PRIVACY POLICY
PRIVACY POLICY
PRIVACY POLICY
PRIVACY POLICY
Effective Date: Jan 1, 2026
Last Updated: March 2026
Effective Date: Jan 1, 2026
Last Updated: March 2026
This Privacy Policy explains how The BitHope Foundation collects, uses, stores, and protects your personal data when you visit www.blockchainweek.bg ("Website") or interact with us in connection with Blockchain Week Bulgaria events ("Events"). It is issued in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Bulgarian Personal Data Protection Act.
This Privacy Policy explains how The BitHope Foundation collects, uses, stores, and protects your personal data when you visit www.blockchainweek.bg ("Website") or interact with us in connection with Blockchain Week Bulgaria events ("Events"). It is issued in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Bulgarian Personal Data Protection Act.
This Privacy Policy explains how The BitHope Foundation collects, uses, stores, and protects your personal data when you visit www.blockchainweek.bg ("Website") or interact with us in connection with Blockchain Week Bulgaria events ("Events"). It is issued in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Bulgarian Personal Data Protection Act.
1. Data Controller
The BitHope Foundation
21, Haydushka Gora str., Sofia 1612, Bulgaria
Bulstat: 176798783 | VAT: BG176798783
Contact: partners@blockchainweek.bg
1. Data Controller
The BitHope Foundation
21, Haydushka Gora str., Sofia 1612, Bulgaria
Bulstat: 176798783 | VAT: BG176798783
Contact: partners@blockchainweek.bg
1. Data Controller
The BitHope Foundation
21, Haydushka Gora str., Sofia 1612, Bulgaria
Bulstat: 176798783 | VAT: BG176798783
Contact: partners@blockchainweek.bg
2. What We Collect
We collect the following categories of personal data:
Contact and identification data - name, email address, job title, and company name, collected via application and registration forms processed through Airtable
Event participation data - speaker, sponsor, volunteer, hacker, or attendee applications and related correspondence
Attendee registration data - name and email address received from our ticketing partner (bilet.bg), who collect this data on our behalf for the purpose of event access management
Marketing data - email address and communication preferences for newsletters and event updates, processed through Mailchimp, collected only from individuals who have explicitly opted in
Community engagement data - Telegram usernames when you interact with our official Telegram bot or community groups
Technical and usage data - IP address, browser type, pages visited, and session duration, collected via Google Analytics
2. What We Collect
We collect the following categories of personal data:
Contact and identification data - name, email address, job title, and company name, collected via application and registration forms processed through Airtable
Event participation data - speaker, sponsor, volunteer, hacker, or attendee applications and related correspondence
Attendee registration data - name and email address received from our ticketing partner (bilet.bg), who collect this data on our behalf for the purpose of event access management
Marketing data - email address and communication preferences for newsletters and event updates, processed through Mailchimp, collected only from individuals who have explicitly opted in
Community engagement data - Telegram usernames when you interact with our official Telegram bot or community groups
Technical and usage data - IP address, browser type, pages visited, and session duration, collected via Google Analytics
2. What We Collect
We collect the following categories of personal data:
Contact and identification data - name, email address, job title, and company name, collected via application and registration forms processed through Airtable
Event participation data - speaker, sponsor, volunteer, hacker, or attendee applications and related correspondence
Attendee registration data - name and email address received from our ticketing partner (bilet.bg), who collect this data on our behalf for the purpose of event access management
Marketing data - email address and communication preferences for newsletters and event updates, processed through Mailchimp, collected only from individuals who have explicitly opted in
Community engagement data - Telegram usernames when you interact with our official Telegram bot or community groups
Technical and usage data - IP address, browser type, pages visited, and session duration, collected via Google Analytics
3. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 GDPR:
Contractual necessity (Art. 6(1)(b)) - processing required to manage your participation as a sponsor, speaker, or registered attendee
Legitimate interests (Art. 6(1)(f)) - processing for event operations, security, website analytics, and community management, where our interests are not overridden by your rights
Consent (Art. 6(1)(a)) - processing for marketing communications and newsletters; you may withdraw consent at any time without affecting the lawfulness of prior processing
Legal obligation (Art. 6(1)(c)) - processing required to comply with applicable Bulgarian or EU law
3. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 GDPR:
Contractual necessity (Art. 6(1)(b)) - processing required to manage your participation as a sponsor, speaker, or registered attendee
Legitimate interests (Art. 6(1)(f)) - processing for event operations, security, website analytics, and community management, where our interests are not overridden by your rights
Consent (Art. 6(1)(a)) - processing for marketing communications and newsletters; you may withdraw consent at any time without affecting the lawfulness of prior processing
Legal obligation (Art. 6(1)(c)) - processing required to comply with applicable Bulgarian or EU law
3. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 GDPR:
Contractual necessity (Art. 6(1)(b)) - processing required to manage your participation as a sponsor, speaker, or registered attendee
Legitimate interests (Art. 6(1)(f)) - processing for event operations, security, website analytics, and community management, where our interests are not overridden by your rights
Consent (Art. 6(1)(a)) - processing for marketing communications and newsletters; you may withdraw consent at any time without affecting the lawfulness of prior processing
Legal obligation (Art. 6(1)(c)) - processing required to comply with applicable Bulgarian or EU law
4. How We Use Your Data
We use your personal data as follows:
Newsletter and marketing communications - we send event updates and promotional material only to individuals who have explicitly consented to receive such communications via opt-in through Airtable forms or our Website; we do not add attendee data received from ticketing partners to our marketing list unless those attendees have separately opted in
Event management and operations - we use attendee data received from ticketing partners solely for event access verification, event-related attendee communications (logistics, schedule updates), and post-event feedback; marketing communications are not sent to attendees unless they have separately consented
Speaker and sponsor communications - we use speaker and sponsor data to manage their participation, send event-related updates, and facilitate networking opportunities
Website analytics and improvement - we process technical data via Google Analytics to understand user behavior and improve the Website
Legal and accounting compliance - we retain certain data for up to 5 years to comply with Bulgarian commercial law and tax obligations
4. How We Use Your Data
We use your personal data as follows:
Newsletter and marketing communications - we send event updates and promotional material only to individuals who have explicitly consented to receive such communications via opt-in through Airtable forms or our Website; we do not add attendee data received from ticketing partners to our marketing list unless those attendees have separately opted in
Event management and operations - we use attendee data received from ticketing partners solely for event access verification, event-related attendee communications (logistics, schedule updates), and post-event feedback; marketing communications are not sent to attendees unless they have separately consented
Speaker and sponsor communications - we use speaker and sponsor data to manage their participation, send event-related updates, and facilitate networking opportunities
Website analytics and improvement - we process technical data via Google Analytics to understand user behavior and improve the Website
Legal and accounting compliance - we retain certain data for up to 5 years to comply with Bulgarian commercial law and tax obligations
4. How We Use Your Data
We use your personal data as follows:
Newsletter and marketing communications - we send event updates and promotional material only to individuals who have explicitly consented to receive such communications via opt-in through Airtable forms or our Website; we do not add attendee data received from ticketing partners to our marketing list unless those attendees have separately opted in
Event management and operations - we use attendee data received from ticketing partners solely for event access verification, event-related attendee communications (logistics, schedule updates), and post-event feedback; marketing communications are not sent to attendees unless they have separately consented
Speaker and sponsor communications - we use speaker and sponsor data to manage their participation, send event-related updates, and facilitate networking opportunities
Website analytics and improvement - we process technical data via Google Analytics to understand user behavior and improve the Website
Legal and accounting compliance - we retain certain data for up to 5 years to comply with Bulgarian commercial law and tax obligations
5. Third-Party Processors and International Transfers
Your data may be processed by the following third-party service providers acting as data processors on our behalf:
Airtable - application and registration forms, located in the USA
Mailchimp (Intuit) - email marketing, located in the USA
Google Analytics (Google LLC) - website analytics, located in the USA
bilet.bg - ticketing, located in Bulgaria
Telegram - community engagement, located in UAE/Global
Where processors are located outside the European Economic Area, transfers are conducted under appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the European Commission under Article 46 GDPR, or equivalent mechanisms. We encourage you to review the privacy policies of each processor for further information.
5. Third-Party Processors and International Transfers
Your data may be processed by the following third-party service providers acting as data processors on our behalf:
Airtable - application and registration forms, located in the USA
Mailchimp (Intuit) - email marketing, located in the USA
Google Analytics (Google LLC) - website analytics, located in the USA
bilet.bg - ticketing, located in Bulgaria
Telegram - community engagement, located in UAE/Global
Where processors are located outside the European Economic Area, transfers are conducted under appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the European Commission under Article 46 GDPR, or equivalent mechanisms. We encourage you to review the privacy policies of each processor for further information.
5. Third-Party Processors and International Transfers
Your data may be processed by the following third-party service providers acting as data processors on our behalf:
Airtable - application and registration forms, located in the USA
Mailchimp (Intuit) - email marketing, located in the USA
Google Analytics (Google LLC) - website analytics, located in the USA
bilet.bg - ticketing, located in Bulgaria
Telegram - community engagement, located in UAE/Global
Where processors are located outside the European Economic Area, transfers are conducted under appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the European Commission under Article 46 GDPR, or equivalent mechanisms. We encourage you to review the privacy policies of each processor for further information.
6. Cookies
Our Website uses cookies, including third-party analytics cookies via Google Analytics. By continuing to use the Website, you consent to the use of cookies in accordance with our Cookie Policy. You may withdraw or manage your consent at any time through your browser settings or our cookie consent tool.
6. Cookies
Our Website uses cookies, including third-party analytics cookies via Google Analytics. By continuing to use the Website, you consent to the use of cookies in accordance with our Cookie Policy. You may withdraw or manage your consent at any time through your browser settings or our cookie consent tool.
6. Cookies
Our Website uses cookies, including third-party analytics cookies via Google Analytics. By continuing to use the Website, you consent to the use of cookies in accordance with our Cookie Policy. You may withdraw or manage your consent at any time through your browser settings or our cookie consent tool.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, in accordance with the following schedules:
Event applicant and participant data - retained for up to 3 years following the relevant event, for legal, accounting, and operational purposes
Sponsorship and contractual data - retained for 5 years following the end of the contractual relationship, in accordance with Bulgarian commercial law obligations
Marketing and newsletter data - retained until you withdraw consent or unsubscribe
Website analytics data - retained for up to 26 months, in line with Google Analytics default settings
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, in accordance with the following schedules:
Event applicant and participant data - retained for up to 3 years following the relevant event, for legal, accounting, and operational purposes
Sponsorship and contractual data - retained for 5 years following the end of the contractual relationship, in accordance with Bulgarian commercial law obligations
Marketing and newsletter data - retained until you withdraw consent or unsubscribe
Website analytics data - retained for up to 26 months, in line with Google Analytics default settings
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, in accordance with the following schedules:
Event applicant and participant data - retained for up to 3 years following the relevant event, for legal, accounting, and operational purposes
Sponsorship and contractual data - retained for 5 years following the end of the contractual relationship, in accordance with Bulgarian commercial law obligations
Marketing and newsletter data - retained until you withdraw consent or unsubscribe
Website analytics data - retained for up to 26 months, in line with Google Analytics default settings
8. Your Rights
Under GDPR, you have the following rights in relation to your personal data:
Right of access - request a copy of the data we hold about you
Right to rectification - request correction of inaccurate or incomplete data
Right to erasure - request deletion of your data where there is no legitimate basis for continued processing
Right to restriction - request that we limit the processing of your data in certain circumstances
Right to data portability - receive your data in a structured, machine-readable format
Right to object - object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent - where processing is based on consent, withdraw it at any time without affecting prior lawful processing
To exercise any of these rights, contact us at partners@blockchainweek.bg. We will respond within 30 calendar days. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) at www.cpdp.bg, or with the supervisory authority in your country of residence.
8. Your Rights
Under GDPR, you have the following rights in relation to your personal data:
Right of access - request a copy of the data we hold about you
Right to rectification - request correction of inaccurate or incomplete data
Right to erasure - request deletion of your data where there is no legitimate basis for continued processing
Right to restriction - request that we limit the processing of your data in certain circumstances
Right to data portability - receive your data in a structured, machine-readable format
Right to object - object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent - where processing is based on consent, withdraw it at any time without affecting prior lawful processing
To exercise any of these rights, contact us at partners@blockchainweek.bg. We will respond within 30 calendar days. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) at www.cpdp.bg, or with the supervisory authority in your country of residence.
8. Your Rights
Under GDPR, you have the following rights in relation to your personal data:
Right of access - request a copy of the data we hold about you
Right to rectification - request correction of inaccurate or incomplete data
Right to erasure - request deletion of your data where there is no legitimate basis for continued processing
Right to restriction - request that we limit the processing of your data in certain circumstances
Right to data portability - receive your data in a structured, machine-readable format
Right to object - object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent - where processing is based on consent, withdraw it at any time without affecting prior lawful processing
To exercise any of these rights, contact us at partners@blockchainweek.bg. We will respond within 30 calendar days. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) at www.cpdp.bg, or with the supervisory authority in your country of residence.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. While we take reasonable precautions, no method of transmission over the internet is entirely secure and we cannot guarantee absolute security.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the CPDP within 72 hours of becoming aware of the breach, and you will be informed where required by law.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. While we take reasonable precautions, no method of transmission over the internet is entirely secure and we cannot guarantee absolute security.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the CPDP within 72 hours of becoming aware of the breach, and you will be informed where required by law.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. While we take reasonable precautions, no method of transmission over the internet is entirely secure and we cannot guarantee absolute security.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the CPDP within 72 hours of becoming aware of the breach, and you will be informed where required by law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the Website with an updated "Last Updated" date. Continued use of the Website following such changes constitutes acceptance of the revised Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the Website with an updated "Last Updated" date. Continued use of the Website following such changes constitutes acceptance of the revised Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the Website with an updated "Last Updated" date. Continued use of the Website following such changes constitutes acceptance of the revised Policy.
9. Contact
For any questions, data requests, or concerns regarding this Privacy Policy:
The BitHope Foundation
21, Haydushka Gora str., Sofia 1612, Bulgaria
partners@blockchainweek.bg
9. Contact
For any questions, data requests, or concerns regarding this Privacy Policy:
The BitHope Foundation
21, Haydushka Gora str., Sofia 1612, Bulgaria
partners@blockchainweek.bg
9. Contact
For any questions, data requests, or concerns regarding this Privacy Policy:
The BitHope Foundation
21, Haydushka Gora str., Sofia 1612, Bulgaria
partners@blockchainweek.bg
@ 2026 Blockchain Week Bulgaria. All rights reserved.
@ 2026 Blockchain Week Bulgaria. All rights reserved.
@ 2026 Blockchain Week Bulgaria. All rights reserved.
