PRIVACY POLICY AND PERSONAL DATA (GDPR)

The administrator of your personal data is the " Digital Outdoor Advertising Association," abbreviated as "DOAA" with address: Sofia, Mladost 3 Residential District, Block 301 Entrance Offices, Office 5 – 8, email: office@advr.bg. This document contains information regarding the processing of personal data, the types of personal data collected, the purpose of using the collected personal data, the legal basis for processing, third-party access to this data, security measures taken regarding the collected personal data, and the options available to you in connection with the use of the personal data you provide. All personal data is collected and processed in accordance with the applicable legislation in Bulgaria regarding the protection of personal data.

1. Personal Data

The website processes personal data such as name/title, email address, phone number, and other information that is necessary for carrying out its activities, according to its nature. We process the provided personal data based on "pre-contractual relations" and the preparation of an individual offer, as explicitly requested by you. These data are necessary for us to fulfill the service you have requested from us. All data are treated as confidential information and are used for the purposes of online commerce and customer satisfaction.

2. Transfer of Personal Data to Third Parties:

We do not disclose personal data to third parties, except in explicitly specified cases. We may grant access to some personal data for the purposes of storage or organization of our work, or for financial accounting purposes, to data processors with whom we have concluded agreements and have provided explicit clauses for the protection of personal data, which the processor may access in the course of their work.

3. Security Measures

In accordance with applicable regulations for the protection of personal data, we follow mandatory procedures to prevent unauthorized access to and improper use of personal data. We use appropriate business systems and procedures to protect and ensure the security of the personal data you provide to us. We also implement security procedures and technical and physical restrictions on access to and use of personal data on our servers. Only authorized personnel have access to personal data for the purposes of their work related to providing services to the respective client/user. We retain personal information for as long as necessary to ensure the provision of the service and in accordance with the requirements of Bulgarian law. For financial and accounting purposes, the retention period is 10 years. Data processed based on your consent, if there is no other legal basis for processing, will be destroyed immediately upon withdrawal of your consent.

4. Rights Regarding Your Personal Data

Your rights regarding the data we process about you, in accordance with applicable legislation, include the following:
1.You have the right to request access to and receive information about your personal data that is stored, as well as information regarding the purposes of processing, the categories of personal data, recipients to whom personal data may be disclosed, and more.
2.You have the right at any time to request correction of inaccurate data and the completion of incomplete data if it is appropriate and/or necessary for the purpose for which the data is processed.
3.At any time, you can withdraw your consent for the use of personal data you provided to us in a previous moment, if your consent is the sole basis for their processing. In some cases, withdrawing consent for the use or processing of personal data may result in the inability to access certain products or services provided by us.
4.If you believe that you no longer wish us to process your personal data, you have the right to be "forgotten," meaning you can request the deletion of your personal data at any time if:
4.1. Your personal data is no longer necessary for the purposes for which it was collected or processed in any other way.
4.2. You have withdrawn your consent for the processing of your personal data, and consent is the sole basis for their processing.
4.3. Your personal data is being processed unlawfully.
4.4. You have objected to the processing of your personal data.
4.5. Other cases provided for in legislation governing the protection of personal data.
5.If you suspect that your personal data is being processed unlawfully, you can contact the national supervisory authority for data protection, which, for the Republic of Bulgaria, is the Commission for Personal Data Protection, Sofia, Prof. Tsvetan Lazarov Str. No. 2, with email address: kzld@cpdp.bg, and website: www.cpdp.bg.
You can exercise all of the above rights by submitting a written request in any free form, including via email, containing at least the following:
• Name, address, and other identifying information of the respective individual.
•Description of the request.
•Preferred form of information provision.
•Date of submission of the request and correspondence address.
•The deadline for processing your request is one month, starting from the date of receipt of the request.

5. Information About "Cookies"

DOAA uses cookies or similar tools on its websites to enhance their presentation and improve your experience while using them. To learn more about what cookies are and how to adjust the default settings of our browser, you can find information below and at: www.allaboutcookies.org.
5.1. What Are "Cookies"
"Cookies" are small text files that are stored on your computer or mobile device. The purpose of "cookies" is to distinguish you from other users of the same website or to retain certain information related to your preferences. They are used by most websites to facilitate browsing. Each "cookie" is unique to your browser and contains anonymous information. This content includes the domain name it comes from, its "lifetime," and a value, usually in the form of a randomly generated number.

(3) Types We Use and Their Purposes

(а)Security and Identification
The purpose of cookies designed for connection security is:
• To recognize the user within a specific session.
• To control security.
• To ensure that the information entered by the user is visible only to them.
Security and identification cookies are automatically deleted after the end of your browser session or are kept for a limited time to ensure smooth website operation. Cookies used by the Owner do NOT store entered personal data.
(b) Performance and Functionality
Performance cookies aim to collect statistical information and provide content based on users' individual preferences. Through them, we anonymously measure the number of visits, pages viewed, user activity, and repeat visits to the site. These cookies help us analyze traffic, allowing us to improve the website and the overall user experience.

(4) Managing and Deleting Cookies

Many of the cookies we use will enhance your browsing experience on our website, while the rest are important for ensuring access security.
Depending on the browser you use, you have the option to:
• Allow or refuse the storage of cookies from all sources.
• Set up a notification that, for each new cookie, will request permission for acceptance or refusal.
Most browsers are set to accept cookies by default. However, if you do not want cookies to be stored on your computer, you can limit them by changing the settings of your browser. It is important to know that if you choose to disable cookies, some sections of our website may not function properly!