GDPR Information

Last updated: March 18, 2026

General Data Protection Regulation (GDPR)

Efge Pharma is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page provides specific information about your rights and how we handle your personal data under GDPR.

Data Controller Information

Data Controller: Efge Pharma
Address: Bulgaria
Email: privacy@efgepharma.com
Phone: +359 XXX XXX XXX
Data Protection Officer: dpo@efgepharma.com

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you have given us clear consent to process your personal data for specific purposes
  • Contract: When processing is necessary for the performance of a contract with you
  • Legal Obligation: When we need to comply with legal or regulatory requirements
  • Legitimate Interest: When processing is necessary for our legitimate business interests
  • Vital Interest: When processing is necessary to protect someone's life

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

1. Right to Information

You have the right to be informed about the collection and use of your personal data.

2. Right of Access

You have the right to request copies of your personal data. We may charge a small fee for this service.

3. Right to Rectification

You have the right to request correction of any information you believe is inaccurate or incomplete.

4. Right to Erasure

You have the right to request deletion of your personal data in certain circumstances.

5. Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances.

6. Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you.

7. Right to Object

You have the right to object to processing of your personal data in certain circumstances.

8. Rights Related to Automated Decision Making

You have the right not to be subject to automated decision-making, including profiling.

How to Exercise Your Rights

To exercise any of your rights, please contact us using the following methods:

We will respond to your request within 30 days. In some cases, we may extend this period by two additional months if the request is complex.

Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we will ensure adequate protection through:

  • Adequacy decisions by the European Commission
  • Appropriate safeguards such as standard contractual clauses
  • Binding corporate rules
  • Codes of conduct and certification mechanisms

Data Breach Notification

In the event of a data breach that is likely to result in high risk to your rights and freedoms, we will notify you without undue delay. We will also report qualifying breaches to the relevant supervisory authority within 72 hours of becoming aware of the breach.

Supervisory Authority

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the relevant supervisory authority.

Bulgarian Data Protection Authority
Website: www.cpdp.bg
Email: kzld@cpdp.bg

Cookie Policy

Our website uses cookies and similar tracking technologies. You can manage your cookie preferences through your browser settings. For more information, please see our Privacy Policy.

Updates to GDPR Information

We may update this GDPR information page from time to time to reflect changes in our practices or applicable laws. We encourage you to review this page periodically.

Contact Us

If you have any questions about GDPR compliance or your data protection rights, please don't hesitate to contact us:

Data Protection Officer
Email: dpo@efgepharma.com
General Privacy Inquiries
Email: privacy@efgepharma.com