This describes the information collection and distribution practices for the website: https://timeheroes.org Time Heroes Foundation /Bulgarian: Фондация "Герои на времето"/ (the "Foundation"), UIC:176216788, with headquarters and management address at: Sofia 1000, Sredets district, 38 "Ivan Vazov"street, floor 2, processes your personal data in accordance with the requirements of the General DataProtection Regulation (EU Regulation 2016/679) and the Law on the Protection of Personal Data.This Privacy Policy is related to the Foundation's activity in maintaining the Time Heroes platform fororganizing and participating in volunteer events and initiatives, varying in theme - from children's rights,to urban development, to animal protection, to nature conservation (hereinafter referred to as "Missions"or "Causes"). Additional information regarding the Missions can be found on section “Frequently AskedQuestions” on the website. The individuals and/or non-profit legal entities (foundations, partnerships, andother citizen/state organization) who use the platform to organize the charity initiatives in question will bereferred to below as "Organizer(s)", and those who are involved in the implementation of the organizedinitiatives shall be referred to as "Participant(s)" or "Volunteer(s)".In order to comply with the legal requirements, with this Privacy Policy the Foundation presentsinformation about your rights, the type of personal data that is collected, the basis for its processing, themethods of their storage and use, as well as the cases in which they are provided to third parties.According to Art. 4 of EU Regulation 2016/679, "personal data" is any information relating to anidentified natural person or a natural person who can be identified, directly or indirectly, in particularthrough an identifier such as name, identification number, location data, online identifier or by one ormore characteristics specific to the physical, physiological, genetic, psychic, mental, economic, culturalor social identity of that natural person.Pursuant to our obligations under Regulation 2016/679 of the European Parliament and of the Council("General Data Protection Regulation" or "GDPR"), the Foundation ensures that the processing ofpersonal data such as name, address, telephone and email address will always be in accordance andcompliance with the Regulation and the applicable Bulgarian legislation in the field of personal dataprotection.1. Collection and use of personal dataThe Foundation collects and processes your personal data in connection with using the websitehttps://timeheroes.org, providing access and participation of user(s) in the "Missions" section as anOrganizer and/or Participant, sending an information bulletin (newsletter), marketing activities,conducting volunteer initiatives, courses, concluding contracts with the Foundation on the basis of Art. 6,para. 1 and Art. 9, para. 2, Regulation (EU) 2016/679 (GDPR), as well as other ancillary activities, andmore specifically on the following grounds:• Expressly obtained consent from you;• Fulfillment of the Foundation's obligations to maintain a platform for organizing or yourparticipation in Missions and/or concluding a contract with you;• Compliance with a legal obligation that applies to the Foundation as a processor of your personaldata;• For the purposes of the legitimate interests of the Foundation or a third party.
The Foundation does not collect personal data beyond those that are necessary to carry out its activities orthose that have been given by you with your explicit and free consent.2. The personal data we process2.1. Personally Identifiable Information: We may collect personal information from you, includingyour name, email address, phone number, type of legal organization and seat (if applicable), social mediacontacts (if applicable), website address when you engage in any of the following activities:• Participation in Missions as Organizer and/or Participant;• Carrying out volunteer initiatives;• Registration to receive promotional materials by post or email address;• Participation in a survey.2.2. For the purposes of marketing activitiesFor newsletter and other marketing activities we collect the following personal data:• Names;• E-mail address;• Other data provided by you in relation to specific marketing purposes of which you have beeninformed;Personal data is collected on the basis of explicit consent (Article 6, Paragraph 1, Letter "a" of theRegulation). Consent is expressed by entering some of the above-mentioned data and ticking thecheckbox "I agree that my personal data will be used to receive the newsletter and I am familiarwith the Privacy Policy".2.3. Technical informationEach time you access the https://timeheroes.org web page and/or the various sections therein, we receiveinformation in the form of an information protocol with the following content:• Your IP address and the page from which you were referred to our site;• Information about your stay on our website and the sections you have visited;• Information about your browser and operating system;• Other type of technical information, according to the technical requirements of the informationsystem;Personal data is collected on the basis of explicit consent (Article 6, Paragraph 1, Letter "a" of theRegulation). Consent is expressed by pressing the button "I agree" in the field "I am familiar with theFoundation's privacy policy" when an Organizer and/or a Participant/Volunteer makes a registration.3. Personal data not processed:The Foundation does not collect or process personal data that:• reveal users' racial or ethnic origin or other data related to their health or mental state;• reveal political, religious or philosophical beliefs, or membership in trade unions;• disclose genetic or biometric data or data about the sexual orientation of users,
and in case the above are shared by users of the site, they will not be subject to processing, except withthe express consent of the users.4. Grounds and purposes for processing personal data by the FoundationThe provided personal data is processed in accordance with the stated grounds and purposes in thisPrivacy Policy.The Foundation does not perform automated decision-making, and the data provided will not be used foradvertising or marketing purposes, unless with the explicit approval and consent of the person, whosedata is collected, and will not be provided to third parties, except in certain cases, namely:• when this is provided by law;• if this is duly requested by a competent state or judicial authority;• when we have received your express consent to do so.Information about: registered Organizers and/or Participants in a given Mission; persons in the column"Superhumans", "Teams" and "Students", presented in real time on the site https://timeheroes.org, ispublished with the consent of the persons concerned and for the purpose of general information about theMissions and their status and distribution of this information in view of the voluntary nature of theinitiatives, and this general information is not used for advertising and marketing purposes by theFoundation, unless in cases when an explicit approval and consent of the person, whose data is collected,has been provided.5. Storage period of the provided dataThe Foundation stores your data in accordance with the terms provided for in the law.The main criterion by which we will determine the duration of processing is the time for which theinformation is needed.In cases where the Mission is not organized and/or carried out, for which the Foundation has noresponsibility, or for another reason the purpose for uploading personal data is no longer valid, yourpersonal data will be deleted in a timely manner. The personal data provided for the execution of theMission will be stored for the duration of its execution. Apart from the above, in cases where we processpersonal data on the basis of your consent, the same will be stored until you withdraw your consent andexercise your right to be forgotten/delete any personal data you have provided.6. Technical security regarding the protection of personal dataThe Foundation has implemented all technical and organizational measures necessary for the processingand protection of personal data in accordance with EU Regulation 2016/679 and the applicable Bulgarianlegislation.The measures taken correspond to the specific risks associated with the processing and storage of theprovided personal data. Organizationally and technically, the protection of your data from loss,modification, theft or illegal access by unauthorized third parties is ensured.
7. Sharing and Disclosure of Personal Data with Third PartiesIn certain cases, the Foundation may disclose some personal data to partners or subcontractors who workwith the Foundation through the provision of services related to the activities of the Foundation or assistthe Foundation in its activities.The Foundation may disclose your personal data to third parties, including such third parties locatedoutside the European Union, only subject to compliance with the requirements of the Regulation, such as:• When organizing volunteer initiatives, games, contests or promotions, according to the rules ofthe specific games, which you can see at section “Frequently Asked Questions” on the website,as well as on the page for the specific Mission itself. This disclosing is only between theOrganizers and the Participants/Volunteers, to ensure contact between them for the execution of aMission;• Third parties with whom the Foundation has contractual legal relations for the use of VirtualServers (VPS) and providers of server and cloud services related to site maintenance;•• Third parties providing services to improve the advertising targeting of the Foundation's services;• Generally recognized service providers that have publicly declared compliance with GDPR and e-privacy policies, such as Google and Facebook. Consent also includes placing and using markingunique depersonalized identifiers, including using cookies, localStorage or other suitablegenerally accepted web technology;• Third parties providing services to the Foundation such as accountants, auditors, lawyers,notaries, advertising and PR agencies or companies engaged in systematic data administration.The Foundation will share personal data with third parties only after the technical and legal mechanismshave been expressly ensured, in which the processing of the shared personal data will take place inaccordance with the requirements of Regulation 679/2016 and Bulgarian legislation.Third parties and partners of the Foundation undertake to take all actions to ensure the legitimateprocessing of personal data, according to the privacy requirements specified in this Policy.8. Your rights as a data subjectAccording to the Regulation, each subject of personal data has the following rights:8.1. Right of accessYou have the right to find out free of charge what personal data we process and whether we process anyof your personal data.8.2. Right to rectificationIn the event of a discrepancy between your data and that which we process, you have the right to requestthat we correct, without undue delay, any data held by us that is inaccurate.8.3. Right to restriction of processingUnder certain circumstances, you have the right to request restriction or blocking of the processing ofcertain data. Such cases are the need to check the accuracy of your personal data, the basis for processingor the illegality of their processing.
8.4. Right to erasureIn cases where the basis for processing is no longer valid, you have the right to request the deletion of alldata processed by us.8.5. Right to data portabilityIn case you want to use your personal data provided electronically for the same service, but from anotherprovider, you have the right to request their transmission to another provider in a machine-readableformat. This right only applies to data that you have provided to us with your consent.8.6. Right to objectIf you do not agree with the way we process your personal data, you have the right to object. This rightapplies only to data whose processing is necessary for the performance of a task of public interest or inthe exercise of official powers granted to the Foundation, as well as to data whose processing is necessaryfor the purposes of the legitimate interests of the Foundation or to a third party, except where the interestsof the data subject prevail over such interests.8.7. Right to withdraw consentWhen providing data based on your consent, you have the right at any time to request the withdrawal ofconsent for the processing of the specific type of personal data.8.8. Right of appealIf you are not satisfied with the way in which the application submitted by you has been administered inrelation to any of the above-mentioned rights or you believe that we are not lawfully processing yourpersonal data, you have the right to file a complaint with the Commission for the Protection of PersonalData, which is the supervisory authority responsible for the implementation of EU Regulation 2016/679and the Personal Data Protection Act.If you wish to exercise any of the above rights, you can send the relevant application with your exactrequest to the following email address: [email protected] CONTACTS OF THE COMMISSION FOR THE PROTECTION OF PERSONAL DATA (PCPD)Sofia 1592, Prof. Blvd. Tsvetan Lazarov" No. 2Center for information and contacts - tel. 02/91-53-518Reception - working hours 9:00 a.m. - 5:30 p.m.Email: [email protected]Website: www.cpdp.bg With a view to updating this Privacy Policy, it may be changed in whole or in its individual parts, at anytime, without special notification. Please periodically check the currentness of this Policy, as the date ofthe last update will be indicated.This policy was adopted on 06/12/2022 and has not been modified since that time.