Privacy Policy

WHO ARE WE?

This Privacy Policy applies to the website https://beards.causes.aibest.org/ (the “Website”) operated by AIBEST Association, with registered address at: 57, Tsar Simeon Str., Oborishte District, Sofia, Bulgaria, registered in the Commercial register and register of NPLE under UIC 176407569. 

In this Privacy Policy, references to “we”, “us” or “our” means AIBEST Association. References to “you” and “your” are to users of our Website. The purpose of the Website is to raise funds and in this way support Blagotvoritel Foundation which aims to provide personal development trainings and career guidance for pupils and students without parental care (the “Campaign”).

We recognize the importance of protecting your personal information and are committed to processing it responsibly and in compliance with applicable data protection laws and regulations.  Therefore we have created this Privacy Policy to inform you how we collect, use and otherwise handle information about you and any personal information you submit or make available to us, or that we collect from you, when you use our Website.

When using the term “personal information” or “Personal Information” we refer to information relating to you, which can be used to personally identify you (either directly or indirectly), such as your name, e-mail address, company name, your photos, resumes and other information about you. 

Only https://beards.causes.aibest.org/ is within scope for this Privacy Policy.

INFORMATION ABOUT CHILDREN

The Website is not intended for or targeted at children under 18 years old, and we do not knowingly or intentionally collect or maintain information about children under 18 years old. If you believe that we have collected information about a child under 18 years old, please contact us at info@aibest.org, so that we may delete the information. In addition, we kindly ask any child under the age of 18 not to submit any personal information to us or use the Website.

WHY AND HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION

Types of personal information we collect

The types of information that we may collect from you, depending on how you use our Website or contact us, include:

  • Registration Information: Full name, email address and additional details like employer, job title, biography, and photo (active participants only).
  • Usage Data: Details about your points collected during the Campaign, voting activity, and any other engagement within the Campaign (if any).
  • Content: Photos or posts shared on the Website;
  • Communication Information: Any information you submit when you contact us via email or through other communication channels. any other information that you choose to provide us when interacting with the Website.  

How do we collect information 

Directly from you

When you register an account, participate in the Campaign, upload content, contact us through the “Support Form” or e-mail and engage with our services on our Website.

Automatically:

We may automatically collect usage data using cookies and similar technologies to improve your experience and analyze usage. For more information, please see our Cookie Policy.

Third Parties:

If you make a purchase through the payment provider (Stripe), your payment details will be processed by Stripe. We only receive transaction-related details (e.g., payment amount and date).

We use Transport Layer Security (TLS) to encrypt and protect web and email traffic. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.

We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

How We Use Your Personal Information

We use your personal information for the following purposes:

To Operate and Manage the Campaign: Including creating and maintaining your account, displaying user-generated content (e.g., photos, votes), and awarding points.

To Communicate with You: To provide support, answer questions, and send important notices about your account or changes to our services.

To Improve the Website: We analyze usage data to improve Website functionality, user experience, and engagement.

For Marketing: With your consent, we may use your information to send promotional materials about Campaign updates and other charitable initiatives.

Legal basis for collection and use of Personal Information

We process your Personal Information in connection with your registration, participation in the Campaign and your use of the contact forms in our Website, provided we have your consent to do so. In other cases, we may process your personal information where we need to do so:

  • to comply with our legal and regulatory obligations;
  • for our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms in:
    • responding to your queries;
    • providing services and/or information to you

You can object to processing based on our legitimate interests at any time by contacting us at info@aibest.org. See also in section YOUR RIGHTS AS A DATA SUBJECT “The right to object”.

If you would like to find out more about the legal basis on which we process your Personal Information for a particular purpose you can contact us at info@aibest.org.

RETENTION OF PERSONAL INFORMATION

It is our policy to retain your Personal Information for the length of time required for the specific purpose or purposes for which it was collected. However, we may be obliged to store some Personal Information for a longer time, taking into account factors including:

  • legal obligation(s) under applicable law to retain data for a certain period of time;
  • statute of limitations under applicable law(s);
  • (potential) disputes and
  • guidelines issued by relevant data protection authorities.

Whilst we continue to process your Personal Information, we will ensure that it is treated in accordance with this Privacy Policy. Otherwise, we securely erase your information once this is no longer needed.

We have strict data retention periods determined in our Internal rules for personal data protection. If you would like to find out how long we keep your Personal Information for a particular purpose you can contact us at info@aibest.org.

For more information on how long cookies are stored, please refer to our Cookie Policy at: https://beards.causes.aibest.org/cookie-policy/ 

HOW AND WHEN DO WE SHARE INFORMATION WITH THIRD PARTIES?

Some services that we provide require the involvement of third parties. We have carefully selected these third parties and taken steps to ensure that your Personal Information is adequately protected. Details about how we share Personal Information with third parties is set out below:

Third party service providers

We also share your Personal Information with our third party service providers based in the European Economic Area (“EEA”) who we engage to provide support services in relation to our Website for the purposes of: hosting and maintaining our Website; providing data storage; assisting us with database management, and in order to assist us with related tasks or processes.

We may also share your Personal Information with any other third party if we are under a duty to disclose or share your Personal Information in order to comply with any legal obligation, or to protect the rights, property and/or safety, our personnel or others; or with any other third party for the purposes of acting in accordance with the requirements of a court, regulator or government agency, for example, complying with a search warrant or court order or acting in accordance with an applicable law or regulation.

Sharing buttons

Our Website may provide sharing buttons that you can click on in order to share content from our Websites on social media channels, e.g., Facebook. We do not use these buttons to share your Personal Information with social media providers. When you click on a sharing button the relevant social media provider will gather Personal Information directly from you. Please read the privacy notice of any social media provider with which you intend to share content before clicking on the corresponding sharing button.

Acquisition

If we (or our assets) are acquired by another company, whether by merger, acquisition, bankruptcy or otherwise, that company would receive all information gathered by us on the Website. In this event, you will be notified via email and/or a prominent notice on our Website, of any change in ownership, uses of your Personal Information, and choices you may have regarding your Personal Information.

INTERNATIONAL TRANSFERS

Some of the third parties described in this privacy policy, which provide services to us, may be based in other countries outside the European Economic Area (“EEA”). In case we are required to undertake any transfer of personal information outside the EEA, we take all reasonable necessary steps to ensure that your personal information is treated securely and in accordance with this Privacy Policy and an adequate level of protection is applied to it, in particular through the implementation the European Commission-approved standard contractual data protection clauses, binding corporate rules for transfers to data processors, or other appropriate legal mechanisms to safeguard the transfer.

YOUR RIGHTS AS A DATA SUBJECT

The following section explains your rights.

Rights What does this mean?
1.The right to be informed

 

 You have the right to be provided with clear, transparent and easily understandable information about how we use your Personal Information and your rights. This is why we are providing you with the information in this Privacy Policy.
2. The right of access You have the right to obtain a copy of your Personal Information (if we are processing it), and other certain other information (similar to that provided in this Privacy Policy) about how it is used.

This is so you are aware and can check that we are using your information in accordance with data protection law.

We can refuse to provide information where to do so may reveal Personal Information about another person or would otherwise negatively impact another person’s rights.
3. The right to rectification You can ask us to take reasonable measures to correct your Personal Information if it is inaccurate or incomplete. E.g. if we have the wrong name or address for you.
4. The right to erasure This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your Personal Information where there’s no compelling reason for us to keep using it or its use is unlawful. This is not a general right to erasure; there are exceptions, e.g. where have legal obligation to keep your Personal Informaton or we need to use your Personal Information in defence of a legal claim.
5. The right to restrict processing You have rights to ‘block’ or suppress further use of your Personal Information when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your Personal Information, but may not use it further. We keep lists of people who have asked for further use of their Personal Information to be ‘blocked’ to make sure the restriction is respected in future.
6. The right to data portability You have rights to obtain and reuse certain Personal Information for your own purposes across different organisations.
7. The right to object You have the right to object to certain types of processing, on grounds relating to your particular situation, at any time insofar as that processing takes place for the purposes of legitimate interests pursued by us or by a third party. We will be allowed to continue to process your Personal Information if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or we need this for the establishment, exercise or defence of legal claims.
8. The right to complain to a data protection authority You have the right to complain to a data protection authority about our collection and use of your Personal Information. Contact details for data protection authorities in the EEA, Switzerland and certain non-European countries (including the US and Canada) are available at http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.)Contact details of the Bulgarian data protection authority (CPDP) are available at https://www.cpdp.bg/en/index.php?p=pages&aid=6 and are as follows:

·         for complaints in person – at the CPDP’s Registry at: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592 (see the location of CPDP).

·         for complaints by post to: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Commission for Personal Data Protection.

·         for complaints by fax: +3592/91-53-525.

·         for complaints by e-mail to the CPDP’s e-mail address (kzld@cpdp.bg). In this case, your complaint should be submitted in the form of a signed electronic document with an electronic signature (not scanned!).

5. for complaints via the CPDP’s website – using the electronic form provided at https://www.cpdp.bg/en/index.php?p=pages&aid=6.

SECURITY MEASURES

Our Website is hosted on servers in the EEA. We have adopted and implemented a security standard ISO 27001. Information storage is on secure computers in a locked and certified information centre and information is encrypted wherever possible. We undergo periodic system testing and reviews of our security policies and procedures to ensure that our systems are secure and protected. We use extensive and sophisticated secure technology to protect your data and transmissions between you and us. Transmission between browsers and our web server is implemented using Secure Sockets Layer (SSL) technology. Although we have taken these reasonable and appropriate measures to ensure that your Personal Information is delivered and disclosed only in accordance with your instructions, as the transmission of information via the Internet is not completely secure we cannot and do not guarantee the security of your information transmitted to our Websites and we cannot and do not guarantee that the Personal Information you provide will not be intercepted by others and decrypted.

CONFIDENTIALITY

We acknowledge that the information you provide may be confidential. We do not sell, rent, distribute or otherwise make Personal Information commercially available to any third party, except that we may share information with our service providers for the purposes set out in this Privacy Policy. We will maintain the confidentiality of and protect your information in accordance with our Privacy Policy and all applicable laws.

LINKS

To allow you to interact with other websites on which you may have accounts (such as Facebook and other social media sites) or join communities on such sites, we may provide links or embed third-party applications that allow you to login, post content or join communities from our websites. We may also provide you with general links to other websites. When you use those links, you leave the websites and we are unable to control how the owners of the websites or applications you link to handle any information they gather about you, including their privacy practices and use of cookies. This Privacy Policy applies only to the Website and and does not govern activities on linked websites or applications Your use of these links and applications is subject to the third parties’ privacy policies, and you should become familiar with the third-party sites’ privacy policies before using the links or applications. We are not responsible for the privacy practices or the content of those other websites.

PRIVACY POLICY ACCEPTANCE

If you do not agree to the terms of this Privacy Policy, please do not provide us with any information and do not use the Website. By using the Websiteand voluntarily providing information to us, you consent to our collection and use of the Personal Information as set forth in this Privacy Policy.

EFFECT OF PRIVACY POLICY AND CHANGES TO THIS PRIVACY POLICY

This Privacy Policy does not form a contract between an individual and us. The Privacy Policy may also be subject to change from time to time. Whenever we change our Privacy Policy, we will publish the updated policy on our Website. Please check this Privacy Policy regularly. Subject to applicable law, all changes will take effect as soon as we publish the new Privacy Policy, but where we have already collected information about you and/or where legally required to do so, we may take additional steps to inform you of any material changes to our Privacy Policy and may request that you agree to these changes. However, please be assured that if this Privacy Policy changes in the future, we will not use the personal information you have submitted to us under this Privacy Policy in a manner that is materially inconsistent with this Privacy Policy, without your prior consent.

CONTACT US

If you have a question about this Privacy Policy or our handling of your Personal Information, you can send an email at info@aibest.org . If you wish to request further information or exercise any of the above rights, or if you are unhappy with how we have handled your Personal Information, contact us here: info@aibest.org. Please provide as much information as possible to help us identify the information you are requesting, the action you are wanting us to take and why you believe this action should be taken.

If you are not satisfied with our response to your complaint or believe our processing of your Personal Information does not comply with data protection law, you can make a complaint to the relevant EU data protection authority where you are located. The contact details for each EU data protection authority can be found here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm Contact details of the Bulgarian data protection authority (CPDP) are available at https://www.cpdp.bg/en/index.php?p=pages&aid=6 and are as follows:

  • for complaints in person – at the CPDP’s Registry at: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592 (see the location of CPDP).
  • for complaints by post to: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Commission for Personal Data Protection.
  • for complaints by fax: +3592/91-53-525.
  • for complaints by e-mail to the CPDP’s e-mail address (kzld@cpdp.bg). In this case, your complaint should be submitted in the form of a signed electronic document with an electronic signature (not scanned!).
  • for complaints via the CPDP’s website – using the electronic form provided at https://www.cpdp.bg/en/index.php?p=pages&aid=6.

This Privacy Policy is effective as of 01.11.2024