0%
0
  • No products in the cart.
0

      Privacy Policy

      Home / Privacy Policy

      PRIVACY POLICY OF PREMIUM RALLY SOFIA – SVETI VLAS

      Last updated: 03.2026

      Premium Rally International Ltd., registered with the Registry Agency, the Commercial Register and the Register of Non-Profit Legal Entities under UIC 206659162, with registered office and management address: Sofia 1700, Studentski District, 21st Century Street No. 13, ground floor, office No. 3 (the “Controller”), acts as a personal data controller under Regulation (EU) 2016/679 (GDPR).

      The Controller processes personal data in strict compliance with:

      • Regulation (EU) 2016/679 (GDPR)

      • Bulgarian Personal Data Protection Act

      • Applicable Bulgarian legislation

      • Internal data protection policies of the company

      This Privacy Policy explains, in a clear and accessible way, how personal data is collected, processed, stored and protected.

      I. Key Definitions

      For purposes of this Privacy Policy:

      Personal Data means any information relating to an identified or identifiable natural person (“data subject”).

      Processing means any operation performed on personal data, including collection, storage, use, disclosure, restriction, deletion or destruction.

      Recipient means a natural or legal person, public authority, agency or other body to which personal data is disclosed.

      Data Controller means Premium Rally International Ltd.

      II. Categories of Individuals Whose Data We Process

      The Controller may process personal data relating to the following categories:

      1. Users / Participants

      Including individuals registering for events, using the application, contacting us, or interacting with our services.

      2. Personnel

      Including:

      • Current employees

      • Former employees

      • Job applicants

      • Interns

      3. Contractors and Representatives

      Including contractors, potential contractors and their employees or authorized representatives.

      III. Categories of Personal Data Processed

      Depending on the relationship with the Controller, we may process:

      • Full name

      • Contact telephone number

      • Email address

      • Date of birth

      • Photographs

      • Video recordings

      • Identification or registration data

      • Other data lawfully required for specific purposes

      IV. Purposes of Processing

      Personal data may be processed for one or more of the following purposes:

      Service and Event Administration

      • Registration and participation management

      • Use of application functionalities

      • Access control and participant verification

      Legal and Regulatory Compliance

      • Compliance with Bulgarian law

      • Accounting and tax obligations

      • Labor and social legislation obligations

      Security and Legitimate Interests

      • Safety of users and personnel

      • Content moderation

      • Software maintenance and security

      • Protection of legal rights and legitimate interests

      V. Legal Grounds for Processing

      Personal data is processed on one or more of the following grounds:

      Article 6(1)(a) GDPR — Consent

      Processing based on freely given, specific, informed and unambiguous consent.

      Consent may be withdrawn at any time, without affecting prior lawful processing.

      Article 6(1)(b) GDPR — Contractual Necessity

      Processing necessary for:

      • Performance of a contract

      • Pre-contractual measures

      Article 6(1)(c) GDPR — Legal Obligation

      Processing required for compliance with legal obligations.

      Article 6(1)(f) GDPR — Legitimate Interests

      Processing necessary for legitimate interests pursued by the Controller, provided such interests do not override fundamental rights and freedoms.

      VI. Possible Recipients of Personal Data

      Personal data may be disclosed only where lawful and necessary, including to:

      • Competent public authorities where required by law

      • IT service providers and subcontractors

      • Security or maintenance providers

      • Other entities where required under applicable law

      In all cases appropriate safeguards are applied.

      VII. Retention Periods

      Personal data is stored only as long as necessary and in accordance with applicable retention requirements.

      Data may be retained based on:

      • Statutory retention periods

      • Article 12 of the Accounting Act

      • Labor and social legislation requirements

      • Pending legal or administrative proceedings

      • Establishment, exercise or defense of legal claims

      Where no legal retention period applies, data is stored only for as long as necessary for the stated purpose.

      VIII. Personal Data Security

      The Controller has implemented appropriate technical and organizational measures to protect personal data against:

      • Unauthorized access

      • Loss or destruction

      • Alteration

      • Unlawful disclosure

      Security measures are reviewed based on risk assessments.

      IX. Rights of Data Subjects

      Under the GDPR, you may have the following rights:

      1. Right of Access

      To request access to personal data and related information.

      2. Right to Rectification

      To correct inaccurate or incomplete data.

      3. Right to Erasure

      To request deletion of personal data where Article 17 GDPR applies.

      4. Right to Restriction of Processing

      To request limitation of processing under Article 18 GDPR.

      5. Right to Object

      To object to processing based on legitimate interests where applicable.

      Important: In some cases providing certain personal data is mandatory by law. Refusal to provide required data may make it impossible for the Controller to provide services lawfully.

      X. Protection of Data Subjects’ Rights

      For requests or questions concerning personal data, you may contact:

      Premium Rally International Ltd.

      Address: Sofia 1700, Studentski District, 21st Century Street No. 13, ground floor, office No. 3

      Phone: +359 88 7727376

      Email: [email protected]

      Complaint to Supervisory Authority

      If you believe your rights have been violated, you may lodge a complaint with:

      Commission for Personal Data Protection (CPDP)

      XI. Accessibility and Updates

      The information in this Privacy Policy is current and complete.

      This Policy may be updated when necessary and revised versions will be published promptly after changes.

      Familiarizing yourself with this Policy is important for safeguarding your rights and legal interests.

      XII. Media Content and Event Photography

      By participating in Premium Rally events, participants acknowledge that photographs and video footage may be captured for:

      • Event coverage

      • Promotional materials

      • Social media

      • Website content

      Processing of such visual materials is carried out in accordance with applicable data protection laws.

      XIII. Contact

      For privacy-related questions or requests:

      Email: [email protected]

      Phone: +359 88 7727376

      This Privacy Policy applies henceforth unless amended or replaced by a newer version.