Privacy Policy
Version of
Who is responsible for your data
The controller of your personal data is Botev Akademik.
What we collect and why
We collect personal data only when you subscribe to the club's newsletter. We then process:
- your email address, to send you the newsletter: club news, match and ticket information, and invitations to events;
- the proof of your consent: when you subscribed and confirmed, from which page, which version of the consent text you saw, and that you confirmed you are 14 or older.
We get this data only from you. We don't use it for anything else and we don't sell it.
When you open the site, its host (Vercel) processes technical data such as your IP address to show you the page and to protect the site from abuse, such as repeated sign-up attempts.
Legal basis
We process your email address on the basis of your consent (Article 6(1)(a) of Regulation (EU) 2016/679, the General Data Protection Regulation). Subscribing is voluntary: if you don't give us your address, you simply won't receive the newsletter. Technical data from visits to the site is processed on the basis of our legitimate interest in keeping the site working and secure (Article 6(1)(f)).
Once you enter your address, we send you an email to confirm. Your subscription starts only once you click the button in it.
Age
You can subscribe yourself if you are 14 or older. Under 14? Ask a parent to subscribe with their own email. If we learn that a subscriber is under 14, we delete their data at once.
Who else processes the data
We use providers that process data on our behalf and only on our instructions:
- Brevo (France): sends the newsletter and the confirmation email, and keeps the subscriber list and the proof of consent;
- Vercel (USA): hosts the site, which runs in a data centre in Frankfurt, Germany;
- Neon: the site's database, in Frankfurt, Germany; it holds no subscriber data;
- Cloudflare (USA): the domain's DNS, and forwarding email sent to @botevbasketball.bg addresses.
Vercel and Cloudflare are US companies. Transfers of data to them rely on the EU-US Data Privacy Framework and on the standard contractual clauses approved by the European Commission.
How long we keep the data
- If you don't confirm your subscription, the request expires with the confirmation link.
- While you are subscribed, we keep your address to send you the newsletter.
- After you unsubscribe, we keep only your address on a do-not-email list and the proof of consent, so that we don't write to you again and can show that we had your consent.
How to unsubscribe
You can unsubscribe at any time with the link at the end of every email. Unsubscribing takes effect at once. Withdrawing your consent doesn't affect the lawfulness of the processing before it.
Your rights
You have the right to ask for access to your data, to have it corrected or erased, to restrict its processing, and to receive it in a structured format (portability). We answer every request within one month.
You have the right to object at any time to the processing of your data for direct marketing. We then stop using it for that purpose.
We make no automated decisions about you and do no profiling. We don't track whether you open our emails or click the links in them.
Cookies
The site uses no cookies for visitors, stores nothing on your device, and loads no content from other sites.
Complaints
If you believe we are infringing your rights, you can complain to the Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, kzld@cpdp.bg.
Changes to this policy
When we change this policy, we publish the new version on this page with a new date.