Gamito Ltd.

GDPR Privacy Policy

GAMITO EOOD is a company registered as a recruitment agency of the Ordinance on the terms and procedure for performing employment mediation activities, holding registration certificate №: 1814 / 16.12.2014, issued by the Employment Agency.

Our mission is to connect businesses and job seekers to provide the best opportunities and meet the interests of our clients.

  • usage of your personal data for selection and career counselling purposes only;
  • maintaining your personal data confidential, up-to-date and available by applying technical solutions, organizational measures and internal control procedures;
  • transparent procedures for managing your personal data so you can easily and effectively exercise your rights under the GDPR;
  • a personal Career Advisor/Manager that will provide you with the most appropriate job offers, advice on interviews with Employers/Clients, and assistance for managing your personal data.

Our statement is not only to provide professional services and full assistance for your professional accomplishment, but also the security of your personal data in full compliance with Regulation (EC) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred only to as the GDPR.

For more detailed information, please thoroughly familiarize yourself with the full text of our Policy on management and confidentiality of personal data, while we also remain available for further information and advice.

Last updated: 02.03.2022




GAMITO EOOD, collects and processes personal data in a lawful, conscientious and transparent manner, respecting the principle of privacy and non-interference in the personal life of citizens. Our Policy on confidentiality of personal data binds us by the commitment to process your personal data only in case:

  1. Based on contractual/application relations – these grounds apply when we contact you in relation to your accepted application, regarding any of our job selection offers, which you have applied to in order to cooperate with you and potential employers/hiring clients

The Contract’s number is the same as your Candidate file/email, which can be used to perform all legitimate actions related to the GDPR.

Your e-mail becomes the identifier of your personal Candidate file, with which you can perform all legitimate actions related to the GDPR.

When we contact you regarding with the job offer appropriate for your profile and preferences, your file will be processed according to the upper policy.

  1. Based on explicit consent – these grounds apply for all candidates who are present in our database in relation to the upper policy, after the expiration of the aforementioned processing period. These grounds are also valid for candidates who have been entered into our database for previous years. We will contact you in order to receive your explicit agreement or refusal for future processing of your private data for the purposes of selection and career counselling.
  1. Based on legitimate interest – your personal data may be stored for a period up to 3 years in relation to legal claims.
  1. Compliance with a legal obligation – we may store your personal data up to 10 years in order to comply with the regulations in the field of tax laws.

If we receive your agreement, your e-mail will become the identifier of your personal Candidate file, with which you can perform all legitimate actions related to the GDPR.

This Policy on management and confidentiality of personal data fully complies with the requirements of the General Data Protection Regulation – Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and on the repealing Directive 95/46 / EC (General Data Protection Regulation), Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications), the Personal Data Protection Act, the Electronic communications Act and the Ordinance on terms and conditions for performing employment mediation activities and shall apply to:

(1) the persons who apply for a job with us (in all channels - job ads, job portals such as linked in, emails, chats, in person, etc);

(2) the applicants we provide or refer to our clients;

(3) applicants who are provided by possible recruiting partners to process our clients’ positions;

This Policy describes the types of personal data we collect, the purpose and the manner we use them and the individuals with whom we share it, as well as the rights and options available to individuals concerning the use of their data. We also describe the steps we take to protect the confidentiality of data and the ways you can contact us about our confidentiality practices and the exercise of your rights.

Data we collect

We collect personal data about you in various ways, such as through our site, our recruiting partners, public information platforms for jobseekers (e.g.:,, etc.), social network channels (e.g., Facebook and LinkedIn, etc.), at events, by phone or e-mail, job applications and personal selection, and in the course of our relationship with customers and suppliers. We may collect the following types of personal data:

  • contact details (names, e-mail address and phone number);
  • date of birth;
  • sex;
  • nationality and status of work permits;
  • other information included in your CV, information you provide about your career development preferences and other information about your recruitment qualifications:
    • previous job, employers and education data;
    • language skills and other job-related skills;
  • information provided through references,
  • information from interviews, tests, face-to-face and remote communication carried out in relation to the selection procedure
  • other data you may provide to us, such as through the “Contact Us” feature on our site.

We are obliged to refrain from using your personal data for purposes other than the purpose of selection and career counselling. In addition, we make sure to manage your personal data by transparent and accessible procedures, to protect technically and to the maximum degree the data and preserve its integrity, availability and confidentiality.

Furthermore, we will provide you with a personal Career Advisor(currently the manager of Gamito), which is a prerequisite both for high-quality career guidance services that are tailored to your requirements, as well as for competent application assistance and information on suitable openings in the future. The same Personal Advisor will assist you in updating your data as necessary or manage it in accordance with the rights granted by GDPR.

Attention: We recommend that you do not include data relating to racial or ethnic origin, political, religious or philosophical beliefs, membership in political parties or organizations, associations with religious, philosophical, political or trade-union purposes in your CV; as well as information related to the health and sexual life of the individual. These is “sensitive data” that is not relevant to the subject of selection and is not required for employers and the Employment Agency. We warn that it is risky and for the purposes of our service one does not have to provide essential data from identity documents such as personal ID number, passport/ID card number, validity terms and the like.

Data collected by automated means
Purposes and ways of using the information we collect

We use the information described above to perform the following activities:

  • providing solutions for supply of staff and for connecting people and employers/potential hiring partners that are looking for employees or subcontractors;
  • sending vacancy notices;
  • management, evaluation and improvement of our activity;
  • protection against, identification of and prevention of fraud and other illegal activities, claims and other obligations, and
  • compliance and enforcement of applicable legal requirements, sectoral standards and contractual obligations and of our rules.

In addition to the above activities, if you are a job candidate and apply for a particular position, we use the data described in these confidentiality rules in order to:

  • Make opportunities and job offers available to you;
  • Provide you with additional services such as training, career counselling and career development services;
  • Evaluate your employability and your respective qualifications for specific potential positions and sending your data for such postions and
  • Analyse data such as (i) review of our database of job applicants, (ii) assessing individual performance and opportunities, including assessment of work-related skills, (iii) identification of missing skills, (iv) use of information to compare individuals and potential openings; and (v) analysis of data channels (trends in selection and recruitment practices).
  • Also, when we have contractual terms with other company partners, we may provide their employees' or managers' autobiographies to our potnetial employers or clients with the purpose of finding work or work related contract as a subcontractor of our clients.

We may also use the information in other ways, of which we will provide a special notification at the time of or prior to collection.

Data storage and Data updating

We will store your personal data in accordance with Bulgarian law and our legitimate business interests, legal obligations, or the emergence, exercise or protection of our rights.

We are committed to updating your data by contacting you in order to provide you with the best career opportunities.

In case you have provided personal data for the purposes of selection and career counselling, based on explicit agreement, you can withdraw your agreement at any point of time and we will securely delete your data.

Data that we share

We do not disclose the personal data we collect from you except as described in this Policy. We share your personal data with clients who may offer suitable job opportunities or want to offer work to our job applicants.

We may share your personal data with companies, which are acting as our subcontractors for the purposes of performing our duties as a recruitment agency: IT providers whose servers are located in Europe, applying the standard contractual terms of the European Commission – for the purpose of developing and technically maintaining our systems; for auditors and consultants, in order to verify our compliance with external and internal standards and requirements. All data processors are carefully screened and checked for compliance with GDPR requirements. Agreements on confidentiality and non-dissemination of information have been concluded with them.

In addition, we may disclose information about you, (i) if we are so obliged by virtue of law or judicial procedure, (ii) to law enforcement bodies and civil servants on the basis of a lawful request for disclosure, and (iii) in cases where we believe this is necessary in order to prevent personal injury or financial loss or in connection with the investigation of alleged or actual fraudulent or illegal activity.

We also reserve the right to transfer personal data concerning you in case of sale or transfer of our business or property or part thereof (including in the event of restructuring, termination and liquidation).

Your rights and choices available

We provide you with certain choices regarding the personal data we collect from you and the way we communicate with you. In order to update your preferences, to request that we remove your data from the periodic communication list, to exercise your rights, or to make a request, contact your personal Career Advisor(currently, the manager of the company at or as indicated in the “Contact Us” section of this Policy.

You may request access to the personal data we maintain in regard to you or require us to correct, amend, erase or block the data by contacting your personal Career Advisor or as directed in the “Contact Us” section of this Policy. Deletion of personal data upon your request is possible insofar as there would be no statutory storage obligations.

You may withdraw any consent that you have given us, or may appeal the processing of your personal data at any time on a legal basis, and we will then follow your valid preferences.

Information about the actions we take in connection with any requests you have received will be provided at no charge within 10 calendar days as of receipt of your request.

Data Transfer

We transfer the personal data we collect from you only within the European Economic Area (EEA) or Switzerland and will comply with the applicable legal requirements to provide appropriate protection in the transmission of personal data to recipients in countries outside the EEA territory and Switzerland.

How we protect personal data

We maintain and apply administrative, technical and physical safeguards for information security and protection of any personal data that you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.

We cooperate with the Personal Data Protection Commission, both in the identification of risks and control mechanisms, and at any request by the supervisory authority in the performance of its duties.

In the event of a personal data security breach, we will notify the Personal Data Protection Commission, with address Boulevard "Professor Tsvetan Lazarov" 2, 1784 Sofia, within 72 hours of learning of the breach pursuant to Article 33 of Regulation (EU) 2016/679. In the event of a high risk for your rights and freedoms, you will also be duly informed by a message at the contact email address that you have indicated of the nature of the violation and of the measures to mitigate the adverse effects.

Updates to the Policy on confidentiality

This Policy on management and confidentiality of personal data may be periodically updated to reflect changes in our personal data confidentiality practices. In case of substantial changes, we will notify you with by a clearly visible message at our site, indicating the date of the last update in the beginning of the Policy.

Contact Us