Last updated: 30/11/2025

This Privacy Policy describes how Rescue Club for the Future collects, processes, stores, and protects your personal data when you use the spasitelen.club website and all related online services.

We take the protection of personal information seriously and comply with all requirements of Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian legislation.

1. Data Controller
Name: Rescue Club for the Future
Contact email: [email protected]

2. What data do we collect?
We collect only the data necessary to provide and improve our services.

2.1. Data provided voluntarily

• first and last name (when using application/contact forms);
• email address;
• phone number (if needed for coordination or feedback);
• information related to participation in volunteer activities;
• other information provided via contact/registration forms.

2.2. Data collected automatically

(via cookies and analytics technologies)

• IP address;
• device and browser identifier;
• statistical data about website usage (pages visited, time spent, etc.);
• technical information required for security and functionality.

As a rule, this data does not directly identify a specific person.

2.3. Data from external sources

We may receive information from:

• social networks/external services — only with your explicit consent.

3. Purposes of processing
We process personal data for:

• managing volunteer applications and communication;
• sending information about training, initiatives, or events (only with consent);
• website maintenance, development, and security;
• compliance with legal obligations.

We do not use your personal data for profiling or automated decision-making that produces legal effects.

4. Legal grounds
We process data on one or more of the following grounds:

• Consent — when you fill in forms, subscribe to news, etc.;
• Performance of a contract — including participation in volunteer programs;
• Legitimate interest — improving services and protecting against abuse;
• Legal obligation — where required by law.

5. Retention period
We store data only for the period necessary for the purposes for which it was collected, or as long as a legal basis exists.
After this period expires, the data is deleted, blocked, or anonymized.

6. Sharing data with third parties
Data is shared only when necessary and with ensured protection, including with:

• information processing systems (e.g., email platforms, CRM) that comply with GDPR;
• public authorities — only where there is a legal basis;
• partner organizations — only with explicit consent.

We do not sell or share personal data for marketing purposes.

6.1. Transfers outside the EU/EEA

If a provider is based outside the EU/EEA, transfers are carried out only with appropriate GDPR safeguards (e.g., Standard Contractual Clauses).

7. Data subject rights
You have the following rights under GDPR:

• access to your data;
• rectification and updating;
• erasure (“right to be forgotten”);
• restriction of processing;
• objection to processing based on legitimate interest;
• data portability to another controller;
• withdrawal of consent at any time.

To exercise your rights:
[email protected]

The response time is usually up to 30 days.

8. Data security
We apply appropriate technical and organizational measures to protect against:

• unauthorized access;
• loss or damage;
• misuse or unlawful disclosure.

9. Cookies
For more information about cookies, please see our Cookie Policy.

10. Complaints
If you believe your rights have been violated, you may file a complaint with:

Commission for Personal Data Protection (CPDP)
Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Website: www.cpdp.bg

11. Changes to the policy
We may update this policy when necessary. All changes are published on this page, and the date at the top indicates the latest version.