Privacy policy

The controller of your personal data is Unitech EOOD, Unified Identification Code (EIK) 813145270, with its registered office at 187B Slivnitsa Blvd., floor 2, apt. 6, Mladost district, 9000 Varna, Bulgaria, represented by its manager, Martin Veskov Penev.

For any questions about personal data or to exercise your rights, write to us at info@unitechturbo.com, call +359 52 302 795 or contact us at our workshop: 1 Studentska St., Technical University of Varna, building UPB-144, 9010 Varna, Bulgaria.

We have not appointed a data protection officer, as we are not legally required to do so.

• Data: name, phone number, email address (optional), part number (optional), your message and up to three photos, if you attach them. We also record the IP address from which the enquiry was sent.
• Purpose: to respond to your enquiry, give you a quote and agree a repair or delivery. We use the IP address only to protect against abuse, by limiting the number of enquiries from a single address.
• Legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR); for the IP address, our legitimate interest in protecting the website from spam and abuse (Article 6(1)(f) GDPR).
• Retention period: 2 years from receipt of the enquiry, after which the data is deleted.

We cannot process your enquiry without a name and phone number. Please do not send photos showing people, registration numbers or other personal data that are not needed for the enquiry.

When you call us or write to us by email or WhatsApp, we process the data you give us (name, phone number, email address, content of the message) for the same purpose, on the same legal basis and for the same period as enquiries from the form – 2 years.

If we enter into a contract following your enquiry, we process the data needed to perform it – for communication, shipping and invoicing (Article 6(1)(b) GDPR). We keep the data in invoices and other accounting documents for the periods required by Bulgarian accounting and tax law (Article 6(1)(c) GDPR).

When you open the website, the server automatically records technical data – IP address, browser type, the page visited and the time. This data is needed for the website to work and to protect it from attacks (legitimate interest, Article 6(1)(f) GDPR) and is kept for a short period by our hosting provider. We do not use statistics, advertising or profiling tools.

For information on cookies and embedded content from Google Maps, see our Cookie Policy.

We do not sell your personal data or share it with anyone for advertising. Your data is processed by our suppliers (data processors), with whom we have contracts and who use it only on our instructions:

• Vercel Inc. (USA) – website hosting;
• Supabase Inc. – the database in which enquiries are stored; the data is held in a data centre in the EU (Paris, France);
• our email service provider in Bulgaria – we receive enquiries and photos by email.

Your data may also be received by courier companies (when a consignment is shipped), our accountant and public authorities, where required by law.

Vercel Inc. and Supabase Inc. are US companies and may access data from the USA in the course of supporting their services. Transfers take place on the basis of the EU–US Data Privacy Framework or standard contractual clauses approved by the European Commission (Articles 45 and 46 GDPR).

You have the right:

• to find out whether we process your data and to receive a copy of it (right of access);
• to request the correction of inaccurate data;
• to request the erasure of your data (“right to be forgotten”) where it is no longer needed or the processing is unlawful;
• to request restriction of processing;
• to receive the data you have provided to us in a machine-readable format (right to data portability);
• to object to processing based on legitimate interest;
• to withdraw your consent at any time where processing is based on consent (for example, for cookies), without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, write to us at info@unitechturbo.com. We will reply without undue delay and within one month at the latest.

If you believe that we are infringing your rights, you can lodge a complaint with the Commission for Personal Data Protection – 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg – or with the supervisory authority in the EU member state where you live or work.

The website operates only over a secure connection (HTTPS). Only those of our employees who respond to enquiries have access to them. The database allows the website only to add enquiries, not to read them.

We do not make decisions based solely on automated processing and do not carry out profiling.

The website is intended for vehicle owners and garages, not for children. If we learn that we have received data from a child under 16, we will delete it.

We may change this policy, for example if we begin to offer new services on the website (such as an online shop). The current version is always available on this page, and the date from which it applies is shown at the top.