Protection of personal data

Pursuant to the General Regulation on Personal Data Protection (EU) 2016/679 (ORZLD) and the Personal Data Protection Act of the Republic of Bulgaria, the Thracian University has taken the necessary organizational and technical measures to ensure the processing of personal data in a lawful, appropriate manner. and transparent way.

Our attitude to your personal data The University attaches great importance to the protection of personal data and collects and processes personal data only in compliance with the requirements of local and European legislation. The purpose of this "Privacy Policy" is to inform you how we process your data and what personal data we would collect about you, for what purpose, term and resp. what are your rights. Personal data The Thracian University collects and processes personal data of the following categories of persons, namely: candidate students, students, doctoral students (as well as candidates) and persons who have registered a postgraduate qualification. Personal data of visitors (eg video surveillance data) may also be collected and processed. This data is provided to the TU through the application and registration forms. Depending on the services you use, we may collect and process the following information: ID card names; PIN / LNC; ID card address; ID card data - number, date of issue, date of validity, issuing body, citizenship; marital status data; data on completed education; gender data; Bank details; faculty number; success data; contact telephone number; e-mail address; citizenship and residence status; letters and e-mails we receive from you in our communication; username and password when using the site; video recordings when you visit our administrative sites, in order to protect and ensure security. In connection with the implementation of regulatory obligations (Article 68, paragraph 3 of the Higher Education Act), the Regulations on the structure, activities and management of the Thracian University and ensuring social security and social protection (according to Regulation 2016/679 EU), could be processed and: decision of the TEMC / NEMC, birth certificates, official notes from orphanages and death certificates. In case of non-submission of the specified documents, it is impossible to provide an advantage when applying. The personal data for which TrU has a legal obligation to collect are described in detail in the Higher Education Act, the Ordinance on state requirements for admission of students to higher education institutions in the Republic of Bulgaria, the Ordinance on state requirements for the content of basic documents issued by higher education institutions. , and for doctoral students - in the Law for development of the academic staff in the Republic of Bulgaria and the regulations for its application, etc. regulations. Purpose and legal grounds for processing your data The University processes your data only for the purposes for which it was collected and does not use it for other purposes. These goals are entirely related to admission and training - to organize the learning process, support training through various means, the ability to issue documents that meet state requirements and maintain the registers provided for in the Higher Education Act. In particular, these objectives are: Applying for the educational qualification degree "professional bachelor", "bachelor" and "master"; Applying for an educational and scientific degree "Doctor"; Equalization of diplomas and transfer of students; For the purposes of postgraduate qualification; Concluding contracts with the university; Training administration - e.g. for maintaining the General Ledger of students, for issuing a student's book, certificate, academic transcript, diplomas for higher education and for educational and scientific degree, as well as certificates for additional training and registers for them; Access to training resources - e.g. the library, etc .; Financial relations - e.g. when sending scholarships or other financial incentives; Processing of applications - e.g. for restoration of rights, interruption, transfer, etc. Graduation of students; Exchange of students and teachers; Ensuring effective communication; Ensuring security. Legal grounds In most cases, we require your personal data for the purpose of concluding a contract, to comply with a legal obligation or to protect our legitimate interest. Of course, for some of the services, you provide us with this information yourself, choosing and agreeing to have it processed. Without this data, we would not be able to provide the relevant services. Processing of the data necessary for the conclusion and implementation of the contract For the fulfillment of contractual obligations under concluded contracts for provision of educational services; Providing comprehensive services and administration during the training period. Processing of the data necessary for the fulfillment of our normative obligation Higher Education Act, Ordinance on the State Requirements for Admission of Students to Higher Education Institutions of the Republic of Bulgaria, Ordinance on the State Requirements for the Content of Basic Documents Issued by Higher Education Institutions, Rules for the Structure, Activity and Management of TrU, et al. related regulations; Obligations to provide information to all state commissions and regulatory bodies; Preproviding information to the court and law enforcement agencies. Processing of data based on your consent in case of candidate-student campaigns, requests for transfer, recognition of diplomas, etc .; data transfer outside the EU; direct marketing. Data processing based on our legitimate interest performing video surveillance in our administrative sites Sharing your information: The University uses third parties to support certain contractual activities or in the performance of a legal obligation. We do not provide your personal data to third parties until we are sure that all technical and organizational measures have been taken to protect this data, and we strive to exercise strict control to achieve this goal. We can provide data to accounting firms, law firms, other universities, student dormitories and canteens, etc. The provision of personal data in some cases is mandatory in order to comply with our legal requirements and in this regard we provide information to: Ministry of Education and Science - e.g. for the maintenance of a Register of all current and discontinued students and doctoral students by degrees and professional fields and a Register of graduates and doctoral students (HEA); The National Revenue Agency for the needs of health insurance; Ministry of Foreign Affairs, Ministry of Interior - Directorate of Migration and MES. The University is obliged to provide personal data to foreign students for the issuance of a visa D. The University may share personal data with officials, representatives of the immigration authorities on the status of prospective students or students whose citizenship is outside the European Union; The National Center for Information and Documentation; Regional Inspectorate of Education; Others. Automated algorithms We do not use automated decision making tools. Security The security of the data you entrust to us is very important to us. That is why we protect your data by applying all appropriate technical and organizational means at our disposal to prevent unauthorized access, unauthorized or malicious use, loss or premature deletion of information. TrU takes steps to protect your personal data from accidental loss and unauthorized access, use, alteration or disclosure. There are policies and procedures in place to protect information from loss, misuse and improper disclosure. In addition, we take additional information security measures, including access control, strict physical protection and sound practices for collecting, storing and processing information. Some of the actions taken are: 1. Physical organizational and technical protection measures: identification of controlled access areas; identification of the premises in which personal data are processed, incl. where our servers are located and restricting access; determining the organization of physical access; determination of the used technical means for physical protection - in special rooms and turnkey cabinets; appointing a team to respond to violations. 2. Personal protection: acquainting the staff with the peculiarities of personal data processing and with the regulations in the field of personal data protection, with the current policy, etc. related internal regulations; confidentiality of information; personnel training. 3. Documentary protection: setting storage periods; distribution rules, destruction procedures, inspection and control of processing. On the other hand, we apply technical measures such as encryption, pseudonymization and anonymization of the collected personal data. When do we delete your personal data? We store all the information we have collected about you and destroy it in a certain order within the statutory time limits, and if there is no such - within the time limits set by us with the Internal Rules for the creation, use and maintenance of the university archives. Some of the deadlines are: - Minimum 50 years - for data related to issued diplomas and certificates; - 10 years under the Accounting Act for storage and processing of accounting data; - 30 days from the video surveillance recording; - 1 year from the expiration of the candidate-student campaign - in relation to the competition card, exam papers, the documents attached to the card, incl. acts and diplomas; - 5 years from the expiration of the candidate-student campaign for examination protocols. Transfer between countries The University may transfer your data outside the EU under the Erasmus + program, but only with your explicit written consent. Your rights with respect to personal data At any time, you can ask the TU to provide you with information and access to the personal data that has been collected and stored for you. You may also require TrU to correct, delete or update such personal data. TrU also ensures your right to object and limit the processing of personal data, as well as your rights in automated decision-making. You can on at any time to withdraw your consent to the collection, storage and use of your personal data in relation to TrU. However, the withdrawal will not affect the lawfully processed data until the withdrawal. Some of your rights, such as deleting data or objecting to the processing, may be restricted by applicable law. Requests for access to information or for correction are submitted in person or by a person expressly authorized by you, through an explicit written power of attorney. An application may also be submitted electronically, in accordance with the Electronic Document and Electronic Signature Act. We would like to inform you that under the current legislation you have the right to complain about the way your data is processed to the supervisory body Commission for Personal Data Protection, Sofia 1592, Blvd. Tsvetan Lazarov ”№ 2 or Changes to this Privacy Policy This procedure for the protection of personal information may change over time. Such changes will take effect immediately after their announcement. Regularly reviewing this page ensures that you will always be aware of what information we collect, how and for what purposes the TRU uses it, and under what circumstances (if any) we will share it with other countries.

Documentation for personal data protection of the Thracian University


Vanya Trifonova

Personal Data Protection Officer


phone: 042/699 206