PRIVACY POLICY

Dear Clients and Partners,

As the Data Controller, the “Education and Health” Association hereby publishes its Personal Data Protection Policy.

I. Our Principles

The management and all employees of the Association are committed to applying the principles established by Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, or GDPR) regarding the processing of personal data:

  • Lawfulness, fairness and transparency: Personal data is processed lawfully, fairly and transparently by qualified professionals who strictly follow established data protection procedures.
  • Purpose limitation: We aim to maintain fair relationships based on mutual interest and trust, in compliance with applicable legislation. We strive to meet our clients’ and partners’ requirements and expectations to the greatest extent possible and to provide information about new educational and childcare services.
  • Data minimisation: We collect and process only the personal data necessary to identify individuals.
  • Accuracy: If you request a change to or deletion of the personal data you have provided for processing, we will update or delete it promptly, subject to applicable legal requirements.
  • Storage limitation: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or for the period prescribed by law.
  • Integrity and confidentiality: We have implemented appropriate technical and organisational measures to protect the personal data entrusted to us against unauthorised or unlawful processing.
  • Documentation and accountability: We foster an internal culture of awareness and commitment to data protection rules and safeguards, documenting the actions we take as part of our overall data security framework.

II. How We Use Your Information

We may use your information to:

  • Provide the services you have requested;
  • Fulfil our legal obligations;
  • Provide you with new information directly related to the services you have requested;
  • Respond to your enquiries and provide the information you have requested, including assistance with issues arising from those enquiries;
  • Provide offers relevant to your interest in our field of activity;
  • Protect your interests in connection with your use of our services;
  • Inform you of changes to this Privacy Policy or to our services.

III. How Long We Retain Your Data

We retain your personal data only for as long as necessary for the activity for which it was provided, or for the period agreed in a contract between us, in accordance with the retention requirements and time limits established by the Bulgarian Accountancy Act, tax legislation and other applicable laws and regulations in force in the Republic of Bulgaria.

Once the purposes for which your personal data was processed have been fulfilled, we will securely destroy it, subject to any applicable legal retention obligations.

IV. Who Has Access to Your Information

We will not sell your information, rent it out or share it with third parties for marketing purposes.

Your personal data may be disclosed to public authorities only where required or permitted by law and only to the extent necessary for the purposes for which it has been requested.

The Commission for Personal Data Protection (CPDP) is the competent authority responsible for supervising the processing of personal data. We provide access to our personal data registers in accordance with the applicable legal requirements.

V. Where We Process Your Data

All personal data we process is processed in Bulgaria.

VI. When We Will Contact You and How to Opt Out

You can choose whether or not to receive information from us.

We may contact you whenever and to the extent necessary to carry out our activities.

We will not contact you for marketing purposes by email, telephone, text message or post unless you have given your prior explicit consent or the communication is directly relevant to you and complies with the requirements of the General Data Protection Regulation (Regulation (EU) 2016/679).

VII. How to Access, Correct or Delete Your Personal Data

You have the right to request the following from us at any time:

  • Access to your personal data collected in connection with the provision and use of our services. This includes confirmation of whether we process your personal data, the categories of data concerned, the purposes of processing, the recipients to whom the data has been disclosed, and a copy of the personal data being processed, together with information about its source.
  • Correction of inaccurate or outdated information you have provided to us, such as your email address or any other relevant information.
  • Erasure or restriction of processing of your personal data where its processing does not comply with the requirements of the Bulgarian Personal Data Protection Act or the General Data Protection Regulation (Regulation (EU) 2016/679).
  • Notification of third parties to whom your personal data has been disclosed about any correction, erasure or restriction of processing, unless this proves impossible or would involve disproportionate effort.

Any action taken in response to a request for access, correction, erasure or restriction of processing applies only to your personal data. This service is provided free of charge.

To request access to, correction, erasure or restriction of processing of your personal data, you must submit a written application containing the following information:

  1. Your name, address and other details necessary to identify you;
  2. A description of your request;
  3. Your preferred method of receiving the information;
  4. Your signature, the date of submission and an address for correspondence;
  5. A notarised power of attorney, if the application is submitted by an authorised representative.

Please send your application to:

“Education and Health” Association
1B Petar Vaskov Street, Floor 1, Apartment 1
Plovdiv, Bulgaria

We will process your request for access, correction, erasure or restriction of processing within 14 days, subject to the applicable legal requirements and exceptions.

You will be notified of our decision to carry out the requested action or to refuse it, in accordance with the law. Notification will be sent by registered post with acknowledgement of receipt, or may be collected in person against signature.

VIII. How to Object to or Complain About the Processing of Your Personal Data

In the circumstances provided for by law, you have the right to:

  • Object to the processing of your personal data where there are legal grounds for doing so. If your objection is justified, the processing of your personal data must cease where required by law.
  • Object to the processing of your personal data for direct marketing purposes.
  • Be informed before your personal data is disclosed to third parties for the first time or used on your behalf for the purposes described in the preceding point, and be given the opportunity to object to such disclosure or use.

If you wish to make a complaint about how your personal data is processed, you can contact us at:

1B Petar Vaskov Street, Floor 1, Apartment 1, Plovdiv, Bulgaria

If you are dissatisfied with our response or believe that we are not processing your personal data lawfully, you may lodge a complaint with the competent data protection authority:

Commission for Personal Data Protection (CPDP)

Address: 2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592, Bulgaria
Telephone: +359 2 915 35 18, +359 2 915 35 15, +359 2 915 35 19
Fax: +359 2 915 35 25
Email: kzld@cpdp.bg

IX. Review of This Policy

We review this Policy regularly to ensure that your personal data is protected effectively and in accordance with the law.

This Policy was last updated on 22 May 2018 and is stated to comply with the General Data Protection Regulation (Regulation (EU) 2016/679).

COOKIE POLICY

Our website uses cookies. Cookies do not harm your computer and do not contain viruses. They help us make our website easier to use, more efficient and more secure.

Cookies are small text files that are stored on your computer by your web browser. Most of the cookies we use are known as session cookies. These are automatically deleted when you leave our website. Other cookies remain stored on your device until you delete them. They enable our website to recognise your browser when you visit again.

You can configure your browser to notify you whenever cookies are used, allowing you to decide whether to accept or reject each cookie individually. You can also configure your browser to accept cookies automatically under certain conditions, reject them in all cases, or automatically delete them when you close your browser.

Please note that disabling cookies may limit the functionality of our website.