Fulfilment of obligations arising from a regulatory act

In certain cases, the applicable national and European legislation requires Yettel to process personal data about consumers for certain purposes, in a specific way and / or for a specified period. The main cases where Yettel is required to personal data in order to fulfill its regulatory obligations are described below.

We process personal data when, under applicable law, we are required to provide information to competent authorities.

The personal data processed by Yettel are to be made available to the competent authorities subject to the conditions stipulated by law and in accordance with the envisaged procedure.

For example, according to the Criminal Procedure Code of (CPC), Yettel is required, upon request from a court, a prosecutor or an investigative body, to provide documents or data that Yettel holds and that are relevant to the case in question. The requested papers or data may contain personal data of users of the Solution.

We process personal data of users when, under applicable law, we are required to assist competent state and/or municipal authorities when they perform checks.

The commercial activity carried out by Yettel is subject to control by various state and municipal authorities – e.g. Communications Regulation Commission (CRC), Consumer Protection Commission (CPC), Commission for Personal Data Protection (CPDP) and others. In the course of exercising this control these authorities have the power to make inspections and to request from Yettel the documents and information that it holds. The requested papers and data may contain personal data of users of the Solution. For example, when a user has submitted an alert or complaint the CRC, CPC and CPDP have the power to request from Yettel documents and information relating to the case that may include data of a user of the Solution.

We process personal data to fulfill obligations arising from the accounting and the tax legislation.

The tax and accounting legislation in the Republic of Bulgaria requires Yettel to compile certain accounting and business information, including to keep such information for a specific period, as well as any other data and documents relevant for taxation. In fulfillment of this obligation, the relevant information and documents containing personal data of the users are kept by Yettel for the terms stipulated by the respective laws. These terms are very long (for example, the documents for tax and social security control are to be kept for eleven years).