Privacy Policy

This policy describes how the donation module at pay.diamondway.bg processes personal data.

1. Who processes the data

Depending on the cause chosen, the data controller is one of two organisations:

Diamond Way Buddhism — Bulgaria, reg. no. 131177529, Sofia 1000, 42 Otets Paisiy Str., webmaster@diamondway.bg

Buddhism Diamond Way Foundation, reg. no. 175366468, Sofia 1164, 50 Tsanko Tserkovski Str., webmaster@diamondway.bg

Which of the two receives a given donation is shown on screen as soon as you choose a cause.

2. What we collect

For card payments: name, email address, the chosen cause, the amount, IP address and the time of the donation. Your card number never reaches us — it is entered on the bank's own page. From the bank we receive a masked number (last four digits), an authorisation code and a reference.

For bank transfers we collect nothing. The page with the transfer details asks for no name, email or anything else, and does not record the visit. If you do make a transfer, the bank provides us with your name and IBAN as the payer — that is an inherent part of the transfer itself and outside our control.

For reminder subscriptions: email address, the chosen day of the month, language, and the IP address at the time of subscribing.

3. Legal basis

Under Article 6(1) of the General Data Protection Regulation:

- point (b) — for the donation itself and for sending the confirmation; - point (c) — for the 10-year retention of accounting records under the Bulgarian Accountancy Act; - point (a) — for the reminder subscription, which is confirmed from your own mailbox and can be ended at any time; - point (f) — for the IP address and technical records needed to protect against abuse and to investigate failed payments.

4. Who else sees the data

- BORICA AD — processes card payments as the operator of the payment gateway. - UniCredit Bulbank AD and First Investment Bank AD — hold the bank accounts. - The outgoing mail provider through which confirmations and reminders are sent.

We do not sell data and do not pass it to third parties for marketing.

5. How long we keep it

- Accounting records of donations — 10 years, under the Bulgarian Accountancy Act. - Technical payment records (gateway responses) — 10 years, as part of the same documentation. - Reminder subscriptions — until you unsubscribe.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection. For the reminder subscription you may also withdraw consent at any time through the unsubscribe link in every message.

Write to us at webmaster@diamondway.bg. If you believe your rights have been infringed, you may lodge a complaint with the Commission for Personal Data Protection, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., kzld.bg.

7. Cookies

We use only two technical cookies: a session cookie that remembers your choices in the donation form, and one that protects against forged requests. Both are required for the module to work, neither tracks behaviour and neither is shared. That is why we show no consent banner — there is nothing to consent to.

Version effective from 1 September 2026.