Skip to content Skip to left sidebar Skip to footer

Политика за защита на личните данни

What is GDPR?

As of 25 May 2018, Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), came into force.

The Regulation governs the rights and obligations related to the protection of personal data of individuals from all Member States of the European Union.

NGO “MIG Zavet – Kubrat”, in its capacity as a data controller within the meaning of Article 4(7) of Regulation (EU) 2016/679, carries out activities related to the collection, processing, and storage of personal data in accordance with Regulation (EU) 2016/679 and the Personal Data Protection Act.

What do we mean by personal data?

Any information that can directly or indirectly identify a person is considered personal data. Such data include name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

Sensitive personal data include racial or ethnic origin, political opinions, genetic and biometric data, sexual orientation, health data, and others.

Why do we need them?

NGO “MIG Zavet – Kubrat” collects personal data only if you provide them voluntarily, which is directly related to the provision of the service requested by you.

Your personal data will be disclosed to third parties only in the following cases:

  • when this is necessary to fulfill your request;
  • when your explicit consent has been obtained;
  • when required by law upon request from a public authority.

What personal data do we collect?

Our Personal Data Protection Policy regulates the use and storage of your data.

NGO “MIG Zavet – Kubrat”, with its registered address in the town of Zavet, 19 “Ludogorie” Street, applies high standards of security and confidentiality when processing your personal data, in accordance with its data protection policy.

NGO “MIG Zavet – Kubrat” is the controller/processor of the personal data that you (the data subject) provide to us.

We collect the following types of personal data:

  • Identification data;
  • Financial data;
  • Family composition;
  • Education and training;

What do we do with the collected personal data?

Your personal data are processed within the premises of NGO “MIG Zavet – Kubrat”, located at its central office in Zavet, 19 “Ludogorie” Street.

All electronic and paper records containing personal data are properly protected with appropriate organizational and technical measures in accordance with the requirements of Regulation (EU) 2016/679, as well as the international information security standard ISO/IEC 27001.

We do not provide third parties with access to your personal data, except in cases provided for by the applicable legislation of the Republic of Bulgaria.

How long do we keep your data?

According to the “Ordinance on the procedure for organizing, processing, appraisal, storage, and use of documents in the institutional archives of state and municipal institutions”, we are obliged to store your data for a period of 5 years in accordance with our internal regulations, namely: “Procedure for storage and retention”.

After this period, your personal data will be irreversibly destroyed, except in cases where there is another legal requirement for a longer retention period.

What are your rights?

If you believe that the personal data we process about you are inaccurate or incomplete, you have the right to request access to this information in order to correct or delete it.

You may complete the relevant form to receive detailed information about all the data we process.

If you wish to file a complaint regarding how your personal data have been processed, please contact us via e-mail: mig_zavet.kubrat@abv.bg

If you still believe that your personal data have not been processed lawfully, you may contact the Комисия за защита на личните данни and file a complaint at: https://cpdp.bg/