Loading...
St. Serafim R.B.  Donate

Privacy and Personal Data Protection Policy of the St. Seraphim R.B. Foundation

This Privacy and Personal Data Protection Policy of the St. Seraphim R.B. Foundation (hereinafter referred to as the "Foundation") aims to provide information on what personal data of individuals it collects, the way in which they are processed, what measures are in place to protect them, and to indicate your rights as individuals whose personal data are processed.

The Foundation takes all necessary steps to ensure that, in carrying out its activities and achieving its goals, all principles for the processing of personal data are observed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, also known as the General Data Protection Regulation (hereinafter referred to as the "GDPR"). The Foundation guarantees that when collecting the personal data of individuals, all principles related to the processing of personal data pursuant to Art. 5 of the GDPR are observed and applied.

  • WHO WE ARE

The St. Seraphim R.B. Foundation is a non-profit legal entity established for private benefit, with UIC 206880470 and with its registered office and registered office in Sofia 1202, Serdika district, 64 Knyaginya Maria Luiza Blvd., fl. 1, ap. 2 ("we", "our", "us", etc., "the Foundation").

In order to fulfill the objectives set out in the Foundation's Articles of Association, the Foundation is a personal data controller within the meaning of Art. 4, para. 7 of the GDPR with respect to the personal data provided by you. In this capacity, the Foundation determines what personal data to collect, how to process it, for what purposes and in what manner to use it. The Foundation carries out all its actions in accordance with all applicable legal requirements at national and European level.

In case you want to contact us or have additional questions, you can use the contact details specified in section VI below.

  • WHAT ARE PERSONAL DATA

Within the meaning of Art. 4, para. 1 of the GDPR, “Personal data” means any information relating to an identified or identifiable living natural person.  A natural person can be identified, directly or indirectly, in particular by means of their first and last name, personal identification number, home address, IP identifier, email address, identity card number, etc.

III. WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?

The personal data described below are collected and processed on the grounds specified in Art. 6 of the GDPR.

In connection with the implementation of the Foundation's objectives

The purpose of the processing of personal data is to uniquely identify individuals, current and future employees, contractors, beneficiaries of grant agreements, participants in certain studies, invitees and participants in events carried out in connection with the implementation of the Foundation's activities.

Data processing is due to:

  • the fulfillment of statutory obligations of the personal data administrator arising from the specifics of the requirements of the legislation regulating financial and accounting reporting, pension, health and social security activities, human resources management activities;
  • the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to the conclusion of a contract;
  • in the implementation of activities by the Foundation - for one or more specific purposes, to receive a newsletter – with the consent of the data subject

Upon receiving project proposals; job applications; information necessary for subscribing to a newsletter, as well as when organizing and conducting events, personal data is collected for the purposes for which it was submitted - concluding a contract, sending a newsletter, conducting an event and covering it.

When carrying out these actions, the Foundation collects and processes the personal data that you provide when:

  • you are a party to a contract with us;
  • you fill out application forms or registration forms for live or online participation in educational, informative and community programs and conferences, workshops, trainings, campaigns, exchange visits, introductory meetings and others.
  • you fill out forms for subscribing to a newsletter and/or receiving useful resources.

According to the purposes of collecting information, the Foundation may collect and process the following personal data - your names, personal identification number, addresses, telephone, e-mail address, organization and any other information you have specified, processed legally grounds in connection with the performance of the subject matter of the contract or for the purposes for which it is collected.

The Foundation collects, uses and processes the above-described personal data for the following purposes:

  • in cases where you have given your explicit consent;
  • when it is necessary for the performance of a contract to which you are a party or prior to the conclusion of such a contract;
  • when it is necessary for the performance of the Foundation's legal obligations;
  • in any of the other cases specified in Art. 6 of the GDPR.

Advertising and Marketing

For the purposes of sending personalized marketing messages and notifications, the Foundation collects the following personal data - your name, email address, organization and any other information you have specified.

The Foundation will process your personal data to send you personalized marketing messages and notifications only if you have given your explicit consent to this. The purpose of sending notifications is to keep you informed about future events and projects of the Foundation. The Foundation will not provide this data to third parties for marketing and advertising purposes.

You can unsubscribe at any time by using the link in the email message via "push notification" or when you reply to the addressee of the letter and inform him that you no longer wish to receive the relevant information. Whenever you want to change your preferences regarding the receipt of such messages and notifications, you can cancel or subscribe by using the link in the message in question or the link on the Foundation's website under the relevant information.

"Cookies" and analytics

The Foundation automatically processes the personal data you provide to us through "cookies" to make our services attractive and to enable us to perform certain functions. "Cookies" are small text files that are automatically stored in the memory of your device, and some of them are automatically deleted after use. Others are saved to recognize you on your next visit. We generally use cookies for functional, technical, analytical and marketing purposes.

In these cases, the Foundation collects the following personal data – location data; device identifier; operating system and its respective version; access time; configuration settings; internet connection information (“IP address”), etc.

  • HOW LONG DO WE KEEP PERSONAL DATA

When storing your personal data, the Foundation applies the general principle of storing data in a minimum volume and for a period no longer than necessary to carry out its main activities and reporting under contracts, including for grant funding. All documents provided by you - CVs, files, project proposals, completed forms or other documents and information are destroyed or deleted after the expiry of the statutory period, after the objectives have been achieved or when your written request for their deletion is stated.

The Foundation will process your data in accordance with the statutory retention periods for personal data. When personal data is processed for a given purpose and all grounds expire, according to the Regulation we are obliged to terminate the processing and destroy or anonymize the personal data. The Foundation guarantees that your personal data will not be sold to third parties. The Foundation will disclose data to third parties only if this is necessary for the performance of our contract with you, for analytical and marketing purposes or to comply with legal obligations.

The Foundation may share your personal data with the following recipients with whom it has signed processing agreements: software providers; advertising platforms (e.g. "Google").

  • YOUR RIGHTS IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA
  • Right to information: You have the right to request from us information as to whether and to what extent we process your personal data.
  • Right to correction: In case we process incomplete or incorrect/incorrect data, you have the right at any time to request that we correct or supplement it.
  • Right to erasure: You can request the erasure of personal data concerning you in case we process this data without a legal basis. Please note that there may be reasons why the deletion may not be carried out immediately due to a regulatory requirement to retain the data.
  • Right to restriction of processing: you can request the restriction of the processing of your personal data if:

a) you contest the accuracy of the data for the period in which we need to verify its accuracy; or

b) the processing of the data is without legal basis, but instead of deleting it, you request its restricted processing; or

c) we no longer need these data (for the specified purpose), but you need them for the establishment, exercise or defense of legal claims; or

d) you have objected to the processing of the data, pending verification of the legitimate grounds of the administrator.

  • Right to data portability: You can ask us to provide the personal data you have entrusted to our care in an organized, orderly, structured, commonly used electronic format if:

a) we process the data pursuant to the contract and based on the declaration of consent, which can be withdrawn or on a contractual obligation and

b) the processing is carried out automatically

  • Right to object: in case we process data for purposes/tasks, a task of public interest or in the exercise of official powers that have been granted to us or we have indicated that the processing of the data is for our legitimate interest, you can object to the processing of the data.
  • Right to complain: in case you believe that we are violating the Bulgarian or European legislation, please contact us for clarification of the issue. Of course, you have the right to file a complaint with the regulatory authorities within the EU and the Republic of Bulgaria in the institutions responsible for the protection of personal data. In the Republic of Bulgaria, the competent authority is the Personal Data Protection Commission.

Competent authority for personal data protection:

Personal Data Protection Commission, Sofia, 1592, 2 Prof. Tsvetan Lazarov Blvd., tel: +3592/91-53-519, E-Mail: kzld@cpdp.bg

You can exercise your rights by sending an email to the Foundation's email address, specified in section VI below, with your specific request.

  • OTHER

The Foundation processes your personal data only in accordance with legal requirements or after your explicit consent. We take all necessary measures to protect your personal data from misuse, loss, unauthorized access, unwanted disclosure and unlawful modification.

At any time, when you decide that the processing of personal data is not appropriate for you, please inform us promptly. You can withdraw your consent, if you have provided such, for the future at any time by informing us at the contact details below.

Contact details for the St. Seraphim R.B. Foundation

In case you have any questions, concerns or suggestions, you can contact us via our email address: office@stserafim.org

Top