PRIVACY POLICY

at
Association for Regional Social and Economic Development

1. Data Administrator

1.1. Association for Regional Social and Economic Development, with UIC 176716686 and with registered office in the town of. Haskovo Blvd. "Ilinden" №32-38, inc. B, et. 7, app. 53, represented by Evgeny Ivanov, Chairman of the Board, hereinafter referred to as "the Association".
1.2. The Privacy Policy applies to the processing of data regardless of the form and/or medium in which you have provided your personal data (e.g. using the Association's website, on paper, by telephone or by email) and regardless of whether the data provided is processed in data systems or paper forms.
1.3. The Association shall process your personal data only in accordance with applicable laws and regulations, using reasonably available organisational, financial and technical resources.

2. Personal data

2.1. In this Privacy Policy, "personal data" means any information relating to you, or information that may enable you to be identified directly or indirectly.
2.2. In this Privacy Policy, "processing of personal data" means any operation or set of operations performed upon personal data or a set of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. Consent to the Personal Data Protection and Processing Policy

3.1. By submitting your personal data to the Association via https://environmentyou.arsed.eu, you accept the Privacy Policy and the processing thereof.
3.2. If you do not agree to the terms of this policy, you should not provide your personal information.
3.3. You may consent to the processing of your personal data through the Association's website, in applications, by telephone or at the Association's office.
3.4. You have the right at any time to withdraw your consent to the processing of personal data in the same way as it was given. In this case, no further processing of your personal data that was previously based on the consent given for the specific purpose of processing will take place.
3.5. Withdrawal of your consent does not affect the processing of data at the time your consent was valid.
3.6. Revocation of consent may not interrupt the processing of data on the basis of other legal grounds provided for in applicable law.

4. Legal basis for the processing of personal data

4.1. The Association processes personal data on the following legal grounds:
- consent to processing;
- providing information in relation to the services of the Association;
- conclusion of a contract and its performance;
- Compliance with laws and regulations and performance of obligations arising therefrom;
- ensuring legal interests and relations between the Association and you, including: conducting business, providing services, advertising the product, verifying your identity, etc.
- other hypotheses provided by the legislator which are not in breach of the general requirements for the protection of personal data.

5. Purposes of processing personal data

5.1. In accordance with your consent and applicable laws and regulations, the Association processes your personal data for the following purposes:
- To process the information you provide and provide services;
- To identify you;
- To provide you with information, services, news;
- To prevent possible crimes;
- For other purposes if compatible with applicable law, the Privacy Policy and the business of the Association.

6. Receipt of personal data

6.1. The Association receives personal data from you in the following ways:
- When you provide information to the Association, for example: through its website, at its offices, by using mail, e-mail, telephone or otherwise;
- Where third parties provide information to the Association (e.g. various registries or partners).

7. Personal data provided

7.1. Personal data that the Association may obtain from or about you:
1) personal data (e.g. first and last name, age, etc.) that will be used to identify you;
2) communication data (e.g. residence, e-mail address, telephone number, etc.) that will be used to include you in an e-learning platform and the like related to the services provided by the Association;
3) information about the consent (e.g. confirmation notes, dates and times, source).

8. Purpose of use of personal data

8.1. The information you provide to us will be recorded electronically and may be used for the following purposes:
a) for your inclusion in an e-learning platform;
b) to contact you.
8.2. Any data that you have provided to us as part of our engagements may be used to ensure that we meet our commitments to you.

9. Provision of personal data to third parties

9.1. The Association does not disclose your personal data or any information obtained through the provision of a service or contract to third parties except:
- if the data is to be transferred within the framework of a signed contract between the Association and you to ensure the performance of an obligation or function required by the contract and/or the law;
- in accordance with the express consent of the Client/Customer;
- to all persons specified in the applicable laws and regulations, upon a reasoned request in due order and to the extent applicable;
- to protect the legitimate interests of the Association in accordance with applicable laws and regulations, for example by appealing to the courts or other public authorities.

10. Privacy Policy

10.1. We maintain adequate organisational, technical and physical security measures to protect your personal data from accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use and other unlawful uses.
10.2. In connection with the above, we inform you that the competent supervisory authority for compliance with the applicable law on personal data protection in the Republic of Bulgaria is the Commission for Personal Data Protection.

11. Access to your personal data

11.1. You have the right to obtain the information specified in applicable laws and regulations regarding the processing of your personal data by sending a reasonable written request to the Association.
11.2. On the basis of the request received, the verification of your identity and the evaluation of the request, the Association will inform you of the requested information in the manner and to the extent specified in the applicable legislation.

12. Modification or deletion of personal data

12.1. If necessary, you have the right at any time to modify, supplement or delete your personal data and to object to the processing of data.
12.2. In the cases referred to in clause 12.1, you should contact a representative of the Association by email: harsed2020@gmail.com or by mobile phone: +359 887 355 689.
12.3. The Association undertakes to take the necessary measures to correct or delete any inaccuracies in the personal data you have provided directly or through the services provided by the Association.
12.4. Notwithstanding clause 12.3, the Association shall have the right to restrict access to, rectify or erase personal data in accordance with the requirements of applicable law.

13. Duration of storage of personal data

13.1. The Association stores and processes your personal data as long as at least one of the following criteria is met:
- while you are registered on the e-learning platform;
- while you and/or the Association may pursue legitimate interests in accordance with applicable law (e.g. to lodge a complaint or take legal action);
- as long as one of the parties has a statutory obligation to retain the data;
- as long as your consent to the respective processing of personal data is valid, unless there is another legal basis for the processing of data.
13.2. Upon expiry of the above time limits, your personal data will be deleted or made anonymous.

14. Communication

14.1. The Association communicates with you using your contact information (mobile phone number or email).

15. Contact us

15.1. For questions, requests or comments regarding the Association's Privacy Policy, you may contact us at harsed2020@gmail.com or +359 887 355 689.

16. Changes to the Privacy Policy

16.1. The Association has the right to change this Privacy Policy at any time, noting the effective date of the changes.

Date: 27.05.2021