PRIVACY POLICY
The Company respects the privacy of individuals and endeavours to protect against unlawful processing of individuals’ personal data.
The Company collects the minimum necessary data about individuals that is required to provide its services and conduct its business. The data is processed and stored in accordance with the legislation in force in the Republic of Bulgaria in the field of personal data protection.
For visitors who do not apply for the contest organized by Cantus Firmus SMJSC, the data include:
• Your IP address
• The date and time of your access to our website
• The language you chose to browse the site
• Your credentials (first name, last name, email address, language choice) if you subscribe to the competition newsletter
• Your credentials (first name, last name, email address, choice of language, your organization) if you subscribe to the competition press releases
For visitors who apply for the competition organized by Cantus Firmus SMJSC, the data includes:
• Your IP address
• The date and time you accessed our website
• The language you chose to browse the site
• Your credentials (first name, last name, title, gender, phone number, your personal website address, links to your personal social media pages – Youtube, Twitter, Facebook and/or Instagram, postal address, and email address)
• Your biographical data (date of birth, place and country of birth, nationality, teachers, diplomas, concerts/recitals, competitions)
• Dates of processing of your application file (creation, modification, validation)
• Payment method of your application
• The first and last name of your personal accompanist
• Your portrait photo
• Copy of your passport or ID card
• Any other information necessary for the processing of your application.
The competent authority for the protection of personal data is the Data Protection Commission. Headquarters and registered office: 1592 Sofia, 2 Prof. Tsvetan Lazarov Blvd; Correspondence data: 1592 Sofia, 2 Prof. Tsvetan Lazarov Blvd; Telephone number: 02 915 3 518; Email: kzld@government.bg, kzld@cpdp.bg. Website: www.cpdp.bg
Grounds for collecting, processing, and storing your personal data under GDPR
We collect your data primarily for:
• allowing access to our website and the use of its services
• the improvement of services provided by the website
• facilitating communication between you and us
• keeping you informed by sending emails, newsletters, and information letters
• visitors who apply for the competition organised by Cantus Firmus EAD: this data is necessary for the various procedures of the competition.
How do we collect your data?
Most of your data is communicated to us through you or as part of a past, present, or future contractual relationship with you.
The Company collects and processes the User’s personal data, which he himself provides in connection with the use of the Company’s services, for registration for participation in the Company’s events, competitions, etc.; for accounting purposes; for the conclusion of a contract; for internal statistical purposes; for sending messages and information to the User; for organizing events, services of the Company that may be in the interest of the User.
The Company complies with the following principles in the processing of personal data provided by the User: transparency, fairness, and lawfulness; minimization of the data collected and relevance to the purposes of the processing; accuracy and timeliness of the data; limitation of storage to achieve specific purposes only; integrity and confidentiality of processing; ensuring an appropriate level of security of personal data. In processing and storing personal data, the Company may process and store personal data in order to protect its following legitimate interests: fulfilling its obligations to the NRA, the Ministry of Interior, and other state and municipal authorities.
Types of operations with personal data: registration of the User on the Company’s Website for participation in competitions and sending informational messages related to the Company’s activities to registered Users.
The Company does not collect location, interface, statistical, and marketing research data.
The personal data collected is processed for the conclusion and performance of an agreement to which the User is a party participant in order for the Company to provide its services.
For visitors who do not apply for the competition organized by Cantus Firmus SMJSC: you can request verification, access, correction, deletion, transfer, and refusal of the use of your data, as well as request its restriction at any time. To do so, please send us an email to the following address: info@cantusfirmuscompetition.bg. We will then make every effort to do what is necessary as soon as possible.
For visitors who apply for the competition organised by Cantus Firmus SMJSC: applicants have the right to review their data. They can modify, delete their data, or refuse permission to use it after the competition has ended. In this respect, they must send a written request to info@cantusfirmuscompetition.bg. We will then make every effort to do so as soon as possible.
For visitors who do not apply for the competition organised by Cantus Firmus SMJSC: Access is granted to our employees and contractors. They have access to the data only to the extent necessary to achieve the purposes pursued above. Each of them is subject to a strict confidentiality obligation.
Visitors who apply for the contest organized by Cantus Firmus SMJSC are provided with the following information: last name, first name, date of birth, place of birth, nationality, biography, photos, your personal website address, and links to your social media pages. Unpublished information is not passed on to third parties.
Our employees and contractors only have access to the data to the extent necessary to achieve the purposes pursued above. Each of them is subject to a strict confidentiality obligation.
The Company does not collect or process personal data that: reveals racial or ethnic origin; reveals political, religious or philosophical beliefs, or trade union membership; genetic and biometric data, health data, or data about sex life or sexual orientation.
The Company shall not disclose the personal data collected to third parties without the User’s express consent, except as provided for in the DPA.
The Company shall keep the personal data that it is required to keep under applicable law.
The Company shall not store any User’s personal data after it ceases to operate.
The User shall have the right at any time to request and obtain from the Company confirmation as to whether their personal data is being processed.
The user may at any time access the data relating to them and the information relating to the collection, processing, and storage of their personal data. The Company shall in this case provide a copy of the personal data processed in electronic or other appropriate form upon request.
The User has the right to rectify their personal data by making a request to the Company.
The right to be forgotten
The User may request the Company to delete the personal data relating to them and the Company shall delete the personal data without delay when: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the User withdraws their consent on which the processing is based and there is no other legal basis for the processing; the user objects to the processing of the personal data relating to them and there are no legitimate grounds for the processing that prevail; the personal data have been unlawfully processed; the personal data must be erased in order to comply with a legal obligation under EU or Member State law to which the Company is subject. The User must submit a written request to the Company, as well as verify their identity in order to exercise their right to be forgotten.
The Company shall not delete data that it has a legal obligation to retain, including for the purpose of defending legal claims made against it or proving its rights.
The Company shall not be obliged to erase personal data it collects, stores and processes: for the exercise of the right to freedom of expression and the right to information; for compliance with a legal obligation requiring processing provided for in EU or Member State law applicable to the Controller or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller; for reasons of public interest in the field of public health; for archiving purposes in the public interest, scientific or historical research or statistical purposes; for the establishment, exercise or defence of legal claims.
The Company stores data on secure server software and firewalls to protect personal data from unauthorised access, disclosure, unauthorised alteration, or destruction.
The User may request the Company to restrict the processing of the data relating to them when: they challenge the accuracy of the personal data, for a period that allows the Company to verify the accuracy of the personal data; the processing is unlawful, but the User does not want his/her personal data to be erased, but only for its use to be restricted.
Processing of personal data of persons under the age of 18: On the Company’s Website, children under the age of 18 may not register as a User without the express consent of their parent/guardian. The Company will delete any information that is provided by a child under the age of 18 without the permission of a parent/guardian as soon as possible after the Company has been informed.
If you are under the age of 18, please do not submit any information about yourself, including but not limited to name, address, UCN, phone number, email address, etc. In the event that we learn that we have collected personal information from a child under the age of 18 without the consent of a parent/guardian, we will delete that information as soon as possible. If you believe that the Company may have information from or about a child under the age of one without the permission of a parent/guardian, please contact us at the contacts listed above.
Our site is not intended for children under the age of 18. If you become aware that your minor child has provided us with personal information without your consent, please contact us at: info@cantusfirmuscompetition.bg.
The Company will use our best efforts to protect your personal information. When sharing information on the Internet, you should keep in mind that the transmission of information over the Internet can never be completely secure, and that security cannot be completely guaranteed despite our best efforts to do so.
The user has the right to file a complaint with the Commission for Personal Data Protection at the address indicated above in these Terms and Conditions, in case of violation of his rights or of the legislation in the field of personal data protection.
These Privacy Policy was adopted on 08.01.2025.