Last updated: 10.09.2026

1. Data Controller

The data controller responsible for the processing of personal data through the website bapd.bg is:

Bulgarian Association of Pediatric Dentistry (BAPD)
3 Hristo Botev Blvd.
Plovdiv, Bulgaria
Phone: 088 952 8932
E-mail: bapd@bapd.bg

2. What Personal Data We Process

Depending on the functionality of the website used, the following personal data may be processed:

* first and last name;
* e-mail address;
* telephone number;
* place of employment;
* membership-related information;
* information necessary to identify and record a payment;
* technical data necessary for the security and proper functioning of the website.

For online payments, payment data are processed through Stripe in accordance with Stripe’s applicable terms and policies. Depending on the specific processing activity, Stripe may act as a data controller or a data processor.

3. Purposes and Legal Bases

Personal data are processed for the following purposes:

* processing membership applications;
* administering membership in BAPD;
* processing and recording membership fee payments;
* communicating with individuals regarding their membership application or payment;
* complying with legal and accounting obligations;
* ensuring the security and proper functioning of the website.

Personal data are processed on the basis of the performance of a contract or taking steps at the request of the individual prior to entering into a contract, compliance with a legal obligation, the legitimate interests of BAPD, or consent, where the respective processing is based on consent.

4. Recipients of Personal Data

Where necessary for the purposes stated above, personal data may be provided to:

* payment service providers, including Stripe;
* hosting and technical infrastructure providers, including **SuperHosting**;
* accountants and professional advisers;
* competent public authorities where required by law.

Where external service providers are used, personal data may, where applicable, be transferred to or accessed from locations outside the European Economic Area, in accordance with the requirements of the GDPR.

5. Data Retention and Security

Personal data are retained for as long as necessary to fulfil the purposes for which they were collected and for the periods required by applicable law.

BAPD implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

6. Data Subject Rights

You have the right to access your personal data, request their correction or deletion, request restriction of processing, object to processing, and request data portability where the applicable legal requirements are met.

Where processing is based on consent, you have the right to withdraw your consent at any time.

To exercise your rights, you may contact BAPD at bapd@bapd.bg.

You also have the right to lodge a complaint with the **Commission for Personal Data Protection (CPDP) if you believe that your rights have been violated.**

7. Cookies

The website may use cookies and similar technologies for its proper functioning and security.

Further information is provided in the Cookie Policy.

8. Changes to this Privacy Policy

BAPD may update this Privacy Policy when there are changes in legislation, the services used, or the way personal data are processed.

The current version of this Privacy Policy is always published on this page.