Privacy Policy for Bizzio ERP

This document is a draft template and should be reviewed and adapted by a qualified lawyer and/or data protection specialist before publication.

1. Who processes personal data

This Policy explains how GenCloud Ltd., VAT No: BG203378562, registered office: 90 Vl. Vazov Blvd, email: office@gencloud.bg, processes personal data in connection with the gencloud.bg website, the Bizzio ERP service, customer communication, support and contractual relationships.

For data that GenCloud processes for its own purposes, GenCloud acts as a controller. For data that customers enter and process in Bizzio ERP for their own business purposes, the customer is usually the controller and GenCloud acts as a processor on behalf of the customer, unless a specific agreement provides otherwise.

2. What data we process

• Contact data: name, email, phone number, position, company, correspondence address.
• Contractual and billing data: customer details, proposals, contracts, invoices, payments and communication history.
• User account data: username, email, roles, permissions, access and activity logs, settings.
• Technical data: IP address, device, browser, operating system, date and time of access, system logs, errors and security data.
• Data in Bizzio ERP entered by the customer: information about customers, suppliers, employees, items, warehouses, documents, transactions, orders, payments, reports and other business information depending on the configuration.
• Communication and support data: messages, tickets, attachments, issue records, replies and service history.

3. Why we process data

• To provide, administer, support and develop Bizzio ERP.
• To create and manage customer and user accounts.
• To perform contracts, proposals, invoicing, payments and accounting.
• To provide technical support, diagnostics, bug fixing and service improvement.
• To maintain information security, prevent abuse, protect systems and investigate incidents.
• To communicate about the service, changes, support, administrative messages and legal notices.
• To comply with legal obligations and protect rights and legitimate interests.

4. Legal bases

Depending on the case, processing may be based on performance of a contract, steps prior to entering into a contract, legal obligation, legitimate interest, consent, or processing on behalf of a customer as a data processor.

5. GenCloud as data processor

When a customer uses Bizzio ERP to process personal data of its customers, employees, counterparties or other persons, the customer determines the purposes and means of processing. In those cases, GenCloud processes the data only on documented instructions from the customer, to provide and support the service, unless the law requires otherwise.

Detailed rules on processing on behalf of the customer, sub-processors, security measures, retention periods and deletion after termination should be set out in a separate data processing agreement.

6. Who we share data with

We may share data with hosting and infrastructure providers, communication service providers, accountants, payment providers, integration partners, support subcontractors, professional advisers, public authorities, courts or other parties where necessary for the service, the agreement or the law.

Bizzio ERP may use infrastructure and services provided by third parties. Where data is transferred outside the European Economic Area, appropriate safeguards under applicable law are applied, such as an adequacy decision or standard contractual clauses where necessary.

7. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, for the term of the agreement, for statutory periods, accounting and tax obligations, protection against claims or security. Data in Bizzio ERP customer databases is retained according to the agreement with the customer, configuration and applicable policies.

8. Security

We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. Measures may include access control, logs, backups, permission restrictions, encrypted connections, system monitoring and incident response procedures.

The Customer is also responsible for its own users, devices, passwords, access rights, internal rules and lawful entry of data into the system.

9. Cookies and similar technologies

The website and service may use cookies and similar technologies for core functionality, security, sessions, preferences, statistics or service improvement. Where the law requires consent for certain cookies, an appropriate choice mechanism will be provided.

10. Data subject rights

Subject to applicable law, individuals may have the right of access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent where processing is based on consent.

Where a request relates to data processed by a customer in Bizzio ERP, GenCloud may refer the individual to the relevant customer or assist the customer in accordance with the agreement and the law.

11. Complaints

If you believe your rights have been infringed, you can contact us at office@gencloud.bg. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority.

12. Children

Bizzio ERP is intended for business customers and is not directed at children. We do not knowingly collect personal data from children through the public website or service, unless such data is entered by a customer as part of its lawful business activity and under its responsibility.

13. Changes to this Policy

We may update this Policy. The new version will be published on the website or communicated appropriately. The last updated date indicates when the document was most recently changed.

14. Contact

GenCloud Ltd. / [full legal company name], VAT No: BG203378562, address: 90 Vl. Vazov Blvd, email: office@gencloud.bg.