Privacy Policy

This Privacy Policy does not establish rights and obligations, but aims to explain why and what personal data we collect, how we process and store it, including when it is necessary to disclose personal data to third parties. This policy also provides information about the rights that users have regarding the processing of personal data by Ruse Municipality.

 

Why We Collect Personal Data

 

We collect personal data in connection with the exercise of our official authority, compliance with legal obligations, protection of legitimate interests, or the performance of a task carried out in the public interest.

 

What Personal Data We Collect

 

Names, Personal Identification Number (or Foreigner Identification Number); data related to health status; data from identity documents (these data are not stored by Ruse Municipality but are used for document validity checks and identity verification); data about a legal representative or proxy (if the person is represented by one), including power of attorney; contact information such as email address, phone number, postal address, etc.

 

How We Process Personal Data

 

Processing includes a wide range of operations performed with personal data, whether by manual or automated means. These include collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, arrangement or combination, restriction, erasure, or destruction.

 

Key Principles For Data Processing

 

We process personal data lawfully, fairly, and in a transparent manner with respect to the data subject, and only for specified, explicit, and legitimate purposes in accordance with applicable law. We inform citizens of what data we collect, why, and how. Personal data is processed only for lawful purposes and is not retained longer than necessary unless legal obligations require otherwise.

 

We implement the necessary technical and organizational measures to protect your personal data against accidental or unlawful destruction, accidental loss, unauthorized access, alteration, dissemination, and any other unlawful forms of processing.

 

How We Collect Personal Data

 

In most cases, we receive personal information directly from data subjects when they fill in requests, applications, or other documents required for the exercise of our official duties and compliance with legal obligations.

 

Disclosure to Competent Authorities

 

Where legally required, personal data collected and processed by Ruse Municipality shall be disclosed to the competent authorities.

 

Data Retention Period

 

We store personal data only for as long as necessary to fulfill legal requirements.

 

Public Administration and Data Protection

 

You may contact us to exercise your rights.

According to the General Data Protection Regulation (GDPR), data subjects (individuals to whom the data relates) have the right to:

– Be informed about the processing of their personal data;

– Access their own personal data;

– Rectification (if the data is inaccurate);

– Erasure of personal data (“right to be forgotten”)*;

– Restriction of processing by the controller or processor;

– Data portability between controllers;

– Object to the processing of their personal data;

– Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them;

– They also have the right to legal or administrative remedy if their data protection rights are violated.

 

The data subject has the right to receive information about the data controller and the processing of their personal data. This includes:

– Identification details of the controller and contact information, including contact details of the Data Protection Officer (if applicable);

– Purposes and legal basis for the processing;

– Recipients or categories of recipients of the data (if any);

– Any intention to transfer the data to third countries (where applicable);

– Data retention period;

– Existence of automated decision-making, including profiling (if applicable);

– Information about all rights of the data subject;

– Right to lodge a complaint with a supervisory authority.

 

This information is not provided if the data subject already possesses it.

 

If you submit a request to exercise your rights, we will respond within one month. Where necessary, this period may be extended by up to two additional months, and you will be informed accordingly.

 

If your request is denied, you will be notified of the reasons and of your right to lodge a complaint with the Commission for Personal Data Protection and to seek legal remedy.

 

All actions taken by Ruse Municipality in relation to the exercise of user rights are free of charge. When a request is manifestly unfounded or excessive (e.g., due to its repetitive nature), the Municipality may refuse to act or may charge a reasonable fee based on administrative costs.

 

*The right to erasure (“right to be forgotten”) allows the data subject to request deletion of their data when:

– The data is no longer necessary for the purposes for which it was collected or processed;

– The data subject withdraws consent, and there is no other legal basis for processing;

– The data subject objects to the processing and there are no overriding legitimate grounds;

– The data was processed unlawfully;

– The data must be erased for legal compliance;

– The data was collected in relation to offering information society services to a child.

 

The “right to be forgotten” is not absolute. Ruse Municipality may refuse erasure where processing is necessary for:

– Exercising freedom of expression and information;

– Compliance with a legal obligation or task carried out in the public interest or official authority;

– Reasons of public health;

– Archiving in the public interest, scientific or historical research, or statistical purposes;

– Establishment, exercise, or defense of legal claims.

 

This Privacy Policy is current as of 25.06.2025.

 

This Privacy Policy may be amended or supplemented due to changes in applicable legislation, at the initiative of Ruse Municipality or a competent authority (e.g., the Commission for Personal Data Protection).