Privacy Policy of History Museum Oryahovo

1. General information

On 25 May 2018, a new General Data Protection Regulation (GDPR) adopted by the European Union came into force. The Regulation aims to ensure the protection of data of individuals from all EU Member States and to unify the regulations for their processing.

History Museum Oryahovo carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

2. Implementation of this Privacy Policy

As a personal data administrator, the History Museum of Oryahovo meets all the requirements of the new regulation by collecting only personal data to the extent that it is necessary for the provision of the service, and keeping it responsibly and lawfully.

2.1 Information about the Administrator of Personal Data

Name: History Museum Oryahovo
BULSTAT / UIC: 000183612
Registered office and address of management: 13, Vasil Levski St., Oryahovo
The Data Protection Officer: Dr. Evgeniya Naydenova
E-mail: museum_oriahovo@abv.bg
Telephone number: +359 (0) 9171 24 67

2.2 Information on the competent supervisory authority

Name: Commission for the Protection of Personal Data
Registered office and address of management: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
Telephone number:+359 (0) 2 915 3 518
E-mail: kzld@government.bg, kzld@cpdp.bg
Website: www.cpdp.bg

History Museum Oryahovo is the administrator of the personal data (i.e., information that identifies a specific person, such as first and last name or e-mail address) that we collect from and about you through the website.

This Privacy Policy applies to all users, including those who use the website without being registered or subscribed to services on the website.

3. Types of personal data we collect

History Museum Oryahovo may only collect the following data:

First and last name
E-mail address

you provide by filling in contact forms on the site.

However, we do not collect special categories of personal data about you, such as personal data revealing:

racial or ethnic origin
political views
religious or philosophical beliefs
trade union membership
processing of genetic data
biometric data for the purpose of uniquely identifying an individual
health data
the sex life or sexual orientation of a person
personal data relating to criminal convictions and offences.

4. Purposes in collecting your personal data

The primary reason we collect your personal data is to provide you with access to the History Museum – Oryahovo website or services, and to enable your interaction with such services.

Currently, we only process your data for the following purposes:

Processing of inquiries
Providing assistance
Personalized communication with you

Providing your personal data is optional. However, if you choose not to provide your personal data, you may not be able to use some of the features of the website.

We do not currently process your data for the purpose of sending:

offers
marketing messages

If we plan such actions in the future, it will only be done with your prior consent.

5. Principles for collecting your personal data

The security of your data is our priority. To ensure this History Museum Oryahovo has taken adequate administrative, technical and physical measures to protect your personal data against loss, theft and unauthorized use, disclosure of modifications.

6. Duration of storage of your personal data

We will retain your data only for the period necessary to fulfil the purposes for which it was collected, as set out in this Privacy Policy. In any event, personal data collected for the purposes set out in section 4 of this Privacy Policy will be retained for the time necessary to provide access to the Website.

At the end of the retention period, your personal data will be cancelled, anonymised or aggregated.

7. Transfer of personal data for processing

History Museum Oryahovo may, at its own discretion, transfer some or all of your personal data to processors for the purposes of processing, subject to the requirements of Regulation (EU) 2016/679, and shall notify you in the event of an intention to transfer some or all of your personal data to third countries or international organizations.

History Museum Oryahovo may share your personal data with third party providers who carry out the processing on behalf of History Museum – Oryahovo and/or its affiliates.

8. Transferring your personal data abroad

Your personal data may be transferred to other countries within or outside the European Economic Area (EEA). We always check that adequate and appropriate safeguards are in place that comply with applicable laws to protect your personal data.

9. Your rights regarding personal data

9.1 Withdrawal of consent to the processing of your personal data

If you do not wish all or part of your personal data to continue to be processed by History Museum Oryahovo for any or all of the processing purposes, you may at any time withdraw your consent to processing by a free text request to the email address specified in section 2.1.

History Museum Oryahovo may ask you to verify your identity and identify with the person to whom the data refers.

9.2 Right of access

You have the right to request and receive confirmation from History Museum Oryahovo as to whether personal data relating to you is being processed.

You have the right to obtain access to the data relating to it, as well as to the information relating to the collection, processing and storage of your personal data.

History Museum Oryahovo provides you, upon request, with a copy of the processed personal data relating to you in electronic form.

The provision of access to the data is free of charge, but the History Museum Oryahovo reserves the right to charge an administrative fee in the event of repetitive or excessive requests.

9.3 Right of correction or completion

You can correct or complete inaccurate or incomplete personal data relating to you through the website or by making a request to History Museum Oryahovo.

9.4 Right to deletion (“being forgotten”)

You have the right to request History Museum Oryahovo to delete the personal data related to you, and History Museum Oryahovo has the obligation to delete them without undue delay when one of the following grounds is present:

The personal data are no longer necessary for the purposes for which they were collected or otherwise processed
You withdraw your consent on which the processing is based and there is no other legal basis for the processing
You object to the processing of personal data relating to you, including for direct marketing purposes, and there are no legitimate grounds for the processing that prevail
The personal data have been unlawfully processed
The personal data must be erased in order to comply with a legal obligation under EU or Member State law that applies to History Museum Oryahovo
The personal data have been collected in connection with the provision of information society services

History Museum Oryahovo is not obliged to delete personal data if it stores and processes them:

On the exercise of the right to freedom of expression and the right to information
For compliance with a legal obligation requiring processing provided for in EU or Member State law to which the Controller is subject or for the performance of a task carried out in the public
Interest or in the exercise of official authority vested in the Controller
For reasons of public interest in the field of public health
For archiving purposes in the public interest, scientific or historical research or statistical purposes
For the establishment, exercise or defence of legal claims

In order to exercise your right to be “forgotten”, you should submit a request in writing to the History Museum of Oryahovo and verify your identity and the identity of the data subject before the History Museum of Oryahovo by presenting your ID card on the spot for identification purposes and, if necessary, entering your login data in the data subject’s account before an employee of the History Museum of Oryahovo.

The History Museum of Oryahovo does not delete data that it has a legal obligation to keep, including for the purpose of defending legal claims made against it or proving its rights.

9.5 Right to restriction

You have the right to request the History Museum of Oryahovo to restrict the processing of data related to you when:

Challenge the accuracy of the personal data for a period that allows the History Museum of Oryahovo to verify the accuracy of the personal data
The processing is unlawful, but you do not wish your personal data to be erased, only for its use to be restricted.
History Museum Oryahovo no longer needs the personal data for processing purposes, but you require it for the establishment, exercise or defence of legal claims.
You have objected to the processing pending verification whether the legitimate grounds of the History Museum – Oryahovo override your interests.

9.6 Right to portability

You can at any time download the data that is stored and processed for you in connection with the use of the services of History Museum Oryahovo with a request by email.

You may request that History Museum Oryahovo directly transfers your personal data to a administrator designated by you, where this is technically possible.

9.7 Right to receive information

You may request History Museum Oryahovo to inform you of any recipients to whom the personal data for which rectification, erasure or restriction of processing has been requested has been disclosed. History Museum Oryahovo may refuse to provide this information if the provision of such information is impossible or involves a excessive effort.

9.8 Right to object

You may object at any time to the processing of personal data concerning you by History Museum Oryahovo, including if it is processed for profiling or direct marketing purposes.

10. Updates of this Privacy Policy

History Museum Oryahovo may modify or update this Privacy Policy to ensure compliance with applicable law.