Privacy and your data · CampusBridge

Explore Technical University of Sofia, find personal guidance and follow your application progress.

Data is retained only while necessary for its recorded purpose. GDPR does not prescribe a universal document retention period.

Your assistant message and recent conversation are sent to Google after common personal identifiers are removed. Private account records, documents and case messages are never attached. Free-tier inputs may be reviewed and used to improve Google products.

operator name: Fahrettin Samet Biçer

contact email: fbicher@tu-sofia.bg

purposes: Operate CampusBridge as an independent student advisory project: provide TU Sofia programme information, respond to enquiries, coordinate requested application preparation, track milestones and documents, arrange consultant conversations and appointments, and handle account and privacy requests. CampusBridge is not an official university admissions service.

lawful bases: Case preparation and associated communication are processed to take steps requested by the student in relation to the advisory service. Proportionate account-security and abuse-prevention records support the operator's legitimate interest in protecting the service. Optional communication preferences can be withdrawn. The service does not use these purposes as authorisation to collect health, criminal-record or other special-category information.

retention: Requested documents are removed when their application is archived or their purpose ends unless an administrator records a specific basis and an expiry date for an exception. Chat history is retained for 30 days; case messages for 180 days; support requests and notifications for 90 days; private account-action content for 1 day; security and administration audit records for 180 days. Operator-held backup copies must expire within 30 days and any restored data must be checked against erasure records before use. These periods reflect this project's operational needs, not GDPR-prescribed durations.

processors: The application runs on the operator's OVHcloud Ubuntu VPS. ClamAV scans documents locally on that server. Google Gemini receives selected public guidance and redacted conversational text; private account records, uploaded files and case messages are not attached. Account requests are handled by the operator inside CampusBridge and updates are available in the application.

transfers: Gemini requests leave the application server and are processed under Google's published service terms; processing may occur outside the European Economic Area. Redaction is not a guarantee of anonymity. Do not enter sensitive personal information, identity-document contents, passwords or payment details into the assistant. Case documents are not transmitted to Gemini.

access rules: Students access their own records. Consultants access students currently assigned to them, and reassignment changes access immediately. Administrators manage assignments, workflow records and account requests; access to private messages and account-action content is audited. Administrative and consultant accounts require authenticator verification. Uploads remain unavailable for download until the malware scanner accepts them. Privacy requests and the support contact remain available for questions about access, correction and erasure.

sensitive conditions:

messages days: 180

support days: 90

notifications days: 90

outbox days: 1

audit days: 180

backup days: 30