Privacy Policy

Home
Privacy Policy
Rise Font
Send to Friend

The purpose of this policy is to allow data subjects to be informed on the processesof collection, storage, use and protection of their personal data, as well as to be informed about their rights in respect of such data.

The Bulgarian Deposit Insurance Fund (BDIF) guarantees in utmost degree the protection of personal data processed or made available in connection with BDIF performance of its mandate in accordance with the requirements of the Bank Deposit Guarantee Act (BDGA) and the Bank Bankruptcy Act (BBA).

BDIF fulfils the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), having further developed its overall data protection framework, which is an integral part of BDIF internal regulations on BDIF information security management.

This Privacy Policy applies to individuals whose personal data are processed by BDIF in fulfilment of its mandate, while protecting its legitimate interests or protecting the public interest.

Who Processes and Bears Responsibility for Personal Data

The BDIF is a personal data controller within the meaning of the General Data Protection Regulation and the Personal Data Protection Act.
For any questions relating to the processing of your personal data, you can contact us at our headquarters in 1606 Sofia, 27 Vladayska Str., or by email at the BDIF Data Protection Officer’s email:
Dimitar Tsekov
e-mail: dpo@dif.bg

Supervisory authority:
Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia
Call centre – tel.: +359 2 9153 519

Personal Data Processed by BDIF

BDIF does not collect nor processes more or different type of personal data than those required to perform its activities in accordance with the requirements of the BDGA and the BBA, as well as those used in the performance of its contractual relations with an explicit consent provided.

Purposes for Processing Personal Data

BDIF receives, collects, processes, stores and uses personal data for the following purposes under its legal obligations:

  • Processing of personal data required for the payout of covered deposits, the testing of the deposit guarantee system and the effective restructuring of credit institutions;
  • Processing of personal data to fulfil its mandate under the Bank Bankruptcy Act;
  • Processing of personal data on a contractual basis, necessary for concluding or executing contracts between BDIF and third parties related to BDIF activities;
  • Processing of personal data where an explicit consent by individuals is in place;
  • Protection of legitimate interest of BDIF and of the public interest.

Storage Limitation of Personal Data

The duration of storage of personal data depends on the processing purposes for which they are collected:

  • The personal data processed for the purposes of payout of covered deposits, the support of the effective restructuring of credit institutions and the fulfilment of BDIF mandate, as required by the Bank Bankruptcy Act, are kept for a period consistent with the process of payout of covered deposits and conclusion of the bankruptcy proceedings, as well as with the requirements of the Accountancy Act and the Tax and Social Insurance Procedure Code;
  • Personal data processed for the purpose of testing the deposit guarantee system shall not be kept longer than the time required to conduct the tests and shall be destroyed once the test has been completed;
  • Personal data of the representatives of BDIF counterparties are kept for a period consistent with the requirements for storing accounting documents as stated in the Accountancy Act and the Tax and Social Insurance Procedure Code;
  • Personal data contained in the inquiries by depositors whose deposits are being paid out/have been paid out by BDIF, as well as in inquiries of creditors of banks in bankruptcy, are kept for up to one year from the date the particular inquiry was received. The personal data processed in relation to general inquiries and their respective replies are kept for a period of up to one month from the date the response was sent;
  • The inquiries sent to the e-mail of BDIF’s DPO and their respective replies are kept for one year from the date the response was sent. The correspondence relating to requests for exercise of rights of an individual who is a subject of data processed by BDIF is kept for a period of one year after the DPO sent a reply with the information about the actions undertaken regarding the particular request.

Rights of Data Subjects Related to Personal Data Processing

  • Right to access
    • Any individual who is a subject of data processed by BDIF is entitled to obtain information about the personal data concerning him which BDIF processes.
  • Right to erasure or rectification
    • Any individual who is a subject of data processed by BDIF is entitled to request erasure or rectification of his personal data, where they are inaccurate or shall be amended, or their processing is not compliant with the Personal Data Protection Act when grounds for that are in place.
  • Right to restriction of personal data processing
    • Any individual who is a subject of data processed by BDIF is entitled to request restriction of personal data processing when grounds for that are in place.
  • Right to object personal data processing
    • Any individual who is a subject of data processed by BDIF is entitled to object the processing before the BDIF, if he/she considers that the data are unlawfully processed.
  • Right to withdraw consent to the processing of personal data
    • Any person, a subject of personal data processed by the BDIF, whose personal data are processed on the basis of consent, has the right to withdraw consent at any time.
  • Right to complain
    • Any person, a subject of personal data processed by the BDIF, if he/she considers that his/her personal data are not being processed lawfully, has the right to lodge a complaint with the supervisory authority - the Personal Data Protection Commission, or with another supervisory authority within the EU. In case you believe that your personal data are not being processed lawfully by the Fund, we kindly ask you to contact us beforehand to clarify the issue or to exercise your right to object to the BDIF.

    Transfer of Personal Data

    BDIF provides personal data to the respective servicing banks for the purpose of payout of covered deposits.

    BDIF provides personal data to state authorities and institutions where such an obligation under special legal regulations is in place.

    BDIF may provide personal data to individuals outside Bulgaria in an EU Member State if the bank for which the covered deposits are paid has a branch in the respective Member State.

    Public Access to Personal Data

    In compliance with the requirements of Art. 62, para 12 of the Credit Institutions Act BDIF has published on its website the following lists containing personal data:

    • natural and legal persons and the amount of their loans in default at the date of disclosure;
    • consultancy contracts, rental contracts and other non gratuitous and gratuitous transactions between the bank and the persons under Art. 2, paras 1 and 3 of the Law on Publicity of Property owned by Persons Occupying High State Positions, members of management and supervisory boards of the bank in bankruptcy;
    • the amount of the deposits and loans of natural persons under Art. 2, paras 1 and 3 of the Law on Publicity of Property owned by Persons Occupying High State Positions, members of management and supervisory boards of the bank in bankruptcy, drawn up on the basis of information provided on the grounds of Art. 15, para 15 of the Credit Institutions Act by the President of the National Audit Office
    • the amount of the deposits and loans of legal persons, drawn up on the basis of information provided on the grounds of Art. 15, para 15 of the Credit Institutions Act by the President of the National Audit Office
    • the amount of deposits and loans of political parties, drawn up on the basis of information on political parties provided by Sofia City Court;
    • credit transactions where: no collateral has been contracted or the value of the contracted collateral is lower than the amount of the utilised loan; the contracted collateral is not properly established; upon a proper establishment of the collateral, the rights of the pledge creditor thereon have not been reserved under the procedure provided for by law, including in the cases where entries of registered pledges have not been renewed, the subject of the real pledge has not been submitted to the creditor or is missing on the date of the disclosure; loans have been renegotiated regarding the deadline, the amount and the type of collateral if not agreed in the host contract;
    • credit transactions, where property originating from the bank under § 1, item 6 of the Additional Provisions of the  Bank Bankruptcy Act has been provided by a borrower to other parties and the amount of each transaction exceeds EUR 25,000, with the persons being disclosed consecutively; the threshold requirements shall not apply to persons under Art. 2, paras 1 and 3 of the Law on Publicity of Property Owned by Persons Occupying High State Positions;
    • natural and legal persons who announced their transfer of receivables or made a setoff statement after the bank had been placed under special supervision;
    • natural and legal persons and the amount of their loans who have been granted preferential interest rates in deviation from the terms and conditions announced by the bank in bankruptcy to be applied to all its borrowers for a period of two years before the date of insolvency;
    • natural and legal persons and the amount of their deposits under § 1, item 1 of the Additional Provisions of the LBank Deposit Guarantee Act, who have been granted preferential interest rates in deviation from the terms and conditions announced by the bank in bankruptcy to be applied to all its depositors for a period of two years before the date of insolvency;
    • natural and legal persons and the amount of their deposits under § 1, item 1 of the Additional Provisions of the Bank Deposit Guarantee Act, who have been granted preferential interest rates in deviation from the terms and conditions announced by the bank to be applied to all its depositors, if those persons conducted transactions with their deposits after the bank had been placed under special supervision.

    Links from BDIF website to other websites

    BDIF website may include links to other websites that are not under the control of the BDIF. BDIF is not responsible for the protection of personal data or for the content of other websites, but offers these links to facilitate visitors in finding more information about other institutions in Bulgaria and abroad, foreign deposit insurance organisations and international financial institutions.

    Second-level information on video surveillance in the BDIF building

    The BDIF carries out video surveillance of its building in order to protect its property and ensure the safety and health of its employees, on the grounds of protecting its legitimate interests.The BDIF takes technical and organizational measures to protect the recordings from the video surveillance system from unauthorized access, modification and distribution, as well as from other illegal forms of processing.

    Video surveillance cameras are installed on the facade of the BDIF building, as well as in the corridors of the building and in the rooms with special access - the server room and the room with the ASI workstations. Monitor for real-time video surveillance in the guard-janitor's cabin.

    The BDIF does not use software for identification, recognition or analysis of persons and does not process biometric data obtained as a result of specific technical processing of video surveillance recordings in relation to the physical, physiological or behavioral characteristics of a given individual and which allow or confirm the unique identification of that individual.

    ‘Cookies’ Policy