Through the website of Sveti Vlas Film Fest – www.svetivlasfilmfest.bg, hereinafter referred to as Sveti Vlas Film Fest, or “we”, we provide various information services.
When you use the Marketing Services, you entrust us with your personal information.
This privacy notice is intended to help you understand what data we collect, why we collect it, and what we do with it. This is important and we hope you will take the time to read the information carefully.
According to the General Data Protection Regulation (“GDPR”), personal data is defined as: “Any information relating to an identified natural person or an identifiable natural person (“data subject”). An identifiable person is a person who can be identified, directly or indirectly, in particular by an identifier such as a name, an identification number, location data, an online identifier or by one or more characteristics specific to the physical, the physiological, genetic, psychic, mental, economic, cultural or social identity of that natural person’.
„administrator“ means a natural or legal person, public body, agency or other structure that alone or jointly with others determines the purposes and means of processing personal data;
„processor of personal data“ means a natural or legal person, public body, agency or other structure that processes personal data on behalf of the controller;
„recipient“ means a natural or legal person, public body, agency or other structure to which the personal data is disclosed, whether or not it is a third party. At the same time, public authorities that may receive personal data within the framework of a specific investigation in accordance with Union law or the law of a Member State are not considered “recipients”; the processing of this data by the specified public authorities complies with the applicable data protection rules in accordance with the purposes of the processing;
„third party“ means a natural or legal person, public body, agency or other body other than the data subject, the controller, the personal data processor and the persons who, under the direct supervision of the controller or the personal data processor, have the right to process the personal data;
„data subject consent“ means any freely expressed, specific, informed and unequivocal indication of the will of the data subject, by means of a statement or clear affirmative action, which expresses his consent to the personal data relating to him being processed;
To provide you with any of our services, through our partners, such as property sales and rentals, hotel services, car rentals, yacht sales and rentals, vacation rental accommodations, provision of advertising space, online reservations and payments – bank transfer via credit and/or debit card, for your registration to receive the relevant service, so that we can provide you with the information requested by you, for identification before entering into a contract with you.
We ensure that the information we collect and use is necessary for any of the above purposes and is not intended to invade your privacy or privacy.
For the purposes of communications with advertising and marketing purposes, we will ask you for your express consent to receive them, which you can always withdraw.
The categories of personal data we process are the following: three names, telephone number, email address, unique civil number, identity document data – number and date of issue, bank account number, IP address.
As our customers, we receive your personal data online or offline, on the basis of your voluntarily given consent, on the basis of a contract concluded between us or by virtue of statutory provisions.
We use our own and third-party cookies to manage site content, prepare personalized ads, measure results and analyze traffic.
If we need to use your personal data for a new purpose that is not covered by this privacy notice, we will provide you with a new notice and, when and where necessary, we will ask for your prior consent to the new processing.
The basis that entitles us to process your data is one or more of the following:
– your agreement, ;
– in order to fulfill a contract with you or our intention to enter into such a contract;
– when the processing is necessary to comply with our legal obligation;
– to protect your interests or the interests of another person, as well as to protect our legitimate interest.
We do not collect personal data from children under the age of 16. If we learn that we are processing personal information of a child under the age of 16, we will take steps to delete the information as soon as possible. If parents and/or legal representatives of children discover that children under their guardianship have given their data to Saint Vlas Film Fest, contact us at the contact addresses provided in this notice. We will delete the information as soon as possible.
The following organizations may receive your personal data from us only if necessary:
When Sveti Vlas Film Fest shares information about you with third parties – subcontractors of Sveti Vlas Film Fest, we enter into contracts with these third party subcontractors and take measures to ensure that they provide a level of data protection as agreed standard for this and according to the requirements of Regulation (EU) 2016/679 (“GDPR”) and the applicable legislation. Your data is also considered confidential for our partners.
It is possible that Sveti Vlas Film Fest may be required – by law, in court proceedings, in litigation and/or at the request of public and government bodies in or outside of your country of residence – to disclose your personal information. We may also disclose information about you if we determine that for purposes of national security, law enforcement, or other matters of public concern, such disclosure is necessary or appropriate.
We do not intend to transfer your personal data to third parties without having previously informed you and obtained your consent for this.
We process and store personal data for a period necessary to fulfill the purposes set out in this Privacy Statement, unless we are required by law to retain it for a longer period. According to the type of data and the purposes for which they were collected, a storage period is determined, after which the information is deleted.
At any time while we store or process your personal data, you, as a data subject, have the following rights:
It is our policy to voluntarily settle any disputes arising in relation to the processing of your personal data and for this we would welcome your first contact with our Data Protection Officer before making a direct complaint to the supervisory authority.
Sveti Vlas Film Fest will process (collect, store and use) the information provided by you in a manner compatible with the requirements of the General Data Protection Regulation (GDPR) and the Personal Data Protection Act in force in the country. We will endeavor to keep the information accurate and up to date.
We will not store your information longer than is reasonably necessary to fulfill the specific purposes for which it was collected and for which you are notified here.
Some of the information retention periods depend on legal obligations to keep documents and information for certain minimum periods, such as the Accounting Act or the Anti-Money Laundering Measures Act. We will take all foreseeable technical and organizational measures to ensure protection of your data from unregulated access, such as encryption, anonymization, masking and deletion after the expiration of the storage period.
We have the right to periodically update this Declaration, with which update you will be informed. In the event of a change in this statement, a notice will be published on our website, as well as the updated Privacy Statement.