Privacy Policy

Who we are

DisinfoBS (https://disinfobs.com/) is committed to protecting your privacy and ensuring the responsible handling of personal data. This Privacy Policy outlines how we collect, use, store, and share your personal data in connection with our mission to analyze, monitor, and combat disinformation. We operate in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

We may update this Privacy Policy periodically. The latest version will always be available on our website, and significant changes will be communicated via email or website notification where appropriate. If you have questions or concerns, please contact us at [email protected].

Disinfobs is a platform dedicated to identifying, analyzing, and countering disinformation. We collect and process data to support research, publish reports, and engage with our audience to promote accurate information and media literacy. Our data controller is Disinfobs, and our Data Protection Officer can be reached at [email protected].

What Data We Collect and Why

We collect and process personal data for specific purposes related to our mission. Below are the types of data we may collect and the reasons for doing so:

  1. Website Usage Data
  • Data Collected: IP address, browser type, device information, pages visited, time spent on pages, links clicked, and referral sources.
  • Purpose: To improve user experience, analyze website performance, and ensure security. This data is collected via cookies and similar technologies (see Cookies section below).
  • Legal Basis: Consent (for non-essential cookies) or legitimate interest (for essential cookies and analytics to maintain and improve our services).
  1. Newsletter and Contact Form Submissions
  • Data Collected: Name, email address, and any additional information you provide voluntarily (e.g., comments or feedback).
  • Purpose: To send newsletters, respond to inquiries, or provide updates on disinformation trends and our work.
  • Legal Basis: Consent (for sign-ups and form submissions) or contract (when responding to your requests).
  1. User-Submitted Content
  • Data Collected: Information you submit, such as reports of suspected disinformation, URLs, or screenshots, which may include personal data (e.g., usernames or identifiers in submitted content).
  • Purpose: To investigate and analyze disinformation campaigns, verify claims, and publish aggregated findings.
  • Legal Basis: Consent (when you submit content) or legitimate interest (to combat disinformation in the public interest).
  1. Publicly Available Data
  • Data Collected: Information from public sources, such as social media posts, news articles, or public datasets, which may include personal data (e.g., usernames, public statements).
  • Purpose: To monitor disinformation trends, conduct research, and produce reports. We process such data minimally and only when necessary for our mission.
  • Legal Basis: Legitimate interest (to fulfill our mission of combating disinformation) or public interest (to promote accurate information).
  1. Research and Analytics Data
  • Data Collected: Anonymized or pseudonymized data derived from user interactions or public sources.
  • Purpose: To generate insights, trends, and reports on disinformation without identifying individuals.
  • Legal Basis: Legitimate interest (to advance research and public awareness).

How We Use Your Data

We use your personal data to:

  • Operate and improve our website and services.
  • Communicate with you via newsletters, responses to inquiries, or updates.
  • Analyze disinformation trends and publish reports to inform the public.
  • Ensure the security of our platform and prevent misuse.
  • Comply with legal obligations, such as responding to lawful requests from authorities.

We do not sell your data or share it with third parties for commercial purposes.

Sharing Your Data

We may share your personal data in the following cases:

  • Service Providers: With trusted third-party vendors (e.g., website hosting, analytics, or email services) who process data on our behalf under strict data protection agreements compliant with GDPR.
  • Public Authorities: When required by law, such as responding to requests from regulatory bodies or law enforcement investigating disinformation.
  • Research Partners: Aggregated or anonymized data may be shared with academic or research institutions to advance disinformation studies, ensuring no individual is identifiable.
  • Donors or Sponsors: Limited data (e.g., name, email) may be shared with donors for reporting purposes, only with your explicit consent.

All third parties we share data with are vetted for GDPR compliance and their ability to securely manage personal data.

Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and analyze performance. Cookies may collect data such as your IP address, browser type, and pages visited. You can manage your cookie preferences through the cookie consent banner displayed on our website.

Data Retention

  • Website Usage Data: Retained for up to 12 months, unless required for security or legal purposes.
  • Newsletter/Contact Data: Retained until you unsubscribe or request deletion.
  • User-Submitted Content: Retained for the duration of the investigation or as needed for research, then anonymized or deleted.
  • Publicly Available Data: Retained only as long as necessary for analysis and reporting, typically no longer than 24 months.
  • Research Data: Anonymized data may be retained indefinitely for ongoing research.

Data is stored securely and deleted in accordance with GDPR and local regulations.

Your Rights

As a data subject, you have the following rights under GDPR:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data (subject to legal obligations).
  • Restriction: Limit how we process your data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interest.
  • Withdraw Consent: Revoke consent at any time, where processing is based on consent.

To exercise these rights, contact us at [email protected]. We will respond within one month, as required by GDPR. You may also lodge a complaint with a supervisory authority, such as the Bulgarian Commission for Personal Data Protection.

Data Security

We implement robust technical and organizational measures to protect your data, including:

  • Encryption of data in transit and at rest.
  • Access controls to limit data access to authorized personnel.
  • Regular security audits and pseudonymization of data where possible.
  • Staff training on data protection best practices.

These measures aim to prevent unauthorized access, loss, or manipulation of your data.

International Data Transfers

If you are accessing our website from outside the European Union, your data may be transferred to servers located in the EU or other regions with adequate data protection standards. We ensure such transfers comply with GDPR through standard contractual clauses or other approved mechanisms.

Special Note on Disinformation Work

As part of our mission, we may process publicly available data (e.g., social media posts) to identify disinformation patterns. We handle such data with care, minimizing personal data use and focusing on aggregated insights. If you submit content to us, we will seek your consent to process any personal data included and anonymize it where possible.

Contact Us

For questions, concerns, or to exercise your rights, contact our Data Protection Officer:

We are committed to addressing your inquiries promptly and transparently.

Legal Basis and Compliance

Our data processing is grounded in:

  • Consent: For newsletter sign-ups, user submissions, and non-essential cookies.
  • Contractual Obligation: To respond to inquiries or process submissions.
  • Legitimate Interest: For website analytics, security, and disinformation research.
  • Public Interest: To combat disinformation and promote media literacy.

We comply with GDPR, the Bulgarian Personal Data Protection Act, and other applicable laws.

Thank you for trusting Disinfobs with your data. We are dedicated to using it responsibly to fight disinformation and protect the public interest.