Bulgarian Ports
Infrastructure Company

PRIVACY POLICY

OF THE

BULGARIAN PORTS INFRASTRUCTURE COMPANY

 

 This is the website of the Bulgarian Ports Infrastructure Company (“BPI Co.”). With this Privacy Policy we would like to provide you with information about how we process your personal data (what data we collect, for what purpose, whether we share it with anyone, how long we store it) and what your rights are.

 Contact details of BPI Co.:

Address: 69, Shipchenski Prohod Blvd, Slatina District, 1574 Sofia

Email address:  office@bgports.bg

Website: www.bgports.bg

 Contact details of the data protection officer:

Address: 69, Shipchenski Prohod Blvd, Slatina District, 1574 Sofia

Email address:  dpo@bgports.bg

Telephone No. 02/807 99 51

 

“Personal data“ means any information relating to an identified or identifiable natural person, who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

 “Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

 “Controller“ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law; 

 Information that may contain your personal data will be processed or is being processed by BPI Co.  in the following cases:

 Human resources 

When you apply for a vacant position or are a student applying for a paid or unpaid internship, you provide us with personal data such as your name, photo, date of birth, telephone number, address, education, additional qualifications, information about previous employment (if any), etc. The purpose of this personal data processing is to select the most suitable candidate for the vacant position and to keep information about unsuccessful candidates for future selection procedures. BPI Co.  stores your data for up to six months after the selection process is completed. With your written consent, your personal data can be stored for up to two years so you can take part in future selections, and you can withdraw this consent at any time. You can find the BPI Co. 's policy on the processing and protection of personal data of job applicants in the “Careers” section.

 Counterparties

We process your personal data when we take steps to conclude, amend, perform, and terminate contracts in accordance with the Public Procurement Act, the Obligations and Contracts Act, the Commerce Act, etc. BPI Co.  processes data such as names, personal numbers, contact details, signatures, including electronic, bank information, educational qualifications, professional experience, certificates, and other data of natural persons who are counterparties (customers, suppliers, sub-contractors, and others), natural persons who represent or work for counterparties, etc. Your data is provided to governmental, municipal, judicial, and other authorities and institutions only in cases provided for by law. You can find the BPI Co. 's policy on the processing of personal data of counterparties in the “Buyer Profile” section.

 National Center for E-documentation in Maritime Transport

If you are a crew member or passenger on a ship arriving at or departing from a seaport in the Republic of Bulgaria, a ship owner, ship manager, operator, or agent, we process your personal data in compliance with the Maritime Spaces, Inland Waterways and Ports of the Republic of Bulgaria Act and the Ordinance on the Organization of Border Passport, Customs, Health, Veterinary, and Phytosanitary Control, as well as Control of Means of Transport in the Ports of the Republic of Bulgaria, other national and international legal regulations. The personal data we process may include names, sex, identity document and issuing country, citizenship, date and place of birth, and other information. Your personal data may be provided to the competent national authorities Executive Agency “Maritime Administration,” Customs Agency, Border Police, Regional Health Inspectorates, Regional Food Safety Directorate, Border Veterinary Control, port security officer and/or port facility and other authorities and institutions only in cases provided for by law. Your data will be stored for a period of three years from the date of submission. You can find the BPI Co.  Policy on the National Center for E-documentation in Maritime Transport in the “Electronic Services” section.

 Electronic document exchange in river transport

If you are a crew member or passenger on a ship arriving at or departing from a port on the Danube River in the territory of the Republic of Bulgaria, a ship owner, ship manager, operator, or agent, we process your personal data in compliance with the Maritime Spaces, Inland Waterways and Ports of the Republic of Bulgaria Act and the Ordinance on the Organization of Border Passport, Customs, Health, Veterinary, and Phytosanitary Control, as well as Control of Means of Transport in the Ports of the Republic of Bulgaria, serving ships engaged in international navigation and other national and international legal regulations. The personal data we process may include names, sex, identity document and issuing country, citizenship, date and place of birth, and other information. Your personal data may be provided to: the Executive Agency for Maritime Administration; the Customs Agency; the Border Police; Regional Health Inspectorates; the Regional Food Safety Directorate; Border Veterinary Control; authorized institutions in Austria, the Czech Republic, Croatia, Hungary, Romania, Serbia, and Slovakia, which provide river information services and traffic management services for inland navigation through the Central and Eastern European Reporting Information System (CEERIS); to authorized institutions in Austria, Belgium, Croatia, the Czech Republic, France, Germany, Hungary, Romania, Serbia, Slovakia, the Netherlands, and Luxembourg, which provide Corridor River Information Services for European inland waterways with the aim of improving the safety and efficiency of inland navigation; to other authorities and institutions only in cases provided for by law. Your personal data is stored for a period of 30 days from the departure of the ship up to three years. You can find EURIS's Personal Data Protection Policy HERE.

 Video surveillance

You may be subject to video surveillance when entering, staying in, or leaving a building or office premises of BPI Co. In every building where video surveillance is carried out, there is a graphic sign “The site is under video surveillance” and an information board. We do not carry out video surveillance in meeting rooms, staff rest areas, bathrooms, and other similar areas. The purpose of video surveillance is to protect the property of BPI Co. . For more detailed information, please read the information sign in the building you are visiting.

 Port areas and adjacent waters, including publicly accessible areas, are subject to video surveillance. BPI Co.  carries out video surveillance to comply with numerous national and international legal regulations aimed at ensuring the security of ships, ports, and port areas. Signs are posted in publicly accessible areas to enable you to make an informed choice about whether to visit an area where video surveillance is in operation.

 Video recordings are stored for a period of two months and are accessible only to a limited group of persons directly involved in video surveillance and access control. You can find the BPI Co. 's video surveillance policy HERE.

 Visitors

To enter the buildings and office premises of BPI Co.  that are not publicly accessible areas, you must identify yourself, state the organization you represent, and the reason for your visit. You may be asked to present an identity document, which will not be scanned, copied, or stored by security guards. We process your personal data for the purpose of protecting the property of BPI Co.  and controlling access. The information is stored for one month and access to it is strictly limited. In every building with access control, there is an information board where you can obtain detailed information.

 Internal Reporting of Violations (Whistleblowing) under the Law on the Protection of Persons Reporting Violations or Publicly Disclosing Information about Violations (Whistleblowers Protection Act)

 We process your personal data when you report a violation of the Bulgarian or EU laws and regulations that you have become aware of in the course of your work or other professional activities. We also process the personal data of persons who assist the whistleblower in the process of submitting a report and of the person concerned. Information on how to submit a report to BPI Co.  and on your rights can be found HERE.

 Reports and complaints

Your personal data when you submit a report or complaint, and personal data specified in a report or complaint, are processed by BPI Co.  on a case-by-case basis. The data in the report or complaint may be disclosed to third parties only if required by law.

 Corporate social responsibility

We may process your personal data if you are a child, pupil, undergraduate or graduate student, and participate in our socially responsible initiatives, such as competitions, celebrations, commemorations, and various public events. Participation in the events is voluntary and personal data – names, ages, city, school, university, photo, video, and others – are processed after receiving consent from the participant, and the personal data of children under 14 years of age are processed after obtaining the consent of a parent or guardian.

 Telephone call

When you call a landline number of BPI Co. we identify your telephone line (caller line identification – CLI). We use this information to return your missed call.

 International Congress Center Burgas

We process your personal data when you visit the Burgas International Congress Center, use the services provided, such as event organization, room and equipment rental, and use parking services on the territory of the Burgas-East 1 Port Terminal – Public Access Zone. The data you provide to us is processed and stored for the statutory period and may include your first and last name, personal identification number, job title, telephone number, email or physical address, signature, and bank details. You can find detailed information on how we process your personal data in the Privacy Policy of the Burgas International Congress Center on the website iccb.bg.

 PlanetUm Science Center

When you visit the PlanetUm Science Center, book a room, organize a visit, birthday party, or other event, we process your personal data. The data you provide us with is processed and stored for the statutory period and may include your first and last name, contact details such as telephone number and/or email address, signature, bank details, and other information.

You can find detailed information on how we process your personal data in the Privacy Policy of the PlanetUm Science Center on the website www.planetum.bg.

 Requests under the Access to Public Information Act

When exercising rights under the Access to Public Information Act, personal data of individual data subjects may be processed, and the information may contain data on the physical, economic, social, or other identity of individuals. BPI Co.  provides public information only to the extent that it complies with the provisions of the Access to Public Information Act.

 Links to other websites

This Privacy Policy does not guarantee the confidentiality of your personal data when you use links on the BPI Co.  website to other websites. We recommend that you review the privacy policies of the other websites you visit.

 Your rights when your personal data is processed

You have the following rights under Regulation (EU) 2016/679 when BPI Co. as a controller, processes your personal data:

The right to information;

The right to access the data being processed;

Right to rectify the data being processed;

Right to erase the data being processed;

Right to restrict data processing;

Right to data portability;

Right to object to data processing;

Rights in relation to automated decision-making and profiling;

Right to withdraw consent to data processing.

 

BPI Co. is obliged to notify third parties to whom your personal data has been disclosed of any rectification, erasure or restriction of the processing of your personal data.

 If you wish to exercise any of your rights in relation to the processing of your personal data, please complete the attached Request for exercising of rights. You can exercise your rights in one of the following ways: you can submit a Request for exercising of rights in person or through a person authorized by you at the Head Office of BPI Co. in Sofia or at one of the branches in Burgas, Varna, Lom, or Ruse; you can submit a Request for exercising rights electronically to the email address of the data protection officer of the BPI Co.  under the conditions of the applicable legislation (Electronic Document and Electronic Certification Services Act, Electronic Governance Act, and Electronic Identification Act).

We may ask you to provide us with additional information to confirm your identity. This is to prevent us from disclosing your personal data to another person.

We will respond to your request to exercise your rights within one month. If you have submitted several requests to exercise your rights or your requests are particularly complex, the period within which we will respond may be extended to two months. In this case, you will be notified of the extended response period.

If your requests are manifestly unfounded, excessive, or repetitive, we may refuse to comply with your request, and you will be notified of our decision and the reasons for it.

You have the right to lodge a complaint with a supervisory authority for personal data protection. The supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection, address: 2, Prof. Tsvetan Lazarov Blvd, 1592 Sofia: https://www.cpdp.bg/.

 If you have any questions regarding the processing of your personal data, wish to exercise your rights, or believe that your rights have been violated, please contact the data protection officer of BPI Co.  first, before contacting a personal data protection supervisory authority.

 BPI Co. reserves the right to change its Privacy Policy.

 

 Date of creation: June 2019.

Date of latest amendment: May 2025