Information on data protection

The use of this website may involve the processing of personal data. In order for you to be able to understand these processings, we would like to provide you with an overview of this processing with the following information. In order to ensure fair processing, we would also like to inform you about your rights under the European General Data Protection Regulation (GDPR).

The controller of data processing is BULGARIAN NATIONAL FILM CENTER, 2 A, Dondukov Blvd., 7th floor, Sofia (hereinafter referred to as "we" or "us").

• 1. Contact

  If you have any questions or suggestions about this information, or if you would like to contact us to exercise your rights, please direct your request to BULGARIAN NATIONAL FILM CENTER, 2 A, Dondukov Blvd., 7th floor, Sofia; email: nfc@nfc.bg.

• 2. General information on the processing of personal data

  When using this website, personal data may be processed. The term "personal data" under data protection law refers to all information that relates to a specific or identifiable person. The IP address can also be such personal data. An IP address is assigned to each Internet-connected device by the ISP so that it can send and receive data. When you use the website, we collect information that you provide yourself. In addition, during your visit to the Site, certain information about your use of the Site is automatically collected by us.

  We process personal data in compliance with the relevant data protection regulations, in particular the GDPR. Data processing by us only takes place on the basis of a legal permission. When using this website, we process personal data only with your consent (Art. 6 para. 1 sentence 1 letter a GDPR), for the performance of a contract to which you are a party or at your request to take steps prior to entering into a contract (Art. 6 para. 1 sentence 1 letter b GDPR), for compliance with a legal obligation (Art. 6 para. 1 sentence 1 letter c GDPR) or if the processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, unless such interests are overridden by your interests or fundamental rights and freedoms that require the protection of personal data (Art. 6 para. 1 sentence 1 letter f GDPR).

• 3. Duration of storage

  Unless otherwise stated in the following information, we will only store the data for as long as it is necessary to achieve the purpose of processing or for the fulfilment of our contractual or legal obligations.

• 4. External Service Providers

  Unless otherwise stated in the following information, the data is processed on the servers of technical service providers who have been commissioned by us for this purpose. These service providers process the data only in accordance with explicit instructions and are contractually obliged to ensure sufficient technical and organizational measures for data protection.

  Insofar as we refer to integrated services of other providers in this data protection declaration, it is to be assumed that personal data will be transmitted to the specified location of these providers. The registered office of these providers may be located in a so-called third country outside the European Union or the European Economic Area. Further information can be found under the respective service.

• 5. Registration and registration for projects and for the provision of locations

  In order to provide your own profile as a freelancer, company or performer as well as potential filming locations/locations via our website, registration via the website is necessary. The required information can be found in the input mask during registration. The provision of the mandatory information is required in order for the registration to be completed. The data you provide will only be collected, stored, processed and used for purposes related to your interest in participating in a production. This includes, in particular, contacting us with regard to various filming requests or arranging your location as well as being included in our freelancer, company and location database.

  The data provided in the mandatory fields is processed for the purpose of processing and fulfilling the contract for the provision of your profile or location. Failure to provide this will mean that we may not be able to process your application and use your profile, company or location. The processing is based on the legal basis of Art. 6 para. 1 sentence. 1 (b) GDPR.

  The processing of the data provided in the fields that are not mandatory is carried out in order to safeguard our legitimate interests. By receiving further data, we can provide specific suggestions about possible suitable productions and place them in a targeted manner, so that the establishment of a project-related cooperation is facilitated. If it is not provided, it may take longer to arrange or no suitable production can be found for you. The processing is based on the legal basis of Art. 6 para. 1 sentence. 1 (f) GDPR.

  The data of the users who are suitable for certain productions or whose locations are suitable for certain productions are made accessible to other users (e.g. producers, production companies, TV stations, streaming services, VoD platforms, etc.). This disclosure is based on the legal basis of Art. 6 (1) sentence 1 b) and c) GDPR. Furthermore, the data of the users who are suitable for productions of other users are passed on to them in order to offer the widest possible range of possibilities and to increase the chances of success in the mediation. The legal basis for this is Art. 6 para. 1 sentence 1 letter f).

  We will store the data provided for as long as a placement seems possible or until you inform us that you are no longer interested in providing it permanently. Registered persons also have the option of logging in to the website with their access data and deleting individual data entered or using the "Delete account" function to delete their own account and thus all personal data. Deletion shall be replaced by blocking insofar as deletion is precluded by statutory, statutory or contractual retention obligations.

  All employees entrusted with data processing are obliged to maintain the confidentiality of the data.

• 6. Links to social media operators

  Our website contains simple links to Facebook, Twitter, Instagram and Linkedin. An exchange of data with the mentioned social media operators only takes place if the corresponding symbol button (e.g. the "f" of Facebook, the bird symbol of Twitter) is clicked. If you click on such an icon button, a page of the corresponding social media operator opens in a pop-up window. There you can publish information about our productions in accordance with the regulations of the social media operator. The scope and purpose of any data collection, processing and use by Facebook, Instagram or Twitter can be found in the privacy policies of Facebook, Twitter, Instagram and Linkedin.

• 7. Processing of server log files

  When using our website for purely informational purposes, general information is first stored automatically (i.e. not via registration), which your browser transmits to our server. By default, this includes: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to safeguard our legitimate interests and is based on the legal basis of Art. 6 para. 1 sentence 1 f GDPR. This processing is for the technical management and security of the website.

• 8. Cookies

  We use cookies on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by our web server. On the one hand, we use cookies that are automatically deleted at the end of their session ("session cookies") and also permanent cookies ("persistent cookies"). These persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. Insofar as this use of cookies leads to the processing of personal data, this is based on the legal basis of Art. 6 (1) sentence 1 f GDPR. This processing serves our legitimate interest in making our website more user-friendly, effective and secure. You can delete cookies at any time in the security settings of your browser. In principle, you can object to the use of cookies through your browser settings.

• 9. Your rights

  As a data subject, you have the right to assert your rights as a data subject vis-à-vis us. In particular, you have the following rights:

  • In accordance with Art. 15 GDPR, you have the right to request information about whether and, if so, to what extent we process personal data about you or not.
  • You have the right to request that we correct your data in accordance with Art. 16 GDPR.
  • You have the right to request the deletion of your personal data from us in accordance with Art. 17 GDPR.
  • You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
  • In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit this data to another controller.

• 10. Right to object

  In accordance with Art. 21 GDPR, you have the right to object to any processing based on the legal basis of Art. 6 para. 1 sentence 1 e) or f) GDPR. If personal data about you is processed by us for the purpose of direct marketing, you can object to this processing in accordance with Art. 21 (2) and (3) GDPR.

• 11. Data protection supervisor

  You can reach our Data Protection Officer at the following contact details:
  BULGARIAN NATIONAL FILM CENTER, Data Protection Officer
  2 A, Dondukov Blvd., 7th floor
  Sofia
  Email: nfc@nfc.bg

• 14. Lodge a complaint with a supervisory authority

  If you believe that the processing of your personal data infringes the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR.

As of: 16.01.2024