1. Purpose and procedure concerning the personal data processing 

The personal data (“Data”) provided by you will be processed for the following purposes:
а) Implementation of delivery (sale) contracts of products and/or services contracted with you or your company;
б) management of business relationships with you or your company, including warranty services, payment processing, accounting, auditing, invoicing and debt collection and other related services;
в) customer satisfaction surveys (“Customer Satisfaction”) relating to the quality of goods and services in accordance with the Company’s legitimate interest;
г) with Your explicit consent – sending commercial messages/advertisements regarding the Company’s products/services or conducting marketing research (“Marketing”).

The data is collected and processed based on the contract and the legitimate interest of the Company regarding the processing according to points a), b) and c) and based on your consent concerning the marketing purposes described in point d). Please note that if you have given your consent, you may withdraw it at any time.

The data may be processed either on paper or by automated or electronic methods, including via postal or email address, telephone (e.g. automated phone calls, SMS, MMS), fax and any other means (e.g. websites, mobile applications).

2. Consequences of Non-Provision of Data

The Data provision is optional. The refusal of providing Data that is necessary to make a sale or provide a service or product may interfere with the execution or delivery of the service or product or result in poor quality fulfillment.

3. Data transferred to the manufacturer

In the process of our business, the Data may be shared and provided to Iveco S.p.A. and the subsidiaries and affiliates of the Iveco Group and joint ventures in which the Iveco Group has a direct or indirect interest (see the list in the “Annual Financial Statements Report” published on the ivecogroup.com website), as well as to authorized service centers, service providers located within and outside the European Union who are contractually obligated and may use it exclusively for the purposes specified below:

а) fulfilment of warranty and product safety obligations; provision of ancillary services, including through the authorised network of service centres; answering and satisfying customer enquiries; sending technical or organisational announcements; conducting research directed at the improvement of the quality of services provided within the manufacturer’s legitimate interest;
в) subject to your explicit consent, providing data to subsidiaries and affiliated companies of the Iveco Group and joint ventures in which the Iveco Group has a direct or indirect interest, for the purpose of sending commercial announcements, as well as for advertising the products and services offered by them (“Third Party Marketing”).

4. Other Data Recipients

The Data may be provided to third parties to fulfil the aforementioned purposes, to comply with legal regulations, to comply with governmental orders or to enforce the Company’s rights against judicial authorities.

5. Transfer of data outside the European Economic Area (EEA)

Within the contractual relationship, the Company may transfer Data to countries outside the EEA, including storage in databases managed by persons acting on behalf of the Company. The management of databases and the processing of Data are related to the purposes of processing and are conducted in accordance with applicable data protection legislation.

To the extent that data is transferred outside the EEA, the Company will enforce all appropriate contractual protections to ensure adequate data protection, including – among others – agreements based on the standard contractual clauses accepted by the EU Commission.

6. Personal Data Administrator

The administrator of personal data is “BULAUTO BULGARIA” AD, with headquarters in. Sofia, Lyulin district, 757 Okolovrasten pat blvd., e-mail: boyadzhiev@bulauto.com.

7. Storage of data

The Company stores data in its systems and records as long as necessary to fulfil the purposes set out above, taking into consideration, where applicable, legal and contractual requirements.

The Company may continue to store Data for a longer period of time if necessary to protect its interests relating to potential liability in connection with the provision of services or products.

The data processed for marketing and profile purposes will be stored until the withdrawal of your consent and in all cases in accordance with the aforementioned principle and the given guidelines by the relevant data protection authorities in this regard.

8. Your rights

Regarding the processing of your personal data, you have at least the following rights:
– right of access means the right to receive information from the Company regarding whether your data is being processed and, where applicable, to access it;
– the right of rectification and the right of erasure means the right to request the correction of inaccurate and/or incomplete data and the erasure of data where the request is lawful;
– the right of limitation of processing means the right to request suspension of processing where the request is lawful;
– the right of data portability means the right to receive data in a structured form which can be used in the usual way and be readable, as well as the right to transfer data to other administrators;
– right to object means the right of objection to the processing of Data where the request is lawful, including where the Data is processed for marketing or profile creation purposes, if applicable;
– the right to lodge a complaint means the right to lodge a complaint to the Commission for Personal Data Protection (the Bulgarian Data Protection Authority) in the event of unlawful data processing.

You can enforce the above rights by sending a letter to the above addresses.

o I read this Document and I hereby give my consent to the purposes and procedures described below:

MARKETING ACTIVITIES – the processing of personal data by BULAUTO BULGARIA AD, on paper, by automated or electronic methods, including by postal address or e-mail, telephone (e.g. phone calls, SMS, MMS, fax) and all other means (e.g. websites, mobile applications), for the purpose of sending commercial messages and advertising products and services as described above in point 1(d) of this document:

o I agree                                                                             o I do not agree

MARKETING BY THIRD PARTIES – the provision of personal data to affiliates and subsidiaries of the Iveco Group and joint ventures in which the Iveco Group has a direct or indirect interest, to be processed by them for the purpose of sending commercial notices and for the purpose of advertising the products and services offered by them, as described in detail above in paragraph 3(b) of this document.

 o I agree                                                                             o I do not agree

First name and surname: …………………………………………………………………………………………………………………………………………………

Date and signature: …………………………………………………………………………………………………………………………………………………

Publication date: 18.12..2023