Last updated: 4/13/2022
With this Privacy Notice (hereinafter referred to as the Notice), STENATA 1997 EOOD, (hereinafter referred to as STENATA Stores, We, Us) aims to inform you about the methods of collecting and processing your personal data and your rights in this respect, as well as to inform you about the basic principles of data processing.
In our capacity of a Personal Data Controller, we process personal data in compliance with the requirements for good faith, legality and transparency. We strive to ensure an adequate level of protection of your personal data and carry out the activity of collecting, processing and storing them only for permissible purposes and in accordance with Regulation (EU) 2016/679 (GDPR, General Data Protection Regulation) and the Personal Data Protection Act. We process personal data limited to achieving the purposes for which they are collected.
Information about the Controller of Personal Data
Name: STENATA 1997 EOOD
Headquarters and Management address: 20B Al. Stamboliyski Blvd, Sofia
Contact details: e-mail: firstname.lastname@example.org; Phone: 0899988896
Contact details: e-mail: email@example.com; Phone: 0899988896 Name, Surname, date of birth, Personal Identification Number (only for Bulgarian participants), address and phone number, e-mail
We do not collect special categories of personal data.
Registration for the race ensures your admission to participation in it by receiving a unique ID number which is linked to the start number; all this is for the purpose of better organization and optimization of the planning and the race itself. Your personal data are used to generate a unique ID number, to check on the spot or in another appropriate way whether you are among the registered participants and to prepare a start number, as well as to prepare the mandatory mountain insurance for you on the day of the competition
We use the data submitted during registration for:
- administration of your participation which includes: sending a message to confirm your registration and a reminder message about the upcoming competition; send a feedback message to registered users for the purpose of better planning, providing other opportunities in the future, and information about the next similar competition; conclusion of mountain insurance for the day of the event on your behalf;
– sending messages about upcoming events;
– sending messages about upcoming events;
- statistical purposes - we carry out internal analyzes about event attendance, regularity of attendance, type of audience in order to improve the organization and the program of future events. The processing results contain only summarized and anonymous data which are not considered personal within the meaning of national and European legislation.
Your personal data are processed on the basis of the General Terms and Conditions for participation (agreement) in the competition which Terms and Conditions you have accepted, and for the purposes of our legitimate interests arising from our established relationships.
Your personal data will be processed by the organization team. For the purposes of registration of the race organized by us, we work with my.raceresult.com, and for time measuring, with Race Timing BG ltd (www.racetimingbg.com), which provide sufficient guarantees for the application of appropriate technical and organizational measures in such a way that the processing takes place in accordance with the requirements of the GDPR and ensures the protection of your rights as data subjects.
Duration of data storage
Personal data will be stored until achieving the purposes for which they have been collected.
personal data for a longer period, or the data is necessary in connection with making or defending against legal claims, we will continue to we process personal data until the expiration of the required period or until the settlement of the relevant claims.
We can store the data in summarized and anonymous way so that they are not considered personal within the meaning of applicable national and European legislation.
We take the necessary technical and organizational measures to protect your data against unauthorized actions, including loss of data and unauthorized access to them. All measures are subject to regular review and are periodically updated.
As subjects of data, you have the following rights as to your personal data that we process:
To be informed
You are not subject to profiling and automated decision-making. In the event you decide to exercise any of your rights, We will respond to you within 1 month after receiving of your request, without charge.
Right to access to your personal data
You can request confirmation of whether and exactly which personal data are being processed, as well as a copy of these data.
Right to rectification
If we process incomplete or incorrect personal data about you, you can request their correction or completion at any time.
Right to delete
You can request the deletion of your personal data in the following cases:
Your personal data are no longer necessary for the purposes of which they have been collected or otherwise processed;
You withdraw your consent on which the data processing is based and there is no other legal basis for data processing;
You consider that the personal data have been processed unlawfully. Depending on each specific case, there may be other reasons thatmay prevent the immediate deletion of your data (statutory storage obligations, pending proceedings, establishment, exercise or defense of legal claims, etc.).
Restriction of processing
Right to portability
You may request the data provided by you in a structured, commonly used and machine-readable format when both requirements are met: the processing of the specific data is based on consent or on a contractual basis; and the processing is carried out in an automated manner.
Right to object
Withdrawal of consent
In case you have given your consent to data processing for direct marketing purposes, you have the right to object to the processing of personal data at any time without giving reasons.
Right to appeal
You can file a complaint with the Personal Data Protection Commission (2, Prof. Tsvetan Lazarov Blvd, Sofia 1592).