Privacy Policy

PRIVACY POLICY OF "BG SOUND STAGE" LTD

1. Introduction

This Privacy and Personal Data Protection Policy governs the manner in which “BG Sound Stage” LTD collects, processes and stores personal data, in accordance with the requirements of the Personal Data Protection Act of the Republic of Bulgaria, the "General Regulation on the Protection of the data" - Regulation (EU) 2016/679 and other normative Bulgarian or international acts.

Confidentiality of information is a top priority for "BG Sound Stage" Ltd. In its capacity as a personal data administrator and in accordance with legislation and good practices, "BG Sound Stage" Ltd. implements the required technical and organizational measures to protect the personal data of individuals.

This policy provides information about how and what types of personal data we collect from and about you, why we need it, to whom it may be provided or disclosed and how it is protected. Please read them carefully. By providing your personal data to “BG Sound Stage” LTD , whether electronically or on paper, you accept and agree to the practices described in this Privacy and Personal Data Protection Policy. Please contact us if you have any questions related to this policy and if you do not agree with any of the terms contained in the privacy policy.

2. Information about “BG Sound Stage” LTD , as Administrator of personal data.

In connection with the processing of your personal data, you can contact us at the following address:

Name: "BG Sound Stage" Ltd

Address: Bulgaria, Sofia 1504, "Vasil Aprilov" street No.2, apt. 6

E-mail address: management@bgsoundstage.com

Website: www.bgsoundstage.com

3. Legal basis

This Privacy Policy is issued on the basis of the Personal Data Protection Act and its by-laws and the General Data Protection Regulation - Regulation (EU) 2016/679 ("GDPR").

Bulgarian legislation and GDPR provide rules on how "BG Sound Stage" Ltd. must collect, process and store personal data.

In order for the processing of personal data to be in accordance with the legal requirements, the personal data is collected and used in accordance with the law, the necessary security of the processing operations is ensured and "BG Sound Stage" Ltd. has taken the necessary measures so that the processed personal data are not subject to wrongful disclosure. According to the basic principles observed by “BG Sound Stage” LTD , your personal data are:

- processed lawfully, in good faith and in a transparent manner with respect to the data subject;

- collected for specific, explicitly indicated and legitimate purposes and not further processed in a manner incompatible with these purposes;

- appropriate, related to and limited to what is necessary in relation to the purposes for which they are processed;

- accurate and kept up-to-date; "BG Sound Stage" Ltd. has taken all reasonable measures to ensure the timely deletion or correction of inaccurate personal data, taking into account the purposes for which they are processed;

- stored in a form that allows the identification of the data subject for a period no longer than is necessary for the purposes for which the personal data are processed;

- processed in a way that guarantees an appropriate level of security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, applying appropriate technical or organizational measures;

- The technical and organizational measures taken are to protect our customers, as well as subscribers to our e-newsletters, from unauthorized access or unauthorized modification, disclosure or destruction of their personal data. For this purpose, we take a number of technical and organizational measures, such as: We use a secure website through which we collect your personal data; conduct reviews of our personal data collection, storage and processing practices, including physical security measures, to prevent unauthorized access to the systems we use;

- "BG Sound Stage" Ltd. is responsible and is able to prove that it complies with the basic principles related to the processing of personal data.

4. Objectives of the Policy

With the adoption and implementation of the current policy of "BG Sound Stage" Ltd. in accordance with Bulgarian legislation and Regulation (EU) 2016/679, the rules regarding the protection of natural persons in connection with the processing of personal data, as well as the rules regarding the free movement of personal data.

With the adoption and implementation of the present policy of “BG Sound Stage” LTD , in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679, fundamental rights and freedoms of natural persons are protected, and in particular their right to protection of personal data data.

With this policy, "BG Sound Stage" Ltd. aims to guarantee:

- Legality of the processing of personal data carried out by “BG Sound Stage” LTD ;

- The rights of natural persons, subjects of personal data according to Regulation (EU) 2016/679;

- Compliance with the requirements of the regulation to “BG Sound Stage” LTD , in its capacity as Administrator and/or Processor, including:

• Data protection by design and by default;

• Registers of processing activities;

• Appropriate technical and organizational measures, which are reviewed and, if necessary, updated;

• Risk assessment measures related to the processing of personal data;

• Compliance with the requirements when entrusting the processing of your personal data to third parties (Processors);

• The obligations of the officials processing personal data and/or the persons who have access to personal data and work under the direction of the personal data processors, their responsibility in case of failure to fulfill these obligations;

- Taking into account the achievements of technical progress, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying probability and severity for the rights and freedoms of natural persons, "BG Sound Stage" Ltd., in its capacity of the Administrator and/or Personal Data Processor implements appropriate technical and organizational measures to ensure a level of security commensurate with this risk.

- Guarantees compliance with the basic principles when transferring personal data to third countries or international organizations outside the EU.

5. Scope

In order to provide you with effective access to the online store, the Company collects, processes and stores the following personal data: name (entered by you) and e-mail address when filling out the contact form for asking questions on the website; e-mail address when subscribing to news and promotional discounts; information about the device from which you visit the site, as well as demographic information when you enter the web platform of “BG Sound Stage” LTD.; cookies for individualizing your browser - statistics cookies and functional cookies.

Definitions:

- "Personal data" means any information relating to an identified natural person or an identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by an identifier such as a name, an identification number, location data, an online identifier or by one or more characteristics specific to the physical, the physiological, genetic, psychic, mental, economic, cultural or social identity of that natural person;

- "Processing" means any operation or set of operations performed on personal data or a set of personal data by automatic or other means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission , distribution or other way in which data is made available, arranged or combined, restricted, deleted or destroyed;

The data protection policy applies to the processing of personal data of customers, users, employees, where it has become known to partners and suppliers, as described in the registers of processing activities established in accordance with Article 30 of The General Data Protection Regulation - Regulation (EU) 2016/679 ("Registries of processing activities").

6. Categories of data subjects: customers.

7. Purposes of personal data processing

According to the requirements of Section I - Transparency and conditions of the General Regulation on data protection - Regulation (EU) 2016/679 "BG Sound Stage" Ltd. provides

transparent information, communication and conditions for the exercise of the rights of data subjects according to Article 12 of the Regulation .

Data may also be processed for the protection and preservation of the Company's rights, in particular, there may be cases where the Company may disclose the data if disclosure is necessary (a) for the protection, exercise or preservation of legal rights , the integrity, safety or property of the Company, its employees, intermediaries and counterparties, (b) to protect the Company against fraud, or (c) for risk management purposes.

Your personal data will be processed and stored for purposes necessary to protect and implement the legitimate interests of “BG Sound Stage” LTD and purposes related to compliance with the legal obligations of the Administrator. These are goals related to the legitimate interests of “BG Sound Stage” LTD , such as: ensuring the normal functioning and use of the Site by you and by other users; maintenance and administration of the Services; resolution of disputes; detection and prevention of malicious acts; detecting and resolving technical or functionality issues; development and improvement of the Services; communicating with you, including electronically, on important matters related to the Services; implementation and protection of the rights and legal interests of “BG Sound Stage” LTD , including by court order. For these purposes, it may be necessary to process some or all of the above categories.

The purposes and information regarding the processing of personal data carried out by “BG Sound Stage” LTD are provided in accordance with the performance of the main processes in the Company.

Only with your express consent to send you (via e-mail) offers, promotions and other marketing messages related to the Company's services, services/products of related parties and/or partner organizations operating in the field of the company's subject matter and specifically, products offered by us, including our affiliates, and branded or co-branded services and features conducted in conjunction with a partner organization or affiliate.

By pressing the "Send" button in the "Subscribe" form, you provide personal data: email address, and you are given the opportunity to agree to and read this Privacy Policy.

By pressing the "Send" button in the "Contact Us" form, you provide personal data: name, email address, and you are given the opportunity to agree to this Privacy Policy.

Before pressing the "Send" button, you have the opportunity to review and edit the information you have provided. You accept that electronic statements to “BG Sound Stage” LTD and electronic statements from us to you are considered to be signed with a simple electronic signature in accordance with Art. 3, paragraph 10 of Regulation (EU) No. 910/2014, with the force of a manual signature.

By pressing the "Send" button, you agree to “BG Sound Stage” LTD using the personal data provided by you - indicated above.

In addition, "BG Sound Stage" Ltd. stores information about registration or agreement with the Terms (IP address, date, time), as well as maintains a log of the fact of sending the statement (without its content) for a period specified in this policy . The log contains the date of the statement, the sender's name and email address, and the recipient's identification. In the processing of your personal data, you will not be subject to a decision based solely on automated processing, including profiling.

On our website you can subscribe to a newsletter. The data provided when subscribing will be used solely for sending the newsletter. You may terminate your subscription at any time by using the opt-out option provided. To confirm your consent to receive it and to process your personal data for this purpose, familiarize yourself in detail with who we are and what are the purposes and terms for which we process your personal data.

By giving your consent to register to receive the newsletter, you agree to "BG Sound Stage" Ltd. with address: Bulgaria, Sofia 1504, "Vasil Aprilov" street No.2, floor 2, apt. 6, referred to for short The Administrator, to use the personal data provided by you - e-mail and IP address - in order to send you a newsletter with up-to-date information about promotions, games and/or activities of the Company. You will be able to withdraw your consent to receive the newsletter at any time by unsubscribing in the manner described in each communication.

When processing personal data, "BG Sound Stage" Ltd. complies with the legal and by-law regulations applicable in Bulgaria in connection with the protection of personal data, including, but not limited to, Regulation (EU) 2016/679.

Basis and purposes of processing the personal data collected for sending the newsletter:

Your personal data will be used by the Administrator on the territory of the Republic of Bulgaria and the same will not be transferred to third parties, except for: the companies managing the respective plug-in or social network that you decide to use yourself; as well as Google, in order to carry out web analysis. Only IP address and log information is provided to the latter in order to carry out the analysis.

Your personal data will be processed and stored by the Administrator on the following grounds: your express consent to process your personal data for the purposes and within the terms specified in these rules, as well as communication for the purpose of sending our newsletter.

Your personal data will be stored in accordance with the legal requirements for the protection of personal data in electronic format in the following electronic register maintained by the Administrator for no longer than the minimum period necessary for this purpose after your unsubscribe.

8. Transparency. Rights of the persons whose data is processed by “BG Sound Stage” LTD:

- Right to confirmation of processing and access to your personal data;

- Correct inaccurate or incomplete personal data;

- Request deletion of your personal data;

- To request restriction of the processing of your personal data;

- Request to be notified of any action related to correction, deletion or restriction of processing;

- To object at any time to the processing of your personal data:

a. for the performance of a task of public interest or on the basis of official powers, or for the purposes of legitimate interests, including profiling;

b. for processing for direct marketing purposes;

c. for processing for the purposes of scientific or historical research or for statistical purposes.

- You have the right to refuse to be the subject of a decision based solely on automated processing, including profiling, which gives rise to legal consequences for you or significantly affects you.

- You have the right to receive the personal data;

- You have the right to file a complaint with the Commission for the Protection of Personal Data in case of violations of Regulation (EU) No. 2016/679 of April 27, 2016 and the right to effective protection against the CPDP, administrator or processor of your personal data;

- You are entitled to compensation for material or non-material damages suffered as a result of a violation of Regulation (EU) No. 2016/679.

All subjects of personal data have the right to exercise their rights on site, by phone and via the Internet at the specified address for contacting “BG Sound Stage” LTD .

In order to exercise your rights stated above, you should contact us either at our email address - management@bgsoundstage.com or at the address: Bulgaria, Sofia 1504, "Vasil Aprilov" Str. No.2, floor 2, apt. 6.

Submitted requests regarding personal data will be answered within one month, and in the event of the need to extend the specified period, you will be informed of the extension, as well as the reasons for the delay. We may refuse to process requests that are unreasonably repetitive or that threaten the privacy of other users.

9. Provision of personal data and consequences of refusal to provide them:

The data subject has the right to refuse to provide his data to the relevant department or to withdraw his consent to the processing of personal data at any time with a separate request addressed to the administrator, and this would lead to the prevention of “BG Sound Stage” LTD to fulfills the statutory obligations.

10. Transmission of personal data to third countries or international organizations

Transfer of personal data that is processed or intended for processing after the transfer to a third country or an international organization outside the EU is carried out by “BG Sound Stage” LTD only under the conditions of the General Data Protection Regulation - Regulation (EU) 2016 /679, respecting the conditions specified in Chapter V of the regulation.

"BG Sound Stage" Ltd. implements all provisions of the regulation so that the necessary level of protection of natural persons provided by the regulation is not put at risk.

In the event that “BG Sound Stage” LTD transfers personal data to a third country or to an international organization outside the EU, this transfer is carried out in accordance with the requirements for data transfer outside the EU. Data subjects are notified in advance in the appropriate manner.

11. Social Networks and Social Plugins

Through our profiles and pages in social networks, we offer you extensive personal assistance. If you send us an inquiry through one of these social networks, we forward it to an employee. The data is only used to answer your inquiry and is not forwarded to third parties. The legal basis for the processing of personal data within the framework of processing your inquiry is Art. 6 paragraph 1 para. 1 letter f) of Regulation (EU) No. 2016/679. In order to be able to contact us through social networks, you must be registered in them. For this purpose, the companies behind each of them process personal data as needed. We have no influence on the type, scope and processing of this data.

12. Term of storage of your personal data

(1) The company will store your personal data provided when filling out the form for sending an inquiry to “BG Sound Stage” LTD for a period of 2 months for the purpose of security and facilitating subsequent communication with the user, if there is no reason to apply longer term.

(2) The company will store your personal data provided when filling out the subscription form to “BG Sound Stage” LTD until you unsubscribe from the newsletter for the purpose of security and facilitating subsequent communication with the user, if there is no reason to apply more short term.

13. Violations and Notification of Violations

"Breach of personal data security" means a security breach that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data that is transmitted, stored or otherwise processed by “BG Sound Stage” LTD .

In the event of a violation of the security of personal data, the Administrator of personal data should be immediately notified at the indicated contact address for “BG Sound Stage” LTD .

In the event of a breach of personal data security that is likely to create a risk to the rights and freedoms of natural persons, without undue delay and where feasible — no later than 72 hours after becoming aware of it, " BG Sound Stage" Ltd. notifies the Commission for the Protection of Personal Data about the violation.

In the event that a specific violation poses a risk to the rights and freedoms of natural persons, "BG Sound Stage" Ltd. takes measures to notify the affected persons in order to minimize possible adverse consequences.

“BG Sound Stage” LTD undertakes actions according to the "Procedure in case of violation of the security of personal data".

14. Destruction of PD

If necessary, “BG Sound Stage” LTD follows the "Procedure for storage and destruction of personal data".

15. Liability.

"BG Sound Stage" Ltd. is not responsible for the content and safety of sites to which links published on our site refer. Clicking on such links and using sites to which they refer is done by users of this site entirely at their own risk and responsibility.

16. Right to submit a complaint to a supervisory authority.

If you believe that your rights in relation to personal data have been violated, please contact "BG Sound Stage" Ltd. so that the Administrator can find a solution to the matter.

You can also contact your local data protection authorities and file a complaint with them. In Bulgaria, this is the Personal Data Protection Commission:

Address: Sofia 1592, Prof. Blvd. Tsvetan Lazarov" #2

Website: www.cpdp.bg

Email: kzld@cpdp.bg

Phone: 0035929153518

17. Changes to Privacy Policy

"BG Sound Stage" Ltd. has the right to update, amend and supplement the personal data protection policy at any time in the future, when the circumstances require it.

The current version of this document is published on the company's website.

Validated and current as of 20/05/2023.