Privacy Policy
1. Introduction and Scope
This policy describes how the 50 Best Products from Bulgaria initiative, operated by WATERPROOF IDEAS, collects, processes, stores, and protects the personal data of all individuals interacting with our platform – including applicants, jury members, partners, Advisory Board members, and website visitors.
This document complies with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679), the Bulgarian Personal Data Protection Act, and applicable international data security standards.
2. Data Controller
The data controller is:
Organization: WATERPROOF IDEAS
Project: 50 Best Products from Bulgaria
Contact email: office@50best.bg
For all inquiries relating to personal data processing, please contact us at the above email address.
3. Categories of Data Collected
3.1 Applicant Data
– Full name, title, and organization
– Contact details: email address, phone number
– Product/service description and supporting documentation
– Photos, videos, and marketing materials
– Financial data for participation fees (processed by a certified payment provider)
3.2 Jury Members and Advisory Board Data
– Full name and professional biography
– Contact details
– Portrait photograph (for public representation, with explicit consent)
– Evaluations and statements within the selection process
3.3 Website Visitor Data
– IP address and device information
– Cookies – technically necessary and analytical (with prior consent)
– Contact form submissions
– Newsletter subscription data (with explicit consent)
4. Purposes and Legal Bases for Processing
Data is processed solely for the following purposes:
– Managing the application and evaluation process – legal basis: performance of a contract
– Communication with applicants, jury members, and partners – legal basis: legitimate interest
– Public presentation of winners and board members – legal basis: explicit consent
– Processing payments – legal basis: performance of a contract and legal obligation
– Sending newsletters and updates – legal basis: explicit consent
– Compliance with legal obligations – legal basis: legal obligation
5. Payments and Financial Data
All payments related to platform participation are processed exclusively through PCI DSS-certified payment providers. WATERPROOF IDEAS does not store payment card data. Transaction data is retained solely for accounting and legal purposes within legally prescribed periods.
6. Data Sharing with Third Parties
Personal data is not sold, rented, or provided to third parties for commercial purposes. Data may be shared only with:
– Payment providers – for transaction processing
– Technical platform providers (hosting, email services) – under a Data Processing Agreement (DPA)
– International jury and partner organizations – only to the extent necessary for the evaluation process
– Public authorities – when legally required
7. International Data Transfers
Where data must be transferred outside the European Economic Area (EEA), we apply appropriate safeguards as required by GDPR — Standard Contractual Clauses (SCCs) or European Commission adequacy decisions.
8. Retention Periods
– Applicant data: up to 3 years after the conclusion of the respective edition
– Winner data (publicly published): for the duration of the platform’s active period
– Financial data: 10 years in accordance with accounting legislation
– Newsletter data: until consent is withdrawn
– Technical logs: up to 12 months
9. Rights of Data Subjects
Every individual whose data we process has the following rights:
– Right of access to personal data
– Right to rectification of inaccurate data
– Right to erasure (“right to be forgotten”)
– Right to restriction of processing
– Right to data portability
– Right to object to processing
– Right to withdraw consent at any time
To exercise these rights, contact us at: office@50best.bg. We respond within 30 days.
If unsatisfied, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP): www.cpdp.bg
10. Security Measures
We apply technical and organizational measures to protect personal data, including:
– SSL/TLS encryption for all data transmissions
– Encryption of data at rest
– Access to data restricted on a need-to-know basis
– Regular security audits
– Data breach response procedures
In the event of a confirmed security breach, we will notify affected individuals and competent authorities within legally prescribed timeframes.
11. Cookies
The website uses the following categories of cookies:
– Technically necessary cookies – required for the website to function
– Analytical cookies – collect aggregated visit information (require consent)
– Marketing cookies – not currently in use
– Manage your cookie preferences through the consent banner on first visit or through your browser settings.
12. Policy Updates
We reserve the right to update this policy. In the event of material changes, registered users will be notified by email. The current version is available on the platform’s website.