This page outlines the information collection and dissemination practices for the website: https://www.gosvilengrad.bg
The Sport and Tourism Activity of the Municipality of Svilengrad, BULSTAT: 0009038251464, with registered office and management address at “Nencho Hristov” №1, processes your personal data in accordance with the General Data Protection Regulation (EU Regulation 2016/679) and the Bulgarian Personal Data Protection Act.
To fulfill legal obligations, this privacy policy provides information about:
- Your rights as a data subject
- The types of personal data collected
- The legal basis for data processing
- Methods of data storage and use
- Circumstances under which personal data may be shared with third parties
According to Article 4 of EU Regulation 2016/679, “personal data” means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
Collection and Use of Personal Data
In accordance with our obligations under Regulation (EU) 2016/679 of the European Parliament and of the Council (“General Data Protection Regulation” or GDPR), we ensure that any processing of personal data—such as name, address, telephone number, and email address—will always be conducted in compliance with the Regulation and relevant Bulgarian data protection laws.
We collect and process your personal data in connection with your use of the website https://www.gosvilengrad.bg on the basis of Article 6, paragraph 1 and Article 9, paragraph 2 of the GDPR, and specifically under the following legal grounds:
- When the data is necessary for the performance of our services
- When processing is required by legal obligations
When you have provided your explicit and voluntary consent
We do not collect any personal data beyond what is necessary for the execution of our services or what has been willingly provided by you with your clear consent.
The Personal Data We Process
2.1. Personally Identifiable Information
Personal data is collected based on your explicit consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR). Consent is provided when you voluntarily enter your personal information and check the box stating: “I agree to my personal data being used to receive the newsletter and I am aware of the Privacy Policy.”
Technical Information
Each time you access https://www.gosvilengrad.bg or any of its sections, we automatically receive technical data in the form of an information protocol, which includes:
- Your IP address and the referring page (the site you visited before landing on ours)
- Information about your session duration and the specific sections of the website you visited
- Details about your browser and operating system
Personal Data Collection Based on Consent
Personal data is collected with your explicit consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR). Consent is granted by clicking the “I agree” button in the statement: “I have read the privacy policy of the Sport and Tourism Activity of the Municipality of Svilengrad.”
Personal Data That Is Not Processed
We do not collect or process personal data that:
- Reveals a user’s racial or ethnic origin, or data relating to their health or mental condition
- Discloses a user’s political, religious, or philosophical beliefs, or trade union membership
- Involves genetic or biometric data, or information about sexual orientation
Legal Grounds and Purposes for Processing Personal Data
The Sport and Tourism Activity of the Municipality of Svilengrad processes personal data based on lawful grounds defined in the GDPR, including:
- Your explicit consent
- The necessity to provide requested services
- Compliance with legal obligations
The purposes for data processing include:
- Communicating updates and news related to tourism and sports in the region
Responding to inquiries made through the website - Sending newsletters or informational materials to subscribed users
Data Processing and Disclosure
The personal data you provide is processed strictly according to the grounds and purposes outlined in this Privacy Policy.
We do not engage in automated decision-making. Your data will not be used for advertising or marketing purposes and will not be shared with third parties, except in the following specific cases:
- Where required by law
- When formally requested by a competent governmental or judicial authority
- When we have obtained your explicit consent
Period of Data Storage
We store your personal data in accordance with legally established timeframes. The primary criterion for determining the retention period is the necessity of the information for fulfilling the stated purposes.
When data is processed based on your consent, it will be retained until you withdraw that consent and exercise your right to be forgotten—requesting the deletion of any personal data you have provided.
Technical Security for Personal Data Protection
The Sport and Tourism Department of the Municipality of Svilengrad has implemented all necessary technical and organizational measures to ensure the secure processing and protection of personal data, in compliance with EU Regulation 2016/679 and applicable Bulgarian legislation.
These measures are tailored to the specific risks associated with the processing and storage of your personal data. Both organizational and technical safeguards are in place to protect your information against loss, alteration, theft, or unauthorized access by third parties.
Sharing and Disclosure of Personal Data with Third Parties
In certain instances, we may share specific personal data with our partners or contractors who support us by providing services related to the operation of the website.
We may also disclose your personal data to third parties, including those located outside the European Union, in strict compliance with the provisions of Regulation (EU) 2016/679 (GDPR), including but not limited to the following:
- Generally recognized service providers that have publicly declared their adherence to GDPR and e-privacy policies, such as Google and Facebook. Your consent also includes the use of unique depersonalized identifiers through cookies, localStorage, or other commonly accepted web technologies;
- Server and cloud service providers involved in order processing and call center operations;
- External partners providing services to the Municipality, including accountants, auditors, legal professionals, notaries, advertising and PR agencies, or companies managing data systems and IT infrastructure.
We will only share personal data with third parties after establishing appropriate legal and technical safeguards that ensure secure and lawful processing, in full compliance with GDPR and applicable Bulgarian data protection legislation.
The Sport and Tourism Activity of the Municipality of Svilengrad is committed to taking all necessary actions to guarantee the lawful processing of personal data, in line with the privacy standards defined in this Policy.
Your Rights as a Data Subject
Under Regulation (EU) 2016/679 (GDPR), every data subject is entitled to the following rights:
- Right of Access
You have the right to obtain, free of charge, information about whether your personal data is being processed and, if so, to access the data and receive a copy of it. - Right to Rectification
If you discover that the personal data we process is inaccurate or incomplete, you have the right to request its correction without undue delay. - Right to Restrict Processing
In certain situations, you may request that we restrict or block the processing of your personal data. This may apply when the accuracy of your data is being verified, the legal basis for processing is being reviewed, or if the processing is considered unlawful. - Right to Erasure (Right to be Forgotten)
You have the right to request the deletion of your personal data when the legal basis for processing no longer exists, or when the data is no longer necessary for the purposes for which it was collected. - Right to Data Portability
If you wish to use your personal data—originally provided electronically—for the same service with a different provider, you have the right to request its transfer in a machine-readable format. This right applies only to data you have provided to us with your explicit consent. - Right to Object
If you disagree with the way we process your personal data, you have the right to object. This right applies specifically to data processing that is:
- Necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
- Based on legitimate interests pursued by the controller or a third party, unless overridden by your own rights and interests as the data subject.
- Right to Withdraw Consent
If your personal data has been collected based on your consent, you have the right to withdraw that consent at any time. This withdrawal applies only to the specific data collected on that basis and does not affect the lawfulness of processing carried out before the withdrawal. - Right to Withdraw Consent
When your personal data is provided based on your consent, you have the right to withdraw that consent at any time. This withdrawal applies specifically to the type of data for which consent was granted and does not affect the lawfulness of prior processing. - Right to Complain
If you are dissatisfied with how your request regarding any of the above rights has been handled, or if you believe your personal data is being processed unlawfully, you have the right to file a complaint with the Commission for Personal Data Protection—the supervisory authority responsible for enforcing EU Regulation 2016/679 and the Bulgarian Data Protection Act.
To exercise any of these rights, you may submit a written request with your specific inquiry to the following email address: tourism.svilengrad@abv.bg
Contacts of the Personal Data Protection Commission (PDPC)
Address: 1592 Sofia, Blvd. “Prof. Tsvetan Lazarov” № 2
Information and Contact Centre: Tel. 02/91-53-518
Reception Hours: 9:00 AM – 5:30 PM
Email: kzld@cpdp.bg
Website: www.cpdp.bg
To ensure this Privacy Policy remains up to date, it may be amended in whole or in part at any time without prior notice. We encourage you to review this Policy periodically. The date of the most recent update will always be indicated below.
This Policy was adopted on 10.07.2025 and has not been modified since.