Information about the personal data controller:
“TENNIS CLUB MALEEVI” Association is a company registered under the Commercial Law of the Republic of Bulgaria with UIC 130374097, address: Sofia, 48A Narcis Street, email address: groups@maleevi.academy, phone: +359 896 903 430.
We process your personal data on the following grounds:
- A contract concluded between us and you, in order to fulfill our obligations under it;
- Your explicit consent – the purpose is specified in each specific case;
- A legal obligation imposed by law.
In the following paragraphs, you will find information regarding the processing of your personal data depending on the legal basis for processing.
FOR CONTRACT PERFORMANCE OR IN THE CONTEXT OF PRE-CONTRACTUAL RELATIONS
We process your personal data to fulfill contractual and pre-contractual obligations and to exercise the rights arising from the contracts concluded with you.
Purposes of the processing:
- Identification of your identity;
- Management and execution of your request and performance of the concluded contract;
- Preparation and sending of invoices for the services you use with us;
- Retaining correspondence related to orders placed, processing of requests, reporting problems, etc.;
- Creating a user profile.
On the basis of the contract concluded between us, we process information about the type and content of the contractual relationship, as well as any other information related to it, including:
- Contact information – mailing address, email, phone number;
- Identification data – full name, personal identification number or foreigner ID, permanent address;
- Data on orders placed through the user profile;
- Emails, letters, information on problem reports, complaints, requests, and feedback;
- Credit or debit card information, bank account number or other banking and payment information related to payments made.
Processing the above personal data is mandatory for us to be able to conclude and execute the contract with you.
We provide your personal data to third parties with the main goal of offering you quality, fast, and comprehensive service.
We provide personal data to the following categories of recipients (personal data controllers):
- Postal operators and courier companies;
- Consultants providing services in various fields.
Data collected on this basis is deleted 5 years after the termination of the contractual relationship, whether due to contract expiry, cancellation, or any other reason. This period is determined by the 5-year statute of limitations for potential contract claims.
FOR COMPLIANCE WITH LEGAL OBLIGATIONS
It is possible that the law imposes an obligation for us to process your personal data. In such cases, we are required to do so, for example:
- Obligations under the Anti-Money Laundering Act;
- Compliance with obligations related to distance selling or off-premises sales under the Consumer Protection Act;
- Providing information to the Consumer Protection Commission or third parties as provided for in the Consumer Protection Act;
- Providing information to the Personal Data Protection Commission under the data protection legislation;
- Obligations under the Accounting Act and the Tax and Social Security Procedure Code and related regulations for lawful bookkeeping;
- Providing information to the courts and third parties within legal proceedings as required by applicable legislation;
- Age verification for online purchases.
Data collected under legal obligation is deleted once the obligation to collect and store them has been fulfilled or is no longer applicable. For example:
- Under the Accounting Act for storage and processing of accounting data (11 years);
- Obligations to provide information to the courts, competent authorities, and other legal grounds (5 years).
When a legal obligation is present, we may provide your personal data to the competent authority, physical or legal persons.
BASED ON YOUR CONSENT
We process your personal data on this basis only with your explicit, unambiguous, and voluntary consent. We will not impose any adverse consequences on you if you refuse the processing of personal data.
Consent is a separate basis for processing your data, and the purpose of processing is specified in the consent and does not overlap with the purposes listed in this policy. If you provide the relevant consent, we will prepare personalized product/service offers for you until its withdrawal or the end of any contractual relationship.
Only data for which you have given us explicit consent will be processed. The specific data is determined on a case-by-case basis, typically including:
- Email;
- Phone;
- Address;
- Full name.
On this basis, we may share your data with marketing agencies and third parties.
You may withdraw the consents given at any time. Withdrawal of consent does not affect the performance of contractual obligations. If you withdraw your consent for any of the methods of processing described above, we will no longer use your personal data for those purposes.
Data collected on this basis is deleted upon your request or 1 year after initial collection.
PROCESSING OF ANONYMIZED DATA
We process your data for statistical purposes, meaning for analyses in which the results are aggregated and the data is anonymous. Identifying a specific individual from this data is impossible.
How We Protect Your Personal Data
To ensure adequate protection of the company’s and our clients’ data, we implement all necessary organizational and technical measures provided by the Personal Data Protection Act.
To maximize security during processing, transmission, and storage of your data, we may use additional protective mechanisms such as encryption, pseudonymization, etc.
User Rights
Every user of the site has all rights for the protection of personal data under Bulgarian legislation and EU law.
Every user has the right to:
- Be informed (regarding the processing of their personal data by the controller);
- Access their personal data;
- Correct data (if inaccurate);
- Delete personal data (the “right to be forgotten”);
- Restrict processing by the controller or processor;
- Data portability between different controllers;
- Object to the processing of their personal data;
- Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects them;
- Legal or administrative protection in case of a violation of their data rights.