2. PRIVACY POLICY (GDPR)
This document explains to users what data you collect, why, and how you protect it.
1. Who are we?
The personal data administrator for the website https://cardna.eu is Yuliyan Dimitrov (an individual). You can contact me by email at: office@cardna.eu.
2. What personal data do we collect?
We only collect the data that you voluntarily provide to us through the site's forms:
- Upon request for a check (Home page): Email address (mandatory), VIN number (mandatory), and Link to the ad (optional).
- Payment details: We DO NOT collect and do not store data about your bank cards or accounts. All payments are processed entirely by the external platform Payhip.
- Upon contact with us (Contacts Page): Email address (mandatory) and the content of your message (mandatory).
3. For what purposes and on what legal basis do we process your data?
- Performance of the service: We process your email and VIN number to generate and send you the requested car report. (Legal basis: Art. 6, para. 1, letter "b" of the GDPR - performance of a contract/pre-contractual relations).
- Communication: We process your email and message from the contact form to answer your questions or inquiries. (Legal basis: Art. 6, para. 1, letter "f" of the GDPR - legitimate interest).
4. To whom do we provide your data?
Your data is not sold to third parties. To perform the service, it is possible that we submit the VIN number provided by you to external systems/databases to check the car's history. We also use trusted hosting service providers SuperHosting, where the data is physically stored.
5. How long do we store your data?
- Data from submitted requests (email and VIN) is stored for a period of 1 year after the report is sent, for the purpose of resolving potential consumer disputes.
- Data from the contact form is stored until the final conclusion of the communication with you, after which it is deleted.
6. What are your rights?
According to the GDPR, you have the following rights:
- Right of access to your personal data;
- Right to rectification of inaccurate data;
- Right to erasure ("right to be forgotten");
- Right to restriction of processing;
- Right to object to processing.
To exercise any of these rights, please contact me at office@cardna.eu.
If you believe that your rights have been violated, you have the right to file a complaint with the Commission for Personal Data Protection (CPDP) - www.cpdp.bg.