Privacy Policy (GDPR)

I. Introduction – personal data protection and privacy:

In accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, BAS Sporting EOOD (under the brands "Trueriders", "trueriders.bg") respects the privacy of its customers' personal data and guarantees its maximum protection.

This Privacy and Personal Data Protection Policy (hereinafter the "Privacy Policy") has been drawn up in accordance with Bulgarian and European legislation on personal data protection.

The Policy governs the processing of personal data of natural persons or representatives of legal entities who are our customers, potential customers or users of our website: "trueriders.bg" (the "Site").

This Privacy Policy is part of:

  • The General Terms and Conditions of use of the site;
  • The Cookie Policy;
  • And other documents available on the site.

Important: This Privacy Policy does not limit or revoke your rights under the Personal Data Protection Act (ZZLD) or other applicable legislation.

If you have questions about this Privacy Policy, you can contact us at: [email protected]

Please read this Policy carefully before using the Site or providing your personal data (electronically or on paper). By providing your data, you agree to the terms of this Policy.

  • If you do not agree with the way we process your personal data, please do not provide it.
  • In some cases, however, providing personal data is mandatory so that we can perform our services or obligations.

II. Who processes and is responsible for your personal data?

Personal data controller:

  • BAS Sporting EOOD, UIC: 121465345
  • Address: Sofia, 16 Sheynovo St.
  • Email: [email protected]
  • Data Protection Officer (DPO): K. Neshev

BAS Sporting EOOD is a personal data controller within the meaning of the Personal Data Protection Act (ZZLD) and is responsible for processing personal data under the terms described in this Policy.

III. Categories of personal data we process

1. Data you provide:

  • Identification data: Name, language of communication, date of birth, etc.
  • Contact data: Phone number, email, delivery or correspondence address.
  • Financial data: Bank account, payment details.
  • Site registration data: Name, email address, phone number, postal address, order history, etc.
  • Data for concluding contracts: Data needed to draw up sales, dealership, service and other contracts.

2. Data generated when using our services:

  • Technical information: IP address, device type, operating system, location.
  • User behavior data: Order history, product preferences.
  • Communication data: Call recordings, emails, complaints, inquiries.
  • Video recordings: CCTV cameras in offices or shops.
  • Call recordings: Calls to the contact center.

3. Data collected from public sources or third parties:

  • BAS Sporting EOOD may process information available in public registers, on the internet and from third parties in order to fulfill legal obligations.

IV. Purposes and legal grounds for processing personal data

1. Contractual purposes:

  • Identification when concluding contracts and managing orders.
  • Processing payments, complaints and warranty service.
  • Technical assistance with creating an account on the site or recovering a password.

2. Legal obligations:

  • Issuing accounting documents and invoices.
  • Compliance with consumer protection regulations.
  • Assisting the competent authorities (tax authorities, courts, etc.).

3. Marketing purposes:

  • Sending promotional offers (only with express consent).
  • Analysis of customer behavior and preferences.

V. Personal data retention period:

  • Accounting documents: 11 years (or according to legal requirements).
  • Site accounts: Until the account is closed or consent is withdrawn.
  • Video recordings: Up to 60 days.
  • Phone call recordings: Up to 360 days.

VI. Your rights as a data subject:

You have the right to:

  1. Access your personal data.
  2. Rectify inaccurate or incomplete data.
  3. Request erasure of data ("the right to be forgotten").
  4. Restrict the processing of your data.
  5. Transfer your data to another controller.
  6. Object to processing for direct marketing.
  7. Lodge a complaint with the Commission for Personal Data Protection (CPDP).

CPDP contact details:

  • Address: 2 "Prof. Tsvetan Lazarov" Blvd., Sofia 1592
  • Website: www.cpdp.bg

VII. Data protection

BAS Sporting EOOD applies modern organizational, technical and physical measures to protect personal data, including:

  • Encryption of sensitive information.
  • Restricting access to personal data.
  • Regular security checks and updates.