Administrator (Processor) ID and contact details
Name: Open Sofia Foundation
Address: София, ул. Св. Св. Кирил и Методий 118, ап. 21
Email: [email protected]
Personal information is any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Open Sofia Foundation - will not collect and process any personal information in any form whatsoever except for the purpose of providing the services as shown on the website www.openbulgaria.org.
www.openbulgaria.org collects and processes personal data in compliance with the principle of privacy and non-invasion of privacy.
Scope of personal data processing
In order to offer the service, we process personal data voluntarily provided by the individual.
It is up to the individual job seeker to decide whether and what information to provide about themselves. You understand and acknowledge that, among its other functions, www.openbulgaria.org is an information platform (a public medium) that allows employers, employment agencies and similar entities to view CV``s if requested to do so by the individual providing the data. This means that CVs can be copied, collected and used by those third parties over whom https://openbulgaria.org has no control.
We undertake not to disclose any information about the individual who has provided personal data, except where we are required to do so by law, if we are formally requested to do so by a government/regulatory body, or where disclosure meets legal requirements, is related to the prevention/detection of crime and/or protects the interests of other users of our service and/or the public.
Categories of personal data to be processed
The services provided by the site imply the provision of Personal Data, such as a CV containing physical identity information (name, address, telephone, e-mail), professional experience and education (type of education, qualifications, courses, certificates, employers and positions) and other information related to the hiring process.
Other categories of Personal Data may include:
From https://openbulgaria.org - email address, gender and age of the user, IP address, and phone number if the user has provided one;
Data collected on all visitors to our website: We collect data on all visitors to our website, namely the following categories of data:
Highly unique user identifier;
Device identifier (device ID) for mobile applications, with a high degree of uniqueness;
Browser identifier, highly unique;
History of pages visited, including secondary processing to identify your preferences for certain types of content;
A history of the searches you have made on our pages;
Certain types of behavior - e.g., a list of ads viewed according to their category and your interaction with them - ad availability in the visible portion of your browser; clicks made; button presses to hide the ad; etc.
Tracking sections of the sites you visit;
How much time you spend on a site;
How much time you spend watching a particular video;
The ads you have seen and/or interacted with;
When you visit our site serving java scripts and other similar online behavior tracking technologies;
Serving digital advertising - display advertising and advertising in the content of the Site:
https://openbulgaria.org - Controller determining the amount of personal data to be processed and the means of processing – OpenBulgaria foundation;
Network service provisioning - file content storage and network connectivity;
Server storage systems within the colocation data centers for the content of the OpenBulgaria website, including the https://openbulgaria.org website, as well as server storage for additional project management and customer service services
Data Processing Activities
The data, contained in the biographies of candidates for employment in Openbulgaria.org, is stored in the database of the site,which is hosted in an EU located shared data-center, in Germany. Openbulgaria.org does not duplicate this data to provide to employers, but only visualizes them in the appropriate form. The purpose of collecting, processing and storing this data is to provide the services, as shown on Openbulgaria.org and with the explicit consent of the data subject. To the extent that such data is Personal Data within the meaning of Regulation (EC) 2016/679 (“GDPR”) and in respect of such personal data, Openbulgaria.org is a Processor of Personal Data. Employers, acting as sub-processors, may choose to collect, store, and process biographical data associated with their ads at Openbulgaria.org outside of the platform, but this automatically makes them sub-processors of Personal Data with respect to this collected, stored, retrieved or otherwise processed data from applications outside Openbulgaria.org where they should comply with the requirements of the Regulation.
The Employer is a Processor of Personal Data contained in the applications received in his / her account and should comply with the requirements of Regulation (EC) 2016/679.
The employer is obligated by all means to not demand from candidates to send special category of data by the law definition in article 9 and 10 from Regulation (EU) 2016/679 by Openbulgaria.org, such as:
Data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of trade unions, or your genetic information, biometric data, health status, sex or sexual orientation, or data that is related to your convictions and violations.
identity documents, as well as personal ID number, passport / ID card number, etc. similar.
Purpose of processing
The purpose of data collection and processing is to offer the service to the https://openbulgaria.org website, namely job search and job offering.
Consents for processing
Open Sofia Foundation will use your personal data solely for the purpose of the provision of the services shown on this website, technical management of the site where you are performing the activity to give you access to special information or to communicate with you.
By using this website you give your explicit, free and informed consent to receive third-party marketing material sent to you directly, or that your personal data might be shared with other companies for marketing purposes. You may withdraw your consent at any time by contacting the administrator of this website.Open Sofia Foundation employees are required to protect the confidentiality of your data and comply with an agreement to not disclose confidential information. Open Sofia Foundation is governed by the adopted company policy for the protection of personal data, which is presented to the Commission for Personal Data Protection and is strictly managed by it, when storing the personal data received from registered users on the sites owned by the organization.
Personal Data may be provided to trusted partners who work on behalf of Open Bulgaria on a contractual basis and are bound under confidentiality agreements. These companies may use such information to enable OpenBulgaria to deliver advertising to its users. However, these companies do not have the right to share this information independently. These companies are, without enumeration, exhaustive:
Google Ireland Ltd. with its respective products: Google Analytics, Google Tag Manager, DoubleClick for Publishers, AdX, AdSense, Google Case, Google IMA, Google Plus: https://privacy.google.com/#
Facebook with its respective products: Facebook Tracking Pixel, Facebook Tools - Plug-in "like" button, Sign in with Facebook profile, etc.: https://www.facebook.com/privacy/explanation ;(amended 17.10. 2019) Please note that these buttons, such as the "Like" button, may record your unique identifiers even if you do not have a registered social network account. Facebook may subsequently profile you independently;
The information is in compliance with lawful injunctions pursuant to legitimate requests from authorized authorities (under the Electronic Communications Act, the Code of Criminal Procedure, the Criminal Code, etc.).
If you do not want us to send the information to any of our partners, you may withdraw your consent by contacting us using the contact details provided on our website.
Categories of recipients of data
The function of https://openbulgaria.org is an information platform that allows employment agencies, employers and other similar persons to see the CV if the data subject has asked to provide them (by applying). After submitting your resume to the above-mentioned data recipients (sub-processors), they can be copied, collected and used by those third parties who become the administrators of your personal data. Any requests regarding personal data sent to employers may be directed directly to them.
Information on the rights of the data subject
Right to access your personal data: you have the right to obtain confirmation from us as to whether personal data about you is being processed and, if this is the case, you have the right to access your personal data and information.
Right to rectification of personal data: if you discover that the personal data we are processing about you is inaccurate, you have the right to have us rectify that personal data.
Right to erasure of personal data (right to be forgotten): in certain circumstances, such as if your personal data has been processed unlawfully or you have withdrawn your consent (if the processing of your personal data is consent-based), you have the right to request and obtain the erasure of your personal data by us.
Right to restrict processing: in certain circumstances, such as if you doubt the accuracy of your personal data or have objected to our legitimate purpose for processing your personal data, you have the right to request that we restrict the processing of your personal data until a solution is found.
Right to object to processing: in certain circumstances, such as if you doubt our legitimate interest in processing your personal data, you have the right to object on grounds relating to your particular situation to such processing.
Right to data portability: if your personal data is processed by automated means pursuant to your consent or for the performance of our contractual relationship, you have the right to request that we provide your personal data in a machine-readable format for transfer to another data processor.
You have the right to object to the processing of your personal data, which is based on a task of public interest, the exercise of official authority or legitimate interest.
Is the provision of personal data obligatory?
The mandatory information to apply for a job/service is a name and an email. Providing your personal data to the rest of the functional part of the site is entirely voluntary and implies your consent to the processing as specified herein. The individual looking for work independently assesses whether and what data to provide.
Automated decision making, including profiling
We may allow third parties, such as advertisers or analysts, to collect information using these technologies directly from our website.
More information about cookie management - www.allaboutcookies.org is a useful resource with very detailed information about cookies and how to manage them in case you want to delete or disable cookies from Openbulgaria.org
The use of services of Openbulgaria.org is without registration, the data submitted for the respective application will be stored for 36 months as of filing and then deleted.
With regard to traffic data, the Bulgarian Electronic Communications Act applies and the data is stored for 6 months. These data shall only be transmitted to the specialized authorities and institutions in compliance with the legal provisions and with due justification.
Whether the data will be provided to a third country outside the EU
When you send your CV to third-party (Bulgarian or foreign employers, intermediary companies, etc.), you are likely to provide them to a non-EU country (provided there is a solution on the adequate level of protection, e.g. use of EU Standard Contractual Clauses (SCCs), for which you will be duly notified in the employer’s notice, and you must provide your explicit informed consent to transfer such data. In the employer`s notice you must be given information about the processing of your personal data, including at least:
the identity of the organisation processing data;
the purposes for which the data is being processed;
the type of data that will be processed;
the possibility to withdraw consent (for example by sending an email to withdraw consent);
where applicable, the fact that the data will be used solely for automated-based decision-making, including profiling;
information about whether the consent is related to an international transfer of your data, the possible risks of data transfers to countries outside the EU if those countries are not the subject of a Commission adequacy decision and there are no adequate safeguards.
Technical & Organisational Measures by Openbulgaria.org
The data we process is consciously protected against loss, destruction, misrepresentation/tampering, manipulation and unauthorized access or unauthorized disclosure by adequate technical & organizational measures, as appropriate to the level of risk.