This privacy notice outlines how and why the American University in Bulgaria (AUBG) collects, uses and stores your personal data, and your rights in relation to the personal data we hold. We may modify or amend this Privacy Notice. The most current version will always be available on our Website and, where appropriate, notified to you by e-mail. If you have any questions about such matters you can contact us at [email protected].
What personal data do we collect?
The personal information we collect from you is the following:
- personal data including your name for the purposes of ID access card issuing;
- images caught on security cameras, no voice is recorded;
- access control information.
Why we collect personal data?
AUBG Security office collects data through the CCTV system for various reasons:
- to control access to the building and to ensure the security of the building, the safety of AUBG students, faculty, staff and visitors, as well as property and information located or stored on the premises;
- to prevent, deter, and if necessary, investigate unauthorized physical access, including unauthorized access to student rooms, IT infrastructure, or operational information;
- to prevent, detect and investigate theft of equipment or assets owned by the University, or students.
The CCTV system is not used for any other purpose, such as to monitor the work of employees or student attendance classes, nor student habits and activities. It is important to notice that the location and positioning of the video-cameras are such that they do not cover the surrounding public space (owned by Blagoevgrad Municipality); the cameras are aimed to give a general overview of what`s happening in certain places, not to recognize individuals.
The system is also not used as an investigative tool or to obtain evidence in internal investigations or disciplinary procedures unless a security incident is involved. (In exceptional circumstances, the data may be transferred to local investigatory bodies in the framework of a formal disciplinary or criminal investigation). The CCTV cameras are installed at the entrances, placed and focused in a way that only people who want to access the site or the surrounding areas (including parking areas) are captured.
The CCTV system covers the area of entry and exit points of the buildings, entry points inside the buildings, delivery, garage and surrounding areas of the buildings.
The basis for processing your information and how we use it
AUBG Security office is collecting and processing CCTV records and access control information in compliance with the Bulgarian Law on Private Guarding Activities, art. 11 (2), which allows “security activities to include access control and regime, and/or CCTV in compliance with the Personal Data Protection Act”.
Control and care over your data
We, as an institution with one of the highest rankings in Bulgaria, are striving to improve and upgrade our control systems – to include access control mechanisms of the collected and processed data, access controls, defined within the university, and most importantly – applied due care by our staff and faculty members. All measures are implemented against inadvertent or deliberate manipulation, loss, or destruction, and access by unauthorized persons.
With whom we share your data?
Your data may be shared with public authorities, such as local department of Ministry of Interior, district prosecuting attorneys (only in cases of open investigation and upon official request by them), etc. as part of our legal obligations.
How long we keep it?
The University Security office will keep your personal data from CCTV cameras for maximum of two calendar months after your visit our premises. After that period any CCTV records are automatically deleted.
The University Security office will keep student access control information until the end of the current Academic year. After that period any CCTV recorded footage is automatically deleted.
We do not sell data or databases to third parties for any reason.
COVID-19 Information
The American University in Bulgaria (AUBG) can implement mandatory COVID-19 testing as part of its measures to prevent/limit the spreading of COVID-19 on the territory of the University and with the aim to protect the life and health of its students, employees and visitors. The mandatory COVID-19 testing is based on the legitimate interest of the controller AUBG – Art. 6, p. 1, (f) of the General Data Protection Regulation (GDPR). Please note that the actual testing is carried out in licensed laboratories by medical practitioners and AUBG does not process personal data at that stage. Once presented with information about the medical status of individuals, the processing of this data by the University is based on Art. 9, p. 2, (b) of the GDPR – processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject.
The AUBG has chosen tests that are most appropriate for the purposes of the testing and expenses for the tests are covered by the University. The AUBG will apply short retention periods by keeping the data related to the tests only for as long as it is necessary in order to make decisions connected with the purposes mentioned above: preventing/limiting the spreading of COVID-19 on the territory of the University and protecting the life and health of its students, employees and visitors. For your as a data subject in relation to the personal data we hold, pease refer to the last section of this privacy notice.
Collection and use by third party vendors
Third-party vendors, such as Google, may use cookies or other technologies to serve ads or deliver content on other websites based on your visits to our website and other sites on the Internet and to provide analytics services. These third parties may automatically collect information about your visits to this and other websites, your IP address, your ISP, the browser you use to visit our Site, pages viewed, time spent on pages, links clicked and conversion information. They do these using cookies, clear gifs or other technologies.
We do not sell data or databases to third parties for any reason.
Cookies Policy
The AUBG’s website uses cookies in order to ensure the best user experience. To review AUBG’s website cookies policy, please check the following https://www.aubg.edu/cookies-policy/.
You rights in relation to the personal data we hold
- to request access to your personal data we hold;
- to rectify or erasure your personal data; to restrict or object to processing concerning your data;
- to request data transfer to other parties;
- to withdraw consent at any time, without affecting the lawfulness of processing based on consent before this withdrawal;
- to lodge a complaint with the supervisory authority – Commission for Personal Data Protection, address – 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592.
You may address your concerns or inquiries to our Data Protection Officer (DPO) – Gugushev and Partners Law Office, Yoanna Ivanova, e-mail: [email protected]; Address: 11A Aksakov Street, floor 5, Sofia 1000, Bulgaria, Telephone: +359 2 815 75 10.
Please see AUBG Internal Rules for Data Protection for more information.
