1. Data Controller
This website “From Deultum to DigiDEULTUM – Upgrading the Historical Narrative” (“the Website”) is operated by:
National Archaeological Institute with Museum – Bulgarian Academy of Sciences
- BULSTAT: 000670919
- VAT No.: BG000670919
- Legal Representative: Hristo Popov
- Address: Sofia 1000, Bulgaria
- Privacy contact email: digideultum@gmail.com
The project is implemented under Project KP-06-N80/7 of 08.12.2023 “Upgrading the Historical Narrative: from Deultum to DigiDeultum”, funded by the Bulgarian National Science Fund, with Prof. L. Vagalinski as principal investigator.
This Privacy Policy explains how we collect, use, and protect personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Bulgarian legislation.
2. What Personal Data We Collect
Depending on how you use the Website, we may process the following categories of personal data:
2.1. Data submitted through the contact form
When you use the contact form, we may collect:
- name;
- email address;
- message content;
- technical request-related information.
2.2. Technical and analytics data
When visiting the Website, the following information may be collected:
- IP address;
- browser and device type;
- operating system;
- language preferences;
- usage and navigation data;
- data collected through Google Analytics;
- cookie and tracking-related information.
2.3. Data processed through Google reCAPTCHA
To protect the Website against spam and automated abuse, we use Google reCAPTCHA.
This service may process:
- IP address;
- user behavior patterns;
- browser and device information.
The use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.
3. Purposes and Legal Bases for Processing
We process personal data for the following purposes:
| Purpose | Legal Basis |
| Responding to inquiries submitted via the contact form | Article 6(1)(f) GDPR – legitimate interest |
| Website analytics and performance improvement | Article 6(1)(a) GDPR – consent |
| Spam prevention and abuse protection | Legitimate interest |
| Ensuring website security and functionality | Legitimate interest |
| Storing cookie consent preferences | Legal obligation / consent |
4. Cookies
The Website uses cookies and similar technologies.
Cookies may include:
- strictly necessary cookies;
- analytics cookies;
- functional cookies.
Upon your first visit, you will be presented with a cookie consent banner allowing you to manage your preferences.
The Website uses a Consent Management Platform (CMP).
You may modify or withdraw your consent at any time through the cookie settings.
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
5. Google Analytics
The Website uses Google Analytics to analyze website traffic and visitor behavior.
Google Analytics may collect:
- IP addresses (anonymized where applicable);
- browser and device information;
- navigation behavior;
- session duration;
- visited pages.
Processing takes place only after consent has been obtained where required by applicable law.
Data may be processed by Google Ireland Limited and/or Google LLC.
6. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.
Contact form submissions are retained for a reasonable period necessary to process inquiries and maintain administrative records.
7. Data Recipients and Processors
Your personal data may be shared with:
- hosting providers located within the European Union;
- analytics service providers;
- Google LLC / Google Ireland Limited;
- spam prevention and security service providers;
- technical subcontractors where necessary.
We do not sell personal data to third parties.
8. International Transfers
Some services used on the Website may process data outside the European Economic Area.
Where international transfers occur, appropriate safeguards are implemented in accordance with GDPR, including Standard Contractual Clauses.
9. Your Rights
Under GDPR, you have the right to:
- access your personal data;
- request correction of inaccurate data;
- request deletion of your data;
- restrict processing;
- object to processing;
- data portability;
- withdraw consent at any time;
- lodge a complaint with the competent supervisory authority.
To exercise your rights, please contact us at:
digideultum@gmail.com
10. Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or unlawful processing.
11. External Links
The Website may contain links to external websites. We are not responsible for the content or privacy practices of such websites.
12. Changes to This Policy
We reserve the right to update this Privacy Policy in response to legal, technical, or operational developments.
The latest version will always be available on the Website.