GDPR Privacy Policy

Pal Recruitment OOD is a company registered as a recruitment agency under Art. 5, item 1 of the Ordinance on the terms and procedure for performing employment mediation activities, holding registration certificate No 3350 / 29.06.22, issued by the Ministry of Labor and Social Policy.

Our mission is to connect businesses and job seekers and provide the best opportunities while protecting the rights and interests of our clients and candidates.

To perform selection and career counselling and to comply with legal obligations related to employment mediation, we collect, store and process personal data of candidates.

We process personal data on the basis of legitimate interest and explicit consent, depending on the scenario and storage period.

When data is processed on consent, you can withdraw your consent at any time and we will process your request according to applicable legal obligations.

We may collect personal data through our website, recruiting partners, public job platforms, social channels, phone, email, applications, interviews and communication during recruitment procedures.

Please do not include sensitive categories of data in your CV, such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health data, or data concerning sex life.

For your own protection, do not provide identity document details such as personal ID number, passport/ID number, validity dates and similar details unless explicitly required by law.

We use personal data to match candidates and employers, send vacancy notices, improve services, prevent fraud and comply with legal and contractual obligations.

If you apply for a position, we may evaluate employability, qualifications and matching opportunities, and provide additional services such as training and career counselling.

We do not disclose personal data except as described in this policy. Data may be shared with clients offering suitable opportunities and with vetted processors/subcontractors (e.g. IT providers, auditors, consultants) under confidentiality obligations and GDPR-compliant agreements.

We may also disclose data when required by law, lawful request, judicial process, or to prevent fraud, harm or financial loss.

We retain data according to Bulgarian law, legitimate business interests and legal obligations. You may request access, correction, update, deletion, blocking, objection or withdrawal of consent, subject to statutory retention duties.

Information about actions on your request is provided free of charge within 30 calendar days from receipt.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection at [email protected].

Data transfers are limited to the EEA or Switzerland, with appropriate safeguards where applicable.

We maintain an Information Security Management System in accordance with ISO 27001:2013, appoint responsible officers, and apply administrative, technical and physical safeguards.

In case of a personal data breach, the competent authority is notified within the statutory period, and affected individuals are informed where a high risk exists.

We use a minimal cookie setup focused on essential functionality. Non-essential cookies are not activated unless you explicitly opt in.

Petar Djidjev

[email protected]