Privacy Policy

1. Data Controller

East Rent Ltd ("East Rent", "we", "us") is the data controller for personal data collected through this website and during the car rental process. Registered address: Bul. Vladislav Varnenchik 312, Office 2, 9000 Varna, Bulgaria. Contact: reservations@rentalcarsvarna.com

2. What Data We Collect

• Contact & reservation inquiries: name, phone number or email address, requested pickup/return dates, message text, and your IP address.
• Rental contracts: full name, passport or ID number, driver's licence number, address, date of birth (as required by Bulgarian law).
• Payment records: transaction reference numbers. We do not store full card numbers.
• Website usage (cookies): session identifiers and your cookie-consent preference (see section 6).

3. Legal Basis & Purpose

Purpose	Legal basis (GDPR Art.)
Respond to reservation inquiries	Art. 6(1)(b) — pre-contractual steps
Execute and archive rental contracts	Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation
Comply with Bulgarian tax and commercial law (5-year archive)	Art. 6(1)(c) legal obligation
Website session management	Art. 6(1)(f) legitimate interest
Analytics cookies (if accepted)	Art. 6(1)(a) consent

4. Retention Periods

• Inquiry records: deleted after 12 months if no rental contract was created.
• Rental contracts & financial records: retained for 5 years as required by Bulgarian Accounting Act.
• Session cookies: expire at the end of the browser session.
• Consent cookie: 365 days (accepted) or 30 days (declined).

5. Data Sharing

We do not sell or share personal data with third parties for marketing. We may share data with:

• Payment processors (PayPal, card terminal providers) — only the data necessary for the transaction.
• Bulgarian authorities (traffic police, tax authority) when legally required.
• Our hosting provider (cPanel shared hosting, EU-based) — for infrastructure purposes only.

6. Cookies

We use the following cookies:

Cookie name	Purpose	Duration
PHPSESSID	PHP session — required for form CSRF protection	Session
cookie_consent	Stores your cookie-consent choice	365 / 30 days
lang	Remembers your language preference	30 days

We use Google Maps (embedded iframe) to show our office location. Google may set its own cookies when you interact with the map. See Google Privacy Policy.

7. Your Rights (GDPR)

Under the EU General Data Protection Regulation you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion, where no legal retention obligation applies.
• Restriction — ask us to temporarily stop processing your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting prior processing.

To exercise any of these rights, email us at reservations@rentalcarsvarna.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg).

8. Security

All data is transmitted over HTTPS. Admin access to customer data requires authentication. We do not store unencrypted payment card numbers. Our hosting environment is protected by standard server-level security measures.

9. Changes to This Policy

We may update this policy from time to time. The date at the top of this page will always reflect the most recent revision. Continued use of the website after a change constitutes acceptance of the updated policy.