Privacy Policy

01 Data controller

The controller of your personal data is "SONERS AUTO" EOOD, UIC 203817172, a company registered in the Commercial Register of the Bulgarian Registry Agency, with its registered seat and management address at 8000 Burgas, "Deveti kilometar" district, plot UPI II-557, represented by its manager Yakub Yuseinov Solakov. The business operates from: Main Burgas–Vetren road, opposite Rompetrol, 9th kilometre, Burgas.

For any questions about the processing of your personal data you can contact us at oferti@soners.bg, by phone on 0879 300 123, or at the shop address above.

02 What personal data we collect

Depending on how you interact with us, we may process the following categories of personal data:

• Identification and contact data — name, phone number and email that you enter in the quick-quote form, over the phone, by email or on Viber.
• Vehicle and damage data — make, model, year, a description of the damage, and any other information you provide so we can prepare a quote or carry out the repair.
• Damage photos — the images you upload through the quick-quote form so we can assess the extent of the damage.
• Insurance-related data — where a repair is carried out under an insurance claim, the claim number and the insurer's contact details needed for coordination at your request.
• Enquiry data — the content of messages you send us via the contact form, email, phone or Viber.
• Technical usage data — IP address, device and browser type, pages you visit, and data collected through cookies (see the "Cookies" section).

03 Purposes and legal bases for processing

We process your personal data only where a lawful basis exists, including:

• To respond to your enquiry and prepare an indicative quote — on the basis of taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• To carry out the repair once you leave your vehicle with us — for the performance of a contract.
• To coordinate the repair with your insurer where you have asked us to — on the basis of contract performance and/or our legitimate interest.
• To comply with our legal obligations — including accounting, tax and consumer-protection legislation (Art. 6(1)(c)).
• To operate and improve the website and prevent misuse of the photo-upload form — on the basis of our legitimate interest (Art. 6(1)(f)).
• To send marketing communications where you have consented — on the basis of your consent (Art. 6(1)(a)), which you may withdraw at any time.

04 Damage photos

Photos you upload through the quick-quote form are used solely to assess the damage and prepare an indicative quote or the repair. Please avoid including people or documents unrelated to the vehicle in the shot. We keep the photos only for as long as necessary to process your enquiry or repair, and do not use them for any other purpose without your consent.

05 Recipients of the data

We do not sell your personal data. We may share it with the following categories of recipients only to the extent necessary for the stated purposes:

• Insurance companies — where a repair is carried out under an insurance claim, at your request, for the purpose of coordinating and settling the claim.
• Service providers acting on our behalf (e.g. parts suppliers, IT, hosting, accounting), bound by confidentiality obligations.
• Competent public authorities and institutions where required by law.

06 Retention period

We retain your personal data only for as long as necessary for the purposes for which it was collected, or for the period required by applicable law. Documents relating to completed repairs and invoicing are kept for the statutory periods under accounting and tax legislation. Enquiries and photos that do not lead to a repair are kept for a reasonable period (typically up to 12 months), after which they are deleted or anonymised.

07 Cookies

The website uses only strictly necessary cookies — they provide core functionality, including remembering your chosen language. We do not use analytics or advertising cookies.

The only external content is the Google map in the contact section. It is loaded from Google and sets Google cookies, so we display it only after your explicit consent — either through the banner on your first visit, or the "Show the map" button on the map itself. Until then, the page sends no request to Google.

Your choice is stored locally in your browser (localStorage) rather than in a cookie, and can be changed at any time via "Cookie settings" at the foot of every page. You can also manage or delete cookies through your browser settings.

08 Your rights

Under the GDPR you have the following rights in relation to your personal data:

• The right to access your personal data and to receive a copy of it.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure (the "right to be forgotten") under certain conditions.
• The right to restriction of processing.
• The right to data portability.
• The right to object to processing based on legitimate interest or for direct marketing purposes.
• The right to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, contact us at oferti@soners.bg. We will respond within the periods provided by law.

09 Data security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Access to the data is limited to staff and partners who need it to carry out their duties.

10 International data transfers

As a rule, your personal data is processed within the European Economic Area (EEA). If, in certain cases, a transfer outside the EEA is required (for example when using certain service providers), it will take place only where appropriate safeguards are in place in accordance with the GDPR.

11 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our activities or in the law. The current version is always available on this page, and the date of the latest update is shown at the top.

12 Contact and complaints

If you have any questions or complaints about how we process your personal data, please contact us first at oferti@soners.bg. You also have the right to lodge a complaint with the supervisory authority — the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, email kzld@cpdp.bg, website cpdp.bg.