Privacy Policy
This is the website of the State Enterprise “Port Infrastructure” (SE “Port Infrastructure”). With this Privacy Policy, we would like to provide you with information on how we process your personal data (what data we collect, for what purpose, whether we share it with anyone, the terms for which we store it) and what your rights are.
Contact information for SE “Port Infrastructure”:
Address: Sofia 1574, Slatina region, 69 Shipchenski prohod Blvd.
Email: office@bgports.bg
Website: www.bgports.bg
Contact information for the Data Protection Officer:
Address: Sofia 1574, Slatina region, 69 Shipchenski prohod Blvd.
Email: dpo@bgports.bg
Phone: 02/807 99 51
“Personal data” means any information relating to an identified or identifiable natural person, who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations which is performed on personal data by automated or other means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Information that may contain your personal data will be processed or is processed by SE “Port Infrastructure” in the following cases:
Human Resources
When you apply for a vacant position or are a student applying for a paid or unpaid internship, you provide us with personal data such as names, photo, date of birth, phone number, address, education, additional qualifications, information about previous work experience (if any), and others. The purpose of this processing of personal data is to select the most suitable candidate for the vacant position and to retain information about unsuccessful candidates for inclusion in future selection procedures. The State Enterprise “Port Infrastructure” retains your data for up to six months after the final completion of the selection procedure. With your written consent, your personal data may be stored for up to two years to participate in future selections, and you have the right to withdraw this consent at any time. You can familiarize yourself with the Policy of the State Enterprise “Port Infrastructure” for processing and protecting the personal data of job applicants in the “Careers” section.
Contractors
We process your personal data when taking steps to conclude, amend, execute, and terminate contracts under the Public Procurement Act, the Obligations and Contracts Act, the Commercial Act, and others. The State Enterprise “Port Infrastructure” processes data such as names, personal identification number, contact details, signature, including electronic, banking information, educational qualification, professional experience, certificates, and others of natural persons – contractors (clients, suppliers, subcontractors, and others), of natural persons representing or working for contractors, and others. Your data is provided to state, municipal, judicial, and other bodies and institutions only in cases provided by law. You can familiarize yourself with the Policy of the State Enterprise “Port Infrastructure” regarding the processing of personal data of contractors in the “Buyer Profile” section.
National Center for Electronic Document Exchange in Maritime Transport
If you are a crew member or passenger on a ship arriving or departing from a sea port in the Republic of Bulgaria, a shipowner, ship manager, operator, or agent, we process your personal data in compliance with the Law on Maritime Spaces, Inland Waterways and Ports of the Republic of Bulgaria and the Regulation on the organization of border passport, customs, health, veterinary, and phytosanitary control, as well as control of transport vehicles in the ports of the Republic of Bulgaria, other national and international legal acts. The personal data we process may include names, gender, identity document and issuing country, nationality, date and place of birth, other information. Your personal data may be provided to competent national authorities such as the Executive Agency “Maritime Administration”, Customs Agency, Border Police, Regional Health Inspections, Regional Directorate for Food Safety, Border Veterinary Control, port and/or port facility security officer, and other bodies and institutions only in cases provided by law. Your data is stored for a period of three years from the date of submission. You can familiarize yourself with the Policy of the State Enterprise “Port Infrastructure” regarding the National Center for Electronic Document Exchange in Maritime Transport in the “Electronic Services” section.
Electronic document circulation in river transport
If you are a crew member or passenger on a ship arriving or departing from a port on the Danube River, on the territory of the Republic of Bulgaria, a shipowner, ship manager, operator, or agent, we process your personal data in compliance with the Law on Maritime Spaces, Inland Waterways and Ports of the Republic of Bulgaria and the Regulation on the organization of border passport, customs, health, veterinary, and phytosanitary control, as well as control of transport vehicles in the ports of the Republic of Bulgaria, serving ships from international navigation and other national and international legal acts. The personal data we process may include names, gender, identity document and issuing country, nationality, date and place of birth, other information. Your personal data may be provided to: Executive Agency “Maritime Administration”; Customs Agency; Border Police; Regional Health Inspections; Regional Directorate for Food Safety; Border Veterinary Control; authorized institutions in Austria, Czech Republic, Croatia, Hungary, Romania, Serbia, and Slovakia providing river information services and inland navigation traffic management services through the Central and Eastern European Reporting Information System (CEERIS); authorized institutions in Austria, Belgium, Croatia, Czech Republic, France, Germany, Hungary, Romania, Serbia, Slovakia, Netherlands, and Luxembourg providing Corridor River Information Services for European inland waterways to improve the safety and efficiency of inland navigation; other bodies and institutions only in cases provided by law. Your personal data is stored for a period of 30 days from the departure of the ship to three years. You can familiarize yourself with the Data Protection Policy of EURIS HERE.
Video surveillance
You may be subject to video surveillance when entering, staying, or leaving a building or office premises of the State Enterprise “Port Infrastructure”. In each building where video surveillance is conducted, a graphic sign “The site is under video surveillance” and an information board are placed. We do not conduct video surveillance in meeting rooms, staff rest areas, sanitary facilities, and similar. The purpose of video surveillance is to protect the property of the State Enterprise “Port Infrastructure”. For more detailed information, read the information board in the building you are visiting.
Port areas and adjacent waters, including publicly accessible zones, are subject to video surveillance. The State Enterprise “Port Infrastructure” conducts video surveillance to comply with the provisions of numerous national and international legal acts to ensure the security of ships, ports, and port areas. In publicly accessible zones, signs are placed to allow you to make an informed choice whether to visit an area where video surveillance is conducted.
The video recordings shall be kept for a period of two months and shall be accessible to a limited number of persons directly involved in video surveillance and access control. The Port Infrastructure DP Policy on CCTV can be found HERE.
Visitors
To enter buildings and office premises of the State Enterprise “Port Infrastructure” that are not publicly accessible zones, you must identify yourself, state the organization you represent, and the purpose of your visit. You may be asked for an identity document, but the document is not scanned, copied, or stored by the security personnel. We process your personal data for the purpose of protecting the property of the State Enterprise “Port Infrastructure” and access control, with the information stored for one month and access to it strictly limited. In each building with access control, there is an information board where you can obtain detailed information.
Internal reporting under the Law on Protection of Persons Reporting or Publicly Disclosing Information on Violations
We process your personal data when you report a violation of Bulgarian law or European Union acts that has come to your attention in the course of your employment or other work context. We also process personal data of persons who assist the whistleblower in the whistleblowing process and of the person concerned. Information on how to make a whistleblowing report to the Port Infrastructure State Enterprise and on your rights can be found HERE.
Signals and complaints
Your personal data, when you submit a complaint or grievance, and personal data mentioned in the complaint or grievance, are processed by the State Enterprise “Port Infrastructure” according to the specific case. The data in the complaint or grievance may be provided to third parties only if provided by law.
Corporate social responsibility
We may process your personal data if you are a child, student, or university student participating in our socially responsible initiatives such as competitions, holidays, celebrations, and various public events. Participation in the events is voluntary, and personal data – names, age, city, school, university, photo, video, and others – are processed after obtaining consent from the participant, and personal data of children under 14 years are processed after obtaining consent from a parent or guardian.
Phone call
When you call a landline number of the State Enterprise “Port Infrastructure”, we identify your phone line (Calling Line Identification – CLI). We use this information to return a missed call.
International Congress Center Burgas
We process your personal data when you visit the International Congress Center Burgas, use the services provided such as event hosting, room and equipment rental, use parking services on the territory of the port terminal “Burgas-East 1 – Public Access Zone”. The data you provide us with, we process and store within the legally established deadlines, may include first and last name, personal identification number, position, phone number, electronic or physical address, signature, banking information. You can obtain detailed information on how we process your personal data from the Privacy Policy of the International Congress Center Burgas on the website iccb.bg.
Scientific Center “PlanetUm”
When you visit the Science Center “PlanetUm”, book a hall, organize a visit, birthday, or other event, we process your personal data. The data you provide us with, we process and store within the legally established deadlines, may include first and last name, contact details such as phone number and/or email address, signature, banking information, others.
You can get detailed information on how we process your personal data by reading the Privacy Policy of the Scientific Center “PlanetUm” on the website www.planetum.bg.
Requests under the Law on Access to Public Information
When exercising rights under the Access to Public Information Act, personal data of individual data subjects may be processed, and the information may contain data on the physical, economic, social, or other identity of the persons. The State Enterprise “Port Infrastructure” provides public information only to the extent that it complies with the provisions of the Access to Public Information Act.
Links to other websites
This Privacy Policy does not guarantee the confidentiality of your personal data when you use links on the website of the State Enterprise “Port Infrastructure” to other websites. We recommend that you familiarize yourself with the privacy policies of other websites you visit.
Your rights when processing your personal data
You have the following rights under Regulation (EU) 2016/679 when SE “Port Infrastructure”, as a controller, processes your personal data:
The right to be informed;
Right of access to the processed data;
Right to correct the processed data;
Right to delete the processed data;
Right to restrict the processing of data;
Right to portability of the processed data;
Right to object to the processing of data;
Rights in relation to automated decision-making and profiling;
Right to withdraw consent to data processing.
SE “Port Infrastructure” has an obligation to notify third parties to whom your personal data has been disclosed of any correction, deletion or restriction of the processing of your personal data made by us.
If you wish to exercise any of your rights in relation to the processing of your personal data, please complete the attached Application for Exercise of Rights. You may exercise your rights in one of the following ways: submit the Application for Exercise of Rights in person or through a person authorised by you to the Head Office of the State Enterprise “Port Infrastructure” in Sofia or to any of the branches-territorial subdivisions in Burgas, Varna, Lom or Ruse; submit the Application for Exercise of Rights electronically to the e-mail address of the Data Protection Officer of the State Enterprise “Port Infrastructure” under the terms of the legislation in force (Law on Electronic Document and Electronic
We may ask you to provide additional information to confirm your identity. This prevents the possibility of disclosing your personal data to another person.
We will respond to your Application for Exercising Rights within one month. If you have submitted multiple Applications for Exercising Rights or your requests are particularly complex, the period within which we will respond may be extended to two months. In this case, you will be notified of the extended response period.
In the event that your requests are manifestly unfounded, excessive or repetitive, we may refuse to comply with your request, and you will be notified of our decision and our reasons.
You have the right to lodge a complaint with a supervisory authority for personal data protection. The supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection, address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2, website: https://www.cpdp.bg/.
If you have questions related to the processing of your personal data, want to exercise your rights or believe that your rights have been violated, please contact the Data Protection Officer of SE “Port Infrastructure” first before contacting a supervisory authority for data protection.
SE “Port Infrastructure” reserves the right to change the Privacy Policy.
Date of creation: June 2019
Date of last change: May 2025