LACHEZAR TSOTSORKOV FOUNDATION PRIVACY POLICY
With this Privacy Policy, Lachezar Tsotsorkov Foundation (hereinafter referred to as “the Foundation”) provides information on the personal data of the natural persons which we collect, the way in which it is processes, the measures for its protection and the rights which individuals have.
The foundation takes all necessary actions to ensure that in carrying out our activities and achieving our goals we comply with all principles of personal data processing in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, also known as the General Data Protection Regulation (hereinafter referred to as “GDPR”). The Foundation guarantees all principles related to the processing of personal data according to Art. 5 of the GDPR are strictly observed and applied in the collection and processing of the personal data of the natural persons.
Please read this Privacy Policy, which will give you information on the way the Foundation collects and processes your personal data.
I. WHO WE ARE
Lachezar Tsotsorkov Foundation is a non-profit legal entity established in private benefit, with UIC 205724187 and registered office and address of management in the city of Sofia 1504, Oborishte district, 5 Varbitsa Str., fl. 1, apt. 2 (“we”, “our”, “us”, etc., the “Foundation”).
In achieving the goals set by the Articles of Association of the Foundation the latter performs various actions which make the Foundation an administrator of personal data pursuant to Art. 4, para. 7 of the GDPR in regards to the personal data provided by you. As administrator the Foundation determines what personal data to collect, how to process it, for what purposes and how to use it. All actions carried out by the Foundation are in accordance with all applicable national and European Union legal requirements.
If you want to contact us or if you have any additional questions, do not hesitate to use the contact details provided in section VI below.
II. WHAT PERSONAL DATA IS
Pursuant to Art. 4, para. 1 of the GDPR personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
III. WHAT PERSONAL DATA WE COLLECT AND PROCESS
The personal data described below is collected and processed on the basis of one or more of the lawful grounds specified in Art. 6 of the GDPR.
In connection with the achievement of the goals of the Foundation
As a non-profit legal entity, the Foundation achieves the set goals through performing various actions. In doing so the Foundation collects and processes the personal data provided by you by filling in any of the application or registration forms, participation in training programs and conferences, workshops, trainings, campaigns, exchanges and others.
In these cases, the Foundation collects the following personal data – your names, personal identification number, addresses, telephone number, e-mail address, organization and any other information you have provided.
The Foundation collects, uses and process the abovementioned personal data for the following purposes:
-
When it is necessary for the performance of a contract to which you are party or prior to concluding such a contract;
-
When it is necessary for compliance with legal obligations of the Foundation;
-
When you have expressed your consent to the processing of your personal data;
-
When any other circumstance specified in Art. 6 of the GDPR applies.
Advertising and marketing
The Foundation may process your personal data to send you personalized marketing messages and notifications. This is done automatically to provide you with ads and information on future events and projects.
You can unsubscribe at any time using the link in the email via “push notification”. Whenever you want to change your preferences for receiving such messages and notifications, you can cancel or subscribe using the link in the message in question.
In these cases, the Foundation collects the following personal data – your names, e-mail address, organization and any other information you have provided.
The data described above are required under the GDPR on the basis of your consent and the Foundation’s legitimate interest of advertising and marketing.
The Foundation collects, uses and process the abovementioned personal data for the following purposes:
-
When it is necessary for compliance with the legitimate interest of the Foundation for advertising and marketing;
-
When you have expressed your consent to the processing of your personal data;
-
When any other circumstance specified in Art. 6 of the GDPR applies.
Cookies and analysis
The Foundation automatically process the personal data you provide to us through cookies in order to make our service attractive and to be able to perform certain functions. Cookies are small text files that are automatically stored in the memory of your device, and some of them are automatically deleted after use. Others are saved to recognize you on your next visit. We usually use cookies for functional, technical, analytical and marketing purposes.
In these cases, the Foundation collects the following personal data – location data; device ID; operating system and its corresponding version; access time; configuration settings; internet connection information (“IP address”), other.
You can turn off certain types of cookies.
The Foundation collects, uses and process the abovementioned personal data for the following purposes:
-
When it is necessary for compliance with the legitimate interest of the Foundation for advertising, marketing, analysis and reporting;
-
When you have expressed your consent to the processing of your personal data;
-
When any other circumstance specified in Art. 6 of the GDPR applies.
Legitimate interest
The Foundation also has the right to process personal data on the basis of a legitimate interest, when this is necessary in order to exercise or protect its legal rights.
IV. HOW LONG DO WE STORE PERSONAL DATA
When storing your personal data, the Foundation applies the general principle of data storage in a minimum amount and for a period not longer than the necessary for the implementation of its main activities and reporting under contracts, including for funding. All documents provided by you – CVs, files, project proposals, completed forms or other documents and information, shall be destroyed or deleted after a period of 2 years, with the fulfilment of the purposes or upon your request to be deleted.
If your personal data has not already been deleted, it may be deleted upon your request.
We store your personal data for a longer period of time only if we have such legal obligation. Tax data is stored for longer periods of time. In some cases, in order to comply with legal requirements, we will need to store your data even after your request to be deleted. In these cases, your data will not be subject to further processing.
We will also continue to store your data if we have this right pursuant to Art. 17, para. 3 GDPR.
The Foundation guarantees that your personal data will not be sold to third parties. The Foundation will only disclose data to third parties if it is necessary for the performance of our contract with you, for analytical and marketing purposes or for compliance with legal obligations.
The Foundation may share your personal data with the following persons: software providers; customer satisfaction survey companies; ad platforms (such as Google and Facebook).
V. YOUR RIGHTS
The rights of the natural persons are interpreted in the sense given in the provisions of Chapter Three of the GDPR. The Foundation would like to remind you that you have the following rights:
• Right to access
You have the right to receive confirmation from us whether we process your personal data, as well as information related to the purposes of processing, the categories of personal data recipients or categories of recipients, the estimated storage period, etc.
• Right to rectification
You have the right to obtain from us the rectification of your inaccurate personal data. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing an explicit statement to that effect.
• Right to erasure (‘right to be forgotten’)
At any time, you have the right to request from us the erasure of the personal data we stored about you.
• Right to restriction of processing
In case you only want to restrict further processing of your data instead of deleting it, you have the right to request from us to cease the processing of your data if any of the provisions of Art. 18 GDPR is applicable.
• Right to data portability
At any time, you have the right to request from us to receive your personal data in a structured, commonly used and machine-readable format.
• Right to object
On grounds related to your particular situation, you have the right to object to the processing of your personal data when such processing is based on the legitimate interests of the Foundation.
• Right of complaint
If you believe that at any point, we have deviated from the present Privacy Policy, you can always contact us or complain to the appropriate supervisory authority, which contact information is presented in Section VI, if you find necessary.
You can exercise your rights by sending an email to the Foundation’s e-mail address listed in Section VI below with your request.
VI. OTHERS
The Foundation processes your personal data only in accordance with legal requirements or upon your explicit consent. Here at the Foundation we take all necessary measures to protect your personal data from misuse, loss, unauthorized access, unwanted disclosure and unauthorized alteration.
At any time when you decide that the processing of your personal data is not suitable for you, please inform us in a timely manner. At any time, you can withdraw your consent for future processing by informing us via the contact details below.
Contact details of Lachezar Tsotsorkov Foundation
In case you have questions, concerns or suggestions, you can contact us in one of the following ways via our email address: info@tsotsorkovfoundation.bg
Contact details of the supervisory authority
Commission for Personal Data Protection
Republic of Bulgaria
City of Sofia, postal code 1592
2 Prof. Tsvetan Lazarov Blvd.
Or email address: kzld@cpdp.bg