PRIVACY POLICY
for www.bnesf.org

Last updated: 12.03.2026
Effective from: 12.03.2026

1. General Provisions

1.1. This Privacy Policy governs the processing of personal data of natural persons when visiting and using www.bnesf.org (the “Website”), as well as when contacting the Association “Bulgarian National Electronic Sports Federation” (“BNESF”, the “Federation”, the “Controller”).

1.2. BNESF processes personal data in accordance with:

  • Regulation (EU) 2016/679 (GDPR);
  • the Bulgarian Personal Data Protection Act;
  • all other applicable Bulgarian and EU legal acts.

1.3. This Policy aims to inform data subjects what personal data may be processed, for what purposes, on what legal basis, for what retention period, with whom such data may be shared, and what rights the relevant persons have.

2. Controller Details

2.1. The data controller is:
Association “Bulgarian National Electronic Sports Federation”
UIC: 206871304
Registered seat and address of management: Sofia, Lozenets district, James Bourchier No. 25, Entrance B, Ground Floor
Website: www.bnesf.org
E-mail: info@bnesf.org

2.2. If BNESF has designated a Data Protection Officer (DPO), their contact details shall be published separately on the Website or provided upon request.

3. Categories of Personal Data We May Process

Depending on how you use the Website or interact with BNESF, the following categories of personal data may be processed:

3.1. Data provided voluntarily by you

This may include:

  • first and last name;
  • e-mail address;
  • phone number;
  • organization, club, team or position;
  • contents of inquiries, messages, applications, notices or correspondence;
  • any other information voluntarily sent by you through contact forms, e-mail, registrations, applications or documents.

3.2. Technical data collected when using the Website

When visiting the Website, the following may be processed automatically:

  • IP address;
  • device data;
  • browser type;
  • operating system;
  • date and time of visit;
  • pages visited;
  • referrer URL;
  • logs and technical identifiers;
  • data generated through cookies and similar technologies.

3.3. Data related to the Federation’s activities

Where BNESF organizes events, national teams, qualifiers, leagues, educational activities, applications or other initiatives, additional categories of data may be processed, such as:

  • identification and contact data;
  • participation data;
  • club affiliation data;
  • competitive, organizational or communication data;
  • photographs, videos and media materials, where lawful and appropriate.

4. Purposes of Processing

BNESF may process personal data for the following purposes:

4.1. to ensure the normal operation, security and technical maintenance of the Website;

4.2. to respond to inquiries, requests, notices and correspondence;

4.3. to administer relations with members, clubs, partners, players, coaches, volunteers, applicants or other persons, where applicable;

4.4. to organize and report on events, competitions, qualifiers, national teams, media initiatives and public activities of the Federation;

4.5. to publish news, results, lists, rosters, achievements and other materials, where there is an appropriate legal basis;

4.6. to comply with legal obligations;

4.7. to protect the legitimate interests of BNESF, including preventing misuse, protecting IT systems, and establishing, exercising or defending legal claims.

5. Legal Bases for Processing

BNESF processes personal data only where at least one applicable legal basis under the GDPR exists, including:

5.1. consent of the data subject;

5.2. performance of a contract or taking steps at the request of the data subject prior to entering into a contract;

5.3. compliance with a legal obligation of BNESF;

5.4. legitimate interests pursued by BNESF or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject;

5.5. where applicable — public interest or other legal bases provided by applicable law.

6. Sources of Personal Data

Personal data may be obtained:

  • directly from you;
  • through the use of the Website;
  • from publicly available sources;
  • from clubs, partners, organizers or other persons, where lawful and relevant to BNESF’s activities;
  • through social media, external platforms or tournament systems, where you interact with the Federation through them.

7. Recipients and Categories of Recipients

BNESF may disclose personal data to the following categories of recipients where necessary and lawful:

7.1. hosting providers, IT support providers, cloud service providers, e-mail service providers, security and technical administration providers;

7.2. service providers related to communications, registration systems, forms, document management and event organization;

7.3. lawyers, accountants, consultants, auditors and other professional advisers;

7.4. public authorities, courts, supervisory authorities or other competent institutions where required by law;

7.5. international, European or national sports/esports organizations, partners and organizers, where necessary in relation to participation, coordination, representation or event organization and where there is a valid legal basis.

8. International Transfers

8.1. As a rule, BNESF seeks to process personal data within the European Economic Area.

8.2. If it becomes necessary to transfer personal data outside the EEA, this will be done only where an applicable lawful transfer mechanism under the GDPR is in place, including:

  • an adequacy decision;
  • standard contractual clauses;
  • another lawful mechanism under applicable law.

9. Retention Periods

9.1. BNESF retains personal data only for as long as necessary to achieve the purposes for which the data were collected, unless applicable law requires a longer retention period.

9.2. The retention period depends on the type of data and the legal basis for processing, including:

  • until the handling of the specific inquiry or correspondence is completed;
  • for the duration of contractual or organizational relations;
  • for statutory retention periods;
  • until the legitimate interest ceases to exist;
  • until consent is withdrawn where processing is based on consent, unless another legal basis justifies continued processing.

9.3. After the applicable periods expire, data are deleted, anonymized or archived as appropriate.

10. Data Subject Rights

Each data subject has the right, where applicable, to request:

10.1. access to their personal data;

10.2. rectification of inaccurate or incomplete personal data;

10.3. erasure of personal data (“right to be forgotten”);

10.4. restriction of processing;

10.5. data portability;

10.6. objection to processing where the processing is based on legitimate interests;

10.7. withdrawal of consent at any time where the processing is based on consent, without affecting the lawfulness of processing before the withdrawal;

10.8. not to be subject to a decision based solely on automated processing, including profiling, where the conditions under the GDPR are met.

11. Exercising Rights

11.1. Requests for exercising rights may be sent to BNESF at:
info@bnesf.org

11.2. BNESF may request reasonable additional information to verify the identity of the applicant where necessary.

11.3. BNESF shall review each request within the timeframes and under the conditions provided by applicable law.

12. Complaint to a Supervisory Authority

12.1. If you believe that the processing of your personal data violates applicable law, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP), the supervisory authority in the Republic of Bulgaria. Information on complaint procedures is published by the CPDP.

13. Security

13.1. BNESF applies appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.

13.2. However, no method of data transmission or storage is completely secure and absolute security cannot be guaranteed.

14. Children’s Data

14.1. BNESF does not knowingly collect personal data from children through the Website unless this is necessary for a specific activity, event, selection, participation or other lawful activity and the relevant legal requirements are met, including parental/guardian involvement where needed.

14.2. Where BNESF becomes aware that children’s data have been provided in breach of applicable rules, it shall take appropriate action.

15. External Websites and Social Media

15.1. The Website may contain links to external websites, social media, streaming platforms, forms or tournament systems.

15.2. BNESF is not responsible for the privacy policies or practices of such external controllers. Users are encouraged to review their terms and policies separately.

16. Amendments to this Policy

16.1. BNESF reserves the right to amend and supplement this Privacy Policy at any time.

16.2. The current version shall be published on the Website and shall take effect as of the date indicated therein.

Scroll to Top