http://www.sunforkids.org

Personal data protection policy

General information

On 25 May 2018 entered into force a new regulation for personal data protection (General data protection regulation), adopted by the European Union. The regulation aims to ensure the personal data protection of natural persons from all EU Member States and align the regulations for data processing.

In its capacity as personal data administrator the Foundation “Sunshine for our kids” fulfils our requirements of the new regulation, as it collects the persons’ data as far as necessary for the service provision and keeps them in a responsible and lawful way.

Information about the Controller

Name – Foundation “Sunshine for our kids”

1. UIC/BULSTAT: 131085747

2. Seat and registered address: Sofia city, 4 Tzar Asen Str., 2^nd floor

3. Correspondence address:  Sofia city, 4 Tzar Asen Str., 2^nd floor

4. E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

5. Telephone: 02/9861409

6. Name of the data protection officer: Stoyanka Kirilova Stoyanova

7. Correspondence address:  Sofia city, 4 Tzar Asen Str., 2^nd floor

8. E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

9. Telephone: 02/9861409

Information about the competent supervisory authority

1. Name: Commission for personal data protection

2. Seat and registered address: 1592 Sofia city, 2 Prof. Tzvetan Lazarov Blvd.

3. Correspondence address:  1592 Sofia city, 2 Prof. Tzvetan Lazarov Blvd.

4. Telephone: 02 915 3 518

5. E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it.

6. Website: www.cpdp.bg

The Foundation “Sunshine for our kids” operates in compliance with the Personal data protection Act and Regulation (EU) № 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Basis for collection, processing and storage of your personal data

Purposes and principles

Art 1 (1)Foundation “Sunshine for our kids” collects and process personal data, which you provide us with in relation with our mediation activities in the intercountry adoption procedures in view of:

• Providing specific information regarding your inquiry;
• Preparation of contracts and realization of services under this contract
• Preparation and processing of data, included in your file in order to provide the Ministry of justice with exhaustive information about your consent to adopt a child, who is Bulgarian citizen and about your relevant characteristics.
• Compliance with the legal requirements of the Family code; Ordinance № 2/24.10.2014 laying down the procedures for issuing and withdrawal of mediation permit for intercountry adoptions and operation and termination of activities of the accredited organizations; Ordinance № 3/24.10.2014 laying down the procedures on keeping the registers for intercountry adoptions and acquiring consent by the Minister of justice; Convention on the Protection of Children and Cooperation in Respect of InterCountry Adoption of 29.05.1995, ratified by the Republic of Bulgaria
• Use of the collected data in order to carry out the procedure of intercountry adoption, including procedural representation, as well as realization of post adoption monitoring of two years from the end of the adoption procedure concluding with effective court judgement.
• Compliance with the legal requirements of the Accounting act and other relevant legislative acts.
• Realization of all activities concerning the existence, amendment and termination of the contractual relations.
• Establishing a connection by phone, address and/or e-mail in view of sending correspondence related to the fulfilment of obligations under the contracts, concluded with the Foundation.

(2)The Foundation “Sunshine for our kids” observes the following principles for the processing of your personal data:

• Lawfulness, fairness and transparency;
• Limitation of the processing purposes;
• Relevance with the purposes for which the data are processed and minimizing the amount of the data collected;
• Data accuracy and timeliness;
• Restriction of the storage in view of reaching the objectives;
• Completeness and privacy of the processing procedure and ensuring an appropriate level of personal data security

What type of personal data collects processes and storesthe Foundation “Sunshine for our kids”?

Art. 2(1) The Foundation “Sunshine for our kids” collects processes and stores the following types of personal data of its clients:

1. Physical identity data: names, personal number, passport data, address, place of birth, contact phones, etc;

2. Psychological identity data – specifically data on the psychological health;

3. Psychological identity data – specifically data on the psychological health;

4. Economic identity data – specifically data regarding the possession of property;

5. Cultural identity data – interests, hobby and other leisure activities;

6. Family identity data - family status (marriage, divorce, family numbers, including children, etc.;

7. Education data – type of education, additional qualifications, etc.;

8. Work experience data – professional experience, data from the employment record book, etc.;

9. Civil and legal status of the persons – conviction records certificate, data on their custody rights, etc.;

10. Contact phones, e-mail for establishing contact.

(2)The Foundation “Sunshine for our kids” does not take decisions automatically based on the data

Duration of personal data retention

Art 3The personal data collected from you are retained 5 years of the end of the court case and receipt of the four adoption reports in accordance with the principle of good court practices.

Your rights in the collection, processing and storage of your personal data

Withdrawal of consent for processing of personal data

Art 4 If you do not wish all or part of your personal data to continue being processed by the Foundation “Sunshine for our kids” for a specific or all purposes of the processing you can withdraw at any given time your consent for processing by filling in an online form or request in free form, in so far as this does not contradict to any legislative base regulating the adoption activity currently in force at this moment.

Right to access

Art 5(1) You have the right to request and receive confirmation by the Foundation “Sunshine for our kids” whether there is processing of personal data connected to you.

(2) You have the right to access to data, connected to you, as well as any information regarding the collection, processing and storage of your personal data.

(3)The Foundation “Sunshine for our kids” provides you by request copy of the processed personal data, connected to you in electronic or any other appropriate form.

Right to rectification and complement

Art 6 You can rectify or complement inaccurate or incomplete personal data, connected to you by submitting a requesttothe Foundation “Sunshine for our kids”

Right of erasure (“right to be forgotten”)

Art 7 (1) You have the right to request of the Foundation “Sunshine for our kids” to erase the personal data connected to you and the Foundation has the obligation to erase it without undue delay for one of the following reasons:

• Your personal data is no longer necessary for the purposes they were collected for or processed in any other way;
• You’ve withdrawn your consent on the basis of which the data were processed and there is no other legal requirement for their processing;
• You object to the processing of the personal data connected to you including for the purposes of direct marketing and there are no legal requirements for their processing which have precedence in this matter;
• The personal data has been processed unlawfully;
• The personal data has to be erased in order to comply with the legal requirements of the EU law or any other Member states legislation, which is applicable to the Foundation “Sunshine for our kids”;
• The personal data has been collected in connection with the providing of information society services.

(2)  The Foundation “Sunshine for our kids” is not required to erase personal data if they are stored and processed for the purposes of:

• Exercising the right to freedom of expression and information;
• Fulfilling a legal requirement for processing,  laid down in the EU legislation or any other Member state’s legislation which is applicable to the Controller or in the performance of a task, carried out in public interest or in the exercise of official authority vested in the controller;
• On the grounds of public interest in the area of public health;
• For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
• For the establishment, exercise or defence of legal claims.

(3) In order to exercise your right to “be forgotten”, you should submit a written request to the Foundation “Sunshine for our kids”, as well as ascertain your identity with the person, to whom the data are relate by presenting your identity card in the foundation for identification purposes.

(4) The Foundation “Sunshine for our kids” does not erase data, where there is legal requirement for their retention, including for the purposes of defence against legal claims raised against it or proof of its rights.

Right to restriction

Art 8 You have the rightto request of the Foundation “Sunshine for our kids” to restrict the processing of data, related to you when:

• You contest the accuracy of the personal data, for a period, enabling the Foundation to verify the accuracy of the personal data;
• The processing is unlawful but you do not wish that your personal data are erased – only that their use is restricted;
• The Foundation “Sunshine for our kids” no longer needs the personal data for the purposes of the processing, but you require these data for the establishment, exercise or defence of your legal claims;
• You have objected to processing pending the verification whether the legitimate grounds of the Foundation “Sunshine for our kids” override your interests.

Right to information

Art 9 You can request of the Foundation “Sunshine for our kids” to inform you about all recipientsto which have been disclosed personal data, on which have been requested correction, erasure or restriction of processing.  The Foundation “Sunshine for our kids” may refuse to provide this information if this would be impossible or involves disproportionateeffort.

Right to objection

Art 10 You can raise objections at any time to the processing of personal data, related to you by the Foundation “Sunshine for our kids”, including the data processed for the purposes of profiling or direct marketing.

Your rights by personal data breach

Art 11 (1) If theFoundation “Sunshine for our kids” establish a personal data breach, which could result in a high risk to your rights and freedoms, we will notify you without undue delay of the breach, as well as of the measures which have been taken or are going to be taken.

(2) TheFoundation “Sunshine for our kids” does not have to notify you if:

• It has taken the appropriate technical and organizational measures for protection of the data affected by this breach;
• Has taken subsequent measures which guarantee that the breach will not result in high risk to your rights;
• Notification would involve disproportionate effort.

Persons to which your personal data is provided

Art 12 The controller sends data to state authorities such as the Ministry of justice – Central authority under the provisions of art 6 of the Hague Convention, courts, judicial inquiry, prosecution, as well as other supervisory bodies – when the data is duly requested in relation to the performance of their authority.

Other provisions

Art 13 In case your rights were infringed under the aforementioned or the applicable legislation for personal data protection, you have the right to lodge complaint to the Commission for personal data protection as follows:

1. Name: Commission for personal data protection

2. Seat and registered address: 1592 Sofia city, 2 Prof. Tzvetan Lazarov Blvd.

3. Correspondence address:  1592 Sofia city, 2 Prof. Tzvetan Lazarov Blvd.

4. Telephone: 02 915 3 518

5. E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it.

6. Website: www.cpdp.bg

Art 14 You can exercise all of your rights on protection of your personal databy the forms, attached to the present information. Naturally these forms are not obligatory and you can direct your requests in any form which contains your intention and identify you as data owner.

Art 15 If your consent concerns a transfer the Controller describes the possible risks arising from transfer of data to third countries when there is no decision for adequate protection and effective legal remedy.