Privacy Policy
This Privacy Policy explains how Autorent Europe Ltd ("we", "us", "the Company") collects, uses, and protects your personal data when you visit our website www.autorentgroup.com or interact with us, in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The data controller is Autorent Europe Ltd, represented by Cristian Damian — Managing Director. Address: 12 Hristo Botev Blvd, Floor 3, 7001 Ruse, Bulgaria. Email: office@autorentgroup.com.
2. What Data We Collect
When you use our website, we may collect the following personal data:
Contact form submissions: name, company name, email address, phone number, and the content of your message. This data is collected when you voluntarily submit the contact form on our website.
Technical data: IP address, browser type, device information, and pages visited. This data is collected automatically through server logs and, if you consent, through analytics cookies.
Supplier form submissions: brand/stock type, country, quantity, contact details, and uploaded stock list files (Excel, PDF, CSV). This data is collected when suppliers submit stock through our supplier portal.
KYC/AML documentation: for business verification purposes, we may request and process company registration certificates, proof of VAT registration, bank account details, and beneficial ownership information.
Communication data: if you contact us by email, phone, or WhatsApp, we may store the content of those communications for the purpose of fulfilling your enquiry.
3. Purpose of Processing
We process your personal data for the following purposes: responding to your enquiries and providing vehicle availability and pricing information; managing business relationships with our partners and clients; complying with legal and regulatory obligations; improving our website and services; conducting Anti-Money Laundering (AML) and Know Your Customer (KYC) checks as required by EU Directive 2015/849 and applicable national legislation for high-value goods transactions.
4. Legal Basis
We process your data based on: your consent (contact form submission); legitimate interest (responding to business enquiries, improving our services); contractual necessity (processing orders and managing business relationships); legal obligation (tax and accounting requirements, AML/KYC compliance pursuant to EU Anti-Money Laundering Directives and Bulgarian national legislation).
5. Data Recipients
We may share your data with: Formspree Inc. (form processing service, based in the USA, EU-US Data Privacy Framework compliant); Cloudflare Inc. (website security and performance); Google LLC (Google Analytics 4, property G-4SK01M5X69, activated only with cookie consent); tax authorities and legal advisors where required by law.
6. International Transfers
Some of our service providers (Formspree, Cloudflare) process data outside the European Economic Area. These transfers are protected by appropriate safeguards including Standard Contractual Clauses and adequacy decisions.
7. Data Retention
Contact form submissions are retained for up to 24 months or until the business relationship is concluded. Technical data from server logs is retained for up to 12 months. Business transaction records are retained as required by Bulgarian tax law (typically 5-10 years). KYC/AML documentation is retained for 5 years after the end of the business relationship, in accordance with EU Directive 2015/849. Uploaded stock list files are retained for the duration of the business enquiry and deleted within 6 months if no transaction occurs.
8. Your Rights
Under the GDPR, you have the right to: access your personal data and receive a copy; rectify inaccurate or incomplete data; request erasure of your data ("right to be forgotten"); restrict or object to processing; data portability; withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at office@autorentgroup.com. We will respond within 30 days.
9. Cookies
Our website uses cookies. For detailed information about what cookies we use and how to manage them, please refer to our Cookie Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available on this page.
11. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Commission for Personal Data Protection of Bulgaria (CPDP) or with the supervisory authority in your country of residence.