Personal data and their processing

When it is possible to process personal data?

Personal data may be processed, if necessary, for the purposes of the legitimate interests of the controller (for the definition of controller's role, please see or of a third party. In order for this to happen, the key rights and freedom of the natural persons, whose data is processed, must not prevail upon the legitimate interest of the controller. Often, the grounds for the legitimate interest may apply, when achieving the marketing or video surveillance objectives.

An example of the application of these grounds may be the legitimate interest of the employer to control the performance of the tasks of his employees. If the employer carries out such control through the switched-on location of a mobile device, which the employees are obliged to carry on with them, the employer will not violate the rights of his employees, if there is no other possible way to carry out such control. If, however, the employer is capable of controlling his employees by other means (if they move within confined areas) then, if the employer monitors them through mobile devices with activated location function, this would be a breach of their rights and legal interests. Тhe reason for this is that there are a number of other methods to control the performance of the tasks and these methods do not breach to such an extent the personal space of the employees, as the activated location function.


Important to know
Important to know

A detailed analysis on a case-by-case basis is required to determine if and to what extent controller’s interests limit the general rights and freedom of the data subject and whether or not and to what extent such a limitation is justified.


When consent forms grounds for personal data processing?

Consent only applies in cases when the data subject is in a situation, when he can make a decision of whether or not he wants his data to be processed for specific and clearly defined purposes. Such consent must be given freely, to be informed, specific, express and unambiguous. The data subject must be able to withdraw such consent at any time, without any negative consequences for him. No consent may be requested from a child, aged below 13 years.


For more information
For more information

For more information, please visit the websites of the:

print this page

Post comment
Related documents
Write to us
Ministry of Economy
8, Slavyanska Str., Sofia 1052, Bulgaria
BULSTAT: BG176789453
phone: +359 2 940 7001

fax: +359 2 987 2190
Operational Programme This item is available only in Bulgarian
Contacts: 8, Slavyanska Str. Sofia 1000, Bulgaria tel: +359 2 940 7001 e-mail:
Follow us: Facebook Профил на Министерство на икономиката Twitter Профил на Министерство на икономиката