POLICY FOR PRIVACY AND USE OF COOKIES IN ADMINISTRATION OF THE WEBSITE OF “FUND MANAGER OF FINANCIAL INSTRUMENTS IN BULGARIA” EAD
I. GENERAL PROVISIONS
Art. 1. This policy regulates the order and the conditions for processing and protection of personal data of natural persons during the use of the website of “Fund Manager of Financial Instruments in Bulgaria” EAD /FMFIB EAD, “the Company”, “the Controller”/, including the use of cookies (cookies).
Art. 2. The policy is accepted based on:
1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 regarding the protection of natural persons in connection with the processing of personal data and regarding the free movement of such data and for repeal of Directive 95/46/EC - General Data Protection Regulation GDPR/.
2. The Personal Data Protection Act /PDPA/.
3. The Electronic Communications Act/ECA/.
4. Applicable European and national legislation.
Art. 3. The Company processes personal data in compliance with the principles under Art. 5 from GDPR: lawfulness, good faith, transparency, data minimization, accuracy, storage limitation and security.
II. ADMINISTRATOR AND DATA PROTECTION OFFICER
Art. 4. Administrator of personal data within the meaning of this policy is: “Fund Manager of Financial Instruments in Bulgaria” EAD, UIC 203740812;
Electronic mail: office@fmfib.bg;
Website: www.fmfib.bg.
Art. 5. The Company has appointed a Data Protection Officer /DPO/, who can be contacted at: dpo@fmfib.bg;
Sofia, “Fund Manager of Financial Instruments in Bulgaria” EAD – for DPO.
Art. 6. Data Protection Officer /DPO/:
1. carries out control in compliance with the GDPR;
2. provides opinions and instructions;
3. serves as a contact point with the subjects of data and the Commission for protection of personal data /CPPD/.
III. CATEGORIES OF PERSONAL DATA
Art. 7. While administering the website of FMFIB EAD, the following categories of personal data of users can be processed:
1. identification data – names;
2. contact data – e- mail, telephone - upon voluntary provision;
3. technical data – IP address, browser, device and operating system data;
4. correspondence data;
5. content of inquiries;
6. data, collected through cookies (cookies).
IV. PURPOSES AND LEGAL GROUNDS
Art. 8. The processing of personal data is performed for the following purposes:
1. ensuring of the functioning and the security of the website of FMFIB EAD;
2. administration of inquiries and signals;
3. fulfillment of legal obligations of the Company;
4. fulfillment of tasks of public interest;
5. statistical and analytical purposes.
Art. 9. The legal grounds for processing are:
1. art. 6, par. 1, l. “a” from GDPR – explicit consent;
2. art. 6, par. 1, l. “c” from GDPR – legal obligation;
3. art. 6, par. 1, l. “e” from GDPR – public interest;
4. art. 6, par. 1, l. “f” from GDPR – legitimate interest of the Administartor.
V. RECIPIENTS AND TRANSFER OF DATA
Art. 10. Personal data may be provided to:
1. state and supervisory bodies;
2. providers of IT and hosting services, acting as processors;
3. auditors and control authorities on legal grounds.
Art. 11. No transfer of personal data outside EU is performed, except in the presence of legal grounds and adequate guarantees.
VI. STORAGE PERIODS
Art. 12. Personal data are stored for up to 24 months starting from the moment of its collection, as long as this is necessary to achievethe purposes for which they were collected, exept if the applicable legislation envisages longer period.
Art. 13. After expiry of the legally established storage period, the personal data is deleted or anonymized.
VII. RIGHTS OF THE SUBJECTS OF DATA
Art. 14. The subjects of personal data /the users of the website of FMFIB EAD/ have all rights according to Chapter III from GDPR, including the right to:
- access;
- correction;
- deletion;
- limitation;
- portability;
- objection.
Art. 15. Requests are reviewed within a period of up to one month from their receipt.
Art. 16. The subjects of personal data can submit complaints to: Commission for Personal Data Protection, address: Sofia 1592, blvd. “Prof. Tsvetan Lazarov” № 2, Website: www.cpdp.bg
VIII. COOKIES POLICY
Art. 17. Within the meaning of this policy, “cookies” are small text files, which are stored on the user`s device while visiting the website.
Art. 18. The website of FMFIB EAD uses types of cookies, which are classified as:
1. Mandatory (necessary) cookies – necessary for the normal functioning of the website and for managing consent settings. These cookies cannot be disabled. Legal basis: art. 6, par. 1, l. “f” from GDPR.
2. Functional cookies – allow remembering of user settings and improvement of the functionality of the website. Legal basis: art. 6, par. 1, l. “a” from GDPR – consent of the subject of data.
3. Analytical cookies –used to collect aggregated statistical information regarding the use of the website, including traffic data. Legal basis: art. 6, par. 1, l. “a” from GDPR – consent of the subject of data.
4. Performance cookies – used to analyse the efficiency and performance of the website aimed at improvement of the user experience. Legal basis: art. 6, par. 1, l. “a” from GDPR – consent of the subject of data.
5. Advertising cookies –used to display personalized content and analyse the efficiency of the advertising campaigns. Legal basis: art. 6, par. 1, l. “a” from GDPR – consent of the subject of data.
6. Uncategorized cookies – cookies, which are in process of analysis and are currently not classified in another category. Legal basis: art. 6, par. 1, l. “a” from GDPR – consent of the subject of data.
Art. 19. Users of the website of FMFIB EAD may:
- accept or refuse cookies through the banner of the website, except for mandatory cookies;
- change their settings at any time;
- delete the cookies through the settings of their browser.
Art. 20. The website of FMFIB EAD may use cookies of third parties (e.g. analytical tools), in compliance with applicable legislation.
Art. 21. The storage period of cookies is up to 24 (twenty-four) months, unless they are deleted earlier.
Art. 22. Users of the website of FMFIB EAD have all rights under the GDPR.
IX. SECURITY
Art. 23. FMFIB EAD applies technical and organizational measures to protect personal data against: unauthorized access; loss; destruction; unlawful disclosure.
X. CONTROL AND RESPONSIBILITY
Art. 24. Control over the implementation of this policy is exercised by the DPO and the Management Board of the Company.
Art. 25. Violations of the policy are sanctioned according to the acting legislation.
XI. FINAL PROVISIONS
Art. 26. The policy may be updated following changes in the legislation or the used technologies.
Art. 27. Amendments and annexes to this policy are made by decision of the Management Board of FMFIB EAD .
Art. 28. This Privacy Policy for and Use of cookies in the Administration of the Website of “Fund Manager of Financial Instruments in Bulgaria” EAD, enters into force from the date of its approval as per decision under item 4 from Protocol № 1 from 08.01.2026 of the Management Board of FMFIB EAD.