analysis of its activities as a Processor.

2.3. In order to ensure effective protection JOBS.BG will regularly review the security policies and at least annually will conduct a full review.

2.4. JOBS.BG employees are obliged to apply these policies and practices. They are required to review and commit to each policy update, as well as to review all policies annually.

2.5. JOBS.BG will apply recruitment procedures that involve verifications to the extent allowed by the applicable law.

2.6. JOBS.BG employees will complete security and data privacy trainings taking into consideration their role at least annually.

3. Security Incidents

3.1. JOBS.BG will follow documented security incident response plan in compliance with the notification requirements of the Regulation.

3.2. JOBS.BG will investigate all potential security incidents and apply the response plan. Should the Employer suspect security vulnerability or incident, it should immediately notify JOBS.BG.

3.3. JOBS.BG will notify the Employer without undue delay (and no later than 24 hours) if it identifies a security incident related to the Employer’s data and will provide to the Employer, as far as reasonably possible, information about the incident and the taken remediation activities.

4. Physical Security and Entry Control

4.1. JOBS.BG will use data centers that have pysical access control measures in place, a log of the visits will be kept, as well as an up-to-date list of the people authorized to access the facilities.

4.2. JOBS.BG will use data centers with failover power supply, air conditioning, protectoin against fire, theft and vandalism.

4.3. JOBS.BG will control the physical access to its offices by only allowing access to authorized persons or persons accompanied by authorized personnel. JOBS.BG will apply technical and organizational measures as systems for perimeter and access control and other.

5. Information Systems and Networks

5.1. JOBS.BG will maintain documented architecture of its infrastructure. JOBS.BG will regularly review the architecture with respect to security and will apply best practices related to segmentation and isolation. Should JOBS.BG use wireless networks, they will be encrypted and they will use secure authentication. These networks will not have direct access to the Services and JOBS.BG will not use wireless networks for the provision of the Services.

5.2. JOBS.BG will store the Employer’s data logically separated from other Employers’ data.

5.3. JOBS.BG will encrypt data when in transit via public networks by use of HTTPS, Force-TLS for encrypted transfer of data by email (applicable if you use such email functionality) and other technologies.

5.4. JOBS.BG will use appropriate solutions for management of cryptographic keys, encryption and pseudonymization of the stored data according to the level of risk related to the specific activities.

5.5. JOBS.BG will provide its employees with the minimal access rights necessary for their job role or specific assignment, requiring access, for the duration of the assignment.

5.6. JOBS.BG will apply best practices when managing passwords, cryptographic keys, sessions and accounts, etc.

5.7. JOBS.BG will use sofware and hardware solutions for protection and security monitoring and auditing of the Services (Web Application Firewalls, Network Firewalls, Key management and encryption devices, SIEM, etc.), as well as end-point solutions such as anti-virus and anti-malware software, automated software updates, encryption, etc.

5.8. If applicable, JOBS.BG will sanitize physical media intended for reuse or if no reuse is planned, it will destroy it following best practices.

6. Security, Integrity and Availability

6.1. JOBS.BG will conduct automatic and/or mannual vulnerability and penetration tests on regular basis, as well as when modifiying exisiting or deploying new applications, systems or networks.

6.2. JOBS.BG will conduct vulnerability and penetration tests of the applications, systems and networks, incl. by means of ethical hacking performed by an independent third-party with adequate experience and reputation at least once a year and/or upon major changes.

6.3. JOBS.BG will follow and maintain change management policies and procedures. Prior to implementation of changes to applications, systems and networks, changes will be documented in change requests that will include description, reason for the change, schedule, risk and impact assessment, expected outcome, rollback plan and approval by authorized person.

6.4. JOBS.BG will maintain inventory of all information systems and assets related to the provision of the Services and will monitor their status.

6.5. JOBS.BG will periodically evaluate the information systems used for the provisioning of the Services with regards to their security, integrity and availability.

6.6. JOBS.BG will use backup systems to backup Employer’s data and guarantees that at least one copy will be stored separately from the production system. The backups will be stored encrypted. JOBS.BG will perform backup restoration testing.

6.7. In addition to planned updates of the software, applications, systems and network devices, if necessary JOBS.BG will apply partial security patches after evaluation of their appropriateness and the risk involved.

7. In addition to the above listed organizational and technical measures JOBS.BG will also apply the requirements and guideliness of CPDP:

7.1. Physical protection. JOBS.BG will apply technical and organizational measures for physical protection of personal data, including (when applicable):
  • identifying the areas with controlled access;
  • determining the premises where personal data are to be processed;
  • determining the premises where the elements of the communication and information systems for personal data processing are to be located;
  • determining the organization of physical access;
  • determining the regime of visits;
  • determining the use of technical means of physical protection;
  • appointing a team to respond in case of violations.
By means of: locks; cabinets; metal safes; equipment of the areas with controlled access; equipment of the premises; devices for physical access control; security guards and/or security system; perimeter protection devices; firefighting devices; fire detection and extinguishing systems; devices detecting substances (metal, explosives, etc.).

7.2. Personnel protection. JOBS.BG will apply organizational measures regarding persons who process personal data, including (when applicable):
  • knowledge of legislation relating to the protection of personal data;
  • knowledge of policies and guidelines for the protection of personal data;
  • knowledge of threats to the processed personal data;
  • related to sharing of critical information among employees (e.g. IDs, passwords for access, etc.);
  • consent to assume an obligation of non-disclosure of personal data;
  • training;
  • training the employees to respond to events that threaten the security of personal data.
(a) To apply measures that guarantee access to personal data only to persons whose official duties or a specific task require such access adhering to the need-to-know principle.

(b) To oblige persons prior to processing personal data to become acquainted with:
  • legislation relating to the protection of personal data;
  • instruction and guidelines for the protection of personal data;
  • threats to the personal data processed.
(c) Persons processing personal data will sign a declaration of non-disclosure of personal data to which they have access in relation to the performance of their responsibilities.

7.3. Documentary protection. JOBS.BG will apply organizational measures for protection of printed documents containing personal data, including (when applicable):
  • determining the registers which will be maintained in paper copies;
  • determining the conditions for personal data processing;
  • regulating the access to registers;
  • controlling the access to registers;
  • determining the time-limits for storage;
  • rules for reproduction and distribution;
  • procedures for destroying;
  • procedures for inspection and control of processing.
  7.4. Information systems and networks. JOBS.BG will apply technical and organizational measures for protection of the information systems and networks, including (when applicable):
  • instruction for personal data protection, protection guidelines and standard operating procedures;
  • defining roles and responsibilities;
  • identification and authentication;
  • registers management;
  • session controls;
  • external links/connections;
  • telecommunications and remote access;
  • monitoring;
  • virus protection;
  • accidents/contingency planning;
  • maintenance/operation;
  • configuration management;
  • copies/backups for recovery;
  • information media;
  • physical environment/surroundings;
  • personnel protection;
  • training the employees to respond to events that threaten the security of data;
  • determining time-limits for personal data storage;
  • procedures for destruction/removal/deletion of media.
7.5. Cryptographic protection. JOBS.BG will apply technical and organizational measures for cryptographic protection of personal data, including (when applicable):
  • standard cryptographic capabilities of the operating systems;
  • standard cryptographic capabilities of the database management systems;
  • standard cryptographic capabilities of communications equipment;
  • systems for distribution and management of cryptographic keys;
  • systems for electronic signature.


Privacy policy for employers

Please read carefully this document. It contains the Privacy Policy for Employers (“Policy”) and is an integral part of the Terms of Service for Employers (“the Terms”). If You do not accept the Terms, it is not possible to use the Services. In case of amendments in the Policy, the changes will be published here.

Last update: May 17th, 2018

PRIVACY POLICY FOR EMPLOYERS

For the purpose of providing the services (“Services”) on the website www.jobs.bg (“Website”), JOBS.BG EOOD (“JOBS.BG”/”We”), with registered address: 26 Rayko Alexiev Str., 1113 Sofia, UIC: 175050954, processes personal data of Employer Representatives and natural persons – Employers or other natural persons specified below (“Data Subjects”/”You”), in compliance with this Policy.

Upon processing of personal data, JOBS.BG complies with all applicable data protection legislative acts, including, but not limited to, the Regulation (EU) 2016/679 (“Regulation”).

According to the Regulation, personal data means any information relating to You which makes You identifiable. Personal data processing (“Processing”) means any operation or set of operations which is performed on personal data by automated or other means.

1. Data Subjects

In connection with the provision of the Services, JOBS.BG processes information regarding the following Data Subjects:
(a) Employer Representatives (“Representatives”) – natural persons;
(b) Employers – natural persons registered in the Website;
(c) Natural persons specified by the Employer as contact persons (for administrative contact, financial contact, data protection officer, etc.)

2. Data processed in connection with the provision of the Services

2.1. Information provided by You

You are free to decide whether and how to use the Services provided in the Website. We clearly indicate in the forms for entry of personal data whether the data is mandatory or voluntary. Mandatory data is data without which We would be unable to provide the relevant Service or part of it.

(a) Registration of a company account, users and contact persons. To register and use a company account in the Website information regarding the Employer; the Employer Representatives; Contact Persons; Data Protection Officer as defined in the Regulation (if applicable) is required. In addition, information about the registration and the acceptance of the Terms (date, time and IP address) is stored.

The data You provide when registering an account, adding Representatives and contact persons may include:
  • Employers – natural persons: name, registered address, other contact details (address for correspondence; telephone; email address); UIC/BULSTAT; VAT number, etc.
  • Employer Representatives (“Representatives”) – natural persons: name, position, business phone number, business email address, etc.
  • Contact persons – natural persons: name, position, business phone number, business email address, etc.
(b) Additional users and contact persons. According to the Terms, if necessary and provided You have administrative rights, You may add additional company users (Representatives) to the company account. For this purpose You fill in the following data: name, surname, position, business email address, access rights, etc. Upon adding company users and contact persons in the company account, You declare and warrant that You are authorized to do so and that You have made the respective persons aware of this Policy.

(c) Contracts, declarations, etc. Documents exchanged between You and JOBS.BG relating to the conclusion and performance of the Contract (annexes, powers of attorney, declarations, invoices, etc.). Such documents may contain name, position, contact details, signature/electronic signature, etc.

(d) Correspondence, complaints and claims. For the purpose of handling complaints, claims, disputes, inquiries, requests and other issues communicated to us via electronic forms on the Website, by phone calls to JOBS.BG’s PBX, by post or by email, We store and process such information as well as the outcome of the processing.

(e) Special categories of data (sensitive data). The Services provided by JOBS.BG and the functionalities available on the Website are not intended for collection, storage and processing of special categories of data within the meaning of Art. 9 and Art. 10 of the Regulation. You undertake not to store such data in your company account. Besides, You shall not require from the Applicants in relation to your job offers to send such data through the Website. JOBS.BG does not and is not obliged to monitor the presence of such data in the Website.

(f) Other data. JOBS.BG may as well process other data related to You in cases You voluntarily provide such data by filling in the respective electronic forms on the Website, adding preferences, settings, etc.

2.2. Data related to the process of using the Services

(a) Contractual and financial information. In relation to the conclusion and performance of the contract for the provisioning of the Services between You and JOBS.BG, the following data may be processed:
  • Information regarding the contractual arrangements;
  • Information regarding the effected and due payments for Services (for validation of an account and use of paid Services on the Website, the information may include name, bank, bank account, etc.);
  • Information related to the administration and provision of Services;
  • History and information of ordered Services;
  • History and information regarding the use of Services;
  • Other information generated or provided in the course of using the Services.
(b) Settings and notifications. Some of the Services provide settings and notifications (including by email) to facilitate your usage of the Website. JOBS.BG processes the relevant information for this purpose.

(c) Instructions and log of the personal data processing operations. JOBS.BG provides You with a technological solution that allows You to receive applications to your job offers and store them in your account. By accepting the Terms, the Employer (in the capacity of “Controller”) assigns to JOBS.BG (in the capacity of “Processor”) to process personal data for the purposes of providing the Services, in strict compliance with the Terms and your Instructions (item 5.3. of the Data Processing Agreement, which is an integral part of these Terms).

In this regard, We may store information about the instructions made by You or your Representatives via the available functionalities in the Website, as well as processing operations related to personal data (job applications). Such information includes:
  • Actions such as accessing the account and making changes therein, ordering of services, publishing and editing of job offers, etc.
  • Actions including access to data (job applications), e.g. access, erasure, export, etc.
The stored information includes the action, the Representative performing the action, date and time, IP address, etc.

(d) Logs related to security, technical maintenance, development, etc. The Website uses logs for the following purposes:
  • To ensure the reliable functioning of the Services and to detect technical problems;
  • To ensure the security of the Services and to detect malicious activities;
  • Logs required by law (such as logs of electronic statements).
Server logs, logs of Web Application Firewalls and other devices falling in this category. Such logs are necessary to detect technical problems, malicious activities, etc., as described above. The logs are stored for a period of up to 1 /one/ year. They may contain the following information: date and time, IP address, URL, browser and device information. Some devices may use security technologies based on cookies.

(e) Cookies. The normal functioning of the Website requires the use of cookies. You can find a detailed description of the used cookies here.

3. Purposes of personal data processing

JOBS.BG collects, uses, and processes the information described earlier for the purposes provided for in this Policy and in the Terms of Service. These include:
  • Purposes necessary for the conclusion and performance of the contract for provision of the Services between You and JOBS.BG;
  • Purposes necessary for protecting and exercising the legitimate interests of other users of the Services, third parties and JOBS.BG;
  • Purposes for which You have granted explicit consent;
  • Purposes necessary for the fulfilment of JOBS.BG’s legal obligations.
(a) Contract conclusion and performance. These are the purposes necessary for the conclusion and performance of the contract between You and JOBS.BG, including the required data processing upon registration, creating an account, and the activities related to the provision of the Services available on the Website. The purposes include communication with You, including by email, necessary for the provision of the Services and/or for notifying You of changes in the Services. For this purpose, processing of some or all of the above categories of data might be necessary.

(b) Legitimate interest. The purposes of legitimate interests of JOBS.BG or of third parties (other users of the Website (Applicants, Employers, Employer Representatives, administrative contact persons, and unregistered users of the Website), JOBS.BG’s employees and subcontractors or service providers) and include:
  • Ensuring the Website’s normal operation and use by You and by the other users, maintenance and administration of the Services, dispute resolution, detection and prevention of malicious activities;
  • Detection and repair of technical or functionality related issues;
  • Communication with You, including by email, on important issues related to the Services;
  • Receipt and processing of claims, complaints, requests and other correspondence;
  • Exercise and protect JOBS.BG’s rights and legal interests, including by legal proceedings, and rendering assistance to other users of the Website and/or affected third persons in exercising and protecting their rights and legal interests.
For these purposes, processing of some or all of the above categories of data might be necessary.

(c) Legal obligations. These are purposes such as:
  • Financial and accounting activities where processing and storage of information is required by law for the purpose of fulfilment of tax, accounting and other reporting obligations;
  • Activities related to the performance of statutory obligations for the retention or provision of information upon receipt of a relevant order issued by competent state or court authorities; to facilitate the competent state authorities in exercising their control powers; to perform JOBS.BG’s legal obligations to notify You of various circumstances related to your rights, the Services provided or your data protection, etc.;
  • Documenting and reporting activities, and other obligations related to the fulfilment of the requirements under Regulation (EU) 2016/679 and the applicable legislation, including the obligations assigned under the Data Processing Agreement or other applicable obligations.
For these purposes, processing of some or all of the above categories of data might be necessary.

(d) Explicit consent. Your data may be processed on the basis of your explicit consent. In such case, the processing is specific, to the extent and within the scope provided for in the respective consent.

4. Storage period

Below You can find information about the maximum storage periods of the different types of data. We apply the general principle for storing data in minimal volume and for a period not longer than necessary for the provision of the Services, ensuring their security and reliability, and meeting the legal requirements.

Type of data Storage period
Data relating to the registration of a company account, users, additional users, contact details, and information on acceptance of the Terms (date, time, IP address, etc.); contracts, declarations, etc. For the period of maintaining an account in the Website and up to 5 /five/ years from termination of the registration
Settings (Website language, hiding of information boxes, etc.) Until You erase the data or until termination of your registration. If stored in a cookie, not longer than 6 /six/ months from the last use
Invoices and other financial information (including data of Employer and Employer Representatives) For the period of maintaining the account in the Website and up to 5 /five/ years from termination of the registration or up to 10 /ten/ years as of the beginning of the year following the one in which payment is due for the respective year
Correspondence, requests, complaints and claims For the period of maintaining the account in the Website and up to 5 /five/ years from termination of the registration. For the purpose of ensuring the reliability of the Service, incoming phone calls are stored for up to 3 /three/ months.
Instructions and log of the personal data processing operations, log of access to the account (the stored information includes: action, Representative performing the action, date and time, IP address, etc.) For the period of maintaining an account in the Website and up to 5 /five/ years from termination of the registration
System logs. Security, technical maintenance, development, etc. (they may contain information such as: date and time, IP address, URL, browser versions and device) For a period of up to 1 /one/ year
Cookies Description of the used cookies is available in the “Policy for use of cookies”

In case of a legal dispute or proceedings requiring data retention and/or at the request of a competent state authority, data may be stored for longer than the duration specified above until the final settlement of the dispute or the proceedings before all instances. The storage duration may be changed according to the applicable legislation.

Any change in or termination of the relations between the Employer and its Representatives shall not entail a change in the storage periods specified above, due to the fact that the information regarding the orders, instructions and activities of the Representatives is necessary as proof and for reporting purposes with regard to contractual and legal obligations.

Backup. For the purpose of ensuring the reliability of the Services and for prevention of data loss in case of technical issues, a backup policy is applied. The maximum period for updating (erasure of data) from all backup copies is 30 days.

5. Provision of information

JOBS.BG shall not provide your personal data to third parties in any way other than those set out in this Policy, the Terms and as prescribed by law.

The Employer and the Employer Representatives. The data in the Employer’s account, such as data related to the Employer Representatives, requested services, published job offers, and other actions, is accessible to the Employer and its Representatives with access rights granted by the Employer.

Suppliers and subcontractors. JOBS.BG works with subcontractors and service providers such as dedicated data centers for reliable and secure colocation of servers and network equipment, accounting services, etc. When working with subcontractors and suppliers, JOBS.BG requires that they comply strictly with its instructions, this Policy and the Terms.

Suppliers

Third parties. Your personal data may only be provided to third parties in the following cases: when this is prescribed for by law; if requested by a competent state or judicial authority; with your explicit consent; if necessary to protect the rights and legitimate interests of JOBS.BG and/or other users of the Services.

Change of ownership. In the event of a merger, acquisition or sale of assets affecting personal data processing, You will be given an advance notice.

6. Rights with regard to personal data

The Regulation provides for the following rights for natural persons:

6.1. Right of information.
This Policy aims to inform You in detail about the processing of your personal data with regard to the Services provided.

6.2. Right of access. You are entitled to receive confirmation whether your personal data is being processed, to receive access to it, as well as information about its processing and your rights.

Such access is available via the functionalities provided in the Employer’s account.

6.3. Right of rectification. You are entitled to have your data rectified in case it is incomplete or inaccurate.

Your data may be rectified by You and/or by an authorized Employer Representative.

6.4. Right of erasure. You have the right to ask for data to be erased unless there is a material basis and/or legal obligation for its processing.

6.5. Right of restriction with regard to processing. The Regulation provides for the possibility of restricting your personal data processing in case there are grounds for this set forth therein.

6.6. The right to notify third parties. Where applicable, You have the right to request the Controller to notify third parties with regard to rectification, erasure or restriction of the processing of your personal data when the Controller has provided your data to them.

6.7. Right of data portability. You have the right to receive the personal data You have provided and which is related to You in a structured, commonly used, machine-readable format, and to use such data with another controller at your discretion.

6.8. The right not to be subject to a decision based solely on automated processing, including profiling which produces legal effects concerning You or similarly significantly affects You unless there are grounds provided for in the applicable data protection legislation, as well as appropriate safeguards to protect your rights, freedoms and legitimate interests.

No technology falling within this category is used for the provision of the Services on the Website.

6.9. Right to withdraw consent. You have the right to withdraw at any time your consent for personal data processing based on prior given consent. Such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.

6.10. Right to object. You have the right to object with respect to data processed on the basis of legitimate interest.

In the event of such an objection, We will examine your request and, if justified, We will comply with it. If We believe there is sufficient legal grounds for the processing or where necessary for establishing, exercising or defending legal claims, We will inform You accordingly.

6.11. Right to lodge a complaint with a supervisory authority.
You have the right to lodge a complaint with a supervisory authority if You consider that the processing of personal data concerning You infringes the applicable data protection legislation. The supervisory authority in the Republic of Bulgaria is the Commission of Personal Data Protection, address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592.

7. Accuracy of the data
JOBS.BG shall have no liability for the accuracy of the data provided by You, does not perform checks in this respect and does not guarantee the actual identity of the data subjects. In any case of doubt, identified fraud and/or misuse, please notify us immediately. When providing any data on the Website, You undertake not to violate other people’s rights in relation to the protection of their personal data or their other rights.

8. Data Protection Officer
Questions and requests related to exercising your personal data protection rights can be addressed to the Data Protection Officer of JOBS.BG:

Address: 26 Raiko Alexiev Str., Sofia 1113
Email address: privacy@jobs.bg

Policy for use of cookies

Here you can find information about the cookies and similar technologies used for storage of information related to the provided services (“Services”) on the website www.jobs.bg and/or the mobile versions and applications (“the Website”).

Last update: June 13th, 2018

POLICY FOR USE OF COOKIES

Cookies allow information to be stored in your browser (or mobile application). They are used to store settings and identifiers required for some of the services provided on the Website.

JOBS.BG applies strict policy in line with the new EU requirements.

Cookies are used for the following purposes:

Type Storage period Description
Session and navigation management (session identifier, security protection, previous steps for the ‘back button’, etc.) Temporarily (for the duration of your visit on the Website) These cookies are technically required to login, navigate and use the Website. The Website cannot function properly and reliably without them.
Security (protection against access from unauthorised devices, etc.) Up to 6 /six/ months from last login These are cookies used to protect the account against unauthorised access.
Settings (Website language, mobile or desktop version preference, hiding of information boxes) Up to 6 / six / months from last use These are cookies used to save your settings; allowing you to hide information boxes you have become familiar with, etc.
Quick search links functionality Up to 6 / six / months from last use In case you use this option, you can quickly and easily repeat a previous search (from the last 10 searches).
Automatic log in to the account functionality Up to 6 / six / months from last use In case you use this option, it allows you to automatically log in to your account.

Deleting cookies from your browser
A special functionality is provided on JOBS.BG, allowing you to delete all cookies from JOBS.BG. In case you would like to do this, use this link: Delete all cookies from this browser

Control of cookies in the browser
If you want, you can also use your browser settings to delete and/or disable cookies from specific or all websites. More information about this can be found on aboutcookies.org.