1. Data controller
The Digital Society Foundation, UIC 205392347, at 30 Solunska Street, Sofia, Bulgaria, is the data controller. For privacy enquiries or to exercise your rights, write to us at that address or use the information on the Contact page.
2. Enquiries
When we receive an enquiry, we process the name, email address, subject and message you provide to respond and manage the correspondence. Our legal basis is our legitimate interest in handling enquiries under Article 6(1)(f) of the General Data Protection Regulation. If we take steps at your request before entering into a contract, the legal basis is Article 6(1)(b). Providing information is voluntary. We need a reply address to respond.
3. Technical data and cookies
When you visit, the hosting service may process technical data such as your IP address, request time and requested page to deliver and secure the website. Logs kept for website operation and security are processed on the basis of legitimate interests under Article 6(1)(f). The website code does not use analytics or advertising cookies.
The contact form is protected by Google reCAPTCHA to prevent automated and abusive submissions. The service is loaded only on the Contact page. When it loads, Google Ireland Limited may process data such as your IP address, browser and device information and your interaction with the page, and may set cookies needed for the check. The legal basis is our legitimate interest in protecting the form under Article 6(1)(f).
4. Recipients and retention
Correspondence is accessible to the people responsible for handling enquiries. Hosting and email providers may process data as part of their services. Data may be disclosed to a competent authority where required by law.
We keep correspondence for as long as needed to handle the enquiry and follow up. Where a legal obligation or dispute applies, we may retain the data for the relevant period. Technical logs are kept for as long as needed for troubleshooting and security.
5. Your rights
Where applicable, you have the right to access, rectify or erase your personal data, restrict processing, receive your data in a portable format and object to processing based on legitimate interests.
You may lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority.