Privacy policy
The personal data controller is AZLD EOOD, UIC 206359802, registered seat and management address Sofia, 1000, Ovcha Kupel district, Ovcha Kupel 1 estate, bl. 608, entr. V, ap. 70, Bulgaria, email info@koreacarsbg.com, phone +359 878 691 112. The company operates the koreacarsbg.com website under the trade name Korea Cars BG.
1. Who we are
| Legal entity | AZLD EOOD |
|---|---|
| Legal form | Single-member limited liability company |
| UIC | 206359802 |
| Registered seat and management address | Bulgaria, Sofia (capital), municipality Stolichna, Sofia, post code 1000, Ovcha Kupel district, Ovcha Kupel 1 estate, bl. 608, entr. V, ap. 70 |
| Email for data protection enquiries | info@koreacarsbg.com |
| Phone | +359 878 691 112 |
The company is not required to appoint a data protection officer under Art. 37 of the Regulation. Questions about this policy should be sent to the email address given above.
2. What data we collect, for what purpose and on what legal basis
| Vehicle inquiry | Name, email, optionally phone, message text, selected vehicle and date. Purpose: to answer the inquiry and prepare an offer. Legal basis: Art. 6(1)(b) — steps taken at your request prior to entering into a contract. |
|---|---|
| Newsletter | Email address and date of consent. Purpose: to send you information about available vehicles. Legal basis: Art. 6(1)(a) — consent, given separately from the inquiry. |
| Cookie choice | The categories you accepted or rejected, the version of the text and the date. Purpose: to honour your decision. Legal basis: Art. 6(1)(c) — compliance with an obligation under Art. 5(3) of Directive 2002/58/EC. |
| Technical server logs | IP address, request time and browser type, generated automatically. Purpose: security and prevention of abuse. Legal basis: Art. 6(1)(f) — legitimate interest in protecting the service. |
We do not collect special categories of data under Art. 9 and we do not carry out automated decision-making or profiling under Art. 22.
Providing the data is voluntary. Without a name and an email address, however, we cannot process an inquiry — this requirement follows from the service itself, not from a statutory obligation.
3. How long we keep it
| Inquiries not followed by a contract | Up to 12 months from the last correspondence, after which they are deleted. |
|---|---|
| Inquiries that led to a contract | For the term of the contract and 5 years thereafter — the limitation period under Art. 110 of the Obligations and Contracts Act. Accounting records are kept for the periods set out in the Accountancy Act. |
| Newsletter | Until consent is withdrawn. The unsubscribe record is kept so that we can demonstrate we acted on it. |
| Cookie choice | Up to 180 days, after which you are asked again. |
| Server logs | Up to 12 months. |
4. Who else sees the data
We do not sell or rent personal data. Access is limited to processors who provide us with a service and act on our documented instructions under Art. 28 of the Regulation:
- Vercel Inc. — website hosting.
- Neon Inc. — managed PostgreSQL database in which inquiries and subscriptions are stored.
- Zoho Corporation — sending the transactional emails and the newsletter.
- Google Ireland Ltd. — web analytics via Google Analytics, only if you have accepted analytics cookies.
Data is disclosed to public authorities only where a law requires us to do so.
5. Transfers outside the EEA
Some of the providers listed are established in the USA. Transfers are made on the basis of the European Commission's adequacy decision under the EU–US Data Privacy Framework and, where a provider is not certified under it, on the basis of standard contractual clauses under Art. 46(2)(c). You may request a copy of the applicable safeguards at the email address given above.
6. Your rights
Under Regulation (EU) 2016/679 you have the right to request:
- access to the data we process about you (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure — the 'right to be forgotten' (Art. 17);
- restriction of processing (Art. 18);
- portability — the data in a machine-readable format (Art. 20);
- objection to processing based on legitimate interest (Art. 21);
- withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3)).
Requests should be sent to info@koreacarsbg.com. We respond within one month of receipt. For complex or numerous requests the period may be extended by a further two months, of which we will inform you. Exercising your rights is free of charge.
You can also unsubscribe from the newsletter with a single click — from the link at the end of every marketing email.
7. Complaint to a supervisory authority
If you believe that we are processing your data unlawfully, you may lodge a complaint with Commission for Personal Data Protection (CPDP), Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., email kzld@cpdp.bg, cpdp.bg. You also have the right to a judicial remedy.
8. Security
The connection to the site is encrypted with TLS. The database and the email provider are reached only from the server — passwords and keys never reach the browser. Access to the data is limited to those who need it.
9. Cookies
Формулярът за запитване работи в реален режим и изпраща имейл до екипа и до вас. Бюлетинът приема реални абонаменти с потвърждение по имейл.
Details about cookies and how to change your choice are in the cookie policy.
10. Changes
If this policy changes we update the date below. Material changes are announced prominently on the site.
Updated: 14 September 2026 · Official sources: Regulation (EU) 2016/679 · CPDP · Terms of use