01 · Controller and scope
The data controller is Cars BG 11 Ltd., 357A Slivnitsa Blvd, Sofia 1343, Bulgaria. For questions and requests: info@carsbg11.com.
This policy applies when you visit the site, register, save a vehicle, search, or submit an inquiry.
02 · Data, purposes and legal bases
For an account, we process email and authentication data to provide the requested service. For an inquiry, we process name, email, phone, message and selected vehicle to reply and take steps before a contract.
Limited technical logs, IP address and device data may be processed for security, abuse prevention and reliable operation on the basis of legitimate interests. PostHog processes usage data only after consent. Saved vehicles remain locally in your browser.
03 · Recipients and international transfers
Only providers required for the service receive data: Vercel for hosting, the database provider, Amazon SES for service email and PostHog for consented analytics. When you request content from an external vehicle service, technical data may be exchanged with it to provide that content.
Where processing occurs outside the EEA, an applicable transfer mechanism is used, including an adequacy decision or Standard Contractual Clauses.
04 · Retention
Accounts and sessions are kept as needed for the service; an active session lasts up to 7 days. Inquiries are kept until communication is complete and afterwards only as needed for contractual, accounting or legal obligations. Security logs and analytics are retained for a limited period appropriate to their purpose.
05 · Your rights
You may request access, correction, erasure, restriction, objection or portability, and withdraw consent at any time without disadvantage. Contact info@carsbg11.com. You may complain to the Bulgarian Commission for Personal Data Protection at cpdp.bg.