Introduction
This Privacy Policy explains how JUSA Ltd., (“we,” “our,” “us”) collects, uses, and protects your personal data when you apply for or participate in the J-1 Work and Travel Program (“the Program”) or when you use our website.
We are committed to complying with the General Data Protection Regulation (GDPR) and all applicable Bulgarian and European data protection laws..
Data Controller
The entity responsible for your personal data is:
JUSA Ltd., (VAT BG206344323)
Data We Collect
We collect and process the following categories of personal data:
Registration Data: Email address provided when creating an account on JUSA.bg.
Application Data: Personal details, academic information, emergency contact person, and responses in your J-1 application.
Uploaded Documents: Copies of passport, academic transcript, student ID, job offer, and other visa-related documents.
Digital Signature: Your digital signature used for signing the Sponsor Terms & Conditions
Payment Data: Transaction identifiers, payment status, and selected products processed via our secure payment system (payments handled by third-party providers; JUSA.bg has no access to or storage of your card details).
Website Usage Data: IP address, browser type, and activity logs collected for security and analytical purposes.
Purpose and Legal Basis for Processing
We process your data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| To create and manage your account | Contract (Article 6(1)(b)) |
| To process your J-1 application | Contract |
| To share your application with the U.S. sponsor and host employer | Legitimate interest / Contract |
| To store digital signatures and PDF documents | Consent / Legal obligation |
| To manage payments and invoices | Contract / Legal obligation |
| To communicate updates or reminders | Legitimate interest |
| To comply with immigration and program requirements | Legal obligation |
Data Sharing
We share personal data only when necessary for processing your application and administering your participation in the J-1 Work and Travel.
Where applicable, your information may be shared with:
U.S. Sponsor Organizations – for review, approval, and DS-2019 issuance.
Host Employers – to verify job offers and employment conditions.
Payment Processors – to ensure secure online transaction handling.
IT and Hosting Providers – for website operation and database maintenance.
All service providers operating within the European Unionare bound by data processing agreements that comply with GDPR requirements. ..
When data must be transferred to partners outside the EUsuch as U.S. sponsors or employers, it is done only to the extent necessaryfor your application and under appropriate safeguards in line with Articles 44–49 of the GDPR.
While J USA Ltd. cannot control data protection practices of independent U.S. organizations, we work only with sponsorsapproved by the U.S. Department of State,ensuring that all shared data is processed responsibly and for lawful purposes directly related to the program.
Data Storage and Retention
We store your personal data on secure servers located within the European Unionmanaged by our trusted hosting provider.
Access to this data is granted only to authorized employees of JUSA Ltd.and used exclusively for legitimate administrative purposes related to the program.
We retain information only for as long as necessary to fulfill its purpose:
Application and correspondence data – typically retained for five years after program completion for verification and re-application purposes.
Payment and accounting records – retained for seven yearsin accordance with applicable EU tax and accounting regulations.
After the retention period expires, all data is securely deleted or anonymized. .
This storage policy applies only to data processed by J USA Ltd.Independent U.S. sponsors and employers maintain their own records in compliance with applicable legal and privacy requirements.
Cookies
Our website uses cookies for essential functionality, performance, and analytics.
You can manage or disable cookies through your browser settings or via the cookie consent banner.
See our Cookie Policy for more details.
Your Rights
Under the General Data Protection Regulation (GDPR)you have the right to:
Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data (“right to be forgotten”).
Restrict or object to certain types of processing.
Receive a copy of your data in a portable format.
Withdraw your consent at any time, where processing is based on consent.
To exercise these rights, please submit a request through our contact form at https://jusa.bg/contact/.
We will respond within 30 days of receiving your request.
Security
We apply appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
This includes the use of encrypted connections (SSL)secure file upload systems, access controls, and regular data backups.
Access to personal data is granted only to authorized employeeswho require it for legitimate operational purposes.
International Transfers
Some data may be transferred to the United States for processing by the designated J-1 program sponsor or host employer.
These transfers are conducted under appropriate safeguards in compliance with GDPR, including the use of Standard Contractual Clauses (SCCs) or equivalent protective mechanisms.
Automated Decisions and Profiling
We do not use automated decision-making or profiling that could have legal or significant effects on users.
Updates and Contact
We may periodically update this Privacy Policy. The latest version will always be available on this page, with the date of the most recent update clearly indicated.
For any questions related to this Privacy Policy or the protection of your personal data, please use the contact form
All inquiries submitted through the form will be directed to the appropriate department of J USA Ltd.and we will aim to respond within a reasonable timeframe.