PERSONAL DATA POLICY

I. GENERAL INFORMATION

This Personal Data Policy governs the manner in which the „Oncological Compass“ Association (the „Association“) collects, uses, and stores the personal data of users of the website oncologycompass.bg (the „Site“). The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable legislation.

II. WHAT PERSONAL DATA WE COLLECT

The Association may collect the following categories of personal data:

• Names
• Email address
• Phone number (if provided voluntarily)
• Information provided upon registration for events or membership
• IP address and Site activity data (via cookies)

III. PURPOSES OF PERSONAL DATA PROCESSING

The Association processes personal data for the following purposes:

• Providing information about events, conferences, and activities
• Registering users for participation in conferences and other initiatives
• Maintaining contact with members and interested parties
• Improving the functionality and security of the Site

IV. LEGAL BASIS FOR PROCESSING

Personal data is processed on the following legal bases:

• User consent
• Contractual obligations (e.g., upon event registration)
• Legitimate interest of the Association
• Compliance with legal requirements

V. RETENTION PERIOD OF PERSONAL DATA

The Association stores personal data only for the period necessary to achieve the purposes for which they were collected, or as required by law.

VI. USER RIGHTS

According to the GDPR, users have the following rights:

• Right of access to their personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure of personal data (the „right to be forgotten“)
• Right to restriction of processing
• Right to object to processing
• Right to data portability

To exercise these rights, users can contact us at info@oncologycompass.bg.

VII. SHARING OF PERSONAL DATA

The Association does not share personal data with third parties, except in the following cases:

• When necessary for the performance of contractual obligations (e.g., conference registration)
• When required by law
• With the explicit consent of the user

VIII. SECURITY OF PERSONAL DATA

The Association implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

IX. CHANGES TO THE POLICY

The Association reserves the right to amend this Personal Data Policy. The updated version will be published on the Site.

X. CONTACTS

For questions regarding this Policy, you may contact us: