PRIVACY POLICY OF BVL-67 OOD

This privacy policy has been adopted in accordance with the requirements of REGULATION (EU) 2016/679 of the European Parliament and of the Council and aims to inform you about your rights regarding the processing of your personal data. Please read this document carefully, as it was created to explain the basic rules that BVL-67 OOD (hereinafter referred to as the “Company“) applies when collecting and processing your personal data.

  1. DATA CONTROLLER:

BVL-67 OOD is a Bulgarian company engaged in production activities, organizing and conducting cultural events, and creating and distributing cultural values in the fields of music, theater, and audio-visual art. Detailed information can be found on the website https://mixtape5.com or by contacting us.

Contact details for BVL-67 OOD, UIC 175163820

Registered office and management address: Sofia, p.c. 1142, Sredets district, 61 Lyuben Karavelov St., fl. 4, ap. 8

Company representatives: Kiril Andonov Cheshmedzhiev and Radoslav Stoyanov Mirchev

Person responsible for the collection and processing of personal data: Kiril Andonov Cheshmedzhiev

e-mail: gigs@mixtape5.com

  1. DEFINITIONS

All terms used in this document are in accordance with the definitions under Article 4 of Regulation (EU) 2016/679 of the European Parliament (General Data Protection Regulation – GDPR).

Other terms not included in the GDPR:

  • B2B – business to business – means the Company’s business relationships with other businesses;
  • B2C – business to customers – means the Company’s relationships with individuals, users of its services.
  1. CATEGORIES OF DATA SUBJECTS

According to the needs of its activities, the Company interacts with the following categories of data subjects:

  • individuals – users of the website services (B2C);
  • representatives of legal entities – clients, information for whom is publicly available in the registers of the Registry Agency (B2B);

This policy aims to ensure the protection of individuals’ data by the Company.

These policies are applied together with the General Terms and Conditions of use of the site (referred to for short as “General Terms” or “General Terms and Conditions of BVL-67 OOD”). Terms used in these policies have the definitions given in the General Terms.

An integral part of this policy is the Cookie Policy, used on the website https://mixtape5.com.

  1. PERSONAL DATA

What does “personal data of individuals” mean – it is any information about an individual who is identified or identifiable (“data subject”).

The personal data we collect from you and process are:

  • When making an inquiry via the contact form or pop-up – first and last name of the inquirer;
  • When posting a review or comment via the contact form or pop-up – first and last name of the person posting them;
  • When giving consent to receive marketing communications by filling out the contact form or pop-up – email and phone number.

“BVL-67” does not collect or process data related to bank cards or sensitive personal data within the meaning of the General Data Protection Regulation.

The Company does not aim to collect personal data from minors. Minors should not provide their personal data to BVL-67 OOD without the consent of the person exercising parental rights.

  • LEGAL GROUNDS AND PURPOSES FOR DATA PROCESSING
  • Consent:

When making an inquiry, the Company processes your personal data for the purposes of the inquiry and based on your consent. By sending your inquiry to us, you express consent for your personal data to be processed.

Posting reviews on the website https://mixtape5.com also constitutes consent for the processing of the personal data you have provided for the purposes of your review.

When giving consent to receive marketing communications via SMS, Viber, message, email, or call, we will process your email and phone number to send you news, event invitations, offers, and promotions organized by the Company. Consent can be withdrawn at any time via the unsubscribe button attached to the email, as well as by informing the Provider of your decision at gigs@mixtape5.com

The Company maintains information about data collected based on the subject’s consent, and in each case can prove that the given consent is:

  • freely expressed – not given under pressure or threat of adverse consequences;
  • specific – separate consent for each specifically defined purpose, and where applicable – for a specific category of personal data;
  • informed – given on the basis of complete, accurate, and easily understandable information;
  • unambiguous – not derived or assumed based on other statements or actions of the person;
  • an explicit statement or clear affirmative action – the silence of a data subject is not accepted as consent.

The Company maintains documentation (on paper or in electronic form) of the expressed consent for the purpose of proof before the competent authorities.

Providing the data in this point is not mandatory and your consent for their use can be withdrawn at any time by sending a request to the following email: gigs@mixtape5.com

Legal basis for processing – Art. 6, para. 1, point (a) of Regulation 2016/679 of the European Parliament and of the Council;

  • HOW YOUR PERSONAL DATA IS COLLECTED

Your personal data is provided solely by you, at your request and upon confirmation from your side that you agree with the General Terms and the processing of personal data and that you wish to subscribe to receive marketing communications. You choose the way you can provide us with your data – via the website https://mixtape5.com or through an inquiry via social networks, emails, or communication channels.

  • HOW WE STORE YOUR PERSONAL DATA

The Company has taken all necessary technical and organizational measures to protect your personal data, including through limited access to data, etc.

  • FOR WHAT PERIOD IS PERSONAL DATA STORED

Your personal data is stored for different periods, depending on the basis and purpose for which it is collected:

  • Data collected based on Consent – deleted at the moment you withdraw your consent for its use.
  1. HOW PERSONAL DATA IS DESTROYED

To avoid any unwanted negative consequences in connection with the processing of your personal data, upon expiration of the period for which the personal data is stored, it will be destroyed.

  • RIGHTS OF DATA SUBJECTS
  • Right of access to rectification, erasure, and restriction of processing of your data

You have the right to receive information about whether we process your personal data, exactly which personal data we process, which person processes it, whether it is provided to other persons, for what period it is processed, what your rights are in connection with your personal data, and whether you have the right to lodge a complaint. You can receive a copy of your personal data that we process. In addition, you have the right to require us to update/rectify your personal data if what we have is inaccurate (if, for example, you no longer use the email address provided to us). You have the right to request that we do not perform any actions regarding your data, but only store it (so-called restriction of processing), as well as to request its erasure when it is no longer necessary for the purposes for which it is processed, as well as after the expiration of the period for which it is stored.

IMPORTANT: You provide your personal data yourself, based on your own decision, and BVL-67 OOD does not perform any profiling or automated processing of your personal data.

  • Right to data portability

You have the right to receive your personal data that you have provided to us and which we process in a structured and commonly used format. In addition, you have the right to transfer your personal data from the previous sentence to other persons and/or controllers personally or through direct transfer of data from us to another controller specified by you, if this is technically possible.

  • Right to object

The provisions of the Regulation provide for your right to object in cases where your personal data is processed for the performance of a task in the public interest or when processing is necessary for the purposes of the legitimate interests of the Company or a third party, i.e., when the legal grounds for processing your data are based on Art. 6, para. 1, points (e) and (f) of the Regulation. In these cases, you have the right to object and request that we stop processing your personal data. If you decide to submit such an objection, we will review your request and respond to you accordingly and within one month, unless a longer period is technologically necessary.

  • Right to lodge a complaint

You can lodge a complaint with the Commission for Personal Data Protection to protect your rights and legal interests in connection with the processing.

IMPORTANT: In case you need additional information regarding the collection, processing, storage, destruction, or any other information related to your personal data, please contact us at the address and email address provided above. BVL-67 OOD will answer all your questions.

  • RISK ASSESSMENT

The Company is aware of the risks associated with the processing of certain types of personal data.

The Company manages all risks identified by the risk assessment in order to reduce the likelihood of non-compliance with these rules.

When, as a result of the risk assessment, it is clear that the Company will start processing personal data which, due to high risk, could cause harm to data subjects, a reasoned decision based on a study of the legislation is made whether to continue the processing or not.

If serious concerns are found regarding either the potential harm or danger, or regarding the amount of relevant data, then the matter should be referred to the supervisory authority.

The Company makes a periodic (annual) review of the initially inventoried data and takes the necessary measures in light of any changes in the activities of BVL-67 OOD.

  • SECURITY MEASURES

The Company has provided the relevant technical and organizational measures for the security of the processed data and guarantees the security of the data, as well as that it is not disclosed under any circumstances to third parties, unless the Company has given such rights to that third party by concluding a confidentiality agreement/clause.

  • CHANGES TO THIS POLICY

Any changes that may be made to this policy in the future will be published on the specified website.

Effective date of the privacy policy: 09/01/2022.

The managers of BVL-67 OOD, UIC 175163820 approve this document:

Kiril Andonov Cheshmedzhiev

Radoslav Stoyanov Mirchev

Data Controller: BVL-67 OOD
Approval date: 09/01/2022