As of May 25, 2018, Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) of the European Parliament and of the Council of 27 April 2016 applies regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).

Sofia Municipality, in its capacity as a personal data controller within the meaning of Art. 4, item 7 of Regulation (EU) 2016/679, carries out activities for the collection, processing, and storage of personal data in accordance with Regulation (EU) 2016/679 and the Personal Data Protection Act.

Information regarding the Personal Data Controller:

Name: Sofia Municipality

Registered office and management address: 33 Moskovska St., Sofia – 1000

Correspondence data: 33 Moskovska St., Sofia – 1000

Telephone: 0700 17 310, 02 9377 303

Website: www.sofia.bg

Contact details of the Data Protection Officer:

Name: Veselka Baeva

Correspondence data: 33 Moskovska St., Sofia – 1000

Telephone: 02 9377 400

Website: www.sofia.bg

E-mail: dpo@sofia.bg

Purposes of processing for which the personal data are intended:

The administrative services we offer require the processing and storage of minimized personal data. This data is necessary to process and fulfill the respective service according to the regulations of the Republic of Bulgaria and the European Union. Sofia Municipality collects personal data for specific, legitimate purposes, and personal data is not further processed in a manner incompatible with these purposes.

Legal basis for processing:

Sofia Municipality collects, processes, and stores your personal data based on statutory obligations and/or in the performance of tasks of public interest and in accordance with Art. 6, para. 1 of Regulation (EU) 2016/679.

Personal data storage periods:

The variety of services provided by Sofia Municipality requires different storage periods for personal data on paper/electronic media, the criteria for which are determined by national regulations, while for others, the “List of document types with storage periods of Sofia Municipality” is applicable.

Sofia Municipality stores personal data by virtue of applicable legislation within the prescribed period.

Recipients or categories of recipients of personal data:

Categories of recipients of personal data that Sofia Municipality provides outside the organization:

To public authorities (National Revenue Agency, National Social Security Institute, Ministry of Interior, judicial authorities, control bodies, local self-government bodies, etc.); To a personal data processor (a natural or legal person who processes personal data on behalf of Sofia Municipality and by its order or assignment).

Others:

Sofia Municipality does not collect or process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, nor does it process genetic and biometric data, data concerning sex life or sexual orientation of natural persons.

Rights of the data subject:

A “data subject” within the meaning of Regulation (EU) 2016/679 is a natural person who is identified or can be identified. The data subject has the right to:

Information regarding the specific parameters of their personal data processed by the controller (Art. 13 and Art. 14 of the GDPR);

Access to information – confirmation of whether the controller processes their personal data and access to the data itself if processed (Art. 15 of the GDPR);

Rectification of personal data relating to them (Art. 16 of the GDPR);

Right “to be forgotten” (Art. 17 of the GDPR);

Restriction of processing of personal data when the accuracy of the personal data is contested or the processing is unlawful, but the data subject does not wish the personal data to be deleted (Art. 18 of the GDPR);

Right to portability – receiving personal data from the controller in a structured, commonly used, and machine-readable format, as well as transferring the data to another controller by the data subject or directly by the controller (Art. 20 of the GDPR);

Objection to the processing of personal data (Art. 21 of the GDPR);

The data subject has the right not to be subject to automated decision-making, including profiling (Art. 22 of the GDPR).

You may exercise your rights under Art. 15 – 22 of Regulation (EU) 2016/679 before Sofia Municipality through a written application submitted to the registry office at: Sofia, 33 Moskovska St., in person or by an explicitly authorized person with a power of attorney, unless a special law provides otherwise.

An application may also be submitted electronically via the official portal of Sofia Municipality, “Electronically Signed Documents” module (https://svc.sofia.bg/e-document) – as an electronic document signed with a qualified electronic signature.

When an application is submitted by an authorized person, the corresponding power of attorney is attached to the application.

When submitting an application to exercise rights under Regulation (EU) 2016/679 before Sofia Municipality, you will be asked to identify yourself by providing an identity document, via an electronic signature, or other means of identification.

Personal data provided with the applications are used only for the purposes of exercising the requested rights. Sofia Municipality does not provide this information to third parties.

Filing a complaint:

If you believe that the processing of personal data relating to you violates your rights, you have the right to file a complaint with the Commission for Personal Data Protection.

Name: Commission for Personal Data Protection

Correspondence data: 2 Prof. Tsvetan Lazarov Blvd., Sofia – 1592

Website: www.cpdp.bg

Municipal Enterprise “Sofia Zoo”

Address: 1 Srebarna St., Hladilnika district, PC 67 Sofia 1407 Bulgaria

Email: zoosofia@zoosofia.eu

Municipal Enterprise “Sofia Zoo” is a specialized unit of Sofia Municipality for breeding and rearing animals from world and Bulgarian fauna, rare and endangered animal species, and presenting them in an environment close to the natural one. The activity includes the dissemination of conservation and environmental messages and knowledge, established environmental practices for wildlife aimed at residents of the urbanized city, and participation in national and international programs for the introduction and reintroduction of endangered and extinct animal species into nature.

Information that may contain your personal data is processed for the following purposes:

“Human Resources Management”

For human resources management purposes, we process personal data of job applicants, current, and former employees of ME “Sofia Zoo”.

In the course of human resources management activities, data for the identification of natural persons, data on education and qualifications, health data, contact data, as well as other data required by special laws regulating labor relations, tax and social security relations, accounting of activities, occupational health and safety conditions, and social issues are processed.

Collected data are used only for the purposes stated above and are provided to third parties only in cases provided by law. In such cases, data may be provided, for example, to the National Revenue Agency, National Social Security Institute, Executive Agency “General Labour Inspectorate,” and other public authorities in view of their powers. Information is not stored outside the EU and the European Economic Area.

In connection with the performance of labor relations, only the personal data required by law are processed, which are stored within the periods determined by labor and social security legislation.

Activities to ensure healthy and safe working conditions are regulated by a contract with an occupational health service according to Ordinance No. 3 of January 25, 2008, on the terms and conditions for carrying out the activities of occupational health services.

“Contract Management”

In the performance of its activities, ME “Sofia Zoo” processes personal data of natural persons for the execution of contracts it concludes. This includes contracts with donors, the sale of subscription cards (annual electronic ticket), as well as contracts with suppliers, partners, and other contractors.

Insofar as personal data of individual natural persons are processed in connection with the execution of these contracts, information is processed in a minimal volume, sufficient only for the precise fulfillment of obligations under the respective contract. Access to this information is provided to third parties only when specified by law. Personal data are not transferred to third countries and international organizations.

“Ecological Research and Education Center”

ME “Sofia Zoo” conducts educational and conservation activities and campaigns aimed at students and visitors of the zoo by organizing zoo schools, lectures, and talks. The processing of personal data for participation in “Zoo Club NOAH” and “Summer Zoo School” is carried out based on the consent of the data subject, providing the names, age of the participant, and the presence/absence of chronic diseases and allergies to animals. The names of a parent/guardian/trustee providing consent for the child’s participation are provided, as well as the full names and contact telephone number of persons authorized to pick up the child from the Ecological Research and Education Center. At the discretion of the parent/guardian/trustee providing consent for participation in the respective educational program, it may be combined with consent for photographing/filming the child and publishing/broadcasting photographic or video materials in print and electronic media, as well as on the website and Facebook page of the zoo. Data subjects have the right to withdraw their consent at any time, but the withdrawal does not affect the lawfulness of processing based on consent given before its withdrawal.

“Volunteers”

We process personal data of persons wishing to join the volunteer program of Sofia Zoo. Categories of processed data include identification data such as names, passport data, and contact details.

Collected data are used only for the purposes stated above and are provided to third parties only in cases provided by law. In such cases, data may be provided to state authorities or local self-government bodies in connection with their powers. Personal data are not transferred to third countries or international organizations.

“Sale of Subscription Cards”

In connection with the sale/provision of subscription cards/annual electronic tickets for access to the territory of ME “Sofia Zoo,” we process personal data of visitors. Categories of processed data include identification data such as names and a photo. Collected data are used only for the purposes stated above and are provided to third parties only in cases provided by law. Personal data are not transferred to third countries or international organizations.

“Video Surveillance”

ME “Sofia Zoo” performs video surveillance for security purposes. Video surveillance recordings are stored for a period of 20 to 30 days. Certain employees have access to the recordings within the scope of their official duties. Recordings are provided to state authorities or local self-government bodies in cases provided for by a normative act in the performance of their powers.