About us

This information is provided in accordance with Art. 12, para. 4 of the Act on the Protection of Persons Reporting Information or Publicly Disclosing Information about Breaches (Whistleblower Protection Act).

Who has the right to submit reports?

• current or former workers and employees;

• persons working under civil contracts;

• persons exercising freelance professions or craft activities;

• volunteers and interns;

• contractors, subcontractors, or suppliers;

• job candidates who participated in a competition or other form of selection for employment and received information about a violation in this capacity;

• persons who report violations that became known to them in a work context.
  Important! Anonymous reports are NOT considered.

For what violations can you submit reports?
For violations of Bulgarian and European legislation in various fields, including:

• public procurement;

• financial services, products and markets, and the prevention of money laundering and terrorist financing;

• product safety and compliance;

• transport safety;

• environmental protection;

• public health;

• consumer protection;

• protection of privacy and personal data;

• network and information system security;

• violations related to cross-border tax schemes;

• general criminal offenses;

• labor legislation;

• legislation related to the execution of public service;

• rules for payment of due public state and municipal receivables, and other areas specified in the WPA.
  Important! Reports of violations that do not fall within the scope of the WPA, as well as reports made more than two years ago, are not considered.

How can you submit a report to “Bright Engineering” Ltd.?

3.1. You can submit a written report by filling out a sample form – https://cpdp.bg/, in one of the following ways:

• in person, to our employee responsible for reports;

• electronically by sending it to the following email: signali@bright-eng.com;

• by mail or courier service – to the address: Varna, Krakow St. 6A, “Bright Engineering” Ltd., explicitly stating the recipient as the responsible person or writing on the postal/courier package that it contains a report under the WPA.
  Important! The reports must be signed by the persons submitting them. When submitted electronically, the form is signed with a qualified electronic signature.

Important! The form is NOT mandatory but is for your convenience and contains the mandatory data you need to fill out. If your report does not meet any of the legal requirements, our employee responsible for reports will send you a notification to correct the deficiencies within 7 days of receiving the report. If the deficiencies are not corrected within this period, the report and its attachments will be returned to you.

It is advisable to attach all written evidence you have. You can also name persons who could confirm the reported data or provide additional information.

3.2. You can submit an oral report in one of the following ways:

• by phone to our employee responsible for reports – 0878 110 870;

• in a personal meeting with our employee responsible for reports, which you have arranged in advance at the specified phone number.
  In these cases, our employee responsible for reports will fill out the form with the data and give you the opportunity to check, correct, and agree with the written text from the conversation, as well as the content of the form, by signing them.

What happens after submitting the report?
We will confirm its receipt within 7 days and register it with a unique identification number. If the report does not meet the legal requirements, we will notify you to correct the deficiencies within 7 days.

A review of the report will be conducted by a person who is not in a conflict of interest.

Within three months of confirming the receipt of the report, we will provide you with feedback on the results of the review and the actions taken.

What protection do persons submitting reports have?
Persons who have the right to submit reports, as well as related persons (e.g., colleagues and relatives), are protected against unjustified disclosure of their identity, except in cases permitted by law.

It is prohibited to take retaliatory measures against protected persons, namely: temporary suspension from work, dismissal, demotion, negative job evaluation, imposition of property and disciplinary liability, physical and verbal coercion, threat, hostility and damage to their dignity, discrimination, etc.

What are the conditions for providing protection?
The person submitting the report must have reasonable grounds to believe that the information provided in the report about the violation was true at the time of submission and that this information falls within the scope of the WPA.

The report of the violation was submitted under the conditions and procedures of the WPA.

Important! Persons mentioned in the report as violators have the right to compensation for all material and non-material damages when it is established that the reporting person knowingly submitted a report with false information.

How can you submit a report to the PERSONAL DATA PROTECTION COMMISSION?
The Personal Data Protection Commission is the Central body for external reporting. You can submit your report directly to it in one of the following ways:

• in writing:

  • by email whistleblowing@cpdp.bg;

  • by mail to the address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. 2;

  • through the Secure Electronic Delivery System.

• orally – at the CPDP premises at the address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. 2.
  You could use the sample Registration Form for reporting information about violations, published on the CPDP website. The form is not mandatory. However, if you decide to use it, you need to fill in only Parts I – V inclusive and sign it:

• when sending the form by mail – with a handwritten signature;

• when sending it by email – with a qualified electronic signature.
  If you use the Secure Electronic Delivery System, the CPDP employee responsible for reviewing the report will contact you to complete the Registration Form for reporting information about violations in accordance with the WPA.

More information about the internal policy can be found in this file: DOWNLOAD