How we use cookies

A cookie is a small file which is placed on your computer’s hard drive and allows web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

We give you control over the types of cookies you decide to accept from our website. These are grouped as follows:

  • Strictly necessary cookies – these are essential for our website to function. We don’t ask for your consent to these and the only way to avoid them is to not use our website.
  • Nice to have cookies – these help us to give you a better user experience on our website, but the website will still function if you choose to turn them off.
  • Advertising cookies – these allow advertising to be tailored to your interests, both on our website and as you browse the web after leaving our website. You can choose to turn these off.

Certikit Cookies (Strictly Necessary)

Name Description Expires
PHPSESSID Used to establish a user session and to pass state data via a temporary cookie, which is commonly referred to as a session cookie. When the browsing session ends
aelia_cs_selected_currency Sets current currency. 1 day
alt-cookies-nice-to-have Checks if the nice to have cookies are allowed. 3 months
alt-cookies-advertising Checks if the advertising cookies are allowed. 3 months
alt-cookies-set Checks if the cookie form has been submitted. 3 months
ga-disable-UA-61447653-1 Disables the Google Analytics cookies 3 months Cookies (Nice to have)

Name Description Expires
__cfduid Used to display user reviews. 1 year

Vimeo Cookies (Nice to have)

Name Description Expires
vuid Used to display and deliver videos on our website. 2 years

DoubleClick/Google (Advertising)

Name Description Expires
IDE Third party These cookies set by a third party (DoubleClick) and are used for serving targeted advertisements that are relevant to you across the web. 13 months
test_cookie Used to determine if the website visitor’s browser supports cookies. Immediately

Google Analytics Cookies (Advertising)

Name Description Expires
_ga This helps us count how many people visit by tracking if you have visited before. 2 years
_gat Used to manage the performance of Google Analytics data collection. 1 minute
_gid Used by Google Analytics to store information about the pages you visit on our website. 1 day


Privacy Policy

This Privacy Policy (“Policy”) describes how and why we process the personal data you provide on our website at (the”Website”), how we protect and store them, and what your rights in relation to them are. We respect the privacy of your personal data and we undertake not to use the data you provide without your consent. The processing of your personal data will always be in accordance with the requirements of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“the Regulation”), the Personal Data Protection Act and any other applicable data protection legislation.

  1. Controller information

The website at is owned and managed by BUGARIART-2017 Ltd, a company registered with the Commercial Register and the Non-Profit Legal Entities Register with the Registry Agency of the Republic of Bulgaria with UIC 204613593, with registered seat and address of management in the European Union, Republic of Bulgaria, Bankya, zip 1320, Str. “Dvadeseti April” No 9. For the purposes of data protection legislation, we are a controller in the processing of your personal data.

ART AGAINST PLASTIC, a foundation registered with the Commercial Register and the Non-Profit Legal Entities Register with the Registry Agency of the Republic of Bulgaria with UIC 205746479, with registered seat and address of management in the European Union, Republic of Bulgaria, Bansko, zip 2770, 1 Khan Krum Street (herein after referred to as “the Foundation”). The Foundation ART AGAINST PLASTIC Foundation is considered a controller in the processing of your personal data when a user is using the site and the options provided on it to donate in favor of the Foundation.

  1. Personal data

Personal data are any information relating to a natural person who is identified or identifiable directly or indirectly by one or more specific features.

Personal data that have undergone pseudonymization but can be attributed to a natural person by using additional information are considered to be information about an identifiable individual and are therefore also protected.

Anonymous information that does not allow anyone to identify the natural person is not subject to protection.

  1. Categories of personal data we process

We do not collect personal data from you unless you, your legal representative or a person authorized by you personally provides them to us. We use your personal data solely for the provision of services offered on the Website. The forms through which personal data are entered clearly indicate the mandatory or voluntary nature of data provision. The data which are mandatory to be provided are those without which we cannot provide the respective service or part of it and without which a registration (if required) cannot be done.

Information on any transactions you make through the Website in support of the Foundation shall not be used by the web-administrator for any reasons except of statistic purposes about the number and amount of donations (without including personal data information about the donators unless they requested to do so). BUGARIART-2017 Ltd./ the Foundation works with other payment processors and the payment information you provide is collected and used by them in accordance with their privacy policies. BUGARIART-2017 Ltd./ the Foundation does not have access to card data as well as authentication data upon a bank card payment and in no way does it register or stores them except the last four numbers of your bank card and its expiration date as we need them by virtue of the requirements of the law. BUGARIART-2017 Ltd./ the Foundation has the right only to register for statistic reasons the number of donations done in favor of the Foundation. Any personal data about the donators will be collected by BUGARIART-2017 Ltd./ the Foundation unless the user/donator would like explicitly to provide it.

BUGARIART-2017 Ltd./ the Foundation does not collect or process consciously personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or membership of trade unions, as well as genetic data, biometric data for the purposes of identifying Users or data about their sexual life or orientation, so Users should not provide us with such information.

Information you submit to or to the Website in the form of comments, contributions to discussions or messages to other Users. When you support a Campaign, your name, the amount of your donation and/or your motivation message can be posted on the relevant Campaign page only if you choose to support the Campaign publicly, not anonymously. Please be polite and respectful to other Users when posting comments or sharing your motivation messages. We reserve the right, but we have no obligation to review and monitor such publications or other content on our Website, as well as to remove posts or content that may be considered inappropriate or offensive.

When you contact us for any reason by e-mail, through the functionalities of the Website or by phone, we may process any information you provide us with. All emails sent to us, as well as any messages received through our online contact form, are recorded and forwarded to our respective staff handling the request, and we can save them in order to improve our services and Website.

We may collect and subsequently process certain information about your browsing behaviour on the Website, such as the content you view or post, how often you use our services and your preferences in this connection.

We may collect and process information about your device, your IP address, operating system and browser type for purposes of system administration, requests administration and improvement of our services. For details on how this information is collected, please see our cookie policy (“Cookie Policy”).

Information from other sources, such as our partners, specialized companies that provide information about their customers with their consent in an explicit or anonymous form (e.g. marketing companies, financial institutions, social networks, etc.), including information about you, which is publicly available.

Our Policies for Children

In order to respect the privacy of minors, Art Against Plastic® does not knowingly collect, maintain or process Personal Information submitted online via our Internet Services by anyone under the age of 18. To the extent Art Against Plastic® collects Personal Information on minors in the context of one of the purposes mentioned in our Privacy policy, Art Against Plastic® will only do so with the appropriate consent or as otherwise permitted under applicable laws.


  1. The principles on the basis of which we process your personal data:

Principle of lawfulness, fairness and transparency in the processing of personal data – the collection of personal data must be within the necessary limits. Information is collected in a lawful and objective manner;

Principle of data minimization as well as purpose and storage limitation – personal data should not be used for purposes other than those for which they were collected, except with the consent of the person or in the cases expressly provided for by the law . Personal data must be kept for no longer than is necessary for the purposes for which personal data are processed;

Principle of accuracy – Personal data must be precise, accurate, complete and kept up to date having regard to the purposes for which they are processed,.

Principle of integrity and confidentiality – Personal data must be processed in a manner that ensures an adequate level of security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage using appropriate technical or organizational measures.

Your personal data is processed in the “Users” record of processing activities maintained by BUGARIART-2017 Ltd./ the Foundation.

  1. What are the purposes and the grounds for the processing?

We respect your desire to use your data solely for the purpose for which they are provided. In this regard, we collect, use and process the information described above for the following purposes:

  • donation to a Campaign;
  • posting comments, messages, publications or motivation messages on the Website;
  • resolving any issues related to requests and donations.

Your personal data may be processed to protect and enforce our legitimate interests , as well as those of other Users or third parties, which may include ensuring the proper functioning and use of the Website, communicating with you, including by electronic means on important issues related to your participation in a donation campaign, processing received signals, complaints, requests and other correspondence, statistical and accounting purposes, information security protection, resolving disputes. For this purpose, it may be necessary to process a part or all of the above categories of data. When carrying out activities based on legitimate interest, we always place your fundamental rights and freedoms first and strive to keep them unaffected.

Based on your explicit prior consent, we may use the personal data you provide to send you information about our activity, including for you to participate voluntarily in surveys, the information from which may be used to monitor or improve the performance of our Website, as well as to improve our service and our Campaigns. In this regard, subject to your consent, we may send you emails via e-mail/SMS/webpush channels that contain general and thematic information, information about Campaigns similar to those you have participated in. For this purpose, it may be necessary to process a part or all of the above categories of data. Processing in such cases is specific to the extent and the scope provided for in the respective consent. You can withdraw any consent you have given at any time for the future by:

  • changing the settings in your account
  • using the “Unsubscribe” link in the messages you receive from us; or
  • contacting us on the contact details below.

There may be cases where the processing of your personal data is related to the fulfilment of our legal obligations, including the fulfilment of statutory obligations to preserve or provide information upon receipt of an instruction from competent state or judicial authorities. For this purpose, it may be necessary to process а part or all of the above categories of data.

The processing may be necessary to protect your vital interests or those of another natural person, as well as for the performance of a task carried out in the public interest or in the exercise of official authority vested to us as a data controller. A special category of personal data may be processed lawfully when it is manifestly made public by the data subject.

  1. Sharing personal data with third parties

Your personal data is processed by our employees for the purposes above. In addition, we may disclose your personal data if we consider such disclosure to be necessary for the achievement the above-described purposes, to the following categories of recipients:

  • Subcontractors and service providers that, upon assignment, maintain equipment, software and hardware used to process personal data and to perform various services related to communication with Users and technical support, as well as other services related to requests administration, including payment/bank service providers for payments, accountants, tax and legal consultants, marketing services providers, to carry out marketing activities for which you have provided your consent, as well as those related to market research.
  • Competent authorities, institutions and individuals who have the power to require the provision of personal data and to which we are obliged to provide personal data under the current legislation.

    As far as the selling and shipping process is concerned,  BUGARIART-2017 Ltd. and/or Art Against Plastic® is allowed to share information with third parties such as our shipping and payment partners, or the Artists/ Sellers using our platform, to enable us to provide the Service/Product to you. Such partners will process your personal information in accordance with their own privacy policies. These partners, not BUGARIART-2017 Ltd, are responsible for the protection of personal information under their control. By making a purchase on our website, you are directing us to share your information in this way. We need to do this in order to perform our obligations and provide to you the Service/Product you expect. We expect our partners to respect the privacy of the member whose information they have received. We do not granted a license to our partners to use the information for unauthorized transactions or sending unsolicited commercial messages in violation of any applicable laws, including any consent requirements of the jurisdiction of the recipient.

    If we are involved in a merger, acquisition, or sale of assets, we will continue to take measures to protect the confidentiality of personal information and give affected users notice before transferring any personal information to a new entity.


  1. In which countries do we process your personal data?

We currently store and process your personal data on the territory of the Republic of Bulgaria.

In the event that your personal data is transmitted to a service provider located outside the European Economic Area (EEA), we take all necessary steps to ensure the security of your rights and interests by applying at least one of the following safeguards:

  • Providing your personal data to countries for which the European Commission has recognized an adequate level of personal data protection.
  • Concluding contracts with service providers containing standard contractual clauses issued by the European Commission or selection of suppliers with an approved code of conduct within the meaning of the Regulation.
  • Use of providers certified under an external arrangement approved by the relevant regulatory body (e.g. EU/US Privacy Shield or other).

You may contact us at any time by using the contact details below to find out which the countries we transmit your data to are and what safeguards we apply to these data transmissions.

  1. How long do we keep your personal data?

We store your personal data in compliance with the principle of storage limitation of personal data to a strict minimum. We regularly check to see when and which personal data should be deleted. However, given the fact that we process your personal data for different purposes, the actual period for which personal data will be stored depends on certain circumstances, including the fulfilment of legal, accounting or reporting requirements.

In order to determine the appropriate period for storing personal data, we take into account:

  • The volume, nature and sensitivity of personal data.
  • Potential risk of harm from unauthorized use or disclosure of your personal data.
  • The purposes for which we process your personal data and whether we can achieve them by other means.
  • Applicable legal requirements.

Data provided in Campaigns are kept until the relevant Campaign is active and for up to 1 (one) year after its closure, unless the applicable law provides for a longer period.

  1. What are your rights in relation to the processing of your personal data?

Right of access and information about your personal data – You have the right to obtain from us a confirmation as to whether we process your personal data and, if so, you have the right to request access to your personal data as well as any available information about their source, including a copy thereof. Providing access to the data is free of charge, however, BUGARIART-2017 Ltd./ the Foundation reserves the right to charge an administrative fee in the event of recurrence or excessive demands.

Right to rectification of any inaccurate or incomplete information about your personal data – In case we process incomplete or inaccurate data, you have the right to ask us to correct them without undue delay, directly through your account on the Website or by requesting BUGARIART-2017 Ltd./ the Foundation to do so.

Right to erasure – You have the right to ask us to erase your personal data on one of the following grounds, when present, namely:

  • personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • you withdraw your consent on which the processing of the data is based and there is no other legal basis for processing it;
  • you object to the processing of personal data related to you, including for the purposes of direct marketing, and there are no legitimate grounds for processing that have an advantage;
  • personal data have been processed unlawfully;
  • personal data must be erased in order to comply with a legal obligation under EU law or the law of a Member State that applies to BUGARIART-2017 Ltd./ the Foundation;
  • personal data have been gathered in connection with the provision of information society services.


Please note that such request will not be satisfied in cases when BUGARIART-2017 Ltd./ the Foundation stores and processes personal data:

  • for the exercise of the right to freedom of expression and the right to information;
  • to comply with a legal obligation that requires processing provided for under EU law or the law of the Member State applicable to BUGARIART-2017 Ltd./ the Foundation or for the performance of a task in the public interest or the implementation of official powers vested to it;
  • for reasons of public interest in the field of public health;
  • for the purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
  • for the establishment, exercise or protection of legal claims.

BUGARIART-2017 Ltd./ the Foundation does not erase the data it is legally obliged to store, including for the purpose of defence against claims made against the Foundation or proof of its rights.

Right to restriction of processing You have the right to request that we limit the processing of your personal data under the following circumstances:

  • you dispute the correctness of the data – for a period of time within which we shall verify their accuracy;
  • the processing of the data is without legal basis, but you do not want to erase them, instead you want to limit their processing;
  • you need the personal data to establish, exercise or protect legal claims, and personal data are no longer required for the intended purpose of processing; or
  • you have objected to the processing of personal data, pending verification that our grounds or processing are legal.

You have the right to withdraw your consent – if the processing of your personal data is based on your consent, you have the right to withdraw such consent at any time (this will not affect the processing based on your consent prior to withdrawal) by contacting us via a free text request sent by email at:

BUGARIART-2017 Ltd./ the Foundation may ask you to verify your identity and identity with the person to whom the data relate.

Right to object to the processing of your personal data – you may object to the processing of your personal data, provided there is a legitimate reason for doing so. In particular, you may object to the processing of your personal data for direct marketing purposes in the ways specified in this Policy;

Right to data portability – if your personal data is processed by automated means, based on your consent or the fulfilment of our contractual relations, you have the right to ask us to provide you with your personal data in a machine-readable format for transmission to another data controller;

Right to lodge a complaint with the Personal Data Protection Commission (PDPC) – if you believe that we are violating your rights or the applicable legal framework, please contact us to clarify the matter. Of course, you have the right to file a complaint with the Personal Data Protection Commission, the contact details of which are listed below.

We do not process personal data for automated decision making and profiling.

Please contact us using the contact details below to submit a request in relation to the above rights. We will make reasonable efforts to respond to your request within 30 days as of receipt. If we cannot meet your request within the 30-day period, we will notify you in due time of the reason and the expected time. We may have an overriding lawful basis for processing your personal data, or certain exemptions may apply. If we reject your request, we will explain why.

Please note that you can change your account settings at any time if you do not wish to receive certain information from us or if you want to delete your account. You may exercise this right at any time by contacting us at

  1. How do we guarantee the security of your personal information?

We guarantee the complete confidentiality of your personal data. The personal information of each User will not be published anywhere unless he or she has authorized or requested it. As a controller of your personal data, we have implemented technical and organizational measures that guarantee the security of the personal data processed by us. Although we work hard to protect your personal data, we cannot guarantee that our safeguards will prevent any unauthorized attempt to access, use or disclose personal data. Nonetheless, we maintain incident response plans in case of a physical or technical incident in order to deal with it in a timely manner and limit the negative consequences. If you believe your username or password is compromised, you can change your password at any time through the Website, as well as contact our customer service department immediately.

Our website may contain links to websites of third parties. If you follow the link to any of these websites, keep in mind that these websites have their own privacy policies and we bear no responsibility for them.

We bear no liability for the protection of any personal data you share with a third party based on the link you have followed and authorized to your account.

  1. How do you contact us if you have questions about your personal data?

If you have any questions regarding this Policy, please contact us at

If you are not satisfied with the way we have responded to your personal data protection complaint, you have the right to file a complaint with the Personal Data Protection Commission. You can contact the supervisory authority in the following way:


Phone: +359 2 91-53-518

Or at: Sofia 1592, “Prof. 2 Tsvetan Lazarov” Blvd., Republic of Bulgaria, European Union

  1. Changes in the Policy

 This Privacy Policy was last updated on 29.02.2020. It may be periodically amended to reflect changes in our privacy practices or in the legal requirements. Any such changes will be updated on this page and therefore we encourage you to check it regularly. If you do not agree to any changes to this Privacy Policy, you must discontinue use of the Website.