1. General provisions
The Institute of Medical Psychology, Psycho-Oncology and Psychosomatics (“the Institute”, “we”) respects the right to privacy and is committed to processing the personal data of visitors to its website, patients, participants in training courses and events, professional partners and all persons who contact the Institute lawfully, fairly and transparently.
This Privacy Policy describes what personal data we may collect, for what purposes we use it, on what legal basis we process it, for how long we store it, and what rights you have under Regulation (EU) 2016/679 (GDPR) and the applicable Bulgarian legislation.
2. Data controller
The controller of personal data is:
Association “Institute of Medical Psychology, Psycho-Oncology and Psychosomatics”
UIC: 208753525
Legal form: Association
Registered office and management address: Sofia 1142, 23 “Prof. Fritjof Nansen” Blvd., entrance B, floor 1, apartment 11
Represented by: Margarita Kirilova Tareyn
Telephone: 0888271283
Email: info@impps-bg.org
3. What personal data we may process
Depending on how you use the Institute’s website or services, we may process:
- names;
- telephone number and email address;
- information provided through a contact form or an enquiry;
- data necessary for registering for a consultation, training course, seminar, webinar or other event;
- data necessary for issuing invoices, certificates or other documents;
- technical information related to the use of the website, where such is collected through cookies or other technologies.
When a person contacts the Institute in connection with a psychological, psychotherapeutic or other professional service, the information provided may also contain data concerning health, which constitutes a special category of personal data within the meaning of the GDPR. Such data is processed only where an applicable legal basis exists and subject to enhanced measures for confidentiality and protection.
4. Purposes for which we process personal data
Personal data may be processed for:
- responding to enquiries and carrying out communication;
- organising and administering psychological consultations, psychotherapy, psychological assessment and other requested services;
- registration and participation in training courses, seminars, webinars, conferences and other initiatives;
- issuing documents, certificates and accounting documents;
- fulfilling contractual and statutory obligations;
- improving the functioning and security of the website;
- sending information about the Institute’s activities, training courses and events, where the person has given the relevant consent.
The Institute does not use the information provided for purposes incompatible with those for which it was collected.
5. Data related to psychological and psychotherapeutic work
Information provided in the context of a psychological consultation, psychological assessment or psychotherapy is treated with an increased degree of confidentiality.
Access to it is granted only to specialists and persons for whom this is necessary in connection with the provision and administration of the respective service, and only to the extent that such access is permitted by law.
Professional confidentiality may be restricted only in the cases provided for by law or where another applicable legal basis for disclosure of information exists.
6. Legal basis for processing
Depending on the specific case, processing may be carried out on the basis of:
- your consent;
- the performance of a contract or the taking of steps prior to entering into a contract;
- compliance with a legal obligation;
- the legitimate interest of the Institute, where it does not override your rights and freedoms;
- as well as the corresponding basis under Article 9 of the GDPR, where special categories of personal data are processed.
Where processing is based on consent, it may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
7. To whom the data may be disclosed
The Institute does not sell and does not provide personal data to third parties for their own advertising purposes.
Where necessary, data may be provided to providers of technical, hosting, accounting, payment or other services that support the Institute’s activities and process the information subject to appropriate safeguards for its protection.
Data may also be provided to competent state authorities where required by law.
8. How long we store the data
Personal data is stored only for the period necessary to achieve the purpose for which it was collected, unless the law requires a longer period.
The specific period depends on the type of information, the nature of the service provided, the contractual relationship and the applicable statutory requirements.
Once the basis for storage ceases to apply, the data is deleted, destroyed or anonymised in an appropriate manner.
9. Security and confidentiality
The Institute applies appropriate organisational and technical measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
Particular attention is paid to information related to mental and physical health and the content of the professional work with the Institute’s patients and clients.
10. Your rights
Under the GDPR, where the relevant statutory conditions are met, you have the right:
- to obtain information as to whether we process your personal data, and to have access to it;
- to request the correction of inaccurate or incomplete data;
- to request the erasure of your personal data;
- to request restriction of processing;
- to object to certain types of processing;
- to receive your data in a structured, commonly used and machine-readable format, where applicable;
- to withdraw any consent given;
- to lodge a complaint with the competent supervisory authority.
In Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP).
11. Cookies and external services
The website may use technically necessary cookies, as well as analytical or other technologies, where these are activated and the necessary legal basis exists.
Where the use of certain cookies requires consent, they should not be activated prior to it being given.
The site may contain content or links to external platforms and services. When moving to an external site, the processing of personal data is also governed by the privacy policy of the respective provider.
12. Contact regarding personal data
For questions regarding the processing of your personal data, or to exercise any of your rights, you may contact us at:
Email: info@impps-bg.org
Address: Sofia 1142, 23 “Prof. Fritjof Nansen” Blvd., entrance B, floor 1, apartment 11
13. Changes to the policy
The Institute may periodically update this Privacy Policy in the event of changes in its activities, the technologies used or the applicable legislation.
The current version is always published on this page.
Last updated: 14.08.2026