Privacy policy

1. Controller and contact

ИРЕНКАР ЕООД (IRENCAR EOOD), company registration number 206252686. Registered office: 22 Vladislav Street, floor 2, Pazardzhik 4400, Bulgaria. Workshop address: 5 Ivaylovsko Road, 4400 Pazardzhik. For questions and correspondence: irencar@abv.bg.

2. Data we process

The form provides your name, contact phone number, vehicle-related message and selected language. We also receive your acknowledgement of this notice and request for a response. If you optionally sign up for SMS promotions, that choice is recorded separately, together with the wording version and time the request was received.

When you visit, technical providers may process your IP address, browser and device information, requested pages and technical logs. The application uses a short-lived IP hash to limit abuse. Do not submit national identification numbers, payment-card details or sensitive personal data through the form.

3. Purposes and legal bases

Requests for a quote or service are processed to respond and take steps at your request before a contract — GDPR Article 6(1)(b). For other general questions and website security, the basis is our legitimate interest in handling correspondence and preventing abuse — Article 6(1)(f). Where document retention is required by law, Article 6(1)(c) applies.

Promotional SMS messages rely on separate, optional consent — Article 6(1)(a). The required enquiry checkbox acknowledges this notice and requests a response; it is not permission for advertising.

4. Optional SMS promotions

You can select the separate, initially unchecked option for SMS offers and promotions from Iren Car to the phone number you provide. If you leave it unchecked, we will not use your number for those promotions. This does not affect the response to your enquiry or access to services.

You can withdraw consent at any time, without charge, by emailing irencar@abv.bg with the phone number concerned. Withdrawal does not affect the lawfulness of earlier processing. On withdrawal, promotional messages stop; contact about an ongoing enquiry or repair may continue under the applicable other legal basis.

5. Recipients and technical providers

The workshop handles your enquiry. The website uses Vercel for hosting and form execution, Resend to send the email, and the ABV.bg mailbox at irencar@abv.bg to receive it. The application has no enquiry database; email copies and provider-held copies are still processing and storage of personal data.

Choosing “Show map” loads Google Maps. Google receives technical data such as your IP address and browser information and may use cookies under its own policies. The embedded map does not load before your choice. External links to Google also lead to a separate service.

6. Processing outside the EEA

Technical providers may process data outside the European Economic Area, including in the US. Resend states that stored data is held in the US; choosing a European sending region does not mean EU-only storage. Vercel and Resend publish data-processing agreements and international-transfer mechanisms, including Standard Contractual Clauses. You can request information or a copy of the applicable safeguards from us by email.

7. Retention

Routine enquiries and their associated data in the workshop mailbox are kept for up to 6 months after the correspondence is resolved. They are then deleted unless needed for an ongoing repair, a legal obligation, or establishing, exercising or defending legal claims. In those cases, retention depends on the particular obligation or claim.

Numbers are not used for promotions after consent is withdrawn or the applicable enquiry-retention period expires. Minimal withdrawal or consent evidence may be kept only as needed to respect an opt-out and defend legal claims. The request-limiting IP hash expires after one minute. Providers have separate retention periods for technical logs and copies; deleting a mailbox message does not automatically delete their records.

8. Your rights

Subject to GDPR conditions, you have rights of access, correction, erasure, restriction and portability, and to object to processing based on legitimate interests. You may object to direct marketing at any time. To exercise your rights, email irencar@abv.bg; we may request enough information to verify that the request concerns your data.

You may complain to Bulgaria’s Commission for Personal Data Protection (CPDP) or another competent supervisory authority. Current complaint procedures are published on the CPDP website.

9. Providing data and cookies

Submitting an enquiry is voluntary. The name, phone number and message are required by the form; without them it cannot be submitted. You can contact us by email instead. We do not make automated decisions with legal or similarly significant effects, or profile you for such decisions.

The current website has no advertising or analytics scripts. Fonts, photos and logos load from the website itself. Technical settings needed for site operation may use cookies; the external map is enabled separately at your choice.