Personal Data Protection Policy (GDPR Policy)

This Privacy Policy provides information on how Air Care Bulgaria Ltd. processes, stores and protects your personal data in accordance with the requirements of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Bulgarian legislation.

We strive to apply the highest standards of transparency, security and legality when working with your personal data.

1. Personal data controller

Air Care Bulgaria Ltd. is the administrator of personal data collected through the website www.aircare.bg. To contact us regarding personal data protection:

• Email: office@aircare.bg
• Address: Sofia, 113 Bulgaria Blvd, fl. 12 2. Categories of personal data we process

2. Categories of personal data we process

We collect and process the following categories of data:

• Identification data – first name, last name, telephone number, email address;
• Address information – delivery and billing address;
• Order and payment data – selected products, payment method, order date;
• Online identifiers – IP address, cookies, website behaviour (via Google Analytics, Facebook Pixel);
• Communications – correspondence, requests and signals from users.

3. Legal grounds for processing

Your personal data is processed on the following legal grounds:

• Performance of a contract (e.g. when purchasing a product);
• Compliance with legal obligations (e.g. accounting and tax requirements);
• Your explicit consent (e.g. for marketing);
• Legitimate interests of the controller (e.g. fraud prevention, service improvement).

4. Purposes of processing

We process your personal data for the following purposes:

• Accepting and processing orders;
• Performing deliveries and providing customer service;
• Maintaining customer accounts and purchase history;
• Sending notifications and communications related to orders;
• Issuing invoices and fulfilling obligations to the National Revenue Agency;
• Conducting marketing campaigns and analyses (only with consent);
• Improving the security and functionality of the website.

5. Recipients of personal data

Your data may be shared with the following categories of recipients:

• Courier and postal service providers;
• Payment operators (banks, financial intermediaries);
• Accounting and auditing firms;
• IT and hosting providers;
• Marketing platforms and analysis tools;
• Competent state authorities where there is a legal basis.

Confidentiality agreements are concluded with all third parties where necessary, in accordance with Article 28 of the GDPR.

6. Data retention period

We store your personal data for the periods specified by law or for as long as necessary to fulfil the purposes of processing:

• Billing and order data – 10 years (under the Accounting Act);
• User profiles and communications – up to 5 years after last activity;
• Data processed on the basis of consent – until consent is withdrawn;
• Cookie data – in accordance with the Cookie Policy.

7. Your rights under the GDPR

You have the following rights:

• Right of access to your personal data;
• Right to correct inaccurate or incomplete data;
• Right to erasure of data (right to be forgotten);
• Right to restrict processing;
• Right to object to certain types of processing;
• Right to data portability;
• Right to withdraw your consent at any time;
• Right to lodge a complaint with the Data Protection Commission.

You can exercise your rights by sending us an email at: office@aircare.bg

8. Automated decision-making

We do not apply automated decision-making, including profiling, which has legal or significant consequences for you.

9. Data security

We implement appropriate technical and organisational measures to ensure protection against unauthorised access, loss, destruction or manipulation of your personal data.

10. Changes to the policy

We reserve the right to update this policy as necessary. Changes will be posted on the website and, where appropriate, communicated by email.

Last update: 01.08.2025