Privacy policy
The personal data controller is AZLD EOOD, UIC 206359802, registered seat and management address Sofia, 1000, Ovcha Kupel district, Ovcha Kupel 1 estate, bl. 608, entr. V, ap. 70, Bulgaria, email info@koreacarsbg.com, phone +359 878 691 112. The company operates the koreacarsbg.com website under the trade name Korea Cars BG.
1. Who we are
| Legal entity | AZLD EOOD |
|---|---|
| Legal form | Single-member limited liability company |
| UIC | 206359802 |
| Registered seat and management address | Bulgaria, Sofia (capital), municipality Stolichna, Sofia, post code 1000, Ovcha Kupel district, Ovcha Kupel 1 estate, bl. 608, entr. V, ap. 70 |
| Email for data protection enquiries | info@koreacarsbg.com |
| Phone | +359 878 691 112 |
The company is not required to appoint a data protection officer under Art. 37 of the Regulation. Questions about this policy should be sent to the email address given above.
2. What data we collect, for what purpose and on what legal basis
| Vehicle inquiry | Name, email, optionally phone, message text, selected vehicle and date. With the inquiry we also store the details of the car you are asking about — model, year, VIN, price and page address — so that it is clear what you saw, together with a one-way fingerprint of the email address, which we use to limit repeated submissions. The record is written to the Neon database. Purpose: to answer the inquiry and prepare an offer. Legal basis: Art. 6(1)(b) — steps taken at your request prior to entering into a contract. |
|---|---|
| Newsletter | Email address, the version of the consent, the state of the subscription and the date, stored in the Neon database. Purpose: to send you information about available vehicles. Legal basis: Art. 6(1)(a) — consent, given separately from the inquiry. |
| Search on the site | The text you type into the search box. It is sent to our server so that it can return suggestions, and it is not written to the database. Purpose: to show you the matching cars. Legal basis: Art. 6(1)(f) — legitimate interest in a working search. |
| Cookie choice | The categories you accepted or rejected, the version of the text and the date. Purpose: to honour your decision. Legal basis: Art. 6(1)(c) — compliance with an obligation under Art. 5(3) of Directive 2002/58/EC. |
| Usage analytics | It is collected only if you accept analytics cookies — see section 9. Google Analytics 4 is loaded by Google and collects the data described in Google's own documentation. Purpose: to see which pages are used. Legal basis: Art. 6(1)(a) — consent. |
| Technical server logs | IP address, request time and browser type, generated automatically. Purpose: security and prevention of abuse. Legal basis: Art. 6(1)(f) — legitimate interest in protecting the service. |
We do not collect special categories of data under Art. 9 and we do not carry out automated decision-making or profiling under Art. 22.
Providing the data is voluntary. Without a name and an email address, however, we cannot process an inquiry — this requirement follows from the service itself, not from a statutory obligation.
The inquiry form is running live and sends an email to our team and to you. The newsletter accepts real subscriptions with an email confirmation.
The catalogue's vehicle data comes from an external supplier. The sync runs on a schedule from our server and carries no visitor data — the supplier is not told who looked at which car.
3. How long we keep it
| Inquiries not followed by a contract | Up to 12 months from the last correspondence, after which they are deleted. |
|---|---|
| Inquiries that led to a contract | For the term of the contract and 5 years thereafter — the limitation period under Art. 110 of the Obligations and Contracts Act. Accounting records are kept for the periods set out in the Accountancy Act. |
| Newsletter | Until consent is withdrawn. The unsubscribe record is kept so that we can demonstrate we acted on it. |
| Cookie choice | Up to 180 days, after which you are asked again. |
| The text of a search | Not stored. The query is handled in the server's memory and goes with it. |
| Usage analytics | For the retention period set in the Google Analytics property concerned. |
| Server logs | Up to 12 months. |
4. Who else sees the data
We do not sell or rent personal data. Access is limited to processors who provide us with a service and act on our documented instructions under Art. 28 of the Regulation:
- Cloudflare, Inc. — website hosting and network protection.
- Neon Inc. — managed PostgreSQL database in which inquiries, subscriptions and the vehicle catalogue are stored.
- Zoho Corporation — sending the transactional emails and the newsletter.
- Google Ireland Ltd. — web analytics via Google Analytics 4 and the embedded map on the contact page.
Data is disclosed to public authorities only where a law requires us to do so.
5. Transfers outside the EEA
Some of the providers listed are established in the USA. Transfers are made on the basis of the European Commission's adequacy decision under the EU–US Data Privacy Framework and, where a provider is not certified under it, on the basis of standard contractual clauses under Art. 46(2)(c). You may request a copy of the applicable safeguards at the email address given above.
6. Your rights
Under Regulation (EU) 2016/679 you have the right to request:
- access to the data we process about you (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure — the 'right to be forgotten' (Art. 17);
- restriction of processing (Art. 18);
- portability — the data in a machine-readable format (Art. 20);
- objection to processing based on legitimate interest (Art. 21);
- withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3)).
Requests should be sent to info@koreacarsbg.com. We respond within one month of receipt. For complex or numerous requests the period may be extended by a further two months, of which we will inform you. Exercising your rights is free of charge.
You can also unsubscribe from the newsletter with a single click — from the link at the end of every marketing email.
7. Complaint to a supervisory authority
If you believe that we are processing your data unlawfully, you may lodge a complaint with Commission for Personal Data Protection (CPDP), Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., email kzld@cpdp.bg, cpdp.bg. You also have the right to a judicial remedy.
8. Security
The connection to the site is encrypted with TLS. The database and the email provider are reached only from the server — passwords and keys never reach the browser. Access to the data is limited to those who need it.
9. Cookies, analytics and third-party content
The Google Analytics 4 script is not loaded until you accept analytics cookies. Until then your browser sends no request to Google, your IP address does not reach Google through analytics, and no analytics cookies or identifiers are stored. Once you accept, the script loads straight away, with Google Consent Mode v2; when you withdraw, we stop sending and delete the Google Analytics cookies.
The map on the contact page is embedded from Google. It loads only after you accept the optional cookies or press the button that shows the map.
The catalogue's car photos are loaded from the listing's own image server (ci.encar.com), which in doing so receives your IP address and browser details. The photos of the available cars are copied to us and are served from our own domain.
Details about cookies and how to change your choice are in the cookie policy.
10. Changes
If this policy changes we update the date below. Material changes are announced prominently on the site.
Updated: 26 September 2026 · Official sources: Regulation (EU) 2016/679 · CPDP · Terms of use