LACHEZAR TSOTSORKOV FOUNDATION PRIVACY POLICY

By the present  Privacy Policy, Lachezar Tsotsorkov Foundation (hereinafter referred to as “the Foundation”) shall provide information on the personal data which we collect about  the natural persons, the way in which it is processed, the measures for its protection and the rights which individuals have.

The foundation shall take all necessary actions to ensure that in carrying out our activities and achieving our goals we comply with all principles of personal data processing in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, also known as the General Data Protection Regulation (hereinafter referred to as “GDPR”). The Foundation shall guarantee that all principles related to the processing of personal data according to Art. 5 of the GDPR are strictly observed and applied in collecting and processing the personal data of the natural persons.

Please read this Privacy Policy in order to get informed information on the way the Foundation shall collect and process your personal data.

  1. WHO WE ARE

Lachezar Tsotsorkov Foundation is a non-profit legal entity established in private benefit, with UIC 205724187 and seat and registered office  in the city of Sofia 1504, Oborishte district, 5 Varbitsa Str., fl. 1, apt. 2 (“we”, “our”, “us”, etc., the “Foundation”).

In achieving the goals set by the Articles of Association of the Foundation the latter performs various actions which make the Foundation an administrator of personal data pursuant to Art. 4, para. 7 of the GDPR in regards to the personal data provided by you. As administrator the Foundation determines what personal data to collect, how to process them, for what purposes and how to use the data. All actions carried out by the Foundation are in accordance with all applicable national and European Union legal requirements.

If you want to contact us or if you have any additional questions, do not hesitate to use the contact details provided in section VI below.

  1. WHAT PERSONAL DATA IS

Pursuant to Art. 4, para. 1 of the GDPR personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

III. WHAT PERSONAL DATA WE COLLECT AND PROCESS

The personal data described below is collected and processed on the basis of one or more of the lawful grounds specified in Art. 6 of the GDPR.

in connection with the achievement of the goals of the Foundation.

As a non-profit legal entity, the Foundation achieves the set goals through performing various actions. In doing so the Foundation shall collect and process the personal data provided by you by filling in any of the application or registration forms, participating in training programs and conferences, workshops, trainings, campaigns, exchanges and others.

In these cases the Foundation shall collect the following personal data – your names, personal identification number, addresses, telephone number, e-mail address, organization and any other information you have provided.

The Foundation shall collect, use and process the abovementioned personal data for the following purposes:

  • When it is necessary for the performance of a contract to which you are party or prior to concluding such a contract;
  • When it is necessary for compliance with legal obligations of the Foundation;
  • When you have expressed your consent for the processing of your personal data;
  • When any other circumstance specified in Art. 6 of the GDPR applies.

Advertising and marketing

The Foundation may process your personal data in order to send you personalized marketing messages and notifications. This is done automatically as to provide you with ads and information on future events and projects.

You can unsubscribe at any time using the link in the email via “push notification”. Whenever you want to change your preferences for receiving such messages and notifications, you can cancel or subscribe using the link in the message in question.

In these cases the Foundation shall collect the following personal data – your names, e-mail address, organization and any other information you have provided.

The data described above are required under the GDPR on the basis of your consent and the Foundation’s legitimate interest of advertising and marketing.

The Foundation shall collect, use and process the abovementioned personal data for the following purposes:

  • When it is necessary for compliance with the legitimate interest of the Foundation for advertising and marketing;
  • When you have expressed your consent for the processing of your personal data;
  • When any other circumstance specified in Art. 6 of the GDPR applies.

Cookies and analysis

The Foundation shall automatically process the personal data that you provide to us through cookies in order to make our service attractive and to be able to perform certain functions. Cookies are small text files that are automatically stored in the memory of your device, and some of them are automatically deleted after use. Others are saved to recognize you on your next visit. We usually use cookies for functional, technical, analytical and marketing purposes.

In these cases the Foundation shall collect the following personal data – location data; device ID; operating system and its corresponding version; access time; configuration settings; internet connection information (“IP address”), other.

You can turn off certain types of cookies.

The Foundation shall collect, use and process the abovementioned personal data for the following purposes:

  • When it is necessary for compliance with the legitimate interest of the Foundation for advertising, marketing, analysis and reporting;
  • When you have expressed your consent for the processing of your personal data;
  • When any other circumstance specified in Art. 6 of the GDPR applies.

Legitimate interest

The Foundation also has the right to process personal data on the basis of a legitimate interest, when this is necessary in order to exercise or protect its legal rights.

  1. HOW LONG DO WE STORE PERSONAL DATA

When storing your personal data, the Foundation applies the general principle of data storage in a minimum amount and for a period not longer than the necessary for the implementation of its main activities and reporting under contracts, including for funding. All documents provided by you – CVs, files, project proposals, completed forms or other documents and information, shall be destroyed or deleted after a period of 2 (two) years, with the fulfilment of the purposes or upon your request for deletion.

If your personal data has not already been deleted, it may be deleted upon your request.

We shall store your personal data for a longer period of time only if we have such legal obligation. Tax data is stored for longer periods of time. In some cases, in order to comply with legal requirements, we will need to store your data even after your request for deletion. In these cases, your data will not be subject to further processing.

We shall also continue storing your data if we have this right pursuant to Art. 17, para. 3 GDPR.

The Foundation shall hereby guarantee that your personal data shall not be sold to third parties. The Foundation shall only disclose data to third parties if it is necessary for the performance of our contract with you, for analytical and marketing purposes or for compliance with legal obligations.

The Foundation may share your personal data with the following persons: software providers; customer satisfaction survey companies; ad platforms (such as Google and Facebook).

  1. YOUR RIGHTS

The rights of the natural persons are interpreted in the manner, given in the provisions of Chapter Three of the GDPR. The Foundation would like to remind you that you have the following rights:

  • Right to access

You have the right to receive a confirmation from us that  we process your personal data, as well as information related to the purposes of processing, the categories of personal data recipients or categories of recipients, the estimated storage period, etc.

  • Right to rectification

You have the right to obtain from us the rectification of your inaccurate personal data. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing an explicit statement to that effect.

  • Right to erasure (‘right to be forgotten’)

At any time, you have the right to request from us the erasure of the personal data we stored about you.

  • Right to restriction of processing

In case you only want to restrict further processing of your data instead of deleting it, you have the right to request from us to cease the processing of your data if any of the provisions of Art. 18 GDPR is applicable.

  • Right to data portability

At any time, you have the right to request from us to receive your personal data in a structured, commonly used and machine-readable format.

  • Right to object

On grounds related to your particular situation, you have the right to object against the processing of your personal data when such processing is based on the legitimate interests of the Foundation.

  • Right of complaint

If you believe that at any point we have deviated from the present Privacy Policy, you can always contact us or complain to the respective supervisory authority, which contact information is presented in Section VI, if you find it necessary.

You can exercise your rights by sending an email with your request to the Foundation’s e-mail address listed in Section VI below..

  1. Miscellaneous

The Foundation processes your personal data only in accordance with legal requirements or upon your explicit consent. Here at the Foundation we take all necessary measures to protect your personal data from misuse, loss, unauthorized access, unwanted disclosure and unauthorized alteration.

At any time when you decide that the processing of your personal data is not suitable for you, please inform us in a timely manner. You can withdraw your consent for future processing at any time by informing us via the contact details below.

Contact details of Lachezar Tsotsorkov Foundation

Should you have any questions, concerns or suggestions, feel free to  contact us  on our email address: info@tsotsorkovfoundation.bg

Contact details of the supervisory authority

Commission for Personal Data Protection

Republic of Bulgaria

City of Sofia, postal code 1592

2 Prof. Tsvetan Lazarov Blvd.

Or email address: kzld@cpdp.bg