1873 – 1945

Data protection

Privacy policy

This policy explains what data we collect, why, and your rights under the GDPR. In case of discrepancy, the Bulgarian version prevails.

Last updated:

Data controller

Pencho Semov Non-Profit Association, registered with the Bulgarian Registry Agency, UIC (EIK) 207332936.
Email: info@penchosemov.org, phone: +359 88 9320822

Legal bases and purposes of processing

We process your personal data on the following legal bases:

  • the Terms and Conditions of the Website;
  • your explicit consent – the purpose is stated in each specific case;
  • a legal obligation.

The sections below explain in detail how we process your personal data depending on the legal basis.

Performance of a contract

We process your personal data to allow you to use the Website in accordance with the Terms and Conditions.

Purposes of processing (where applicable):

  1. establishing your identity;
  2. providing the functionality of our website.

On this basis we process only personal data related to a user profile you have created.

Data collected on this basis is deleted 2 years after the end of the contractual relationship, whether due to expiry, termination or any other reason.

Based on your consent

We process your personal data on this basis only after your explicit, unambiguous and voluntary consent. There will be no adverse consequences for you if you refuse.

Consent is a separate legal basis; its purpose is stated in it and does not overlap with the purposes listed in this policy.

Data processed on this basis: website usage data (analytics cookies) and social media profile data.

Withdrawing consent

You can withdraw your consent at any time. Withdrawal does not affect the performance of contractual obligations or the lawfulness of processing based on consent before its withdrawal.

To withdraw your cookie consent, use the “Cookie settings” button below. For anything else, simply contact us using the details above.

When we delete data

Data collected on the basis of consent is deleted at your request or 12 months after it was first collected.

How we protect your personal data

We apply all the organisational and technical measures required by the Bulgarian Personal Data Protection Act and the General Data Protection Regulation (GDPR).

We have rules in place to prevent misuse and security breaches. The website is served entirely over a secure connection (HTTPS).

For maximum security in processing, transmitting and storing your data, we may use additional safeguards such as encryption and pseudonymisation.

Your rights

Every user enjoys all data protection rights under Bulgarian and European Union law and may exercise them by sending us an email.

You have the right to:

  • be informed about the processing of your personal data;
  • access your personal data;
  • rectification of inaccurate data;
  • erasure (the “right to be forgotten”);
  • restriction of processing;
  • data portability;
  • object to processing;
  • not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you;
  • judicial or administrative remedy if your rights have been infringed.

Right to object

You may object to the processing of your personal data. The controller must stop processing unless it demonstrates compelling legitimate grounds that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. Processing for direct marketing stops immediately upon objection.

Complaints

You have the right to lodge a complaint about unlawful processing of your personal data with the Bulgarian Commission for Personal Data Protection or the competent court.

What cookies are

Cookies are small text files stored by your browser on your device (computer, tablet, laptop or phone) when you visit websites. They allow a website to recognise you when you return, remember your preferences and make the site easier to use.

Cookies we use

Necessary. We remember your cookie choice in your browser’s local storage (key ps_consent); otherwise the banner would appear on every visit.

Analytics (only with your consent). We use Google Analytics 4 (Google Ireland Ltd.) to understand how the website is used – visits, traffic sources and pages viewed. We use Google Consent Mode v2: until you consent, Google Analytics does not store cookies on your device. Analytics cookies (_ga, _ga_*) are kept for up to 2 years. Data is used in aggregate and never for advertising.

Third-party cookies. The Website may link to other websites (e.g. Facebook, YouTube, LinkedIn, partner websites), which may set their own cookies that we do not control. Please check those websites’ policies.

Managing cookies

You can change your choice at any time with the “Cookie settings” button below.

All browsers also let you block or delete cookies in their settings. Please note that blocking all cookies may affect how the website works.