Privacy Policy

The controller of personal data processed through this website is Future Without Borders Association, registration number (EIK) 207990443, registered seat at 2781 Kraishte, Belitsa Municipality, Bulgaria.

For questions about how we process personal data, email us at the contact address listed on the Contact page.

Contact form: name, email, subject (optional) and message content — processed on the basis of our legitimate interest in responding to your enquiry.

Project application form: name, email, phone (optional), age and motivation text — processed on the basis of the explicit consent you give when submitting the application, for the purpose of selecting participants.

Cookies: the site uses only one strictly necessary session cookie for admin panel login. We don't currently use analytics or marketing cookies; if that changes, we'll add a consent mechanism before loading any.

Theme preference: if you choose a light or dark theme, that choice is stored locally in your browser (local storage). It is not a cookie, it is never sent to us, and it cannot be used to identify you.

Contact form messages — kept for up to 12 months from submission, unless a longer period is needed for another reason.

Project applications — kept until the selection process for that project concludes, plus up to 6 months, unless a longer period is required for reporting to a funding programme (e.g. Erasmus+), in which case you'll be informed separately.

These are internal retention periods we set voluntarily, not a legal requirement — we can shorten them at any time on request.

We don't sell or share your personal data with third parties for marketing purposes.

We use providers who technically process data on our behalf (data processors under the GDPR): our database provider (Neon, with EU-region infrastructure), our hosting and file storage provider for site photos (Vercel), and our email notification provider for new applications (Resend), where that feature is enabled. Both process data only on our instructions, so the site and admin panel can function.

Under the GDPR you have the right to access your own data, correct inaccurate data, request erasure, restrict processing, object to processing based on legitimate interest, and receive your data in a portable format. Where processing is based on consent (e.g. a project application), you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email us at our contact address.

If you believe we're processing your personal data in breach of applicable law, you have the right to lodge a complaint with Bulgaria's Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, cpdp.bg.

Some of our activities (e.g. Erasmus+ youth exchanges) involve participants under 18. For photos and video of minor participants, we collect separate written consent from a parent or guardian outside this website, before the activity takes place — this site does not publish photos of participants without such consent.

We may update this policy if the way we process data changes. The current version is always published on this page.