PRIVACY POLICY OF THE GEODESY, CARTOGRAPHY AND CADASTRE AGENCY
The right to privacy of personal data is a top priority of the Geodesy Cartography and Cadastre Agency (GCCA or the Agency), which undertakes a serious commitment regarding the protection and secure storage of the personal data of employees, owners and holders of other rights to real estate, legal entities, counterparties and partners, as well as visitors and other natural persons related to the implementation of the Agency's legally established tasks. GCCA processes personal data of natural persons ("data subjects") in strict compliance with Regulation (EU) 2016/679 (General Data Protection Regulation), the Personal Data Protection Act and the Agency’s Personal Data Protection Policy.
According to the General Data Protection Regulation, "personal data" is any information that relates to a natural person and by which he can be directly or indirectly identified.
Processing of personal data is any operation or set of operations that may be performed on personal data by automatic or other means.
This policy provides information regarding:
Who is the administrator of personal data
Which are the subjects whose personal data is processed by the Agency
For what purposes and on what legal basis is the personal data being processed
To whom the personal data is transferred or disclosed
The terms of storage of personal data
Data security measures
The rights of individuals and the way to exercise them

Who processes and is responsible for your personal data?
The administrator of personal data is the Geodesy Cartography and Cadastre Agency - a budget-supported legal entity with an address in the city of Sofia, p.c. 1618, Musala St. No. 1, phone/fax: (+359 2) 8188345, (+359 2) 9555333.
The agency has a specially designated data protection officer - BN Group BG Ltd. that you can contact at tel.: 0700 10 797, e-mail: Виж имейла...
Principles by which we are guided and which we respect:
Your personal data is not collected without exact purpose or without limitation. GCCA strictly follows the basic principles introduced as mandatory in the processing of personal data: legality, good faith and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, accountability.

Which are the subjects whose personal data is processed by the Agency?
The Agency processes personal data of the following categories of subjects:
•    Owners and holders of other rights on real estate
•    Persons with legal capacity under the Law on the Cadastre and Property Register;
•    Personnel - current and former employees of the Agency, job candidates;
•    Persons, who have submitted complaints and suggestions;
•    Counterparties or potential counterparties of the Agency and their employees;
•    Visitors to the Agency's offices;
•    Applicants for Geocartfond services;
•    Persons who have voluntarily provided their personal data through the contact form on the Agency's website.
 Purposes of processing
GCCA collects personal data only for specific and legitimate purposes and does not further process the data in a manner incompatible with them. GCCA processes personal data for the following purposes:
•    Fulfillment of the Agency's legal obligations under Law on the Cadastre and Property Register, the bylaws on its implementation, as well as other normative acts applicable to its activity;
•    Execution of orders of competent public authorities;
•    Fulfillment of the requirements of the Civil Servant Act, labor and social security legislation regarding employees;
•    Ensuring the security of employees, visitors, as well as the Agency's property, through a video surveillance system, physical security, access control and registration;
•    Ensuring the normal functioning, maintenance and security of the website and IT systems of GCCA;
•    Implementation and protection of the rights and legal interests of GCCA, including by court order;
•    Conclusion of contracts and pre-contractual relations, including under the Law on Public Procurement;
•    Selection of employees according to official and labor legal relationship.
Legal grounds for processing.
GCCA processes personal data of data subjects on the basis of Art. 6, paragraph 1, letter "b", letter "c" and letter "e" of the General Data Protection Regulation, namely the processing is necessary for the performance of a contract, including pre-contractual relations before its conclusion, for compliance with a legal obligation that applies to the controller; for the performance of a task of public interest or in the exercise of official powers that have been granted to the administrator.
Obligatory nature of provision of personal data
The personal data of the subjects is provided to the Agency directly by the individuals themselves and are collected by the administrator in fulfillment of a statutory obligation in connection with the creation and maintenance of the cadastral map and the cadastral register, conclusion and performance of a contract, consideration of proposals, complaints and alerts, personnel selection and others, according to the provisions of the current legislation of the Republic of Bulgaria.
The personal data of the visitors to the GCCA offices are provided by the persons in compliance with the legal requirements of the Law on private security activities. If the data subject refuses, he may not be allowed into the building.
Processing of personal data provided voluntarily through the contact form on the Agency's website
When sending a message through the contact form on the Agency's website, the data subject voluntarily provides his/her personal data. In these cases, the Agency processes the personal data that the subjects have provided through the contact form - names and email, and the purpose of the processing is reduced to the need to prepare and send a response to the relevant message. In this case, the personal data processed in connection with the received inquiry will be stored for the period from receipt of the inquiry, request or question, until the purpose of their processing is achieved and/or the legal basis for the processing of the personal data ceases.
To whom is personal data transferred or disclosed?
•    Competent bodies, which by virtue of a statutory act have the authority to demand from the GCCA the provision of information, including personal data - court, investigative bodies (police bodies, investigation, prosecutor's office), DANS, supervisory/regulatory bodies;
•    NRA, NIA and other competent public bodies in fulfillment of an obligation stipulated by law;
•    Processing personal data with a view to maintaining the Agency's IT systems, providing services, providing security, video surveillance, etc. In these cases, the relationship between AGKK and the personal data processor is regulated by a contract or other legal act, which provides for appropriate measures to guarantee the security of personal data.
 Period of storage of personal data
The duration of storage of personal data depends on the processing purposes for which they were collected. Personal data is stored for a period not longer than the period provided for in the relevant legal act. In the event that the law does not stipulate a storage period for the relevant record with personal data, the Agency complies with the established Schedule for the storage and destruction of records with personal data, in which the maximum periods for the storage of personal data are determined - in accordance with the purpose for which they were collected.
Security of personal data.
GCCA implements all appropriate technical and organizational measures to ensure the security of personal data, including minimizing the volume of processed personal data necessary to achieve the relevant goals; timely restoration of availability and access to personal data, in the event of a physical or technical incident; assumption of an express obligation by employees for confidentiality, as well as security and video surveillance for security purposes.
Rights of data subjects
Every natural person whose data is processed by GCCA has the following rights:
•    Right of access to his personal data, including to receive a copy of it;
•    Right to correct or supplement inaccurate or incomplete personal data;
•    Right to delete personal data that is processed without a legal basis;
•    Right to restrict processing - in the event of a legal dispute between GCCA and the person until its resolution or for the establishment, exercise or defense of legal claims;
•    Right to object - at any time and on grounds related to the individual's specific situation, provided that there are no compelling legal grounds for the processing that take precedence over the interests, rights and freedoms of the data subject, or legal proceedings;
•    Right of portability - only in the event that personal data is processed automatically on the basis of consent or contract;
•    Right not to be subject to a fully automated decision involving profiling that gives rise to legal consequences for the data subject or significantly affects him.
In accordance with the Personal Data Protection Act, the above-mentioned rights can be exercised by submitting a written application on-site to the GCCA. An application can also be submitted electronically in accordance with the Law on Electronic Documents and Electronic Authentication Services. The application is made personally by the data subject or by a person authorized by him. GCCA decides on the data subject's request within 30 days of its submission. Where a subject's requests in connection with the exercise of the above rights are manifestly unfounded or excessive, GCCA may impose a fee or refuse to act on the request.
Protection of data subjects' rights.
In accordance with the Personal Data Protection Act and Regulation (EU) 2016/679, any natural person who considers that the right to the protection of their personal data has been violated may submit a complaint to the Commission for the Protection of Personal Data at : Sofia 1592, Prof. Blvd. Tsvetan Lazarov" No. 2, website: www.cpdp.bg.
 

Privacy Policy of “cookies”

When you visit any website, it may store or retrieve information on your browser, mostly in the form of “cookies” or other technologies for user data gathering and storage. Cookies are text data stored by your web browser, intended for use by websites Information stored in cookies might be about you, your preferences, or your internet device (computer, tablet or mobile device). This information is mostly used to make the site work as you expect it to. The information is not usually personally identifiable to you, but it can be used to give you a more personalized web experience.

Because we respect your right to privacy, you can now choose not to allow all or some types of cookies to be set. However, if you do this then it may impact your experience of the site and the services we are able to offer.

Some third party services used by this website can also set different cookies while visiting the site. Those sites and services might have different cookie policy. All resources outside of the domain of the current website should be considered as third party services.

Strictly Necessary Cookies

Strictly necessary cookies are required for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

You can set your browser to block or alert you about these cookies, but some parts of the site will not then work properly. These cookies do not store any personally identifiable information.

This includes Session ID cookies.

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

We use Google Analytics to provide this service, which uses first party cookies. The data is being collected by a service provided by Google and is not shared with any third parties.

The information we get through the use of these cookies is anonymized and we make no attempt to identify you, or influence your experience of the site while you are visiting it. If you do not allow these cookies we will not be able to include your visit in our statistics.

If you have used a Do Not Track browser setting, we take this as a sign that you do not want to allow these cookies, and they will be blocked.