JCI Bulgaria Privacy Notice
Keeping your data protected
Effective Date: 11 March 2026
The ‘Controller’ of the personal data you provide to us is:
JCI Bulgaria
26 Momina sulza Str.
Aksakovo, Bulgaria
Email: contact@jci.bg
Website: www.jci.bg
Junior Chamber International Bulgaria (JCI Bulgaria) operates through local branches. For the purposes of this Privacy Notice, references to JCI Bulgaria include its local organizations and the Board of Officers. We are committed to protecting the security of your personal data. If you have any questions, please contact us.
Legal basis for the processing of personal data
JCI Bulgaria processes personal data in accordance with Article 6 of the General Data Protection Regulation (GDPR). Depending on the specific processing activity, the legal basis may include:
- Article 6(1)(f) GDPR — processing necessary for the purposes of the legitimate interests pursued by the controller (e.g. ensuring website security and functionality);
- Article 6(1)(a) GDPR — the data subject’s consent (e.g. when submitting the contact form).
What data do we collect?
Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information about the browser type and the version used
- The user’s operating system
- The IP address of the user (anonymized)
- Date and time of access
- Websites from which the user’s system accesses our Website
- Websites accessed by the user’s system through our Website
The data are stored in the log files of our system. These data are not stored together with other personal data of the user.
We further collect the following data that general users provide us with voluntarily if they fill in the contact form on our website:
- Personal identification information (Name, Email address)
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The data is stored in log files in order to ensure the functionality of the website. The data is also used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
We use your basic personal data in order to reply to any of your requests. We will not collect any personal data from you that we do not need. For the contact form the data we collect is required to verify your identity and respond to your request.
Website Cookies
We use strictly necessary session cookies to ensure the proper functioning of the website. Session cookies are automatically deleted after the end of your visit. We do not use preference, marketing, or third-party tracking cookies through our website.
The legal basis for the use of strictly necessary cookies is Article 6(1)(f) GDPR, as they are required to ensure the secure and functional operation of the website.
How we store data in JCI Bulgaria
Website
Your data is encrypted and securely stored on servers located within the European Economic Area (EEA). Personal data is not shared with third parties unless this is required or permitted by applicable law.
Google Drive
Data submitted through the contact form may be stored on Google Drive, a cloud service provided by Google LLC. Google acts as a data processor and provides safeguards for personal data in accordance with the GDPR, including the use of appropriate contractual and technical measures. More information is available at:
https://privacy.google.com/businesses/compliance/
How long do we keep your data?
JCI Bulgaria does not retain your personal data longer than necessary for the purposes for which it was collected. Your personal data will be erased as soon as the purpose of storage no longer applies and after a time period of maximum two years.
In the case of the collection of data to provide the website, the data will be erased when the respective session is terminated. With regard to data stored in log files, this is the case after seven days at the latest. A storage going beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the user is no longer possible.
Security & Authentication
All personal data stored on Google Drive is protected by secure login and 2-step verification, which greatly reduces the risk of unauthorized access by asking users for additional proof of identity when logging in.
What are your data protection rights?
Under GDPR, you have the following rights:
- Right to be informed: You have the right to be informed about the collection and use of your personal data.
- Right to access: You have the right to request copies of your personal data.
- Right to rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request to complete information you believe is incomplete.
- Right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- Right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to object to processing: You have the right to object to the processing of your personal data, under certain conditions.
- Right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- Right not to be evaluated based on automated processing: You have the right not to be subject to a decision that is based solely on automated processing and which significantly affects you.
If you make a request, we will reply without undue delay and within one month of the receipt of the request. If you would like to exercise any of these rights, please contact us at our email: contact@jci.bg
Repeat requests
Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, JCI Bulgaria may either:
- charge a reasonable administrative fee; or
- refuse to act on the request,
in accordance with Article 12(5) GDPR.
Privacy policies of other websites
The JCI Bulgaria website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
Changes to our privacy policy
JCI Bulgaria keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 15 February 2026.
How to contact us
If you have any questions about JCI Bulgaria’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection right, please do not hesitate to contact us via email at contact@jci.bg.
How to contact the appropriate authority
If you believe that JCI Bulgaria has not addressed your concern in a satisfactory manner, you have the right to lodge a complaint with the competent supervisory authority:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
Tel: +359 2 915 3580
Email: kzld@cpdp.bg
Website: https://www.cpdp.bg
