GDPR Data Subject Requests
This page describes your rights under Regulation (EU) 2016/679 (GDPR) and how to exercise them with respect to the personal data Finite Software Systems Ltd. ("we") processes about you.
For a full description of why and how we process personal data, see the Privacy Statement.
1. Your rights
You have the following rights regarding your personal data:
- Access (GDPR Art. 15): a copy of your data and information about how we process it.
- Rectification (Art. 16): correction of inaccurate or incomplete data.
- Erasure (Art. 17): deletion in the cases listed in the GDPR.
- Restriction (Art. 18): limit our processing in specific cases.
- Portability (Art. 20): receive your data in a structured, commonly-used, machine-readable format and ask us to transmit it to another controller where technically feasible.
- Objection (Art. 21): object to processing based on legitimate interest.
- Withdraw consent (Art. 7(3)) at any time, without affecting prior lawful processing.
2. How to submit a request
Send us a request by email to info@finite-soft.com.
In your request, please clearly state:
- which right you are exercising (for example "I want a copy of my personal data" — Access; "please delete my data" — Erasure, and so on);
- what data you are referring to — as specifically as possible (for example "the contact form correspondence from March 2025", "the application for Senior Developer in June 2024");
- your name and contact email.
We are not required to accept requests in any specific format — you may also write to us freely. A more specific request, however, helps us respond more quickly and accurately.
3. What we need from you
To protect your personal data, we verify that the request really comes from you. We apply a tiered approach:
- For most requests, it is enough that the request is sent from an email address known to us from prior correspondence (for example the email you used to submit a job application or to write to us through the contact form).
- For higher-risk requests (for example erasure of a CV) we may ask you to confirm one additional detail from a prior interaction — for example an approximate date of contact or the subject line of an earlier message.
- For high-risk cases or genuine doubt about identity, in rare cases, we may ask for a redacted copy of an ID document (with all fields blacked out except name and photo). This is an exception, not the rule.
We do not request copies of identity documents by default, and we will not ask for more data than necessary for verification.
4. How long it takes
We respond within one month of receiving your request. For complex or numerous requests we may extend this period by up to two further months; we will let you know within the first month and explain why.
5. Cost
Requests are free of charge. We may charge a reasonable administrative fee or refuse to act if a request is manifestly unfounded or excessive (in particular because of its repetitive character) under GDPR Art. 12(5).
6. If you are unhappy with our response
You have the right to lodge a complaint with the Commission for Personal Data Protection (KZLD), the Bulgarian supervisory authority:
- Website: kzld.bg
- Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
- Phone: +359 2 91 53 518
- Email: kzld@cpdp.bg
You also have the right to an effective judicial remedy under GDPR Art. 79.
7. Translation
This page is published in Bulgarian and English. In case of discrepancy between the two versions, the Bulgarian version prevails.
8. Contact
- Email: info@finite-soft.com
- Postal: Finite Software Systems Ltd., 4 Gorotzvet Str., 1421 Sofia, Bulgaria
Last updated: 27 April 2026