Bulgarian National Radio, registered in the BULSTAT Register at the Registry Agency under UIC 000672343, with headquarters and registered address: Sofia, 4 Dragan Tsankov Blvd. (hereinafter referred to as “BNR” or “the RADIO”), hereby aims to inform you about how we, as a data controller, process your personal data when you use BNR’s websites.
1. Data Processing under this Policy
This policy applies to the processing of personal data of visitors and users of any of our websites.
2. What Information Do We Collect About You?
In the course of our interaction, we collect and process your personal data (e.g., information you provide when filling out forms on our websites, contacting us by phone, email, or otherwise). This may include registration information, participation in games or promotions, feedback, problem reports, and more. The data may include name, address, email, phone number, profile, photo, age, date of birth, gender, etc.
We do not collect or process sensitive personal data (e.g., religion, ethnicity, political views, health, sexual orientation), unless:
(a) it is relevant to the processing purpose;
(b) required by law;
(c) you have explicitly consented.
If you voluntarily provide such data, we will delete it unless it serves a lawful purpose, or unless you made it publicly available (e.g., via a comment), in which case we will delete it only if legally required or if we choose not to retain it.
Each time you visit the website, we automatically collect:
• Technical data: IP address, login data, browser type and version, time zone, browser plugin types and versions, OS, device type, mobile brand, etc. This data may be collected via third-party cookies—see our Cookie Policy. We may also collect your phone number or email when used to contact us.
3. How and Why We Use Your Personal Data
We may process your data to perform a contract with you, comply with legal obligations, fulfill legitimate interests (e.g., fraud prevention, IT security), protect vital interests, or act in the public interest.
We use your data for technical, administrative, and operational purposes—such as content optimization, improving our websites, troubleshooting, analytics, advertising (including personalized ads), and ensuring security.
In some cases, data is processed only with your consent, which can be withdrawn at any time (without affecting prior processing).
We may process your identification and contact data to exercise our legal rights in the future—this is based on our legitimate interest.
Website Users
We may process your data (e.g., identifiers, contact info) to deliver services. This processing is based on our contract with you or legal obligations.
We may analyze your preferences to deliver relevant content, enable interactive features, and evaluate advertising effectiveness.
Mobile App Users
We may process personal data when you:
• register to use our apps;
• post comments or feedback;
• interact via the app;
• contact us via phone, email, social media, etc.
4. How and To Whom We Disclose Your Personal Data
We do not sell your data.
Within BNR, access is restricted to staff with a “need to know” basis and subject to confidentiality and security obligations.
We may disclose data to authorities if legally required or to protect our rights.
Your data may be shared with:
(a) IT and administrative service providers;
(b) partners and subcontractors;
(c) advertisers who need aggregate audience data;
(d) analytics and search engine providers helping us optimize our site.
5. Data Storage and International Transfers
Personal data is stored in the EU/EEA. Some third-party cookies (e.g., via Google DFP) may involve servers outside the EEA.
Transfers outside the EEA only occur if proper safeguards are in place, such as:
(a) adequacy decisions;
(b) Privacy Shield (if applicable);
(c) Binding Corporate Rules;
(d) approved codes of conduct or certification mechanisms;
(e) EU Standard Contractual Clauses.
6. Your Rights
You have the right to:
• confirm whether we process your data;
• access or correct your data;
• request deletion or portability of data;
• object to or restrict processing;
• withdraw consent (if given).
These rights may be limited by law. We may require proof of identity. Requests are generally free unless excessive or unfounded.
You can file a complaint with the relevant data protection authority in your country.
7. Data Retention
We retain personal data only as long as needed to fulfill the purposes described in this Policy or as required by law.
For mobile app users, we store data while the app is active or as required by legislation. Anonymized data may be stored indefinitely.
When consent-based processing applies, data is retained until consent expires or is withdrawn.
8. Data Security
We store your data on our servers or on third-party hosts with appropriate technical and organizational measures in place. Hosting agreements include data protection obligations.
9. Children’s Privacy
We do not knowingly collect data from persons under 16. If a parent or guardian is aware that a child has submitted data, they should contact us. If we discover such data, we will delete it unless parental consent was explicitly given.
10. Cookies and Social Media
Our website uses cookies to distinguish users and improve user experience. Consent for cookies is obtained via browser settings or explicit opt-in. See our Cookie Policy for details.
Our site may include social media features that collect data (e.g., IP, visited pages). These are governed by the respective privacy policies of the platforms.
11. Links to Other Websites
Our websites may contain links to third-party sites. Once you click a link, we are no longer responsible for their privacy practices. Always review their privacy policies.
12. Contact Details
If you have questions about your data or wish to exercise your rights, contact us at the RADIO’s registered address.
Please do not include sensitive personal data when contacting us (e.g., racial origin, religion, health, union membership, criminal record).
We may update this Privacy Policy and will notify you by posting the revised version on our website.
This Policy is effective from 18 February 2020 and was adopted by Decision under item 4 of Protocol No. RD-09-12 of the BNR Management Board.
It may be amended by further decision of the Management Board of BNR.