Last updated 30.04.2018
What data is being collected and how are we collecting it?
When visitors leave comments on the website we collect the data shown in the comments form, and also the visitor’s IP address and browser user-agent string to help spam detection. We log your Internet Protocol (IP) address in order to receive and send information from and to you over the internet.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
When you visit our website, make an enquiry, apply for a job or request more information, you may be asked to provide some personal data such as your name, address, telephone number and e-mail address. In the event you decide to provide personal data, this policy will apply.
We do not gather sensitive information related to racial or ethnic origin, political opinions, religious or philosophical beliefs, medical or criminal records or data concerning sexual orientation unless we are legally obliged to do so or you willingly provide such information to us by giving consent for the processing of such information.
What are Cookies and how do we use them?
A cookie is a small piece of data or message that is sent from an organisation’s web server to your web browser and is then stored on your hard drive. Cookies cannot read data off your hard drive or cookie files created by other websites, and do not damage your system.
If you leave a comment on our website, you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this website, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
However, you can reset your browser to refuse any cookie or to alert you to when a cookie is being sent. Web browsers allow you to control cookies stored on your hard drive through the web browser settings. To find out more about cookies, including what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org or other relevant website.
If you choose to refuse our cookies, some of the features of our website may not work as well as we intend.
Embedded content from other websites
Articles on this website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
What is the legal basis for processing the data?
Under the GDPR, all companies and organisations must have a lawful basis for all processing and storage of personal data. Without a lawful basis, processing or storing personal data is considered “prima facie unlawful.”
Here are the lawful bases that are justified under the GDPR:
- Consent – We can collect personal data if you consent to it
- Contractual Necessity – We can collect personal data if it is necessary for us to fulfil a contract
- Compliance with Legal Obligations – We can collect personal data if we have a legal obligation to do so in order to comply with applicable law
- Vital Interests – We can collect personal data if it is necessary to protect the vital interests of a data subject
- Public Interest – We can collect personal data if we are acting in the public interest
- Legitimate Interests – We can collect personal data if our company has a legitimate interest that doesn’t override the rights or freedoms of the data subject, especially when the data subject is a child
- Data relating to criminal offences and civil law enforcement
How do we use your personal data?
We use your personal data according to the lawful basis for processing and storing personal data.
We may also use your personal data to carry out research about our visitors’ demographics and interests. We do this to understand our visitors better. We compile and analyse this research on an aggregated and anonymous basis.
Whenever and wherever we collect, process or use personal data, we take steps to ensure that we treat it securely and in accordance with our Privacy and Data Protection Policy.
To whom might we disclose your personal data?
We will not disclose your personal information to any third parties unless we are obliged to do so or allowed to do so, by law, or when we need to do so in order to run our business or to perform our duties.
How long do we retain your personal data?
We shall keep a record of your personal data for no longer than is necessary for the purposes for which it is being processed in accordance with the lawful basis. For examples, we shall keep your personal data for the time of our business and other relations, or according to the requirements of the applicable laws, or for the time when your data is necessary for our legitimate interests. We ensure that all personal data will be securely disposed or erased of when no longer needed depending on the legal basis to do so. This will reduce the risk that it will become inaccurate, out of date or irrelevant.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
However, you may request to have your personal data deleted (“Right to be Forgotten”) from our records at any time by sending an email at firstname.lastname@example.org. Your information will be deleted up to 1 month after the submission of your request.
What rights does the data subject have?
At any time during the processing of your personal data, you have certain rights.
You can exercise your rights under the General Data Protection Regulation by sending an email to email@example.com or a letter to our address in the contact information below that contains your specific request and which, if possible, is signed by you in person or with a qualified electronic signature. If you are unable to sign your request in one of our preferred ways, we may ask you to provide additional information for your identification. We will respond to your request for free and within 1 month.
If you have an account on this website, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. We will respond to your request for free and within 1 month.
You can exercise your right to lodge a complaint to the Commission for Personal Data Protection, the supervisory authority, on e-mail address – firstname.lastname@example.org, by post or in person at Blvd. Prof. Tsvetan Lazarov 2, Sofia 1592, Bulgaria.
We have in place reasonable commercial standards of technology and operational security to protect all information provided by visitors via this website from unauthorised access, disclosure, alteration, or destruction.
If you want to request any information about your personal data, please contact us at our registered office.
Registered office address: ul. Dimitar Manov 17, entr. B, office 9, Sofia 1408, Bulgaria.
Inaccuracies and Corrections
We would like to keep your personal data accurate and up to date. If you become aware of any errors or inaccuracies please let us know by contacting us at our registered office.