Skip to content

GDPR

Privacy Policy of Sofia-Mat ltd.

Disclaimer: This translation is provided for informational purposes only. The official Privacy Policy of Sofia-Mat EOOD is available in Bulgarian.

At Sofia-Mat, we acknowledge the critical importance of data protection and are committed to processing your personal data responsibly and in full compliance with applicable data protection legislation, including the General Data Protection Regulation (GDPR). This policy aims to clearly inform you about the categories of personal data we collect, the purposes for which we collect it, how we utilize and safeguard it, and your rights as a data subject.

1. Data Controller Identification

Sofia-Mat EOOD, registered at Sofia, “Gen. Nik. Stoletov” Blvd. No. 38-B, with UIC 207997626, acts as the data controller responsible for determining the purposes and means of processing your personal data.

2. Categories of Personal Data Collected

We may collect the following categories of personal data:

  • Identity Data: First name, middle name, last name of the parent/guardian and the student.
  • Contact Data: Telephone number, email address.
  • Educational Data: Student’s grade/class, school, information concerning academic performance (strictly with your explicit consent and solely for the purpose of progress monitoring), and details regarding specific learning needs (if applicable and voluntarily provided by you).
  • Financial Data: Information pertaining to payments for courses and services.
  • Other Data: Any other information you voluntarily provide to us in connection with our services.

3. Methods of Data Collection

Personal data is collected directly from you:

  • When you complete enrollment forms, enter into contracts, submit inquiries, engage in phone conversations, or communicate with us via email.

4. Purposes of Processing Personal Data

We process your personal data exclusively for specified, explicit, and legitimate purposes:

  • Provision of Educational Services: For student enrollment, organization of group and individual lessons, monitoring academic progress, and facilitating communication regarding the educational process.
  • Contract Management: For the administration of educational agreements, invoicing, and processing of payments.
  • Communication: To respond to your inquiries, provide information about our services, and notify you of any relevant changes or events.
  • Service Improvement: For analyzing the effectiveness of our educational programs and gathering feedback to enhance our methodologies and curricula.
  • Compliance with Legal Obligations: To fulfill our statutory requirements, including accounting and tax obligations.
  • Direct Marketing (based on consent): To send you information about new courses, promotions, or events that may be of interest to you. Your consent for marketing purposes can be withdrawn at any time.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Performance of a Contract: Processing is necessary for the performance of the educational services contract to which you are a party.
  • Consent: Where you have given explicit consent for specific processing activities, such as direct marketing or the processing of special categories of data.
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which Sofia-Mat is subject.
  • Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by Sofia-Mat (e.g., service improvement, customer relationship management), except where such interests are overridden by your fundamental rights and freedoms.

6. Disclosure of Personal Data

Sofia-Mat does not engage in the sale, rental, or trading of your personal data. We may share data with:

  • Processors/Service Providers: Third parties who provide services on our behalf (e.g., accounting services, IT support, software platforms). These processors are contractually bound to maintain confidentiality and to process data strictly according to our documented instructions.
  • Competent Authorities: Where required by law or judicial order (e.g., National Revenue Agency (NRA), judicial bodies).

7. Data Retention Period

Your personal data will be stored only for the period necessary to fulfill the purposes for which it was collected, or to comply with legal retention requirements (e.g., accounting documents). Upon expiry of this period, the data will be securely deleted or anonymized.

8. Data Security Measures

We implement all necessary technical and organizational measures to ensure a level of security appropriate to the risk, safeguarding your personal data from unauthorized access, accidental loss, destruction, or disclosure. These measures include:

  • Access controls to data.
  • Data encryption, where appropriate.
  • Regular data backups.
  • Staff training on data protection principles and practices.

9. Your Data Subject Rights

As a data subject, you have the following rights concerning your personal data:

  • Right of Access: To obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data.
  • Right to Rectification: To request the rectification of inaccurate or incomplete personal data concerning you.
  • Right to Erasure (“Right to be Forgotten”): To request the erasure of your personal data under certain conditions.
  • Right to Restriction of Processing: To request the restriction of processing of your personal data under certain conditions.
  • Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format, and to transmit those data to another controller.
  • Right to Object: To object to the processing of your personal data based on legitimate interests.
  • Right to Withdraw Consent: To withdraw your consent at any time, where processing is based on consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint: To lodge a complaint with the Commission for Personal Data Protection (CPDP) if you believe your rights under GDPR have been infringed.

10. Contact Information

For any inquiries related to this Privacy Policy or to exercise your data subject rights, please contact us at:

  • Email: sofiamath.pdp@gmail.com
  • Phone: 0886 555 786
  • Address: 79 Pirotska St., 3rd floor, Sofia

11. Amendments to the Privacy Policy

This Policy may be updated periodically to reflect changes in legal requirements or our data processing practices. Any revisions will be published on our website. We encourage you to review this page regularly.

Date of last update: June 20, 2025