{"id":2110,"date":"2022-03-08T09:26:43","date_gmt":"2022-03-08T09:26:43","guid":{"rendered":"http:\/\/mos.local\/?page_id=2110"},"modified":"2026-10-13T07:17:03","modified_gmt":"2026-10-13T07:17:03","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/mallofsofia.bg\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"

PERSONAL DATA PROCESSING AND PROTECTION POLICY<\/strong><\/p>\n

I. Introduction<\/strong><\/p>\n

On 28.05.2018\u00a0Regulation (EU) 2016\/679 of the European Parliament and of the Council\u00a0of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (hereinafter referred to as the \u201cGDPR\u201d) entered into force.<\/p>\n

The present Personal Data Processing and Protection Policy (hereinafter referred to as the \u201cPolicy\u201d) is intended to inform users about what kind of personal data is processed by \u201cDORADO 1\u201d EOOD (hereinafter referred to as the \u201cPersonal Data Controller\u201d or only the \u201cController\u201d) in connection with visiting and using\u00a0www.mallofsofia.bg<\/a>\u00a0website, including participation in our promotional campaigns, games, events, receiving our newsletter, and other similar actions. The Policy also concerns the activities related to processing of personal data, which is performed by the Controller when data subjects use the social media pages maintained and managed by the Controller in connection with the activities of\u00a0Mall of Sofia\u00a0shopping center, the access and use of external links to the Internet websites of our partners, as well as the relations connected with marketing, management and video surveillance at\u00a0Mall of Sofia.<\/p>\n

In this Policy you can become acquainted with your rights as data subject in relation to the personal data, which is collected, processed and stored by us as Controller within the meaning of Art. 4, item 7 of the GDPR. As Controller, we process your personal data for the purposes, within the terms and in the manner described below, in compliance with the principles and rules set forth in the GDPR and the Bulgarian legislation in force \u2013 the Personal Data Protection Act (PDPA).<\/p>\n

For the purposes of this Policy, the term \u201cprocessing\u201d of personal data shall be interpreted in the sense set out in Art. 4, item 2 of the GDPR, namely:\u00a0any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.<\/p>\n

If you have any questions related to your rights and legitimate interests in relation to the processing of personal data, including issues related to this Policy, you can contact us in any of the following ways:<\/p>\n

by sending an e-mail to:\u00a0dataprotection@mallofsofia.bg<\/a>;
Postal address: 101 Alexander Stamboliyski Blvd, Sofia;<\/p>\n

II. Who we are<\/strong><\/p>\n

\u201cDORADO 1\u201d EOOD\u00a0is a company incorporated in the Republic of Bulgaria, registered in the Commercial Registry under UIC 201476584, with seat and registered address: Sofia 1756, Izgrev district, 5 \u201cLachezar Stanchev\u201d Str., Sopharma Business Towers complex, building B, floor 7.<\/p>\n

\u201cDORADO 1\u201d EOOD\u00a0is owner of a shopping center, operating under the trademark \u201cMall of Sofia\u201d. In our shopping center there are more than 130 business premises, including shops of leading international and Bulgarian brands for women\u2019s, men\u2019s and children\u2019s fashion, shoes, accessories and jewelry, home goods, coffee shops, restaurants, fast food and supermarket Billa, 12 cinema halls of Cinema City and the largest IMAX screen in Bulgaria.<\/p>\n

In June 2018 the company \u201cDORADO 1\u201d EOOD became part of the family of\u00a0GTC Group\u00a0\u2013 one of the leading investors in Central, Eastern and Southeastern Europe. Since its establishment in 1994, the group has been building and managing modern first class office buildings and shopping centers throughout the CEE region. GTC Group has been on the Bulgarian market for more than 10 years.<\/p>\n

\u201cDORADO 1\u201d EOOD\u00a0is the Controller of your personal data and the owner of this website:\u00a0www.mallofsofia.bg<\/a>.<\/p>\n

The personal data protection officer of the Controller is Mrs. Urszula Koc.<\/p>\n

E-mail address:\u00a0dataprotection@mallofsofia.bg<\/a>.<\/p>\n

III.<\/strong> Categories of data subjects and the personal data we process<\/strong><\/p>\n

We process personal data of the following groups of individuals:<\/p>\n

III.1. Website visitors<\/strong><\/p>\n

As a visitor on\u00a0www.mallofsofia.bg, you have the opportunity to browse all its sections and menus, to search for information on it,\u00a0without having to enter any of your personal data or register on the website.\u00a0The lack of registration on our website does not limit in any way your online activity, site navigation, and access to its content.<\/p>\n

Keep in mind that the site\u00a0www.mallofsofia.bg\u00a0uses the so-called\u00a0\u201ccookies\u201d\u00a0in order to offer you better, optimized and up-to-date services, product information, and commercial terms, as well as to provide personalized content to our website users. Through the \u201ccookies\u201d, including other similar technologies, the Controller can obtain specific user information such as: the pages you view; the things you download; the links you follow; the duration of the site visit; your IP address; the domain from which you enter our website, etc. This information helps us learn more about how you use the technologies related to us and to provide you with adequate services and information. For more information about the \u201ccookies\u201d, which we use, please read the Cookies Use Policy published on our website.<\/p>\n

III.2. Users, who use our contact form provided on the website<\/strong><\/p>\n

In the \u201cContacts\u201d section you also have the option to send a message to us by entering a name and email address.\u00a0Entering the specified personal data is not a registration on our website.\u00a0In this way, you will not be created a profile on which your personal data will be stored or through which you will be subsequently identified.<\/p>\n

For each message which you want to address to us through the form on the site, you must re-enter the name and email address in the empty boxes. Your name and email address can be saved on the site if you have allowed the use of the relevant cookies. For more information about the \u201ccookies used by us, please read the Cookies Use Policy published on our website.<\/p>\n

The purpose for processing of your name and email address is to administer, process and respond to your message;
The term for which we process and store your personal data is determined by the content of your message, with the minimum time limit for administering and responding to your message. If your message implies any obligations for us to perform certain actions or activities (for example, to perform an alert check, etc.), the processing of your personal data will be extended until finishing the relevant activities\/actions or any other legally prescribed period, in connection with our legitimate obligations, rights and interests.
The legal ground on the basis of which we process your personal data, is: your consent, given under Art. 6, para 1, letter \u201ca\u201d of the GDPR; for the purposes of the legitimate interests pursued by the Controller or by a third party \u2013 Art. 6. Para. 1, letter \u201cf\u201d under GDPR.<\/p>\n

III.3. Recipients of the newsletter of Mall of Sofia<\/strong><\/p>\n

On our website you can find a subscription\u00a0button\u00a0for our newsletter \u2013 you should enter a name, surname and e-mail address. Entering the specified personal data is not a registration on our website. Entering the data aims to include you for the service provided by us under for sending the newsletter of\u00a0Mall of Sofia\u00a0to the e-mail address provided by you.<\/p>\n

The purpose for processing of your names and e-mail address is to be included in the\u00a0Mall of Sofia\u00a0newsletter system.
The term for processing of the data is until you decide to unsubscribe by unsubscribing through the link provided to you in the e-mail together with the newsletter. Once you are unsubscribed, your personal data will be destroyed by the Controller within term of 14 days.
The legal ground on the basis of which we process your personal data in connection with sending the newsletter of\u00a0Mall of Sofia\u00a0is your consent, given under Art. 6, para 1, letter \u201ca\u201d of the GDPR.<\/p>\n

III.4. Users of the smartphone application of Mall of Sofia<\/strong><\/p>\n

If you are using our mobile application, please the information on the processing of your personal data can be found in its separate Privacy Policy<\/a>.<\/p>\n

III.5. FACEBOOK<\/strong><\/p>\n

Mall of Sofia\u00a0has a Facebook page. In this way we are closer to our customers. Our page allows us to communicate with our customers quickly and interactively, to promote events, games and other similar activities organized at Mall of Sofia shopping center by our partners and us. On our page you have the opportunity to rate our shopping center, to share your opinion on the level of service of the shopping center, to communicate with our representative through Facebook, and to keep you up to date with the latest services and products, which we offer.<\/p>\n

We monitor the activity of our visitors on our Facebook page, such as the likes of our posts, the number of shares of our posts, etc. When you like our Facebook page, you give us access to some of the personal data you have entered in your Facebook account.<\/p>\n

The purpose for processing of your data is to administer our Facebook page, to analyze the information from our visitors\u2019 activity on it, and for marketing purposes.
The term for processing of the data is until you terminate following, liking and sharing publications on our page or until you delete your Facebook account.
The legal ground on the basis of which we process your personal data, is your consent, given under Art. 6, para 1, letter \u201ca\u201d of the GDPR.<\/p>\n

On our website there is a dedicated\u00a0button\u00a0for direct access to the Facebook page of\u00a0Mall of Sofia\u00a0in order to facilitate our users who want to access the content of the page and to make it easier for you to directly share your opinion about us and our partners.<\/p>\n

III.6. YOUTUBE<\/strong><\/p>\n

Mall of Sofia\u00a0has a YouTube channel which aims to advertise the activity of the shopping center and its partners \u2013 products, services, events, promotions, etc. You can like our videos, subscribe to our channel, or choose whether to get notifications about our YouTube activity.<\/p>\n

We monitor the activity of our visitors on our YouTube channel, such as the number of likes, shares, views, and comments on our videos.<\/p>\n

By subscribing to our YouTube channel, you give us access to the data you have entered into your YouTube account.<\/p>\n

The purpose for processing of your data is to administer our YouTube channel, to analyze the activity of our visitors, and for marketing purposes.
The term for processing of the data is until you cancel your subscription to our channel or delete your YouTube account.
The legal ground on the basis of which we process your personal data, is your consent, given under Art. 6, para 1, letter \u201ca\u201d of the GDPR.<\/p>\n

On our website there is a dedicated\u00a0button\u00a0for direct access to our YouTube channel in order to facilitate the visitors of the site who want to access its online content.<\/p>\n

III.7. INSTAGRAM<\/strong><\/p>\n

Mall of Sofia has a profile on the social network INSTAGRAM for sharing photos and information, which purpose is to advertise the activity of the shopping center and its partners \u2013 products, services, events, promotions, etc.<\/p>\n

We monitor the activity of our visitors to our INSTAGRAM account in order to improve the quality of our services.<\/p>\n

By subscribing to our INSTAGRAM account, you give us access to the data you have entered in your account on this social network.<\/p>\n

The purpose for processing of your data is to administer our INSTAGRAM account, to analyze the information from the activity of our visitors, and for marketing purposes.
The term for processing of the data is until you cancel your subscription to our account or delete your INSTAGRAM account.
The legal ground on the basis of which we process your personal data, is your consent, given under Art. 6, para 1, letter \u201ca\u201d of the GDPR.<\/p>\n

There is a dedicated\u00a0button\u00a0on our website for direct access to our INSTAGRAM account to facilitate the visitors of the site.<\/p>\n

III.8. TIKTOK<\/strong><\/p>\n

Mall of Sofia has a profile on the social network TIKTOK for sharing videos and information, which purpose is to advertise the activity of the shopping center and its partners \u2013 products, services, events, promotions, etc.<\/p>\n

We monitor the activity of our visitors to our TIKTOK account in order to improve the quality of our services.<\/p>\n

By subscribing to our TIKTOK account, you give us access to the data you have entered in your account on this social network.<\/p>\n

The purpose for processing of your data is to administer our TIKTOK account, to analyze the information from the activity of our visitors, and for marketing purposes.
The term for processing of the data is until you cancel your subscription to our account or delete your TIKTOK account.
The legal ground on the basis of which we process your personal data, is your consent, given under Art. 6, para 1, letter \u201ca\u201d of the GDPR.<\/p>\n

There is a dedicated\u00a0button\u00a0on our website for direct access to our TIKTOK account to facilitate the visitors of the site.<\/p>\n

III.9. CONTESTS<\/strong><\/p>\n

The individuals who participate in games, events, promotions, competitions, campaigns and other marketing activities of Mall of Sofia, organized by \u201cDORADO 1\u201d EOOD and\/or its partners.<\/p>\n

We organize events, games, competitions, promotions, campaigns and other activities (hereinafter collectively referred to as the \u201cActivities\u201d), in which you can participate. If you wish to be part of our Activities \u2013 at the\u00a0Mall of Sofia\u00a0shopping center or any of our social networks, your personal data may be collected and processed by the Controller, and details about it will be given in the terms and conditions of the Activity itself. By participating in the Activity in the provided way, you agree that your personal data will be processed for the purposes of the relevant marketing activities.<\/p>\n

For the purposes of the relevant Activity, as Controller we can process the following personal data for limited time and for the relevant marketing purposes: names, e-mail address, phone, photos, videos, data from social networks to which we have access, etc. depending on the conditions of the respective Activity.<\/p>\n

The purpose for processing of your personal data is to conduct the relevant activity, to get in touch with the participants and the winners, in order to fulfill our obligations deriving from the respective Activity \u2013 for example, giving awards, announcing results, etc. Also, the purpose for processing of your personal data is to fulfill the tax and accounting obligations of the Controller under current Bulgarian legislation.
The legal ground on the basis of which we process your personal data is your consent under Art. 6, para 1, letter \u201ca\u201d of the GDPR; a contractual obligation in connection with the giving awards, if such are provided in the respective activity \u2013 according to Art. 6, para 1, letter \u201cb\u201d of the GDPR; the processing is necessary to comply with a legal obligation as Controller \u2013 Art. 6, para 1, letter \u201cc\u201d of the GDPR, as well as on the basis of the legitimate interest of the Controller \u2013 Art. 6, para 1, letter \u201cf\u201d of the GDPR.
The term for processing and storing of your data is different, depending on the respective personal data, the purposes and the respective Activities, as follows:<\/p>\n

\u2013 for carrying out the respective Activity \u2013 up to\u00a014 days\u00a0after ending the respective Activity for the data of the participants.<\/p>\n

\u2013 in respect of the personal data contained in the documents related to fulfillment of our obligations arising from contractual relations between us and the winners \u2013\u00a05 years\u00a0after fulfillment of all obligations of the parties under the contractual obligation;<\/p>\n

\u2013 Within the terms specified in art. 12, par. 1 of the Accountancy act for storage of accounting information as follows:<\/p>\n

\u2013\u00a010 years\u00a0\u2013 agreements, accounting registers and financial statements, including documents tax control, audit and follow-up financial inspections;<\/p>\n

\u2013\u00a03 years\u00a0\u2013 all other carriers of accounting information<\/p>\n

\u2013 for marketing purposes (e.g. marketing survey; statistical analysis etc.) the storage period is\u00a01 year\u00a0after fulfillment of all obligations of the parties under the contractual obligation within which personal data has been collected from users;<\/p>\n

III.10. Visitors of Mall of Sofia shopping center<\/strong><\/p>\n

The Controller also processes the personal data of visitors of\u00a0Mall of Sofia, including at the parking area, through video surveillance of the sites. In this way we collect video images of the visitors in the shopping center and the parking, as well as video images of the cars and other vehicles in the parking, including registration plates of all vehicles.<\/p>\n

The purpose for processing of the aforementioned data is to ensure a consistent high level of protection and security for the visitors of the shopping center and the property of the tenants in the premises; in relation to the legitimate interests of the controller; for protection and assistance in bringing legal claims; for avoiding and thwart criminal and other acts prohibited by law and to organize the movement of vehicles in the parking area of the shopping center.
The term for processing of the personal data of visitors, which is processed on the basis of video monitoring may be divided into two categories:<\/p>\n

\u2013 the term for processing of personal data obtained through video monitoring in the public areas of\u00a0Mall of Sofia\u00a0shopping center is\u00a02 months.<\/p>\n

\u2013 processing of personal data obtained through video monitoring in case of violation of public order, a crime or any other action which is prohibited by law or there is a recorded incident in the shopping center, it shall be kept until the completion of the actions and procedures taken by the enforcement authorities for investigation and identification of the offenders, as well as until completion of any court proceedings \u2013 provided that a formal request for preservation of the relevant recording is submitted within two months from the date of the incident. In the absence of such request, the recording shall be retained only for 2 months as mentioned above.<\/p>\n

The legal ground on the basis of which we process your personal data collected through video monitoring of the shopping center and its parking area is Art. 6, para 1, letter \u201cf\u201d of the GDPR, according to which processing is lawful when it is necessary for the legitimate interests of the controller or a third party.<\/p>\n

Keep in mind that \u201cDORADO 1\u201d EOOD has a legal obligation to assist the judicial authorities by handing over such video files upon request if there are any actions which are prohibited by the law, legal claims and others in connection with the rights and legitimate interests of the visitors of the shopping center and the parking area, the people working in the shopping center, etc.<\/p>\n

You have the right to object to the processing of your personal data through video monitoring for the term and purpose stated above.<\/p>\n

In the shopping center and the parking area, you will see dedicated signs indicating that the sites are under video monitoring.<\/p>\n

Other<\/strong><\/p>\n

Whenever the collection, process or storage of personal data of persons below the age of 16 years is necessary, \u201eDorado 1\u201d EOOD shall collect, process or store personal data of such persons only when an explicit consent from their parent\/adoptive parent\/legal guardian or other person holder of parental responsibilities is received by the Controller.<\/p>\n

The present page\u00a0contains links to other webpages, which are owned by other controllers.<\/p>\n

In the \u201cCinema\u201d section you can follow the link\u00a0www.cinemacity.bg<\/a>\u00a0\u2013 managed and owned by \u201cCinema City Bulgaria\u201d EOOD.
In the \u201cStores\u201d section you can follow the links to the pages of the respective store owned by the owner of the relevant site.<\/p>\n

\u201cDORADO 1\u201d EOOD is not responsible for collection and processing of your personal data by other controllers, nor for the personal data, which is provided by you to those controllers, the content of their pages and their advertisements.<\/p>\n

IV. Rights of our clients<\/strong><\/p>\n

All visitors and users of the site and Mall of Sofia shopping center have the rights listed below according to the current European and Bulgarian legislation.<\/p>\n

We strive to always process your personal data in a lawful manner, acting in good faith and in a transparent manner, to collect it for specific, explicit and legitimate purposes, to minimize the collection, processing and storage of your data to the necessary minimum. We always stand to ensure that your personal data is processed in a way which guarantees an appropriate and adequate level of security.<\/p>\n

As controller of your personal data, we at \u201cDORADO 1\u201d EOOD are ready to answer your questions about processing and storing your data in order to always keep you aware of\u00a0what\u00a0data we collect, process and store; for what\u00a0purpose\u00a0and for what\u00a0period\u00a0we do so, who else can access them, what are your\u00a0rights\u00a0and our\u00a0obligations.<\/p>\n

IV.1.\u00a0Right of consent<\/strong><\/p>\n

The data subject (visitor or user of the site, the applications of Mall of Sofia, and the shopping center) shall give consent for processing their data.<\/p>\n

The consent shall be given\u00a0freely, explicitly, in an informed\u00a0and\u00a0unambiguous way.<\/p>\n

The consent is given by implicit action or by signing an explicit declaration, given by the Collector.<\/p>\n

Consents of this kind will be stored by us in files protected and archived in a safe and appropriate way.<\/p>\n

IV.2.\u00a0Right of access to data<\/strong><\/p>\n

You have the right to request access to the personal data which is collected and processed about you.<\/p>\n

You may request provision of a copy of the personal data collected about you multiple times.<\/p>\n

The Data Protection Officer shall collect the relevant personal data and respond to you in writing within two weeks (in a confidential manner) after identifying the person who has requested access to it. We will give access to personal data ONLY to the person whose personal data is being processed. If you wish your personal data to be provided to another person, we should be provided with an explicit power of attorney.<\/p>\n

In case of complicated circumstances or multiple requests, the two-week term may be extended up to 20 days; in such case you will be notified of the extension of the term.<\/p>\n

We have the right to charge an administrative fee of reasonable amount upon receipt of more than one request for a copy of your data.<\/p>\n

IV.3. Right of rectification<\/strong><\/p>\n

You have the right to ask us to update or rectify your personal data.<\/p>\n

When we receive such request, it will be accepted and the relevant actions for update or rectification will be taken within reasonable time.<\/p>\n

You will be notified in writing about the actions we have taken.<\/p>\n

IV.4.\u00a0Right to object<\/strong><\/p>\n

You have the right to object to the processing of your personal data by submitting an objection to us.<\/p>\n

You can always object to the processing of personal data in connection with direct marketing.<\/p>\n

We have the right to accept or reject the objection while we will always give reasons in our response to you in case of rejection in order that you are aware why we have not accepted your request.<\/p>\n

If you object to the processing of your personal data in connection with direct marketing, we will always accept your objection.<\/p>\n

We hereby inform you that we are not conducting profiling.<\/p>\n

IV.5. Right of erasure or \u201cthe right to be forgotten\u201d<\/strong><\/p>\n

You may request from us to erase the personal data which we process about you. Please note that this right is not absolute and should be considered in relation to its function to balance other fundamental rights and obligations of the Controller and the data subject in accordance with the principle of proportionality.<\/p>\n

Keep in mind that there are separate cases in the GDPR, in which there is an obligation for us to erase your personal data. In other cases we do not have such an obligation.<\/p>\n

If the consent for processing of personal data has expired or is revoked, \u201cDORADO 1\u201d EOOD may have an obligation to erase the personal data.<\/p>\n

Apart from these cases, we may either accept or reject the request for erasure of data, and in case of rejection, we will provide reasons for that.<\/p>\n

Within two weeks of submitting your request for erasure of your personal data, you will receive a response from the Controller regarding the satisfaction of your request or its refusal and the reasons thereof.<\/p>\n

IV.6.\u00a0Right to have the processing restricted<\/strong><\/p>\n

You have the right to request restriction of the processing of your personal data in certain cases specified in the GDPR.<\/p>\n

We have the right to accept or reject your request; in case of rejection, we will state reasons for that.<\/p>\n

Within two-weeks term, you will receive a response from us regarding the acceptance of your request or its refusal and the reasons thereof.<\/p>\n

IV.7. Right of data portability<\/strong><\/p>\n

If your personal data is processed on the basis of your explicit consent or on the basis of a contractual obligation for processing and if the processing is done in an automated manner, you have the right to data portability.<\/p>\n

This entitles you to require from the controller to transfer some or all of the personal data processed by him\/her to another controller or to receive the personal data, which concerns you and which are provided by you to the controller in a structured, widely used and machine-readable format.<\/p>\n

When there are circumstances provided in the GDPR, we are obliged to perform the requested action.<\/p>\n

Keep in mind that we have the right to charge a reasonable administrative fee for the service.<\/p>\n

IV.8.\u00a0Right to lodge a complaint<\/strong><\/p>\n

If you consider that your rights in relation to protection of your personal data have been violated, you have the right to lodge a\u00a0complaint\u00a0with the competent supervisory data protection authority in the Republic of Bulgaria, namely the\u00a0Commission for Personal Data Protection\u00a0(CPDP).<\/p>\n

You can contact the CPDP in the following ways: at the address for correspondence: Sofia 1592, 2 \u201cProf. Tsvetan Lazarov\u201d Blvd;<\/p>\n

phone number: 02\/915 35 18;<\/p>\n

e-mail:\u00a0kzld@cpdp.bg<\/a>;<\/p>\n

website:\u00a0www.cpdp.bg<\/a>.<\/p>\n

Apart from the abovementioned, if you consider that your rights or legitimate interests are violated, you are also entitled to legal protection.<\/p>\n

IV.9.\u00a0Right to withdraw the consent for processing of personal data<\/strong><\/p>\n

You have the right to withdraw the consent for processing of your personal data at any time, but only when the processing of personal data is based on an explicit consent you have given under Art. 6, para 1, letter \u201ca\u201d of the GDPR.<\/p>\n

Subsequent withdrawal will not affect the lawfulness of processing made until this moment on the basis of the consent already given.<\/p>\n

Such requests shall be considered and accepted by us within a reasonable time without undue delay.<\/p>\n

Keep in mind that the withdrawal takes effect in the future. It will not affect the legality of data processing so far. Therefore, if there is a request from a court authority to access such data, we shall provide them with it.<\/p>\n

All rights listed above can be exercised by:<\/p>\n

Sending a written request to the e-mail address specified above to the data protection officer. Please provide us with three names, contact phone number and email address in your request, to which you wish to be contacted, as well as the content of your request. Please also indicate how you want to be provided with copies of your personal data, if you have submitted such a request, in what format, etc.<\/p>\n

V. NOTES:<\/strong><\/p>\n

\u201cDORADO 1\u201d EOOD may reject or charge for claims, which are\u00a0clearly unfounded\u00a0or\u00a0excessive. In case of rejection of a request, we will notify you in writing (by e-mail or by post, depending on what you have specified in your request).
As a controller of personal data, we are required to monitor, report, and investigate personal data breaches.<\/p>\n

Each person acting on behalf of \u201cDORADO 1\u201d EOOD or a third party, such as the data processor, is obliged to immediately notify the data protection officer for breach in security. The latter will endeavor to terminate the breach and will inform the Commission for Personal Data Protection within 72 hours when there is such a requirement under the GDPR.<\/p>\n

Your requests will be processed without undue delays and will be answered in writing within two weeks as of receipt of the request in our system. Please keep in mind that sometimes there may be delays due to the large amount of information which our employees process. We will do our best to respond to your inquiries and requests as soon as possible, precisely and in compliance with the requirements of the legislation of the European Union and the Republic of Bulgaria.<\/p>\n

VI. Recipients of your personal data<\/strong><\/p>\n

Your personal data may be disclosed to third parties \u2013 the so-called\u00a0recipients of personal data.\u00a0Apart from governmental bodies and institutions to which the controller has legal obligations to disclose personal data, such recipients of personal data may also be companies, part of GTC Group, which are solely based in the European Union.<\/p>\n

Except the cases above, your personal data may be provided to other persons \u2013 controllers\/ processors outside our team. For example, advertising agencies, marketing experts and business partners, in connection with the legitimate interests of the controller.<\/p>\n

Disclosure of your personal data to third parties fully complies with the requirements of Regulation 2016\/679. The recipients of your personal data may be persons in respect of whom there is a statutory obligation for the controller to disclose it: \/for example, the Consumer Protection Commission, the Commission for Personal Data Protection, judicial and enforcement authorities, etc\/.<\/p>\n

Your personal data\u00a0will not\u00a0be delivered to recipients based in third countries or international organizations for which an adequate level of protection is not available, in accordance with Art. 45 of the GDPR.<\/p>\n

VII. Changes to the present terms<\/strong><\/p>\n

If there are any subsequent updates to the privacy policy of \u201cDORADO 1\u201d EOOD, we will publish the changes on the page of http:\/\/mallofsofia.bg\/<\/a>.<\/p>\n

and will change the date of their update so that you are always aware what information we collect online, how we use it and what options and opportunities in this regard are provided to you.<\/p>\n

Publishing the changes and updates will be made publicly on the page of\u00a0http:\/\/mallofsofia.bg\/\u00a0so you become acquainted with them.<\/p>\n

Last update:<\/p>\n

28.07.2026<\/p>\n

\u201cDORADO 1\u201d EOOD team<\/p>\n","protected":false},"excerpt":{"rendered":"

PERSONAL DATA PROCESSING AND PROTECTION POLICY I. Introduction On 28.05.2018\u00a0Regulation (EU) 2016\/679 of the European Parliament and of the Council\u00a0of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (hereinafter referred to as the \u201cGDPR\u201d) […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-2110","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":6}},"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t