PRIVACY POLICY for the BESCO HALL OF FAME
PRIVACY POLICY for the BESCO HALL OF FAME
"BULGARIAN ENTREPRENEURIAL ASSOCIATION", UIC 177239971, having its registered office and and principal place of business at 117 Hristo Botev Blvd., floor 2, Vazrazhdane District, Sofia 1303, Bulgaria ("Besco"/ "the Association"/ "We"), processes the data of natural persons ("Data Subjects"/"You"/"Your") in accordance with this Policy, in connection with the organisation and holding of the annual BESCO HALL OF FAME event (referred to as the "Event").
The following terms are used in this Policy:
1. "Regulation" – the General Data Protection Regulation 2016/679 of 27 April 2016, which replaces Data Protection Directive 95/46/EC. It has direct effect and entails amendments to the legislation of the Member States in the field of personal data protection. Its purpose is to protect the "rights and freedoms" of natural persons and to ensure that personal data are not processed without their knowledge and, where possible, that they are processed with their consent.
2. "Personal data" – may be any information that can be related to a natural person who is identified, or to a natural person who could be identified, directly or indirectly, through the use of one or more specific characteristics or identifiers relating to that natural person. From the point of view of the nature of the information, the concept of "personal data" covers any statement about a person. It includes "objective" information and "subjective" information, opinions or assessments. As regards the form or medium in which that information is contained, the concept of "personal data" includes information in any form, whether alphabetical, numerical, graphic, photographic or acoustic. For example, it includes information kept on paper as well as information stored in computer memory.
3. "Special (sensitive) categories of personal data" are a particular category of personal data, on account of the specific nature of the information they reveal about the natural person. In particular, such information reveals racial or ethnic origin, religious and philosophical beliefs, political opinions, trade union (or professional) membership, data concerning the health of the natural person, and biometric data for the sole purpose of identifying a natural person.
4. "Personal data controller" is BESCO, which determines the purposes and means of the processing of personal data.
5. "Processing of personal data" means any operation or set of operations which is performed on personal data, such as collection, recording, organisation, structuring, storage, alteration, use, disclosure by transmission and making available for access, alignment, erasure or destruction. In practice, any activity involving the use of personal data in any form may constitute processing of personal data.
6. "Data subject" – any natural person who is the subject of the personal data processed by the Controller.
I. CATEGORIES OF DATA SUBJECTS
The Association processes information concerning the following Data Subjects:
1. Natural persons who submit nominations;
2. Natural persons who are nominated;
3. Natural persons who have made enquiries through the contact form or by other means;
4. The natural persons who will take part in the selection and ranking of the nominees (the jury).
5. Natural persons who purchase tickets for the Event;
6. Persons who can be identified in photographic, audio or video materials from the Event.
II. PERSONAL DATA
Personal data may be obtained both from You and from third parties.
• names;
• e-mail address;
• telephone number (optional);
• place of work;
• other data relating to social and professional identity;
• IP address;
• date and time of a visit to a given website;
• the company or organisation on whose behalf the purchase is made, where applicable;
• image, voice and statements contained in photographic, audio and video materials from the Event.
BESCO does not receive or store the full payment card number, its expiry date or the security code. Those data are processed by the relevant payment service provider in accordance with that provider’s own terms and privacy policy.
BESCO does not process special categories of personal data within the meaning of Articles 9 and 10 of the Regulation.
III. PURPOSES AND LEGAL BASIS FOR PROCESSING
BESCO collects, uses and processes the information described above for the following purposes and on the following legal bases:
Purposes for which the processing of personal data is based on the legitimate interests of the Controller
1. Organising, administering, holding and promoting rankings and awards, including the Hall of Fame event – BESCO processes the personal data of those who are nominated and of those who make nominations in various rankings of public significance. BESCO also processes the personal data of the members of the committees or the jury responsible for evaluating the nominees and recommending or deciding who is to receive the award, as well as of the persons taking part in the award ceremonies.
2. Receiving and handling reports, complaints, requests and other correspondence received. For the purpose of resolving complaints, reports, disputes, enquiries, requests or other matters raised in communications addressed to BESCO, received through communication from the Website, through calls to BESCO, or sent by ordinary post or e-mail. BESCO stores and processes this information as well as the outcome of such processing.
3. Exercising and protecting the rights and legitimate interests of BESCO, including by way of court proceedings, and providing assistance in the exercise and protection of the rights and legitimate interests of other users of the Website and/or affected third parties.
4. For statistical purposes, including analysing the performance of the Website and its use by users;
5. Detecting and resolving technical or functionality problems, and developing and improving the Website. Ensuring the proper functioning and use of the website by members and other users, maintaining and managing the service, resolving any disputes that arise, and detecting and preventing malicious actions. Logs relating to security, technical support, development and other matters may be used on the Website for the following purposes:
6. Organising access to the Event, verifying the validity of tickets, preventing abuse and protecting the security of visitors and participants;
7. Documenting, archiving, providing media coverage of and presenting the Event by means of general shots and materials that are not intended to present any individual visitor separately;
Purposes for which the processing of personal data is based on the conclusion and performance of a contract
When selling tickets for the Event, BESCO processes the personal data necessary for:
1. accepting and administering the order;
2. issuing and sending the electronic ticket;
3. sending messages regarding the order, the payment, the ticket, or any change to or cancellation of the Event;
Purposes for which the processing is necessary for compliance with a legal obligation
BESCO processes personal data in order to issue and keep invoices and other financial documents, to comply with accounting and tax obligations, and to provide information upon a lawful request from a competent authority.
IV. RETENTION PERIOD
The data collected will be used solely for the purposes of the competition and will not be disclosed to other persons. The Association will process and store Your personal data for as long as is necessary in order to achieve the purposes for which Your personal data were collected, and in order to comply with the statutory requirements to store such data for a specified period.
V. SOURCES OF PERSONAL DATA
The Association may obtain personal data:
1. directly from the relevant data subject;
2. from the persons who make nominations;
3. from Plentix, in connection with the purchase, payment, issuance and verification of tickets;
VI. THIRD PARTIES
Your personal data may be disclosed to third parties in the following cases:
1. where this is provided for by law;
2. if duly requested by a competent state or judicial authority;
3. where we have obtained Your express consent to this;
4. where this is necessary in order to protect the rights and legitimate interests of BESCO and/or other users.
In connection with the sale and use of tickets, personal data may be disclosed, to the extent necessary, to:
1. Evedo Bulgaria EOOD, as the operator of Plentix;
2. accountants, auditors, attorneys-at-law and other professional advisers;
3. competent authorities, where there is a legal basis for this.
BESCO does not sell personal data.
VII. RIGHTS OF DATA SUBJECTS
You have the following rights:
• Right to be informed
This Policy is intended to inform You in detail about the processing of Your personal data in connection with the Services provided.
• Right of access
You have the right to obtain confirmation as to whether Your personal data are being processed, access to those data, and information about the processing and about Your rights in this regard. You may exercise such access at any time.
• Right to rectification
You have the right to have Your personal data rectified where they are incomplete or inaccurate.
You may rectify Your data at any time by submitting a request to Us.
• Right to erasure
You have the right to request the erasure of data, except in cases where there is a substantial ground and/or a legal obligation for their processing.
The data are deleted upon expiry of the period indicated. In the meantime, they may be provided solely in accordance with the due procedure to the competent state authorities in the exercise of their supervisory powers, or to a competent court in the event of court proceedings to which they are relevant. In the event of a legal dispute or proceedings requiring the retention of data and/or a request from a competent state authority, the data may be retained for longer than the periods indicated, until the dispute or proceedings are finally concluded before all instances.
• Right to restriction of processing
The Regulation provides for the possibility of restricting the processing of Your personal data where the grounds set out in it are present.
• Right to notification of third parties
Where applicable, You have the right to require the Controller of Your personal data to notify the third parties to whom it has disclosed Your data of any rectification or erasure of Your personal data or restriction of their processing.
Please note that Besco does not act as an intermediary in the relations between You and other persons.
• Right to data portability
You have the right to receive Your personal data in a structured, commonly used and machine-readable format, and to use those data with another controller of Your choosing.
• Automated decision-making
You have the right not to be subject to an automated decision, including profiling, which produces legal effects concerning You or similarly significantly affects You, unless the grounds provided for in the applicable personal data protection legislation are present and appropriate safeguards for the protection of Your rights, freedoms and legitimate interests are in place.
No technologies falling within this category are used on the Website.
• Right to object
You have the right to object to the processing of Your personal data based on public interest, official authority or legitimate interest.
If such an objection is received, We will consider Your request and, if it is well founded, will comply with it. If we consider that there are compelling legal grounds for the processing, or that it is necessary for the establishment, exercise or defence of legal claims, we will inform You accordingly.
• Right to lodge a complaint
You have the right to lodge a complaint with a supervisory or judicial authority if You consider that the processing of personal data relating to You infringes the applicable personal data protection legislation. The supervisory authority in the Republic of Bulgaria is the Commission for Personal Data Protection, with address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592.
This Privacy Policy applies to the processing of personal data in connection with the organisation and holding of the Hall of Fame event. For all other personal data processing activities carried out by BESCO, and for any matters not covered herein, the BESCO Privacy Policy applies, available at https://besco.bg/.
This Privacy Policy was last updated on 03.09.2026.