PRIVACY AND PERSONAL DATA PROTECTION POLICY
This Privacy and Personal Data Protection Policy (the “Policy”) aims to inform individuals about the processing of personal data by the Financial Literacy Initiative Foundation in connection with the use of the website www.finansovogramoten.bg for the purposes of the Money Carousel educational initiative.
This Policy has been prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Bulgarian Personal Data Protection Act and applicable European Union and national legislation.
1. Data Controller
The data controller within the meaning of Article 4(7) of the GDPR is:
Financial Literacy Initiative Foundation, registered office and address of management: 72 Vitosha Blvd., Floor 1, Office 4, Sofia, Bulgaria, Unified Identification Code (UIC): 176304277.
Contact email: office@financialiteracy.eu
2. Scope of the Policy
This Policy applies to:
-
personal data collected through the website www.finansovogramoten.bg;
-
personal data voluntarily provided by adults in connection with their participation in, or expressed interest in, the Money Carousel initiative.
3. Categories of Personal Data Processed
The data controller processes the following categories of personal data relating to adults:
-
identification data: first name and surname;
-
professional information: organisation/employer and job title;
-
contact details: email address and telephone number (optional).
4. Purposes of Processing
Personal data are processed for the following purposes:
-
organising, coordinating and administering the Money Carousel initiative;
-
communicating with participants and interested parties;
-
providing information, materials and guidance related to the initiative;
-
building and maintaining a professional community in the field of financial literacy.
5. Legal Bases for Processing
Personal data are processed on the following legal bases:
-
Article 6(1)(a) of the GDPR – explicit consent given by the data subject;
-
Article 6(1)(f) of the GDPR – the legitimate interests pursued by the data controller in connection with the organisational and communication activities of the initiative, provided that such interests are not overridden by the rights and freedoms of the data subjects.
6. Voluntary Provision of Personal Data
-
The provision of personal data is voluntary.
-
Failure to provide certain information (e.g. an email address) may make it impossible to participate in the initiative or receive information relating to it.
7. Data Retention Period
Personal data are retained:
-
for up to 12 months after the completion of the relevant edition of the initiative;
-
or until the data subject withdraws their consent;
-
unless a longer retention period is required by applicable law.
8. Recipients and Data Processors
The data controller does not disclose personal data to third parties, except:
-
to service providers (e.g. hosting providers, technical support providers, email service providers and analytics providers) acting as data processors under agreements concluded in accordance with Article 28 of the GDPR;
-
to competent public authorities where required by law.
9. Cookies
The website uses strictly necessary cookies required for its technical operation.
Analytics cookies are used only after the user has given consent.
Users can manage their cookie preferences through their browser settings or the consent management mechanism provided on the website.
10. Rights of Data Subjects
Data subjects have the right to:
-
access their personal data;
-
rectification of their personal data;
-
erasure of their personal data;
-
restriction of processing;
-
data portability;
-
object to processing;
-
withdraw their consent at any time.
Requests should be sent to: office@financialiteracy.eu
11. Right to Lodge a Complaint
Every data subject has the right to lodge a complaint with the supervisory authority:
Commission for Personal Data Protection – Republic of Bulgaria.
12. Personal Data Security
The data controller implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, unauthorised access or unlawful processing.
13. Changes to the Policy
This Policy is effective as of 15 March 2026.
Any amendments or updates will be published promptly on the website www.finansovogramoten.bg.
14. Contact
For any questions regarding this Policy, please contact the data controller at:
office@financialiteracy.eu
КЪМ ФОРМАТА ЗА РЕГИСТРАЦИЯ