1. Scope

This privacy policy describes how Sofia South Ring Mall EAD (hereinafter “Sofia Ring Mall”, “we” or “us”) collects, processes and protects the personal data of visitors to the sofiaring.bg website and of visitors to the shopping centre.

2. Data controller

The controller of personal data is:

• Name: Sofia South Ring Mall EAD
• Address: 214 Okolovrasten pat, 1434 Sofia, Bulgaria
• Email: infodesk@ssrm-bg.com
• Phone: 0700 11 190

3. What data we collect

We may collect the following categories of personal data:

• Contact details: name, email address, phone number — when you fill in the contact, job application or leasing enquiry forms.
• CVs: files attached through the careers form.
• Technical data: IP address, browser type, operating system — collected automatically when you visit the website.
• Cookies: see section 7 below.

4. Purposes of processing

Personal data is processed for the following purposes:

• Handling enquiries and replying to them.
• Reviewing job applications.
• Handling enquiries about leasing retail space.
• Improving the functionality and security of the website.
• Sending marketing messages (only with explicit consent).

5. Legal basis

Personal data is processed on the basis of:

• The consent of the data subject (Art. 6(1)(a) GDPR).
• The performance of a contract or pre-contractual measures (Art. 6(1)(b)).
• The legitimate interest of the controller (Art. 6(1)(f)).

6. Retention period

Personal data is kept for as long as necessary to fulfil the purpose for which it was collected, but no longer than:

• Contact enquiries: 12 months.
• Job applications: 6 months after the end of the selection process.
• Leasing enquiries: 24 months.
• Technical logs: 90 days.

7. Cookies

The website uses cookies for:

• Necessary cookies: the CSRF token and session cookies — required for the forms to work.
• Preferences: theme choice (light/dark) and seasonal effects — stored in localStorage.

We do not use cookies for tracking or advertising purposes.

8. Your rights

As a data subject, you have the right to:

• Access your personal data.
• Have inaccurate data corrected.
• Have your data erased (the “right to be forgotten”).
• Restrict the processing.
• Data portability.
• Object to the processing.
• Withdraw your consent at any time.

To exercise your rights, contact us at infodesk@ssrm-bg.com.

9. Complaints

If you believe that the processing of your personal data breaches the applicable law, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia.

10. Changes to this policy

We reserve the right to update this policy. If there are significant changes, we will publish a notice on the website.