Privacy Policy

Data controller: Synergy Global Financial Solutions Ltd.
Registered address: 111 P Tsarigradsko Shose Blvd., floor 4, zone 2, 1784 Sofia, Bulgaria.
UIC/EIK: 202753358.
Email: office@synergygfs.com.
Telephone: +359 2 494 0224.
Website: https://synergygfs.com/.

For privacy questions and data-subject requests, contact office@synergygfs.com.

Depending on how you interact with us, we may collect and process different categories of personal information.

Business enquiries and RFPs: name, company, job title, business email address, telephone number, correspondence, and information included in enquiries, RFP documents or requests for a proposal. Please avoid including personal or confidential banking/customer information that is not necessary for the enquiry.

Website use: IP address, browser and device details, access dates and times, requested pages, referring pages and security logs, to the extent recorded by our website and infrastructure providers. Analytics data is collected only to the extent that the corresponding technologies and search engines are actually enabled.

Business contacts and outreach: name, role, employer, business email address, business telephone number, relevant publicly available professional information, contact source, communications and preferences. We may obtain these details directly or from company websites, professional directories, business networking platforms and other lawful external sources.

Recruitment: name, contact details, CV, cover letter, education, qualifications, employment history, skills, certifications, professional references where relevant, availability, interview communications and other information provided by applicants. Applications may be submitted through the Website, by email or through recruitment platforms; they are received by our HR office and stored in our Microsoft 365 environment. We may also receive relevant information from recruitment agencies, professional references or publicly available professional sources, to the extent permitted by applicable law. The applicant may voluntarily provide additional information in their CV, motivation letter, portfolio or supporting documents beyond the information strictly necessary for the recruitment process. The provision of such additional information is voluntary and will not, by itself, adversely affect the application. We will only process information that is relevant and necessary for recruitment and employment-related purposes. Where the recruitment process requires information that is subject to a specific legal requirement, we will process it to the extent necessary to comply with that requirement.

Providing personal data through our website is generally voluntary. However, certain information, such as your name, email address and the content of your enquiry or application, may be necessary for us to respond to your request or process your job application. Fields marked as mandatory in our online forms must be completed for the relevant form to be submitted. If you do not provide the required information, we may be unable to respond to your enquiry, evaluate your application or process your request.

Unless otherwise indicated, providing personal data through the Website is not a statutory or contractual requirement.

We use enquiry and RFP information to answer questions, evaluate requests, arrange discussions, prepare potential proposals and communicate with prospective clients. A website enquiry does not itself create a contract.

We use professional contact details to manage relationships with customers, suppliers and partners, and to introduce our banking technology products and services to relevant representatives of banks, financial institutions and other organisations, subject to applicable rules on unsolicited electronic communications.

We may send an occasional corporate newsletter, generally once or twice per year, with news about Synergy GFS, its services, products and developments. We send marketing communications only where permitted by applicable data protection and electronic communications law. Every marketing email will provide a practical way to object or unsubscribe. Newsletter subscribers may withdraw consent at any time where consent is the basis used.

We use candidate information to evaluate applications, communicate with applicants, conduct interviews and manage recruitment. The HR office handles applications; access to stored recruitment information is restricted to personnel authorised for the recruitment process.

We use technical data to operate and protect the Website, investigate security incidents and troubleshoot problems. We may also process relevant information to comply with legal duties and establish, exercise or defend legal claims.

Unsuccessful candidates’ recruitment information is generally retained for no longer than six months following conclusion of the recruitment procedure, subject to applicable Bulgarian law and legally justified exceptions. With separate, voluntary consent, relevant application information may be retained for consideration for future vacancies for up to two yearsfrom that consent, or until its earlier withdrawal. Successful candidates’ necessary information becomes part of employment records and is subject to applicable employment-record retention rules.

Depending on the activity, we rely on:

Legitimate interests (GDPR Article 6(1)(f)), including responding to business enquiries, maintaining professional relationships, appropriate business development, website security and administering recruitment, after balancing relevant interests and rights;

Steps requested by an individual before entering into a contract (Article 6(1)(b)), where this genuinely applies, including relevant employment applications;

Legal obligations (Article 6(1)(c)); and

Consent (Article 6(1)(a)), where required, including optional future-vacancy retention and certain marketing or cookie activities.

Where the contact person represents an organisation, we do not automatically treat the organisation’s potential contract as a contract with that individual. GDPR lawful bases do not override separate legal requirements for sending unsolicited commercial email.

The Website does not use cookies. It stores nothing on your device unless you turn analytics off below, in which case it saves that one choice.

Your IP address itself is not stored. Visits are counted with an anonymous identifier calculated from your IP address and browser details together with a secret value that changes at least once a month, so it does not identify you and cannot be used to follow you across other websites.

We use this information only in aggregate, to see which pages are visited and to improve the website, on the basis of our legitimate interest (Article 6(1)(f) GDPR). It is not used for advertising or profiling, and it is deleted after six months.

Umami processes this data on our behalf under a data processing agreement. Where the data is transferred outside the EEA, the transfer is covered by the Standard Contractual Clauses approved by the European Commission.

Analytics is optional. You can turn it off for this browser at any time with the switch below, and nothing else on the website changes. It takes effect straight away and is saved in your browser’s local storage; clearing your browser data for this website resets it. You may also object to this processing by contacting us at office@synergygfs.com.

We use service providers as necessary to operate the Website and our business communications, including website hosting and infrastructure, business email and Microsoft 365 storage, IT and security support, and recruitment or communication providers where actually engaged. Providers acting as processors are subject to appropriate contractual and security requirements. Microsoft 365 is used to store recruitment applications received by the HR office.

We disclose personal data only where necessary to authorised Synergy GFS personnel, relevant service providers, professional advisers and competent public authorities where legally required. We may disclose relevant business correspondence to the responsible employees preparing a response or proposal. Recruitment information is managed through the HR office and is not routinely disclosed to unrelated third parties. We do not sell personal data.

Our service providers may process or access personal data from locations outside the European Economic Area. Where a transfer subject to GDPR Chapter V occurs, we use an applicable adequacy decision, European Commission Standard Contractual Clauses or another lawful mechanism, together with supplementary safeguards where required. You may contact us for information about relevant safeguards.

We retain personal data only for as long as needed for the stated purpose, subject to legal duties and legitimate claim-preservation needs. Enquiries and RFP correspondence are retained while the request is active and thereafter for a period justified by business follow-up and possible claims.

Recruitment retention is described in Section 3. Where no fixed period is stated, the criteria are the purpose of processing, the duration of a business relationship, the relevance of the information, applicable statutory obligations and limitation periods. We delete or anonymise information when retention is no longer justified.

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction; loss; alteration; unauthorised disclosure; unauthorised access; other unlawful forms of processing. Security measures may include access controls, authentication mechanisms, encryption where appropriate, backups, monitoring, secure infrastructure and internal procedures.

Subject to applicable legal conditions and limitations, you may have the following rights:

Contact office@synergygfs.com to exercise your rights. We may ask for information reasonably necessary to verify identity. We will respond without undue delay and generally within one month, subject to lawful extensions. Requests are generally free; a reasonable fee may apply to manifestly unfounded or excessive requests where permitted by law.

You may lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, https://cpdp.bg/ (opens in a new tab), or another competent supervisory authority where applicable. You may also contact us first to discuss a concern.

The Website is intended for business and professional audiences and is not directed at children. We do not knowingly seek personal data from children through the Website. If you believe a child has provided personal data, please contact office@synergygfs.com.

The Website may link to third-party sites and platforms. Their processing of personal data is governed by their own privacy notices. We encourage visitors to review those notices.

We may revise this Policy when our website, processing activities or applicable law changes. The current version and its update date will be published on the Website. Where required, we will provide additional notice or obtain consent.

SYNERGY GLOBAL FINANCIAL SOLUTIONS LTD.
111 P Tsarigradsko Shose Blvd., floor 4, zone 2, 1784 Sofia, Bulgaria
UIC/EIK: 202753358
Email: office@synergygfs.com
Telephone: +359 2 494 0224
Website: https://synergygfs.com/

This Policy should be read with any applicable Terms of Service and privacy information provided at the point of collection.