INTERNAL PROCEDURES AND TERMS FOR REPORTING BREACHES UNDER ARTICLE 13 OF THE ACT ON THE PROTECTION OF PERSONS REPORTING INFORMATION OR PUBLICLY DISCLOSING INFORMATION ABOUT BREACHES
INFORMATION ON THE PROCEDURES AND TERMS FOR INTERNAL REPORTING OF BREACHES
Pursuant to the Act on the Protection of Persons Reporting Information or Publicly Disclosing Information about Breaches (APRPID), promulgated in the State Gazette, issue No. 11 of 2 February 2023, effective as of 4 May 2023, and Order No. 13/17 December 2023 of the Manager of City Building Ltd.
A report concerning a breach or an identified risk of a breach may be submitted in writing or orally to Ms. Milena Velikova, Construction Technician – PТО, acting as the responsible person for handling reports at City Building Ltd. In her absence, or where grounds for recusal or self-recusal exist, reports may be submitted to Nesrin Niyazi, Cashier.
PROCEDURE FOR SUBMITTING REPORTS
A written report may be submitted by completing the standard form issued by the Commission for Personal Data Protection (Appendix No. 1) in one of the following ways:
- In person, to the responsible person;
- By email at office@citybuilding.eu;
- Through a personal meeting arranged between the parties at a mutually agreed suitable time at the following address: 4 Dobrudja Blvd., Dobrich, Bulgaria.
Written reports must be signed by the person submitting them. When submitted electronically, the form must be signed with a qualified electronic signature.
An oral report may be submitted by telephone at 0883/366-272, as well as through other voice messaging systems.
When an oral report is submitted, the responsible person will record the relevant information in the standard form and will provide the reporting person with an opportunity to review and correct the written record of the conversation, as well as the contents of the form, and to confirm them by signing.
The report may be accompanied by any sources of information supporting the allegations set out therein and/or may refer to documents, including information about persons who could confirm the reported facts or provide additional information.
If the report does not meet the applicable requirements, the responsible person will notify the reporting person of the deficiencies and request that they be remedied within 7 days of receipt of the report. If the deficiencies are not remedied within this period, the report and its attachments will be returned to the reporting person.
INTERNAL REVIEW OF THE REPORT AND POWERS OF THE PERSON RESPONSIBLE FOR HANDLING REPORTS
Each report is reviewed with regard to its credibility. Reports that do not fall within the scope of the APRPID or whose content does not provide reasonable grounds to consider the allegations plausible shall not be reviewed.
Reports containing obviously false or misleading statements of fact shall be returned to the reporting person with instructions to correct the statements and with information regarding the liability incurred for making false accusations.
The person responsible for handling reports is obliged to receive each report and acknowledge its receipt within 7 days of receiving it, by notifying the reporting person accordingly.
The reporting person shall also be provided with feedback on the actions taken in response to the report within a period not exceeding three months from the acknowledgement of receipt. If no acknowledgement has been sent, feedback shall be provided within no more than three months from the expiry of the 7-day period within which the acknowledgement should have been sent.
No proceedings shall be initiated in relation to anonymous reports or reports concerning breaches committed more than two years prior to their submission.
The standard form and all documents related to the APRPID can be downloaded from the links below. Alternatively, you may contact the person responsible for handling reports for assistance.