BG

Privacy policy

Last updated: 19 August 2026

Sofia Philharmonic respects your privacy and processes personal data lawfully, fairly and transparently. This policy explains what data we process through this website, why we use it and how you can exercise your rights.

1. Data controller

The data controller is Sofia Philharmonic, with address: 1 Georgi Benkovski St, Sofia 1000, Bulgaria.

You can contact us at office@sofiaphilharmonic.com or by telephone at +359 2 988 31 95.

2. Personal data we process

Depending on how you use the website, we may process:

  • your name, email address, telephone number, subject and message when you use a contact, membership or hall rental enquiry form;
  • information you voluntarily provide in free-text fields;
  • your preference on whether you wish to receive information about events and news;
  • technical data required for the operation and security of the website, such as IP address, browser type, request date and time, requested addresses and diagnostic logs.

Please do not include sensitive personal data in free-text fields unless it is necessary for your specific request.

3. Purposes and legal grounds

  • to answer an enquiry or process an application, membership request or hall rental enquiry — to take steps at your request, to perform contractual relations or on the basis of our legitimate interest in maintaining correspondence;
  • to send information about events and news — only when you have given separate consent;
  • to operate and protect the website and prevent abuse — on the basis of our legitimate interest in maintaining a reliable and secure service;
  • to comply with applicable legal obligations where relevant.

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

4. Is providing the data mandatory?

Fields marked as required are necessary for us to process and respond to your request. If you do not complete them, the form cannot be submitted. Consent to receive news and event information is optional.

5. Recipients of personal data

Access is limited to staff and contractors who need the data for the relevant purpose. We may use providers of hosting, cloud storage, website protection, email and technical support. They process data on our behalf and are bound by contractual confidentiality and security obligations.

We do not sell personal data. We may disclose it to a competent public authority only where required by law.

6. Transfers outside the European Economic Area

Some technical providers may process data outside the European Economic Area. Where this occurs, we use the safeguards provided by data protection law, such as an adequacy decision or standard contractual clauses.

7. Retention

We retain data only for as long as necessary for the purpose for which it was collected. Correspondence and form submissions are retained until the request is completed and for a reasonable subsequent period required to protect our rights and legitimate interests. Data subject to a statutory retention period is kept until that period expires. Technical logs are retained for a limited period required for security, diagnostics and abuse prevention.

If you withdraw your consent to receive news, we will stop sending it unless another legal ground requires us to retain part of the information.

8. Your rights

Subject to the conditions of the General Data Protection Regulation, you have the right to:

  • receive information and access your personal data;
  • request correction of inaccurate or incomplete data;
  • request erasure or restriction of processing where the legal conditions are met;
  • object to processing based on legitimate interests;
  • receive data you provided in a structured, machine-readable format where the right to portability applies;
  • withdraw consent at any time;
  • lodge a complaint with the Bulgarian Commission for Personal Data Protection.

To exercise a right, contact office@sofiaphilharmonic.com. We may request additional information necessary to verify your identity.

Information about the Bulgarian Commission for Personal Data Protection is available at cpdp.bg.

9. Cookies and similar technologies

The current version of the website does not use advertising or analytics cookies. We may use only technically necessary means to retain selected settings, operate the website, maintain security and prevent abuse. If analytics, advertising or other optional technologies are introduced, we will update this policy and request prior consent where required.

10. Automated decision-making

We do not use personal data submitted through the website for automated decision-making or profiling that produces legal or similarly significant effects.

11. External links

The website contains links to external services and websites, including ticketing platforms and social networks. Once you leave our website, data processing is governed by the policy of the relevant provider.

12. Changes to this policy

We will update this policy when the website, the services used or the applicable requirements change. The date of the latest update is shown at the top of this page.