{"id":22694,"date":"2020-02-10T12:51:43","date_gmt":"2020-02-10T10:51:43","guid":{"rendered":"https:\/\/investsofia.com\/en\/?page_id=22694"},"modified":"2026-05-12T14:33:19","modified_gmt":"2026-05-12T14:33:19","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/investsofia.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n
    <\/ol>\n\n\n\n\n\n\n\n\n
    \n
    Contents<\/div>\n
    \n I. Collection<\/a>\n II. From Whom<\/a>\n III. How<\/a>\n IV. Why<\/a>\n V. Measures<\/a>\n VI. Security<\/a>\n VII. Sharing<\/a>\n VIII. Rights<\/a>\n IX. Exercise<\/a>\n X. Controller<\/a>\n Forms<\/a>\n <\/div>\n<\/div>\n\n

    This PERSONAL DATA POLICY is an integral part of the GENERAL TERMS OF USE of the site https:\/\/investsofia.com<\/a> (the Site) that is administered by the SOFIA MUNICIPAL PRIVATIZATION & INVESTMENT AGENCY (SMPIA), hereinafter referred to as the Agency. The policy describes how we collect and process the personal data of end user data subjects. It also describes how you can contact us if you need to do so.<\/p>\n\n

    I. What information is collected by the Site?<\/h2>\n

    The site needs some personal information in order to provide its services for your use, and that information can be used to directly or indirectly identify you.<\/p>\n\n

    \n
    \n
    <\/div>\n 1. Information provided voluntarily<\/strong>\n

    1.1.<\/strong> If it is necessary for a specific service provided by the site, we may request the following categories of personal data from you:<\/p>\n

    \n Name and family name<\/span>\n Valid e-mail address<\/span>\n Telephone<\/span>\n Physical correspondence address<\/span>\n Additional data (user content)<\/span>\n <\/div>\n

    1.2.<\/strong> It is possible for the abovementioned categories of personal data also to be requested in a potential query by us to you in connection with the exercising of your rights described below.<\/p>\n <\/div>\n

    \n
    <\/div>\n 2. Information collected automatically<\/strong>\n

    2.1.<\/strong> To enable certain functionalities of our site, we automatically collect information about you from your computer:<\/p>\n

    \n IP address<\/span>\n Your web browser<\/span>\n Recommended language settings<\/span>\n Device type<\/span>\n <\/div>\n

    2.2.<\/strong> You may choose to share your opinion on SMPIA’s Facebook page. This might be publicly accessible through other websites, and your publications there may be seen by third persons. The collection, storage, safeguarding and processing of such data is subject to the terms and conditions of the site www.facebook.com.<\/p>\n <\/div>\n<\/div>\n\n

    \n 3. Personal data of children<\/strong>\n

    The services provided by the site are not aimed at persons under 18 years of age. SMPIA does not aim or wish to collect personal data of children in connection with the services provided through the site. If the Agency still receives information about an underage person in connection with the services of the Site, we will not process it and will delete it unless we are obligated by law to process such information in a prescribed manner.<\/p>\n<\/div>\n\n

    II. From whom do we collect information?<\/h2>\n

    In connection with the goals stated below, the Site collects information from its visitors, including end user data subjects.<\/p>\n\n

    III. How is the information being collected?<\/h2>\n

    The personal information processed through the site can be collected in any and all of the following manners:<\/p>\n

    \n
    1.<\/strong> By being provided personally and voluntarily by the visitor<\/div>\n
    2.<\/strong> Automatic collection from and through the site via cookies for optimization of the site’s performance and optimal presentation (serving) of site content on user devices.<\/div>\n<\/div>\n\n

    IV. Why are data being processed?<\/h2>\n

    SMPIA uses the information described above for various purposes on specific legal grounds, namely:<\/p>\n\n

    \n
    Category 1<\/div>\n
    \n

    Data:<\/strong> User names, current e-mail address, additional data provided by the user<\/p>\n

    Purpose:<\/strong> To provide the service, to enable the functionality of the site and to allow personal communication<\/p>\n

    Legal grounds:<\/strong> Art. 6, Para. 1 a) GDPR \u2013 the data subject has given consent<\/p>\n

    Method:<\/strong> Through the service for alerting of the SMPIA<\/p>\n

    Period:<\/strong> Until the service is rendered<\/p>\n <\/div>\n<\/div>\n

    \n
    Category 2<\/div>\n
    \n

    Data:<\/strong> IP address, browser used, language settings, type of device used, operating system type<\/p>\n

    Purpose:<\/strong> To provide the full functionality of the Site<\/p>\n

    Legal grounds:<\/strong> Art. 6, Para. 1 b) GDPR \u2013 processing is necessary for the performance of a contract<\/p>\n

    Method:<\/strong> When the site is loaded on a user device<\/p>\n

    Period:<\/strong> Until the end of the current user session<\/p>\n <\/div>\n<\/div>\n

    \n
    Category 3<\/div>\n
    \n

    Data:<\/strong> Personal names, telephone and\/or e-mail, physical correspondence address<\/p>\n

    Purpose:<\/strong> Official, legal and\/or system warnings, legal purposes<\/p>\n

    Legal grounds:<\/strong> Art. 6, Para. 1 c) GDPR \u2013 for compliance with a legal obligation<\/p>\n

    Method:<\/strong> When the user of site services exercises their rights<\/p>\n

    Period:<\/strong> Until fulfilment of the controller’s obligation<\/p>\n <\/div>\n<\/div>\n\n

    V. Measures to guarantee lawful and fair processing<\/h2>\n

    In accordance with the European legislation, the SMPIA maintains the appropriate and necessary technical and organizational measures to protect user data, including to prevent unauthorized access to or improper use of such data. The Agency uses business systems, procedures, and information technology that adequately protect your personal data and ensure their safety. Only authorized employees have access to the personal data in our information systems.<\/p>\n\n

    VI. How do we guarantee security?<\/h2>\n

    The data collected by users of the Site are organized in encryption-protected registers. The data registers are stored on hard drives in computer systems with technical and physical access limited only to qualified and trained personnel.<\/p>\n\n

    VII. With whom do we share your information?<\/h2>\n

    The SMPIA does not share personal data of Site users with third parties.<\/p>\n

    There are some exceptions when it is possible for us to share your personal information with a third party:<\/p>\n

    \n

    Subject:<\/strong> A special state authority \u2013 administrative, judicial, and\/or an executive body<\/p>\n

    Grounds under GDPR:<\/strong> Art. 6, Para. 1, It. c<\/p>\n

    \n 1. In the event of a need and obligation to disclose trade secrets<\/span>\n 2. In connection with resolution of legal disputes before a competent court and\/or arbitration<\/span>\n 3. Sharing of information with law enforcement authorities and financial institutions when required by law or vitally important for the prevention, investigation, or prosecution of criminal activities or fraud<\/span>\n <\/div>\n<\/div>\n\n

    VIII. User rights in connection with personal data<\/h2>\n

    Please find below the rights of all end user data subjects that are guaranteed by the European legislation for the protection of personal data:<\/p>\n\n

    \n
    \n
    Right of information<\/strong>YES<\/span><\/div>\n

    When providing their personal data or before the data are collected by the controller for processing, the User has the right to be informed of: 1) Who is the controller; 2) What are the purposes of the processing; 3) What are the legal grounds; 4) Who may receive the data; 5) What is the storage period; 6) What are the rights of the users; 7) Are there any automated decision algorithms, including profiling.<\/p>\n <\/div>\n

    \n
    Right of access<\/strong>YES<\/span><\/div>\n

    The user has a right of access to their personal data processed by the Site. This includes the data from the Right of Information section, as well as the source of the personal data and the categories of data being processed.<\/p>\n <\/div>\n

    \n
    Right of correction<\/strong>YES<\/span><\/div>\n

    The user is entitled to request from the controller to correct without undue delay any incorrect personal data related to the user who is the personal data subject.<\/p>\n <\/div>\n

    \n
    Right of deletion<\/strong>YES<\/span><\/div>\n

    The user is entitled to request from the controller to delete the personal data related to the user without undue delay.<\/p>\n <\/div>\n

    \n
    Right “to be forgotten”<\/strong>NO<\/span><\/div>\n

    If the controller has made the personal data publicly accessible and is obligated to delete such data, the controller shall take reasonable measures to notify the other controllers who are processing the data that the data subject has requested the deletion by such controllers of all links, copies, or reproductions of such personal data.<\/p>\n <\/div>\n

    \n
    Right of restriction of processing<\/strong>NO<\/span><\/div>\n

    The user is entitled to request from the controller to restrict the processing if: 1) The user has disputed the accuracy of the data; 2) The processing is unlawful but the User does not wish deletion; 3) The controller no longer needs the data but the User needs them for legal rights; 4) The user has objected and the check is pending. The controller may still store the data during the restriction period.<\/p>\n <\/div>\n

    \n
    Right of data transmission<\/strong>YES<\/span><\/div>\n

    The user is entitled to receive from the controller their personal data if: 1) The processing is automated; and 2) The processing is consent-based or in performance of a contractual obligation. This includes an obligation of the controller to transfer to another controller personal data specified by the User.<\/p>\n <\/div>\n

    \n
    Right of objection<\/strong>YES<\/span><\/div>\n

    The user is entitled to object against the processing of their personal information provided to the controller in connection with public interest tasks, the controller’s legitimate interest, profiling or direct marketing. When exercising that right, the user’s personal data may be deleted from the controller’s devices.<\/p>\n <\/div>\n

    \n
    Right to not be subject of profiling<\/strong>NO<\/span><\/div>\n

    The user has the right to not be the subject of decisions based on fully automated processing, including profiling.<\/p>\n <\/div>\n

    \n
    Right to file a complaint<\/strong>YES<\/span><\/div>\n

    The user is entitled to file a complaint at a regulatory authority (the Commission for Personal Data Protection) if they think the processing of personal data is in violation of the GDPR or the Personal Data Protection Act. The data subject may exercise that right in the Member-State of their usual residence, place of work, or where the suspected violation has occurred.<\/p>\n <\/div>\n<\/div>\n\n

    If you wish to learn more about the rights granted to you, you may visit the information website of the European Data Protection Supervisor<\/a> or the supervisory authority of the Republic of Bulgaria \u2013 the Commission for Personal Data Protection<\/a>.<\/p>\n\n

    IX. How can you exercise your rights?<\/h2>\n

    The user can exercise their rights always and at any time. To allow us to be of maximum use in this process, please send us a query by physical mail or e-mail at the addresses stated below.<\/p>\n

    You can use our query forms to facilitate the process \u2013 Annexes No 1 to 4 below.<\/p>\n\n

    X. Who is responsible for the personal data processing?<\/h2>\n

    In connection with the processing of personal data through the Site, the SMPIA acts in its capacity as a personal data controller and Site administrator.<\/p>\n\n

    \n
    \n
    Data Controller<\/div>\n SOFIA MUNICIPAL PRIVATIZATION & INVESTMENT AGENCY (SMPIA)<\/strong>\n
    \n Address: 6 Slaveykov Sq., Fl. 1, 1000 Sofia
    \n Bulstat code: 0006963272031
    \n Representative: Dr. Maria Alexandrova Popova-Hristova, Senior Executive Director
    \n Telephone: +359 2 9804255
    \n E-mail:     contact@investsofia.com<\/a>\n <\/div>\n <\/div>\n
    \n
    Supervisory Authority<\/div>\n Commission for Personal Data Protection<\/a><\/strong>\n
    \n Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
    \n E-mail:     kzld@cpdp.bg<\/a>
    \n Telephone: +359 2 9153518\n <\/div>\n <\/div>\n<\/div>\n\n

    If you have any questions or comments about this personal data policy, you may send your question to us by mail or e-mail it to: contact@investsofia.com<\/a>.<\/p>\n\n

    \n

    This PERSONAL DATA POLICY has been adopted and approved by the representative of the SMPIA, Maria Popova-Hristova, Senior Executive Director, on 12 November 2020 and is in compliance with the effective legislation at the time of its adoption, as well as with the general European and national legal framework in the area of personal data protection.
    Date of publication: 12 November 2020<\/p>\n<\/div>\n\n

    Application Forms<\/h2>\n\n
    \n \n \ud83d\udcc4<\/span>\n
    Annex No. 1<\/strong>Application for access to processed personal data<\/span><\/div>\n <\/a>\n \n \ud83d\udcdd<\/span>\n
    Annex No. 2<\/strong>Application for correction or supplementation of personal data<\/span><\/div>\n <\/a>\n \n \ud83d\udd04<\/span>\n
    Annex No. 3<\/strong>Application for data portability<\/span><\/div>\n <\/a>\n \n \u26d4<\/span>\n
    Annex No. 4<\/strong>Objection to the processing of personal data<\/span><\/div>\n <\/a>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

    Contents I. Collection II. From Whom III. How IV. Why V. Measures VI. Security VII. Sharing VIII. Rights […]<\/p>\n","protected":false},"author":9,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"template-info.php","meta":{"footnotes":""},"class_list":["post-22694","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/investsofia.com\/en\/wp-json\/wp\/v2\/pages\/22694","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/investsofia.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/investsofia.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/investsofia.com\/en\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/investsofia.com\/en\/wp-json\/wp\/v2\/comments?post=22694"}],"version-history":[{"count":4,"href":"https:\/\/investsofia.com\/en\/wp-json\/wp\/v2\/pages\/22694\/revisions"}],"predecessor-version":[{"id":38393,"href":"https:\/\/investsofia.com\/en\/wp-json\/wp\/v2\/pages\/22694\/revisions\/38393"}],"wp:attachment":[{"href":"https:\/\/investsofia.com\/en\/wp-json\/wp\/v2\/media?parent=22694"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}