PRIVACY NOTICE
1. Introduction
The purpose of this privacy notice („Privacy Notice”) is to explain how the Bulgarian Society for Construction Law Association („the Association”) collects, uses, stores, discloses, and otherwise processes personal data in connection with the organization and conduct of training sessions, seminars, webinars, conferences, professional events, and related services.
We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Bulgarian Personal Data Protection Act and applicable Bulgarian and European data protection laws.
2. Data Controller
Bulgarian Society for Construction Law Association
Address: Sofia 1164, Lozenets District, 1 Hristo Smirnenski Blvd., Building B, 10th Floor, Office 1038
UIC: 176873823
Email: info@bscl.bg
For any questions regarding this Privacy Notice or our processing of personal data, you may contact us at: info@bscl.bg.
3. What Personal Data We Collect
Depending on your relationship with us and the nature of the event or service, we may process the following categories of personal data:
Registration and Contact Information
- full name;
- employer, company/organization;
- email address;
- phone number;
- address for correspondence.
Participation Information
- event registration;
- attendance and participation records;
- session selections;
- information for issued certificates for participation;
- feedback and survey responses.
Technical Information
When you use our website or online registration systems, we may collect:
- IP address;
- device and browser information;
- website usage data;
- information collected through cookies or similar technologies.
Photographs and Recordings
During events, we may capture photographs, video recordings, audio recordings, livestreams, and screenshots of virtual events.
4. Purposes and Legal Bases for Processing
We process personal data for the following purposes and on the following legal grounds:
- Event registration and administration – Performance of a contract (Art. 6(1)(b) GDPR);
- Communication regarding events – Performance of a contract and legitimate interests (Art. 6(1)(b) and (f) GDPR);
- Processing payments and issuing invoices – Performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR);
- Issuing certificates of attendance – Performance of a contract (Art. 6(1)(b) GDPR);
- Improving the quality of the events and services – Legitimate interests (Art. 6(1)(f) GDPR);
- Marketing and promotion of future events – Consent where required, or legitimate interests where permitted by law (Art. 6(1)(a) and/or (f) GDPR);
- Compliance with legal, accounting and tax obligations – Legal obligation (Art. 6(1)(c) GDPR)
- Protection of legal rights and interests and defense against legal claims – Legitimate interests (Art. 6(1)(f) GDPR).
4a. Whether Providing Data is Mandatory or Voluntary
The provision of certain personal data is necessary to register for and participate in events and to perform the contract between you and the Association. Where such data are necessary for registration or contract performance, failure to provide them may prevent registration or participation in the relevant event. Certain data may also be necessary to comply with legal, accounting, or tax obligations; failure to provide them may prevent us from issuing an invoice or complying with the relevant legal obligation. Providing data for marketing purposes is voluntary; refusal or withdrawal of consent will not affect your registration or participation in events.
4b. Automated Decision-Making
The Association does not use automated decision-making or profiling within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.
5. Photos, video recordings and recordings from events
To document and promote our activities, photographs, video recordings, and audio recordings may be created during our events.
Such materials may be published through:
- the website of the organizer;
- social media;
- newsletters;
- advertising and marketing materials;
- Publications and reports related to the respective event.
Where required by applicable law, additional consent will be requested.
Participants who do not wish to appear in photographs or recordings should notify the event organisers before or during the event, and we will make reasonable efforts to accommodate such requests.
6. Recipients of personal data
We may share personal data with:
- operators of conference and event centers;
- providers of online event platforms;
- providers of event logging and management systems;
- payment service providers;
- providers of IT, cloud, and hosting services;
- marketing and communications agencies;
- accountants, auditors, attorneys, and other professional consultants;
- competent government authorities, when required by law.
We do not sell personal data to third parties.
7. International Data Transfers
In the event that personal data is transferred outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place in accordance with the requirements of the GDPR, including:
- decisions by the European Commission on an adequate level of protection;
- standard contractual clauses;
- other applicable legal mechanisms.
8. Retention Period
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Notice and to comply with legal obligations.
As a general rule, registration and participation data are retained for up to 5 years after the relevant event, including, where applicable, in light of the general five-year limitation period under Article 110 of the Bulgarian Obligations and Contracts Act. Accounting records and financial statements are retained for 10 years under Article 12(1)(2) of the Bulgarian Accountancy Act. Data collected for marketing purposes are retained until consent is withdrawn or an objection is made. Photos and recordings may be retained as part of the organizer’s archive for historical and informational purposes.
9. Your rights
In accordance with the applicable legislation, you have the right to:
- access to your personal data;
- to request the correction of inaccurate or incomplete data;
- to request the deletion of personal data;
- to request that the processing be restricted;
- to object to the processing;
- to receive your personal data in a structured, commonly used, and machine-readable format;
- to withdraw your consent at any time;
- to file a complaint with the competent supervisory authority.
If you believe that the processing of your personal data violates applicable law, you have the right to file a complaint with the competent supervisory authority.
In the Republic of Bulgaria, this is:
Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
Email: kzld@cpdp.bg
Website: https://www.cpdp.bg
Filing a complaint with the CPDP does not affect your right to seek legal redress.
10. Direct marketing
When permitted by law, we may send you information about upcoming training sessions, conferences, publications, initiatives, and services that may be of interest to you.
You can unsubscribe from such messages at any time by using the unsubscribe option provided in them or by contacting us.
Your personal data for direct marketing purposes will be retained until you withdraw your consent.
11. Data Security
We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
12. Changes in the Privacy Notice
This Privacy Notice may be updated from time to time. The current version will always be posted on our website, along with the date of the last update.
13. Contacts
If you have any questions regarding this Privacy Notice or the exercise of your rights, please contact us:
Bulgarian Society for Construction Law Association
Address: Sofia 1164, Lozenets District, 1 Hristo Smirnenski Blvd., Building B, 10th Floor, Office 1038
Phone: +359 888 530 465
Email: info@bscl.bg