Privacy Policy

This Privacy Policy explains how we collect, use, store and protect information received through our website. By accessing the site you accept the practices described here. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Bulgarian Personal Data Protection Act (ZZLD) and applicable Bulgarian and European law.

The data controller is the "Center for Sustainable Politics" association (EIK: 208049624), registered office: 115 Hristo Botev St., entr. E, ap. 85, 3000 Vratsa, Bulgaria. For questions about the processing of personal data: [email protected], +359 89 877 928.

Depending on how you use the site, we may process the following categories of data:

Technical data — IP address, browser and operating system type, visit timestamp, pages visited, referer. This data is logged automatically by the server for security and technical-support purposes.

We process personal data for the following purposes: • Responding to your enquiries and communicating with you — Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and 6(1)(f) (legitimate interest in replying). • Maintaining, securing and protecting the site — Art. 6(1)(f) GDPR (legitimate interest). • Complying with legal obligations — Art. 6(1)(c) GDPR. • Non-essential cookies — Art. 6(1)(a) GDPR (your explicit consent).

We do not sell personal data to third parties. For the technical operation of the site we use the following processors, acting on our behalf under Art. 28 GDPR agreements:

Cloudflare, Inc. (USA) — content delivery network and site protection; the site's server is located in the European Union. Transfers to the USA are protected by the European Commission's Standard Contractual Clauses.

Database hosting — a server in the European Union, reachable only by the application and the site administrators.

Google Ireland Ltd. (Ireland) — visitor statistics (Google Analytics / Google Tag Manager). Loaded only after your consent via the cookie banner.

Meta Platforms Ireland Ltd. (Ireland) — advertising measurement (Meta Pixel). Loaded only after your consent via the cookie banner.

The site uses strictly necessary cookies for operation and security. Analytics and marketing cookies (Google Analytics, Google Tag Manager, Meta Pixel) are loaded only after your explicit consent via the cookie banner; you can withdraw consent at any time by deleting the cookies in your browser settings.

Technical logs are kept for about 90 days. Data from e-mail or phone correspondence is kept for up to 24 months from the first contact, unless a contractual relationship arises — in which case the data is retained under the applicable accounting and tax legislation (usually 5–10 years). After the period expires the data is deleted or anonymised.

Under GDPR you have the following rights in relation to your personal data:

• Right of access — to obtain confirmation whether we process your data and a copy of it. • Right to rectification — to request correction of inaccurate or incomplete data. • Right to erasure ("right to be forgotten") — when data is no longer needed. • Right to restriction of processing — under defined conditions. • Right to data portability — to receive your data in a structured, machine-readable format. • Right to object — to processing based on legitimate interest or direct marketing. • Right to withdraw consent — where processing is based on consent. • Right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at the email shown in the "Data controller" section. We respond within one month of receiving the request.

If you believe that the processing of your personal data infringes GDPR, you have the right to lodge a complaint with the supervisory authority — the Bulgarian Commission for Personal Data Protection (KZLD):

Commission for Personal Data Protection (KZLD) Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria Phone: +359 2 91-53-518 Email: [email protected] Web: https://www.cpdp.bg

We may update this policy from time to time to reflect changes in our practices or applicable law. The current version is always available on this page, and the date of the last revision is shown at the top. We will notify you of material changes by appropriate means.

For questions about this Privacy Policy or about our processing of personal data, please contact us using the details in the "Data controller" section.