Let’s Boost

Privacy Policy

1. Data Controller

Employer Booster OOD, UIC 208507388, registered office: Sofia, Mladost 4, bl. 460G, ent. 3, fl. 1, acts as a data controller under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

 

2. Introduction

Employer Booster OOD (“Employer Booster”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of all individuals whose information we process, in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Bulgarian data protection legislation.

This Policy describes how we collect, use, store, and protect personal data in connection with our professional activities in people operations, HR consulting, training, organizational development, and employer branding services.

 

3. Categories of Data Subjects

We may process personal data relating to the following categories of individuals:

  • Clients and client representatives – individuals representing legal entities we provide People Operations or Employer Branding services to;
  • Participants in trainings, workshops, and events organized or facilitated by Employer Booster;
  • Individuals featured in Employer Branding content (e.g., photos, videos, testimonials, campaigns);
  • Service providers and partners engaged in delivering our projects;
  • Website visitors and social media users interacting with our online content.

 

4. Categories of Personal Data

Depending on the relationship, we may process:

  • Identification and contact details: full name, position, email address, phone number, company name;
  • Professional information: role, expertise, employment background (for consulting or HR-related engagements);
  • Event participation details: registration data, attendance lists, communication preferences;
  • Media content: images, video, voice recordings, and testimonials used for Employer Branding purposes (with prior consent where required);
  • Technical data: IP address, browser type, usage logs, and cookies from our website;
  • Contractual and financial data: information necessary for contract execution and invoicing.
  • We do not intentionally collect or process sensitive personal data (e.g., political opinions, religion, biometric data). If such information is shared unintentionally, it will be deleted promptly.

 

5. Purposes and Legal Basis for Processing

We process personal data lawfully, fairly, and transparently for the following purposes:

  • Service Delivery and Client Relations – to deliver People Operations, HR consulting, organizational development, and Employer Branding services; to manage client and partner contracts and communications.
  • Employer Branding Activities – to create and publish promotional materials such as photos, videos, interviews, and testimonials representing the culture and values of our clients or our own brand.
  • Trainings, seminars, teambuildings and events – to register and manage participants, deliver content, provide certificates, and communicate related information.
  • Marketing and Communication – to share relevant updates about our services, case studies, or events, only where individuals have opted in; maintaining our website and analysing traffic (cookies).
  • Legal and Regulatory Compliance – to comply with statutory obligations such as accounting, taxation, and record keeping.

 

6. Data Retention 

We retain personal data only as long as necessary for the purposes described above or as required by law:

  • Client and contract-related data: up to 5 years after the relationship ends;
  • Accounting and invoicing data: 10 years as required by Bulgarian law;
  • Event registration and participation data: up to 12 months after the event unless consent for further use is renewed;
  • Marketing and Employer Branding materials: until consent is withdrawn or a maximum of 3 years after publication;
  • Website analytics logs: no longer than 12 months.

After these periods, data is securely deleted or anonymized.

 

7. Legal Grounds for Processing

Employer Booster OOD processes personal data on the following legal bases under Article 6 of the GDPR:

  • 6(1)(a) – Consent of the data subject;
  • 6(1)(b) – Performance of a contract or pre-contractual steps;
  • 6(1)(c) – Compliance with a legal obligation;
  • 6(1)(f) – Legitimate interests pursued by Employer Booster OOD.

 

8. Data Sharing and Recipients

We may share personal data only when necessary and under appropriate safeguards with:

  • Service providers and partners (IT, hosting, event management, photography, design, media production, website service providers, accounting, audits) acting as data processors under written agreements;
  • Public authorities or regulators, where required by law;
  • Clients, when data sharing is integral to service delivery (e.g., EB campaign content review).

We do not sell or rent personal data.

 

9. International Data Transfers

We primarily process and store data within the European Economic Area (EEA).

If data must be transferred outside the EEA (e.g., to global cloud platforms or social media tools), such transfers will follow GDPR-compliant safeguards, including Standard Contractual Clauses approved by the European Commission.

 

10. Data Security

We apply appropriate administrative, technical, and physical safeguards to ensure the confidentiality, integrity, and availability of personal data.

Access to personal data is restricted to authorized personnel who are trained in data protection and bound by confidentiality obligations.

Our security measures include, where appropriate, restricted access controls, password protection, encryption of data in transit and at rest, secure system backups, and continuous monitoring of our IT environment.

In case of a data breach likely to result in a risk to individuals’ rights, we will notify the Bulgarian Commission for Personal Data Protection within 72 hours and, where required, the affected individuals.

 

 

11. Rights of Data Subjects

Under the GDPR, you have the right to:

  • Request access to your personal data;
  • Request correction or update of inaccurate data;
  • Request erasure (“right to be forgotten”);
  • Restrict or object to processing;
  • Withdraw consent at any time (without affecting prior lawful processing);
  • Request data portability;
  • Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP, cpdp.bg).

We will respond to verified requests within 30 calendar days of receipt.

 

12. Cookies and Analytics

Our website may use cookies and analytics tools (such as Google Analytics) to improve user experience and monitor performance.

Cookies are stored only with your consent, and you can manage or disable them in your browser settings.

 

 

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations.

The latest version will always be available on our website, indicating the date of the last update.

 

14. Contact

For all privacy-related inquiries, data requests, or concerns, please contact us at:

 

Employer Booster OOD

Address: Sofia, Mladost 4, bl. 460G, ent. 3, ap. 7

Email: office@employerbooster.com

Phone: +359895625977 / +359896621959

 

 

This Policy is approved by Employer Booster OOD and enters into force as of October 2025.