Welcome to the Open Sofia Foundation (OSF) privacy notice concerning the Open Sofia online platform (called « the Platform » in the rest of the document).
The Open Sofia Foundation respects your privacy and is committed to protecting your personal data in compliance with the 2018 GDPR (General Data Protection Regulation).
This privacy notice informs how your personal data is used when visiting the Platform (regardless of where you visit from). It also explains your privacy rights and how to manage them. You will learn how the Open Sofia Foundation collects and processes your personal information, including any data you provide when registering as a user and interacting with service providers.
Please note that the Platform is not intended for children. The Open Sofia Foundation does not knowingly collect data relating to children.
This privacy notice should be read in conjunction with the general rules established by the GDPR.
I) Using the Platform without creating a user profile
Most of the Platform’s content is available to view without creating a user profile.
When browsing the Platform you should be aware that:
- The Platform uses Google Analytics for statistical and analytical purposes.
- An IP is anonymized and the Platform accepts Do Not Track (DNT) requests, as well as opt-out from tracking.
- The Information collected is:
- links followed
- page scrolling depth
- actions related to submission forms
You have the possibility to opt-out of Google Analytics by clicking on the following link:
You can also avoid Google Analytics by using the Do Not Track feature of your browser.
Articles on the Platform may include embedded content (e.g., videos, images, articles, etc.) from other websites or social networks.
If a user believes a breach of privacy has occurred in a Facebook feed, the user should refer to Facebook and follow Facebook’s procedures for corrective action.
Use of Contact Forms
The Contact us form is required to contact the Open Sofia Foundation. This form integrates a CAPTCHA feature to avoid spam.
When using CAPTCHA features, the user hash from an IP address is stored in a database.
Please note that a «user hash» is an anonymized string created from your IP or email address.
The CAPTCHA feature also ensures that humans, not robots, are utilizing the platform. For instance, directly messaging employers and real estate agents, or registering for an event.
The reCAPTCHA plugin collects:
- the date of action
- the language your browser is set to
- any plugins you have installed in your browser
- all cookies placed on your device by Google over the last 6 months
- number of mouse clicks made on that page (or touches if on a touch device)
- the CSS information for that page
If you contact the Platform team via the contact form, the following information is collected to allow for exchanges:
- your email address
- the content of the message
When contacting us through the contact us page, you may opt to save your name, email address, and website in cookies. This is for your convenience and eliminates the need for you to fill out your details again when sending a message or leaving a review. These cookies last for a maximum of one year.
To find out more about what data has been collected by the Platform, please use the following link: contact us.
II) Using the Platform as a registered user
To access some features (full information on jobs, real estate, exchanges with other users, etc.), you must create a user profile.
The Platform collects your user profile data only with your consent. You grant consent either by creating a user profile from your email address or from your social login from Facebook or Linkedin.
In addition to information collected by default, as indicated in the previous section, the Platform collects information necessary to use the advanced features of the Platform.
When creating your profile through email, compulsory user information includes:
- first name
- last name
- valid email address
- social profile avatar
- unique identifier
When you log in, we establish cookies to save your login information and screen display choices.
- If you do not logout, login cookies last for two days and screen options cookies last for a year.
- If you select “Remember Me,” your login remaioutputns for two weeks.
- If you log out of your account, the login cookies are removed.
This data is used to create your user profile for use of all the features of the Platform. Want to delete your account and data? Click the following button, you will lose access to your account immediately and your data will be erased within 48 hours.
Jobs, real estate, and events sections
Based on the actions of your user profile, the Platform may also request the following information:
- profession – necessary to use the jobs section
- services reserved – necessary to use the events section
- forms used – necessary to exchange messages in the job, real estate, and events sections
Non-compulsory user information:
Please note, the Platform collects and stores messages exchanged with other users or service providers (jobs, real estate, promotions, etc.).
Further information automatically collected during the use of the Platform
When uploaded images to the Platform, you should avoid images with embedded location data (EXIF GPS). Users of the Platform can download and extract any location data from images on the website.
Should you wish to review an ad or evaluate a service provider in the jobs, real estate, or events, the Platform collects and stores:
- contents of the evaluation or review
- time and place of review
- IP of origin
In order to avoid abusive behavior, specific archiving rules apply to reviews and evaluations of services. The information is stored for 12 months after the deletion of your profile.
REAL ESTATE: The property owner/agent will receive an email copy of your message and information provided in the Open Sofia form. All exchanges between you and the property owner/agent will be stored for 12 months, even after the deletion of your user profile. This will only be used in cases of a legal conflict between you and the other party in the specific commercial deal.
Access to your personal data
If you have a user profile on the Platform, you can request a file of the personal information we hold about you, including any data you have provided. You can also request that we erase your personal data. This does not include data we are obliged to keep for administrative, legal, or security purposes.
You may contact us to delete your account and your personal data collected by the Platform will be deleted after 7 days. However, personal data collected within the last month for article reviews, jobs, and real estate ads will be kept for 2 months to avoid willful abusive behavior.
III) Using the Platform as a service provider
As a person promoting products or services on the Platform, you enter into a commercial/contractual relationship with the Open Sofia Foundation.
Thus, the information included on the Platform about your services, events, or products is not subject to privacy rules of the 2018 GDPR. This includes information such as name, email, or telephone number necessary for users to contact you.
To publish ads or information about your products or services, please use the following page to learn more about a partnership with the Open Sofia Foundation.
All information given by a service provider is stored for one year after the advertisement’s expiration date. If an ad is found to contain deliberately false information, or to be a scam, the information collected may be provided to judicial authorities or the police in the context of a civil or criminal investigation.
IV) Competent courts
Should any conflict arise between the Open Sofia Foundation and a user, content provider, or service provider, the applicable law is Bulgarian law, regardless of the location of the user, content provider, or service provider.
The competent courts will be the Bulgarian courts located in Sofia, Bulgaria.
Last update: 28 March 2020
Types of cookies
The following types of cookies may be used when you visit the Platform:
Advertising cookies are placed on your computer by advertisers and ad servers in order to display advertisements that are most likely to be of interest to you. These cookies allow advertisers and ad servers to gather information about your visits to the Platform, alternate the ads sent to a specific computer, and track how often an ad has been viewed and by whom. These cookies are linked to a computer and do not gather any personal information about you.
Analytics cookies monitor how users reached the Platform, and how they interact with and move around once on the Platform. These cookies let us know what features on the Platform are working the best and what features on the Platform can be improved.
Security cookies help identify and prevent security risks. We use these cookies to authenticate users and protect user data from unauthorized parties.
Site Management Cookies
Site management cookies are used to maintain your identity or session on the Platform so that you are not logged off unexpectedly, and any information you enter is retained from page to page. These cookies cannot be turned off individually, but you can disable all cookies in your browser.
Control of cookies
Most browsers are set to accept cookies by default. However, you can remove or reject cookies in your browser’s settings. Please be aware that such action could affect the availability and functionality of the Platform.
For more information on how to control cookies, check your browser or device’s settings for how you can control or reject cookies.
In addition, you may opt-out of the “Non Necessary” cookies through the Cookie Settings in our page.
Last update: 29 March 2020