Privacy policy

Privacy protection. Regulation (EU) 2016/679.

 

Definitions for the purposes of this regulation.

  1. "personal data" means any information relating to an identified individual or individual who can be identified ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or one or more signs specific to the physical, physiological, genetic, mental, mental, economic, cultural or social identity of that individual;
  2. "Processing" means any operation or set of operations performed with personal data or a set of personal data by automatic or other means such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, dissemination or other means by which data become available, arranged or combined, restricted, deleted or destroyed;
  3. "Limitation of processing" means the marking of stored personal data in order to limit its processing in the future;
  4. "Profiling" means any form of automated processing of personal data involving the use of personal data for the assessment of certain personal aspects relating to an individual, in particular for the analysis or forecasting of aspects relating to the performance of professional duties that physical person, his or her economic condition, health, personal preferences, interests, reliability, behavior, location or movement;
  5. "Pseudonymization" means the processing of personal data in such a way that personal data can no longer be linked to a particular data subject without the use of additional information  provided that it is kept separately and is subject to technical and organizational measures, the aim is to ensure that personal data are not linked to an identifiable natural person or individual who can be identified;
  6. "Personal data record" means any structured set of personal data accessed in accordance with certain criteria, whether centralized, decentralized or distributed according to a functional or geographic basis;
  7. “administrator” means a natural or legal person, a public body, an agency or other entity which, alone or jointly with others, defines the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union or national law, the controller or the specific criteria for determining such treatment may be laid down in Union law or in the law of a Member State;
  8. "Personal data processor" means a natural or legal person, a public authority, an agency or other entity that processes personal data on behalf of the controller;
  9. "Recipient" means a natural or legal person, a public authority, an agency or other entity to which personal data is disclosed, whether or not a third party. At the same time, public authorities which may receive personal data in a specific investigation in accordance with Union law or the law of a Member State are not considered to be 'recipients'; 4.5.9. L 119/33 Official Journal of the European Union EN the processing of such data by the said public authorities complies with the applicable data protection rules according to the purposes of the processing;
  10. "Third party" means a natural or legal person, a public authority, an agency or other body other than the data subject, the controller, the processor of personal data and the persons directly entitled to process the personal data under the direct authority of the controller or the data processor;
  11. "Data subject consent" means any free expression, specific, informed and unambiguous indication of the will of the data subject by means of a statement or clearly confirming action that agrees that the personal data relating to him / her be processed;
  12. "Personal data breach" means a breach of security that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data that is transmitted, stored or otherwise processed;

 

Principles relating to the processing of personal data

  1. Personal data is:
  • processed in a lawful, conscientious and transparent manner with respect to the data subject ("lawfulness, good faith and transparency");
  • collected for specific, explicit, and legitimate purposes and not further processed in a manner inconsistent with those purposes; further processing for archiving purposes in the public interest, for scientific or historical research or for statistical purposes is not considered to be incompatible with the original objectives ("limitation of objectives") under Article 89 (1);
  • appropriate, relevant and limited to what is necessary in relation to the purposes for which they are being processed ("minimize data");
  • accurate and, if necessary, up-to-date; all reasonable measures must be taken to ensure the timely erasure or correction of inaccurate personal data, taking into account the purposes for which they are processed ("accuracy"); 4.5.2016 L 119/35 Official Journal of the European Union EN (1) Directive (EU) 2015/1535 of the European Parliament and of the Council of 9 September 2015 laying down a procedure for the provision of information in the field of technical regulations and rules on Information Society services (OJ L 241, 17.9.2015, p. 1);
  • stored in a form that allows the data subject to be identified for a period no longer than is necessary for the purposes for which the personal data are processed; personal data may be retained for longer periods as far as they are processed solely for the purpose of public interest archiving, scientific or historical research or statistical purposes pursuant to Article 89 (1), provided appropriate technical and organizational measures provided for in this Regulation in order to guarantee the rights and freedoms of the data subject (the "containment limit");
  • processed in such a way as to ensure an adequate level of security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or deterioration, by applying appropriate technical or organizational measures ("integrity and confidentiality");

Legality of processing

  1. Processing is lawful only if and to the extent that at least one of the following conditions is applicable:
  • the data subject has consented to the processing of his or her personal data for one or more specific purposes;
  • processing is necessary for the performance of a contract by which the data subject is a party or for taking steps at the request of the data subject prior to the conclusion of a contract;
  • processing is necessary to comply with a legal obligation that applies to the controller;
  • processing is necessary to protect the vital interests of the data subject or another individual;
  • the processing is necessary for the performance of a task of public interest or in the exercise of the official powers conferred on the controller;
  • processing is necessary for the legitimate interests of the controller or of a third party unless the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, in particular where the data subject is a child, have the advantage of such interests;

 

Social media

  1. Your access to social networks such as Facebook, Skype, WhatsApp, Viber, YouTube, and others, provides for registration and acceptance of the general terms and conditions of these sites. "Luxury Cars 07" Ltd is not responsible for the protection of your personal data when accepting these terms and conditions. Please take a closer look at the general terms and conditions of these sites.

 

The following types of personal data provided by you and necessary for the identification and performance of the contractual obligations of “Luxury Cars 07” Ltd are processed:

  1. Your names;
  2. ID number;
  3. Address;
  4. ID card or passport number;
  5. Driving license number;

Names, addresses and other data of a proxy entered in the document authorizing him to represent the data subject before “Luxury Cars 07”Ltd. Data is processed in the form of a scanned copy or a photograph of the given information.

Submission of personal data by the data subject to the controller as a contractual or statutory obligation. Possible consequences of the lack of provision of personal data.

  •  We clarify that the provision of personal data may be partially required by law (eg tax provisions) or may also result from contractual provisions (for example, contractual partner information). For example, the data subject must provide us with personal data when a contract is signed with him. The lack of provision of personal data would lead to the fact that the contract with the individual can not be concluded and executed;
  • Processing is necessary for the performance of contractual obligations by which the data subject is a party, as well as for pre-contract activities. The need for collecting personal information is also due to the fact that, in certain circumstances, public authorities have a legitimate ground to require personal identification information.
  • Before submitting his or her personal data, the data subject may contact our contact person. Our contact person explains to the data subject whether the provision of personal data is required by law or contract or is necessary for the conclusion of the contract;
  • In case you do not wish to provide the necessary information about the rental car rental service, “Luxury Cars 07” Ltd cannot fulfill your commitments and arrangements to you;

 

Your personal data may be provided to competent public authorities in order to comply with their statutory obligations provided by relevant laws and regulations - court, prosecutor's office, prosecution, MI, Traffic Police, revision authorities - NRA, NSSI, supervisory authorities - the Commission for the Protection of Personal Data, etc., when they required the data in due order in connection with the fulfillment of their powers.

The Administrator processes and stores your personal data only for the period necessary to achieve the purposes set forth in this Privacy Statement or to comply with the legal requirements established by the European legislator or in laws or regulations to which “Luxury Cars 07” Ltd is subordinate.

We terminate the use of your personal data for the purposes of the contractual relationship after termination of the contract but do not delete them before the expiry of the statutory deadlines for claiming (5 years) specified in the Obligations and Contracts Act, obligations to provide information of the court, competent state bodies and others. grounds provided by current legislation (5 years).

After expiry of the storage periods, personal data is deleted / destroyed (by applicable means - eg by cutting, incineration or permanent deletion by electronic means, for which a protocol is drawn up by a committee appointed by order of the Manager), unless:

  • they are necessary for pending court, arbitration, administrative or enforcement proceedings;
  • You have exercised your right to request a limitation on the processing of your personal data;

 

Your rights

You have the following rights regarding your personal data:

  1. Confirmation right

You have the right to obtain confirmation from your computer administrator that your personal data is being processed.

 

  1. Right of access

You are entitled to receive, free of charge, from the “Luxury Cars 07” Ltd administrator information about your personal data processed at any time, as well as a copy of this information. In addition, you have the right to access and an explanation of your personal data processed, which includes the following information:

  • the purpose of the processing;
  • the relevant categories of personal data associated with you;
  • the recipients or categories of recipients to whom your personal information is or will be disclosed, in particular recipients in third countries or international organizations;
  • where possible, the time limit for which your personal data will be stored and, if that is not possible, the criteria used to determine that period;
  • the existence of a right to request the rectification or erasure of personal data or to restrict the processing of personal data relating to you or to object to such processing;
  • the existence of the right to complain to the supervisor;
  • when your personal data is not collected by you, any available information about its source;
  • when your personal data is transferred to a third country or an international organization, you have the right to be informed of the appropriate delivery guarantees;

At your request, “Luxury Cars 07” Ltd can provide you with a copy of your personal data that is being processed.

Providing access to your personal data may not adversely affect the rights and freedoms of third parties or lead to a violation of a regulatory obligation of “Luxury Cars 07” Ltd.

When your access requests are clearly unreasonable or excessive, especially due to their repeatability, “Luxury Cars 07” Ltd may charge a reasonable fee based on the administrative costs of providing the information or refuse to respond to your request for access.

“Luxury Cars 07” Ltd assesses on a case-by-case basis whether a claim is manifestly unfounded or excessive.

In case of refusal to provide access to personal data, “Luxury Cars 07” Ltd argues its refusal and informs you.

 

  1. Right of rectification

The data subject shall have the right to request the controller to correct inaccurate personal data relating to him without undue delay. Given the purposes of the processing, the data subject may have incomplete personal data filled in, including by adding a declaration.

 

  1. Right to Delete (The Right to Be forgotten)

You have the right, provided by the European legislator, to ask the administrator of “Luxury Cars 07” Ltd. to delete your personal data without undue delay and the administrator is obliged to delete your personal data without undue delay when any of the following grounds:

  • personal data is no longer needed for the purposes for which it was collected or otherwise processed;
  • You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
  • You object to the processing and there are no legitimate grounds for the processing that will take precedence;
  • your personal data has been tampered with;
  • Your personal data must be deleted to comply with a legal obligation of administrator “Luxury Cars 07” Ltd;

"Luxury Cars 07" Ltd. is not obliged to delete the personal data as far as the processing is necessary:

  • of exercising the right to freedom of expression and the right to information;
  • to comply with a legal obligation of Bridge Computer;
  • of compliance with the Road Traffic Act;
  • for compliance with the statutory deadlines for claiming damages specified in the Law on Obligations and Contracts;
  • for the establishment, exercise or protection of legal claims;

 

  1. Right to Restrict Processing

You have the right to request from the administrator “Luxury Cars 07” Ltd. a restriction of processing when one of the following applies:

  • you challenge the accuracy of your personal data for a period that allows the administrator to verify the accuracy of the personal data;
  • the processing is illegal, but you do not want your personal data to be deleted, and you require instead limiting their use;
  • the administrator no longer needs your personal data for the purposes of processing, but you require it to establish, exercise or protect legal claims;
  •  
  • you have objected to the processing of the legitimate interest of “Luxury Cars 07” Ltd and it is checked whether the legal grounds of the Administrator have an advantage over your interests;

 

  1. Right to data portability

You have the right to receive the personal data that concern you and which you have provided to “Luxury Cars 07” Ltd. in a structured, widely used and machine readable format. Upon request, this data can be transferred to another administrator that you specify when it is technically feasible.

 

You may exercise the right of portability in the following cases:

  • processing is based on your consent;
  • processing is based on a contractual obligation;
  • processing is done in an automated manner;

The right of portability cannot adversely affect the rights and freedoms of others.

  1. Right of objection

You have the right to object to the processing of your personal data by “Luxury Cars 07” Ltd. “Luxury Cars 07” Ltd terminates the processing of your personal data in case of objection unless it proves there are convincing legal grounds for its extension that take precedence over your interests, rights and freedoms or for the establishment, exercise or protection of legal claims.

 

“Luxury Cars 07” Ltd. does not collect or process special categories of personal data (so-called sensitive personal data), namely those that:

  • reveal racial or ethnic origin;
  • disclose political, religious or philosophical beliefs, membership of political parties or organizations, associations with religious, philosophical, political or trade union goals;
  • relate to health, sexual life or the human genome;

 

As a responsible company, we "Luxury Cars 07" Ltd. do not use automated decision making involving or excluding profiling.

 

If you would like to contact us about issues related to this Privacy Statement or Privacy Policy,

 please contact us in the following ways:

phone: (02) 945 5554

e-mail: rentakar777@abv.bg

By mail: Sofia, “Cap. Raycho Nikolov” Street № 3a, for the contact for data protection.

Name and address of administrator

An administrator for the purposes of the General Data Protection Regulation (Regulation (EC) 2016/679), other data protection laws applicable in the Member States of the European Union and other data protection provisions are:

„Luxury Cars 07” Ltd, UIC: 203206274

 “Cap. Raycho Nikolov” Street № 3a

Sofia 1517, Bulgaria

Phone: (02) 945 5554

Email: rentakar777@abv.bg

Website: www.kola-pod-naem.com

Control over our activities related to the processing of personal data in Bulgaria is exercised by the following administrative body:

Commission for Personal Data Protection (CPDP)

Address: Sofia 1431, boulevard “Academician Ivan Evstratiev Geshov” 15

Phone: + 359 2 915 35 18

Fax: + 359 2 915 35 25

Email: kzld@government.bg, kzld@cpdp.bg

Website: www.cpdp.bg

 

Entry into force and update of the Privacy Policy of data subjects who make purchases through the “Luxury Cars 07” Ltd Web site.

 

This Statement enters into force and applies from 25.05.2018.