Privacy Policy

CAZAM BULGARIA EAD respects the right to privacy and protects the personal data of its customers, partners, and visitors to the website www.autoplaza.bg.

This Privacy Policy provides information about how the company collects, uses, stores, and protects personal data in connection with the services offered through www.autoplaza.bg.

The company acts as an intermediary and provides organisation and assistance in the purchase, import, and acquisition of motor vehicles, together with related services including consultations, preparation of the necessary documentation, and assistance in obtaining financial leasing.

Personal data is processed only where necessary to provide a requested service, comply with a legal obligation, or where the individual voluntarily provides it through the website or another available communication channel.

The company processes personal data lawfully, fairly, and transparently, in accordance with the principles of Regulation (EU) 2016/679 (GDPR), the Bulgarian Personal Data Protection Act, and other applicable legislation.

By using the website, you confirm that you have read this Privacy Policy.

The personal data controller is:

CAZAM BULGARIA EAD

UIC:

200288848

Registered office:

5 Aleko Konstantinov Street, 3900 Belogradchik, Municipality of Belogradchik, Vidin Region, Bulgaria

Website:

www.autoplaza.bg

Email:

office@autoplaza.bg

Telephone:

+359899992827

For questions concerning the processing of personal data or the exercise of rights under Regulation (EU) 2016/679, you may contact the company using the details above.

Different categories of personal data may be processed depending on how you use the website or engage the company to provide a particular service.

3.1. Data provided through the contact form

When an enquiry is submitted through the Contacts section, the following data may be processed:

• full name;
• telephone number;
• email address;
• the content of the submitted enquiry;
• any other information voluntarily provided by the individual.

3.2. Data processed when entering into a contract

When a service is commissioned, the following data may be processed:

• full name;
• Bulgarian personal identification number or foreign national identification number;
• identity card or passport details;
• address;
• telephone number;
• email address;
• information about the selected vehicle or requested service;
• information required to prepare, conclude, and perform the contract.

3.3. Data relating to financial leasing

Where a customer expressly asks to receive a financial leasing proposal, additional personal data required for a preliminary assessment and an offer from the relevant financial institution may be processed.

Such data is provided only following an explicit request from the customer.

3.4. Technical data

The following data may be processed automatically when the website is visited:

• IP address;
• date and time of the visit;
• web browser used;
• operating system used;
• device information;
• pages visited and actions performed on the website.

This information is used to ensure the normal operation and security of the website and to analyse its use.

Personal data is processed only for specific, explicit, and lawful purposes, including:

• providing information about the services offered by Autoplaza;
• contacting individuals who have submitted an enquiry;
• preparing quotations and individual proposals;
• concluding, performing, and administering contracts;
• providing assistance with the purchase, import, and registration of motor vehicles;
• communicating with customers concerning the performance of an assigned service;
• providing necessary information to partner financial institutions only where the customer wishes to receive a financial leasing proposal;
• complying with the company’s legal obligations;
• protecting the company’s legitimate interests in the event of disputes, claims, or court proceedings;
• maintaining website security and preventing misuse.

Personal data is not used for automated decision-making or profiling within the meaning of Regulation (EU) 2016/679.

CAZAM BULGARIA EAD processes personal data only where a legal basis under Article 6 of Regulation (EU) 2016/679 applies.

5.1. Steps taken before entering into a contract

Where an enquiry or request for a quotation is submitted through the website, the personal data provided is processed to communicate with the individual, provide the requested information, and prepare for a possible contractual relationship.

5.2. Performance of a contract

After a service has been commissioned, the company processes the personal data needed to prepare, conclude, and perform the contract and to carry out all related activities concerning the organisation of the purchase, transport, documentation, and delivery of the vehicle.

5.3. Compliance with a legal obligation

In certain cases, the company processes personal data to comply with obligations arising from tax, accounting, commercial, and other applicable legislation.

5.4. Legitimate interests

In certain cases, processing is necessary to protect the company’s legitimate interests, including defending against unfounded claims, collecting receivables, maintaining website security, preventing misuse, and protecting the company’s rights in judicial or administrative proceedings.

5.5. Consent

Where required by law, or where processing cannot be based on another legal basis, personal data is processed after the individual has given prior, freely given, specific, and informed consent.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

Personal data is accessible only to persons who require it to perform their professional duties.

Where necessary, personal data may be disclosed to:

• employees of CAZAM BULGARIA EAD;
• accounting and legal advisers;
• website hosting and technical support providers;
• courier companies and postal operators;
• banks and payment institutions where necessary to provide a specific service;
• ELG Finance EAD and Amigo Finance EOOD where the customer has expressly requested a financial leasing proposal;
• competent public authorities where disclosure is required by law or an act of a competent authority.

The company does not disclose personal data to third parties for advertising, marketing, or other purposes incompatible with the original purpose of processing.

Personal data is retained only for as long as necessary to achieve the purposes for which it was collected, unless a longer period is required by law.

More specifically:

• data provided through the contact form is retained for up to three years after the end of the latest correspondence, unless a contractual relationship arises between the parties;
• data relating to concluded contracts is retained for the periods required by tax, accounting, and civil legislation;
• where processing is based on consent, data is retained until consent is withdrawn, unless another legal basis permits continued processing.

Once the legal basis for processing no longer applies, personal data is deleted or anonymised so that the relevant individual can no longer be identified.

The website uses cookies to ensure its normal operation, improve the user experience, analyse website traffic, and enhance website security.

Cookies are small text files stored on the user’s device when visiting the website.

Depending on the website functionality, the following may be used:

• strictly necessary cookies;
• functional cookies;
• analytics cookies;
• marketing cookies, where the user has given the required consent.

Detailed information about the types of cookies used, their purposes, and their retention periods is available in the separate Cookie Policy.

Users may change their cookie preferences at any time through their browser settings or through the consent-management banner where one is available on the website.

CAZAM BULGARIA EAD applies appropriate technical and organisational measures to protect personal data, taking into account the nature of the information processed, the possible risks, and the applicable legal requirements.

The company takes the necessary steps to prevent unauthorised access, unlawful use, accidental destruction, loss, alteration, or disclosure of personal data.

Access to personal data is limited to employees and other persons who require it to perform their professional or contractual duties and who are bound by confidentiality obligations.

Where the company uses external service providers that process personal data on its behalf, the necessary agreements under Article 28 of Regulation (EU) 2016/679 are concluded to ensure an adequate level of personal data protection.

Every individual whose personal data is processed by CAZAM BULGARIA EAD has the rights granted under Regulation (EU) 2016/679.

Where the applicable legal conditions are met, every individual has the right to:

• receive information about whether their personal data is being processed;
• request access to the personal data being processed;
• request correction of inaccurate or incomplete personal data;
• request erasure of their personal data (the “right to be forgotten”);
• request restriction of processing;
• object to processing based on legitimate interests;
• receive the personal data they have provided in a structured, commonly used, and machine-readable format where applicable;
• withdraw consent where processing is based on consent.

Requests to exercise these rights may be sent to the email address published on the company’s website.

The company considers each request without undue delay and within the time limits provided by Regulation (EU) 2016/679.

As a rule, the company does not transfer personal data to countries outside the European Union or the European Economic Area.

Where such a transfer is necessary in connection with a specific service or provider, it takes place only where one of the grounds under Chapter V of Regulation (EU) 2016/679 applies and an appropriate level of personal data protection is ensured.

If you believe that the processing of your personal data infringes applicable legislation, you have the right to lodge a complaint with:

Commission for Personal Data Protection

Address:

2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592, Bulgaria

Telephone:

+359 2 915 35 18

Email:

kzld@cpdp.bg

Website:

www.cpdp.bg

Lodging a complaint with the Commission does not restrict your right to seek judicial protection where you believe your rights have been infringed.

CAZAM BULGARIA EAD reserves the right to amend and supplement this Privacy Policy where applicable legislation, website functionality, or the manner in which services are provided changes.

Where material changes are made, the updated version will be published on www.autoplaza.bg and will state the date of the latest update.

Users are encouraged to review this policy periodically to remain informed about how the company processes their personal data.

This Privacy Policy takes effect on 1 July 2026 and is published on www.autoplaza.bg.

Any matters not addressed in this policy are governed by Regulation (EU) 2016/679, the Bulgarian Personal Data Protection Act, and other applicable legislation of the Republic of Bulgaria.

This policy applies to all website visitors and to individuals who use the services offered by the company or communicate with it.