PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF REGULATION 2016/679 REGARDING THE PROCESSING OF PERSONAL DATA

This document provides you with summarized information about how we plan to process your personal data, what rights you have in this regard, how to exercise them, and other important details.

Personal data refers to any information related to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Personal data is any information that can be used to identify you.

Data Controller Identification	Schwarz Global Services Bulgaria EOOD, a company registered under the laws of the Republic of Bulgaria, UIC 205158327. Registered office: Sofia, Lozenets District, 51 Cherni Vrah Blvd., 11th floor.
Data Protection Officer (for personal data-related inquiries only)	Veronika Andreeva, Email: sit-bg-dpo@mail.schwarz
Processing Purposes	Processing of personal data related to inquiries for renting the Planet Schwarz venue for events and preparing a personalized rental offer for the space. Processing of personal data (photos/videos/interviews/articles) from events held by external renters, provided that the renter has signed a rental agreement and has been informed in it about the use of such materials for marketing/PR purposes by the Administrator and the lessor. Processing of personal data for the purposes of direct marketing, providing future offers and proposals to individuals who have expressed interest in the venue. Google Analytics and similar tools use information about user behavior on the website for analysis and statistical purposes, as well as to offer you events that may be of interest to you.
Legal Basis	The processing of personal data for the purposes described above is carried out on the basis of: the conclusion of a contract and legitimate interest. Data required for submitting an inquiry regarding the use of the venue is processed under Article 6(1)(b) of GDPR – for the purpose of concluding and executing a rental agreement. Data processed for direct marketing, advertising, and PR purposes is processed under Article 6(1)(e) of GDPR – for the purpose of protecting the legitimate interests of the Administrator. Data from Google Analytics (and similar tools) used to provide information about upcoming events is processed under Article 6(1)(a) of GDPR, with consent that can be withdrawn at any time regarding specific cookies used for this purpose.
Data We Process	The categories of personal data processed include: Your name; Email address; Phone number; Company you work for (potential renter); Photos/videos from events; Interests in events.
Categories of Recipients (Optional)	– Event organization agencies; – Government authorities – when we have a legal obligation to provide information in certain cases; – Google Analytics and similar tools.
Retention Period	We will retain your data for a period of 6 months from the moment of receiving the inquiry regarding the use of the Venue, as well as for direct marketing purposes to send advertisements and offers for future use of the venue. Additionally, data will be retained for 3 years for marketing/PR purposes if you subsequently sign a rental agreement and hold your event with us, and the Administrator decides to use materials from the event (e.g., photos/videos) for advertising purposes. Data collected via Google Analytics (or similar tools) and used for promotional messages about upcoming events with similar themes will be stored for 1 year and 6 months. For evidentiary purposes, confirming that the Administrator has informed the individual of this Privacy Notice digitally, information on clicks/acknowledgments regarding this Notice will be retained for 6 years.
Data Subject Rights	You can request from us, as the data controller, access to, correction, or deletion of personal data, or restriction of the processing of personal data related to you. You also have the right to object to the processing and the right to data portability. We will ensure that requests to exercise your rights are reviewed within the timeframes specified under the Personal Data Protection Act and Regulation 2016/679. Please note that your requests to exercise your rights and their fulfillment will be subject to the conditions of Regulation 2016/679 and the Personal Data Protection Act.
Exercise of Rights	You can exercise your rights electronically (via email) at the email address provided above in this notice and/or by sending us a letter and/or submitting your request directly to us. Please note that if the request is made remotely, we may ask for additional identification details to ensure that it is indeed you exercising your rights and not a third party acting in bad faith.
Right to Complain	You have the right to file a complaint with the relevant supervisory authority – the Commission for Personal Data Protection (www.cpdp.bg). Alternatively, you may contact us directly to discuss concerns about data processing rights violations.
Right to Object	You may object to the processing of your personal data based on legitimate interests by contacting the Data Protection Officer.
Obligation to Provide Data	Providing your personal data is mandatory to register/express interest in renting the Planet Schwarz venue.
Data Transfer	Your personal data will not be transferred to countries outside the European Union or the European Economic Area.
Automated Decision-Making	You will not be subject to automated decision-making.