Rights of natural persons in relation to processing of personal data for the mobile application MyTelenor

You are here

Telenor takes action at the request of an individual to exercise a right under this section only if able to identify the person concerned.

Only persons who can be identified by Telenor may exercise their rights under this section.

If the purposes for which Telenor processes personal data do not require or no longer require the identification of an individual, Telenor is under no obligation to maintain, obtain or process additional information to identify the person for the sole purpose of acting on a request to that person.

Telenor notifies individuals of the action taken within one month of receipt of a request under this section, and in certain cases, this period may be extended by up to two months.

Telenor shall provide individuals with information on the actions taken in connection with their claims for exercising rights under this Section without undue delay and in any event within one month as of receipt of the request. If necessary, this period may be extended by another two months, taking into account the complexity and the number of requests. Telenor shall inform the person concerned of any such extension within one month of receipt of the request, indicating the reasons for the delay.

If a claim is rejected, Telenor notifies the individuals concerned of their rights.

If Telenor fails to act on the request of an individual, Telenor shall notify him/her without delay and at the latest within one month as of the receipt of the request about the reasons for not taking action and of the possibility of filing a complaint to the Personal Data Protection Commission and seeking legal protection.

In some cases, Telenor may request additional information to verify the identity of individuals.

If Telenor has reasonable concerns about the identity of the individual submitting a request under this section, Telenor may request the provision of additional information necessary to verify the identity of the individual.

The actions taken by Telenor for and in connection with claims for exercising rights under this section are completely free of charge to individuals unless their claims are manifestly unfounded or excessive.

The actions Telenor undertakes for and in relation to the exercise of consumer rights are completely free of charge. Where an individual’s request is clearly unfounded or excessive (for example because of its repeatability), Telenor is entitled, in its sole discretion: (a) to refuse to execute the request; or (b) require the payment of a reasonable fee, determined on the basis of the administrative costs necessary to provide the requested information or take the requested action.

Users are entitled to receive from Telenor information on whether personal data relating to them is being processed. If so, users have the right to access the relevant data.

Users may request from Telenor to delete their personal data in the following cases:
personal data are no longer needed for the purposes for which they were collected or processed;
the user has withdrawn his/her consent on which the processing of personal data is based and there is no other legal basis for the processing data;
the user has objected to the processing of personal data based on Telenor's legitimate interest, unless there are other legitimate grounds for the processing that take precedence over the interests, rights and freedoms of the consumer, or the processing of data is necessary for the identification, exercise or defense of legal claims;
the user has objected to the processing of personal data for the purposes of direct marketing and there are no other legitimate grounds for the processing of such data;
the personal data relating to the user concerned have been processed illegally;
personal data must be deleted by Telenor in order to comply with a legal obligation arising out under the law of the Republic of Bulgaria or the law of the European Union.

Users may request from Telenor to limit the processing of personal data related to them in the following cases:
accuracy of personal data is disputed by the consumer for a period that allows Telenor to verify the accuracy of the personal data;
processing is illegal, and the user does not want personal data to be deleted, but instead requires a limitation of their use;
Telenor does not need anymore the personal data for the purposes of processing, but the user requires them to identify, exercise or protect legal claims;
the consumer has objected to the processing of personal data based on Telenor's legitimate interest pending verification that Telenor's legal grounds have an advantage over Telenor's interests.

Users may obtain from Telenor the personal data provided by them in a structured, widely used and machine readable form, as well as to transfer this data to another Administrator without obstruction by Telenor, as long as:

Telenor processes these data for the purpose of concluding or executing a contract with the consumer or on the basis of a consent from the latter; and
processing of relevant data is done in an automated manner.

Users may request Telenor to transfer their personal data directly to another administrator when technically feasible.

Users may, at any time and on grounds relating to their particular situation, object to the processing of personal data relating to them when Telenor processes their data to protect its legitimate interests.

Users may file complaints or alerts with the Personal Data Protection Commission (CPDP) if they believe that Telenor violates the privacy laws. Instructions for filing complaints are published on the CPDP web site: www.cpdp.bg

Users may also file complaints to other supervisory authorities within the European Union as provided for inRegulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/ 46/ EC.