ITCE & KPMG ITS (Hereinafter referred to as Cloud & DevOps Academy, “we”, “us”, “our”) is committed to the protection of your personal data. It is impossible to provide our services without collecting and processing a certain set of your personal data. Their processing should be carried out in accordance with the applicable European and national legislation.
Therefore, with this Privacy policy (hereinafter referred to as the Policy), we would like to inform you why and how we collect and process your personal data and notify you of your rights as subjects of our personal data processed by us.
The controllers of your personal data are:
ITCE Ltd, UIC 121673816 and address of management: Bulgaria, 1784, Sofia, Tsarigradsko shosse Blvd., Megapark Business Center, fl. 1, office 6; Phone: +359 2 44 00 444. E-mail address: privacy@itce.com, website: www.cloudacademy.bg;
And KPMG IT Service OOD, UIC 203572873, having its registered office in 1404, Sofia, at 45/A, Bulgaria Boulevard; E-mail: de-ppl-com@kpmg.com
The Supervisory Authority in relation to the processing of personal data by KPMG IT Service and ITCE is the Bulgarian Commission for Personal Data Protection, address: Bulgaria, 1592, Sofia, “Prof. Tsvetan Lazarov “№2; Telephone: +359 2 91 53 518; Fax: +359 2 91 53 525; e-mail address: kzld@cpdp.bg, website: https://www.cpdp.bg/
For the purposes of running the Cloud & DevOps Academy, we collect personal information about:
Personal information we collect when you use/visit the Cloud & DevOps Academy website
The personal information that we collect when you visit our website may include information that you provide voluntarily as well as information collected automatically.
We collect personal information that you provide voluntarily through our Website for example when completing online formsor use our emailto contact us. This information may include name, job title and company, contact information, such as email address and telephone number, as well as other personal information that you voluntarily choose to disclose to us.
If you are visiting our website to apply for the Cloud & DevOps Academy, we may also collect information related to your application. For more information please refer to the section on Applicants for the Cloud & DevOps Academy.
When you visit our website, we may collect certain personal information automatically. This information we collect automatically may include information like your IP address, device type, unique device identification number, browser-type, geographic location, pages visited, time and date of visit and other technical information.
Collecting this information enables us to better understand the visitors who come to our Website, where they come from, and what content on our Website is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Website to our visitors.
Some information we collect by using cookies and similar tracking technology. More information may be found in our Cookie Section.
Personal information we collect when you apply for the Cloud & DevOps Academy
In order to review and assess your application for traineeship at the Cloud & DevOps Academy, we collect the following personal data:
We use this information to assess whether your skills, motivation, education and experience suffice with the requirements set by Cloud & DevOps Academy.
This information is viewable only to staff members responsible for the trainee recruitment process to perform assessment of the applicant’s suitability, to review evidence for the qualities and qualifications, to contact you for setting up an interview. We may collect further information from you during an interview.
We collect personal information about applicants for the Cloud & DevOps Academy from the following sources:
What more I need to know?
If you apply for the Cloud & DevOps Academy via our website, we will also collect other personal information through our website. For more details, please refer to the section above on Visitors/Users of the Cloud & DevOps Academy website.
If you are included in our shortlist of successful applicants and admitted to train at the Cloud & DevOps Academy we will collect further details, such as your position at KPMG ITS, your corporate email, etc. For more details please refer to the section below concerning Cloud & DevOps Academy trainees.
Personal information we collect for selected Cloud & DevOps Academy trainees
In order to include you in the training roster and database of the Cloud & DevOps Academy, we collect various personal data (some of which we may already have from the recruitment procedures), such as:
We will also collect information with regard to the academy training. This information would include data about the progress of your studies, performance assessment, the level of understanding and completion of trainings, success levels, as well as attendance of classes.
As it was (or would be) thoroughly explained if you are amongst the selected trainees, the Cloud & DevOps Academy traineeship initiative is organized for KPMG IT Service’s employees only. Therefore, prior to begin your academy training you should become a KPMG ITS person (if not hired in previous recruitment campaigns). To set up and manage the employment related relation, KPMG ITS will collect, store and process the above mentioned personal details, as well as other details, including as necessary personal identification code, conviction and health status (if applicable), salary details, bank account details and many more.
KPMG ITS may sometimes collect personal information that is viewed as particularly private or sensitive. We may do so if we have an employment law obligation to do so or with the individual’s explicit consent. This information may concern disabilities in view of employment with KPMG ITS so as to provide a suitable working environment. We may also ask you to provide diversity information about your religious beliefs so as to comply with labour law rules concerning leave days during religious holidays. Due to the nature of such information its provision remains purely voluntary so please feel free to share we us if these topics are not welcome.
For the purposes of personal data processing outside the Cloud & DevOps Academy, you will be provided with a separate notice in your capacity as KPMG ITS person.
Why do we use this information?
We use the above information for the purposes of setting up the academy, organizing classes, design appropriate courses, scheduling courses and courses. We will use your details to communicating these organization details with you, as well as to provide relevant information about you to class trainers. We also use the information to track you progress and assess your performance as a trainee.
How do we collect your personal information?
We collect personal information about Cloud & DevOps Academy trainees from the following sources:
From academy trainers – for example, your trainers’ assessment of your progress, performance evaluations, etc.
Personal information we collect about trainers at Cloud & DevOps Academy
In order to assess your suitability for hiring you as a trainer at Cloud & DevOps Academy, we may request personal data for you qualifications, education level, professional experience, etc. We will gather information from you and from publicly available sources e.g. professional networking websites (LinkedIn).
We need this information to assess whether your skills, motivation, education level, qualifications and experience suffice with the requirements set by Cloud & DevOps Academy.
If you reach us through the Cloud & DevOps Academy via our website, we will also collect other personal information through our website. For more details, please refer to the section above on Visitors/Users of the Cloud & DevOps Academy website.
If we decide to hire you and for the conclusion and performance of a contract with you we will further need you full name, social security status (e.g. as self-employed), bank account details, etc.
Upon entering into a contract with you in the capacity as trainer, you will be provided with further information concerning the details of your personal data processing, in addition to the information presented in the present policy.
Our website https://www.cloudacademy.bg/ uses cookies to make it easier to view our Website, improve its functionality and optimize it to suit your preferences. By using cookies Cloud & DevOps Academy can provide you with user-friendly services that would not have been possible without them, not to enter access data each time you access our Website.
You can prevent the installation of cookies or block them by setting your browser to refuse all or some cookies. In addition, already set cookies can be deleted at any time via your internet browser or other software programs. If you choose to disable the cookie setting in the Internet browser you are using, not all features on our website can be fully used.
Please note that there are also mandatory cookies that cannot be excluded if you wish to use our Website.
Are there any other cases when ITCE or KPMG ITS will collect data about you?
Security measures
We may collect your personal information when you visit ITCE or KPMG ITS offices, e.g. to registers you as a visitor or via installed video surveillance or other relevant measures that require processing of your data, e.g. for issuing a visitors badge.
Relevant information regarding the above mentioned processing will be provided in our respective offices at:
Automated decision making, which includes profiling
We do not process your personal data for automated decision making, which includes profiling.
In summary, we process your personal data on the basis of:
Our legal basis for collecting and processing the personal information as described in the sections above varies depending on the personal information concerned and the specific context in which we collect it, e.g. visiting our website, applying for the Cloud & DevOps Academy or hiring you as an external trainer.
Under normal circumstances, we will only collect personal information about you only where we have your consent to do so (when you apply for the Cloud & DevOps Academy), where we need the personal information to undertake some actions to conclude or perform a contract with you (for example, when hiring you as a trainer), or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g. to track website visits). In some cases, we may also have a legal obligation to process personal information about you, or may need to process personal information in order to exercise, establish or defend legal claims, e.g. for tax reporting purposes when we provide payments for your services as a Cloud & DevOps Academy trainer.
We will strive to inform you and provide additional clarifications when we require personal information from you. We will advise you whether the provision of your personal information is mandatory (e.g. you shall informs of your employment or self-employment status for tax purposes) or not (as well as the possible consequences if you do not provide your personal information).
If you have any questions or concerns about the legal basis on which we collect and use your personal information for the Cloud & DevOps Academy initiative (including any legitimate interests relied upon), please send an email to privacy@itce.com/ or de-ppl-com@kpmg.com
Cloud & DevOps Academy keep your personal data for no longer than is necessary to meet the purposes for which this personal data has been collected. Upon expiration of this period, your personal data will be securely deleted, as long as it is no longer required for the conclusion or performance of a contract, for securing court proceedings or if the applicable law explicitly does not require your personal data to be processed for a longer period of time.
We undertake to share your information only amongst employees of KPMG ITS and ITCE who require your information to perform their job functions, e.g. team leaders in whose team you may be included, relevant hiring managers, administrative staff, etc. on a need-to-know basis, as well as the management officials of both companies. All of the mentioned individuals are under duty of confidentiality in terms of further disclosure of your personal information.
Sometimes we need to share your personal information with our partner organizations. When this is necessary, Cloud & DevOps Academy comply with all aspects of applicable European and national data protection legislation.
Whenever necessary or required, we share information with:
We do not transfer your personal data to countries or territories outside the European Economic Area.
The General Privacy Protеction Regulation guarantees you a certain set of rights that you may exercise in relation to your personal data processed by us. Specifically, you have:
In brief
The General Data Protection Regulation guarantees you a certain set of rights that you may exercise in relation to your personal data processed by us. In summary, you have the following data protection rights: to access, correct, update or request deletion of your personal information or the restriction of their processing. You may also be entitled to object to the performed processing (when we process data on legitimate interest grounds) or may have the right of data portability.
If you wish to exercise any of your rights, you can do so at any time by contacting us via electronic mail sent to the following email address: privacy@itce.com or de-ppl-com@kpmg.com
In more detail:
Right to information: You have the right to receive relevant information of our processing of you data, which is actually the purpose of this Policy. However, at any time you may contact us to receive additional information or clarifications on whether and how Cloud & DevOps Academy process any of your personal data.
The right of access: You have the right to get free information about the nature, volume and way Cloud & DevOps Academy use your personal data, and get a copy of this information. In addition, you have the right to receive information about the recipients of your data, including whether your personal data is being transferred to a country or an international organization located outside the European Union. If such a transfer takes place, you have the right to be informed of the appropriate precaution measures taken to protect your personal information.
Right of Rectification: You may request from us within a reasonable time to supplement and / or correct incomplete, inaccurate or outdated personal data.
Right of Erasure: You may require the deletion of your personal data and we are obliged to delete the personal data without undue delay, unless there is a legitimate legally prescribed reason to deny your request, e.g. when the processing is mandatory under the applicable legislation.
Right to Restriction of Processing: In the event that personal data that we process is inaccurate or obsolete or if you deem our processing unlawful, you have the right to ask us to limit / suspend the processing of such data for a period that allows us to verify the accuracy of the information and correct it accordingly, or until we resolve the matter of the legality of our processing.
Data portability: This right allows you to get your personal data in a structured, machine-readable format.
You are entitled to data portability inly where we process your personal information on the basis of consent or for the conclusion/performance of a contract and provided that the information itself is processed via automated means.
Right of objection: You may object to our processing at any time on grounds relating to your particular situation (applicable when processing your data is done on the basis of a legitimate interest of Cloud & DevOps Academy or a third party).
Right to withdraw consent: When processing your personal data is based on your consent, you are entitled to withdraw it at any time. This can be done online by contacting us via email: privacy@itce.com or de-ppl-com@kpmg.comor in our office. Withdrawal of your consent does not affect the legality of the processing prior to the consent withdrawal.
Right to Complain before the Surveillance Authority: If you believe that your privacy and data protection rights have been violated, you have the right to contact the Bulgarian Data Protection Commission. CPDP data is contained at the top of this Policy.
To exercise any of the above rights, you may contact us at any time via privacy@itce.com or personally at our office. Before we can fulfill your request, we may ask for additional information to verify your identity.
Security of processing
As controllers, we maintain and require from our partners and suppliers appropriate technical and organizational measures to protect and safeguard your personal data processed.
Changes to this Policy
This Policy was last updated on 20.06.2019. We may change its contents by updating this page to reflect changes in applicable legislation or the Cloud & DevOps Academy privacy practices. However, we will not use your personal data in new ways without your knowledge or consent.
External links
Our website and services may provide links to other websites through direct links or through third party applications. Cloud & DevOps Academy do not control these sites or their privacy practices, so we recommend that you familiarize yourself with their privacy practices before sharing your personal data with these platforms.
With submitting your CV to KPMG IT Service OOD you give us your consent to process your personal data in the course of the current recruitment campaign for the following purposes:
– Assessment of your suitability for the position above
– Receiving evidence for the qualities and qualifications, necessary for occupying the respective position
– Establishing contact with you for setting up an interview
– Extending a job offer if you are selected for employment.
When you apply for a job at KPMG IT Service, we process the following categories of personal data:
– Identification data, such as your name, citizenship;
– Contact details, including email and phone number;
– Information about your education, skills and professional experience, including references from previous employers or colleagues of your which you presented;
– Information, gathered in the course of our interviews, such as interviewer’s notes; test results, etc.;
– Other information included in your application, which you deemed relevant and voluntarily provided within your CV or during interviews.
If you have a social media profiles with provider facilitating professional communication, such as LinkedIn or on your current employer’s website, we may review it. We will not inspect any purely personal social media activities of yours.
If you are a selected candidate for employment, KPMG IT Service will require additional personal details, as is necessary for the conclusion of an employment contract and you becoming a KPMG person.
The personal data you provided shall be processed for the purposes of the current recruitment campaign and will be deleted not later than 1 (one) month as of its completion. If in the course of the current recruitment campaign you provided original or notarized copies of documents, these documents will be returned to you within the term stated above.
Any internally required documentation concerning you, which was created by KPMG IT Service in the course of the current recruitment campaign on the basis of the information and documents you provided, may be stored by KPMG IT Service for a period of 3 years as of the completion of the campaign in order to defend the legal rights and interests of KPMG IT Service in the course of any administrative or court proceedings as per applicable legislation in force.
KPMG IT Service, upon your request and granting consent, may keep your personal data and use it in the course of subsequent recruitment campaigns to inform you of available positions and include you application in the selection process. Under this scenario, we will store your personal data for a period of another 2 years as of the end of the current campaign. After that your personal data will be permanently deleted.
You may withdraw your consent at any time by sending us your written withdrawal per post at: 1766, Mladost 4 r.a., Business Park Sofia, building 15A, floor 3.
You may also withdraw your consent via email sent to the address, published in the Personal Data Protection Section of this website.
The withdrawal of consent does not affect the lawfulness of the processing completed prior to receiving the withdrawal.
Furthermore, the General Data Protection Regulation guarantees you a certain set of rights that you may exercise in relation to your personal data processed by us. In summary, you have the following data protection rights: to access, rectify, update or request deletion of your personal information or the restriction of their processing, as well as the right of data portability. You are also entitled to lodge a complaint with the Bulgarian Commission for Personal Data Protection.
© 2020 KPMG IT Service OOD, a joint company of KPMG Bulgaria and KPMG Germany and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved.
The KPMG name and logo are registered trademarks or trademarks of KPMG International.
Welcome to our website, by continuing, you agree to the use of cookies. More information
The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.