Privacy and Cookie Policy

Creative Resilience Foundation respects your privacy and is committed to protecting your personal data.

This Privacy and Cookie Policy explains how we collect, use, store, and protect personal data when you visit creativeresilience.art, interact with our website, contact us, or use our online resources.

It also explains your rights under the General Data Protection Regulation (GDPR) and other applicable data protection legislation.

For the purposes of the GDPR, the data controller is:

With your consent, we may use analytics and advertising technologies to understand how visitors interact with our website and to measure the effectiveness of our online campaigns.

These services may include technologies such as:

• Google Analytics
• Google Ads conversion measurement
• Other analytics or advertising measurement services used by Creative Resilience Foundation

Depending on the service, these technologies may collect information such as:

• IP address
• Device and browser information
• Pages visited
• Website interactions
• Referral source
• Advertising campaign information
• Conversion events

Where required by law, analytics and advertising technologies will not be activated until you have provided the appropriate consent.

You can change or withdraw your cookie preferences at any time through the cookie settings available on the website.

Creative Resilience Foundation does not sell or rent personal data.

We may share personal data with service providers that help us operate and improve the website, including providers of:

• Website hosting and technical infrastructure
• Database and backend services
• Website development and maintenance
• Analytics services
• Advertising measurement services
• Email and communication services
• Security and fraud prevention services

These providers may process personal data only where necessary to provide their services and are required to handle information in accordance with applicable data protection requirements.

We may also disclose personal data where required by law, regulation, court order, or another lawful request from a competent authority.

Creative Resilience Foundation is based in Bulgaria and operates within the European Union.

Some service providers we use may process data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer complies with applicable data protection law.

These measures may include:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Other legally recognized safeguards for international data transfers

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Retention periods may depend on:

• The type of information
• The reason it was collected
• Legal or regulatory requirements
• Whether the information is necessary to establish, exercise, or defend legal claims

When personal data is no longer required, we will delete, anonymize, or securely dispose of it where reasonably possible.

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent data protection authority.

In Bulgaria, the supervisory authority is:

Commission for Personal Data Protection (CPDP)
Republic of Bulgaria

You may also have the right to contact the supervisory authority in another EU or EEA country where you reside, work, or believe a data protection infringement has occurred.

We use reasonable administrative, organizational, and technical measures designed to protect personal data against:

• Unauthorized access
• Loss
• Misuse
• Alteration
• Disclosure
• Destruction

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Cookies are small text files that websites may place on your device when you visit them.

They can be used to enable website functionality, remember preferences, understand website usage, and measure advertising performance.

Similar technologies may also be used for comparable purposes.

When you first visit our website, you may be presented with a cookie consent interface allowing you to choose which categories of non-essential cookies you accept.

Where consent is required:

• Non-essential cookies will not be activated before consent is provided
• You may reject non-essential cookies
• You may change your preferences later
• You may withdraw your consent at any time

Rejecting optional cookies will not prevent you from accessing the core educational content of Creative Resilience.

Most web browsers also allow you to control cookies through their settings.

Depending on your browser, you may be able to:

• Delete existing cookies
• Block cookies
• Receive notifications when cookies are created
• Restrict cookies from specific websites

Blocking certain cookies may affect some website functionality.

Browser controls operate separately from the consent choices available directly on our website.

Our website may contain links to websites operated by third parties.

Creative Resilience Foundation is not responsible for the privacy practices, security, or content of third-party websites.

When visiting an external website, we recommend reviewing its privacy and cookie policies separately.

We may update this Privacy and Cookie Policy from time to time to reflect:

• Changes to the website
• Changes to the technologies or services we use
• Changes to our data processing activities
• Legal or regulatory developments

The most recent version will be published on this page together with the date it was last updated.

For questions about this Privacy and Cookie Policy, the processing of your personal data, or your GDPR rights, please contact: