Tickets
{schedule} View All Talks Workshops Exhibition Party Screenings Lineup About

{Legals}

Privacy Policy for Processing of Personal Data

Information About the Data Controller:

ShapeShift 23 Ltd., is a company registered in the Commercial Register of the Registry Agency with UIC 208084707, with headquarters and management address: Sofia, St. St. Cyril and Methodius 82; email: hristo@next-dc.com

We process your personal data on the following grounds:
  • The contract between us and you to fulfill our obligations;
  • Explicit consent from you – the purpose is specified for each specific case;
  • Legal obligation provided by law.
For Contract Execution or Pre-Contractual Relationships:

We process your personal data to fulfill contractual and pre-contractual obligations and to exercise our rights under the contracts concluded with you.

Purposes of processing:
  • Identification verification;
  • Management and execution of your requests and fulfillment of the concluded contract;
  • Issuance and sending of invoices for the services you use with us;
  • Maintaining correspondence regarding placed orders, requests, reporting issues, etc.;
  • Creating a user profile.
On the basis of the contract concluded between us and you, we process information such as:
  • Personal contact data – contact address, email, phone number;
  • Identification data – full name, personal identification number, permanent address;
  • Data on orders placed through the user profile;
  • Email correspondence, problem resolution requests, complaints, inquiries, grievances;
  • Credit or debit card information, bank account number, or other financial data for payment processing.

The processing of the listed personal data is mandatory for the conclusion and execution of the contract with you. We provide your personal data to third parties with the primary goal of offering you fast and comprehensive service.

Recipients of your personal data:
  • Postal operators and courier companies;
  • Consultants providing services in various fields.

The data collected on this basis is deleted 5 years after the end of the contractual relationship, regardless of whether it ends due to the expiration of the contract term, termination, or another reason. This term is determined by the 5-year limitation period for contractual claims.

For Compliance with Legal Obligations:

We may be required by law to process your personal data. In such cases, we are obliged to carry out the processing, for example:

  • Obligations under the Anti-Money Laundering Act;
  • Obligations related to distance selling under consumer protection laws;
  • Providing information to the Consumer Protection Commission or other third parties as stipulated by the law;
  • Providing information to the Personal Data Protection Commission;
  • Compliance with accounting and tax-related obligations;
  • Providing information to the courts and other state bodies in accordance with applicable laws;
  • Age verification for online shopping.

Data collected under legal obligations is deleted after the fulfillment or expiration of the respective obligation. For example:

  • Accounting data is retained for 11 years;
  • Information related to legal claims is retained for 5 years.
Based on Your Consent:

We process your personal data on this basis only after obtaining your explicit, unambiguous, and voluntary consent. You will not face any negative consequences if you refuse consent.