Privacy Policy En

PRIVACY POLICIES

The Organization of Jews in Bulgaria “Shalom” is an independent, non‑partisan, voluntary, democratic, public, and self‑governing organization of Jews in Bulgaria.

1. Who We Are

The entity responsible for your information under this Privacy Policy is:

Organization name: Organization of Jews in Bulgaria “Shalom”
Registered address: 50 Al. Stamboliyski Blvd., Sofia, Bulgaria

2. Where This Privacy Policy Applies

This Privacy Policy applies to our website, the applications we use, events, and other programs administered and offered by the Organization of Jews in Bulgaria “Shalom”.

3. Information We Collect

We collect certain information about members in connection with membership applications, as well as information generated through the use of our services, such as participation in our programs and events, and donations made.

The information you provide contains the minimum required or legally mandated data for:

• membership in the Organization of Jews in Bulgaria “Shalom”,
• employment candidates applying to work for the Organization,
• participants in our programs and events.

If you agree for us to communicate your information, we will share it only with members of the organization: names, telephone numbers, or email addresses.
In addition to the information you provide directly, we may receive information about you from other people.

Collection of Information When Using Our Services

When you use our website, we collect information about the features you use and how you use them.

• Device information – this includes server logs, security device logs (Web Application Firewalls), and other devices in this category. These logs are necessary for identifying technical problems and/or detecting malicious activity. They contain information such as date and time, IP address, URL, browser version, and device information.
• Cookies and similar data collection technologies – For the development of our website, we use a platform that employs cookies and similar technologies, in strict compliance with EU requirements. Cookies are information stored in your browser or mobile application and are used to store settings and identifiers.
• Donations – When you choose to make a donation by clicking the “Donate Now,” “Subscribe for Monthly Donation,” or “Choose Another Amount for a One‑Time Donation” buttons, our website redirects you to https://stripe.com/en-bg for secure online payment processing. We receive only the following information: donation amount, your name, email, payment method, and payment date.

4. How We Use Information

The Organization of Jews in Bulgaria “Shalom” processes your personal data on the following legal grounds:

• Compliance with legal obligations, including obligations to retain or provide information upon orders from competent state or judicial authorities; to enable oversight by public authorities; and to notify you of matters related to your rights, provided services, or data protection.
• Membership in the organization, for the provision of programs and services offered to members.
• Conclusion and performance of contracts for programs and services between the Organization of Jews in Bulgaria “Shalom” and external contractors.
• Legitimate interests of service users and third parties, such as members, other users, employers, employer representatives, and others.
• Your consent, where your data may be processed based on your explicit consent, limited to the scope, degree, and purpose specified in that consent.

5. How We Share Information

We follow a strict due‑diligence process before engaging service providers or partners. All service providers and partners are required to accept strict confidentiality obligations.

We may disclose your information when reasonably necessary:

• to comply with legal processes (such as court orders, subpoenas, search warrants, law enforcement investigations, or other legal requirements);
• to assist in preventing or detecting criminal activity, in compliance with applicable law; or
• to protect the safety of any person.

With Your Consent or at Your Request

We may request your consent to share your information with third parties. In each case, we will clearly explain the reasons for requesting such sharing.

6. Your Rights as a Data Subject

As a data subject, you have the following rights.

Before exercising these rights, we must identify you; identification will be conducted in person at our address.

The statutory deadline for responding to your request under the Regulation is one month, which we will observe according to our established procedures.
You may submit your request in paper form at our office, and we will notify you of the outcome in the manner you specify, in accordance with the GDPR.

List of Your Rights as a Data Subject:

• Right to withdraw consent at any time for the processing of your personal data in accordance with the Regulation.
• Right to rectification – if you believe your personal data is inaccurate, you may request correction by providing the correct information.
• Right of access – you have the right to confirmation of whether we process your personal data and, if so, access to that data, together with the information required under Article 15(1) of the Regulation.
• Right to erasure (“right to be forgotten”) – you may request deletion of your personal data, subject to the conditions of Article 17 of the Regulation.
• Right to restriction of processing – this involves marking stored personal data to limit future processing. You may request that we store but not process your data.
• Right to data portability – you may request your personal data in a structured, commonly used, and machine‑readable format. At present, we are not able to transfer your data directly to another controller.
• Right to object – you may object at any time to the processing of your personal data, including profiling and direct marketing.
• Right to notification of third parties – you may request that we notify third parties to whom your data has been disclosed about rectification, erasure, or restriction of processing. In all cases where you exercise your rights, we will notify those third parties.
• Right to lodge a complaint with the Commission for Personal Data Protection, in the form and with the details required by law.

7. Accuracy of Information

The Organization of Jews in Bulgaria “Shalom” is not responsible for the accuracy of the information you provide, does not verify it, and does not guarantee the actual identity of individuals who provide data. In cases of suspicion, detected fraud, or misuse, please notify us immediately.

You undertake not to violate the rights of other persons when submitting information to the Website, including rights related to personal data protection.
For updating your data, please use the approved form.

8. How We Protect Your Information

Given the complexity of personal data protection, including special categories of personal data, we emphasize the following types of protection: physical, personnel, documentary, and protection of automated information systems and networks.
In line with regulatory requirements, we use cryptographic protection for data transmission. We work continuously to protect you against unauthorized access, alteration, disclosure, or destruction of your personal information.

We regularly monitor our systems for vulnerabilities and attacks and periodically review our information collection, storage, and processing practices to update our physical, technical, and organizational security measures.

We may suspend the use of all or part of our services without prior notice if we suspect or establish a security breach.

9. How Long We Keep Your Information

We retain data when:

• required to comply with applicable law (e.g., certain traffic data is retained for one year);
• necessary to demonstrate compliance with the law (e.g., documents relating to consents to our Terms and Privacy Policy retained for five years);
• there is an unresolved issue, claim, or dispute requiring data retention until resolution;
• data is needed for legitimate business interests, such as fraud prevention and user security.

In the event of legal disputes or proceedings requiring data retention, or upon request from competent authorities, data may be retained longer until final resolution. These periods may change if required by applicable law.

Backup Policy

To ensure service reliability and prevent data loss due to technical reasons, the website applies a data backup policy. The maximum period for updating, including deletion of data from all backups, is thirty (30) days.

Accounting records and employment‑related documents are retained in accordance with legal requirements.

All other information related to events and services is retained for one year.

10. Changes to This Privacy Policy

As we continuously seek innovative solutions, this policy may change over time. We will notify you in advance of any material changes to give you adequate time to review them.

11. How to Contact Us

If you have questions regarding this Privacy Policy, you may contact us:

Online: membership@shalom.bg

By mail:

50 Alexander Stamboliyski Blvd.

Sofia, Bulgaria