Privacy Policy
Data Protection Officer contact details:
Email: a.stoyanova@mrent.bg
Phone: +359 (0) 700 911 50
Our attitude towards your personal data
“M RENT” EAD attaches great importance to data protection and it collects and processes personal data only in compliance with the requirements of the local and European laws. The purpose of this Personal Data Protection Policy is you to be aware of how we process your data and what kind of data we would collect for you, for what purpose, period and respectively the rights you have.
It is possible we to collect personal data for you when you use the Website or choose/pay our services. In most cases, we require your personal data for the purpose of making a contract, fulfilling a statutory obligation or protecting our legitimate interests. Of course, for some of our services, you are the one providing this information by choosing and agreeing to send us this information for yourself. Without these data, we would not be able to make a reservation or to make you an offer. If you do not give us these identification data, we would not be able to make a rent-a-car contract with you. Depending on the services you use, we may collect and process the following information about you:
А. General data to individualize you
• Full names, Personal Number, Foreigner’s Personal Number or date of birth
• Data of Passport or Identity Card and data certifying YOUR legal residence in the country;
• Data of Driving License;
• Permanent address or place of residence within the country, if your are a foreigner;
• Contact details – telephone number and electronic mail (e-mail);
• When you register on our site – names, e-mail, password;
• Letters and electronic mail that we receive from you in the course of our communication;
• Data from a credit/debit card and other banking details;
• GPS tracking of cars rented;
• Records of video surveillance when you visit our rent-a-car offices, service & repair shops or parking lots, for security and safety purposes.
B. Personal data that you give us for other persons
You have the possibility to add someone as an additional driver or to make a reservation in the name of somebody else, for example, a friend, a member of your family or a colleague. In such cases, you must make sure that this person has been informed that his/her data will be given to us, and that he/she has read and agrees with our Personal Data Confidentiality Policy. This responsibility is yours.
C. Personal data that we receive from other companies
We may also receive information for you from our business partners through whom you have made your reservation. For example:
Online platforms for rent-a-car where you have made your reservation. They give us the data for the reservation made in order to enable us to proceed with the making of a contract and providing the car.
D. IP address
We collect your IP address when you visit our site. This only identifies its internet service provider (ISP) and contains no information about you as a natural person. We use this information to help us learn more about the origin of our traffic from the site.
E. "Cookies"
Our website uses the “cookies” technology. The "cookies" encrypt the texts that the website stores on the user’s computer. The cookies enable us to personalize the website and what we offer according to your needs and to ensure a better online experience for you on the www.avis.bg. Furthermore, the “cookies” are used to measure the use of various pages on our website, making our information more proper for your needs and easily accessible by you.
The type of “cookies” that we use are called “session” and “persistent” “cookies”. The session cookies are temporary and are erased automatically when you leave the www.avis.bg. The persistent cookies stay on your hard disk until you delete them. We do not use “cookies” to collect information about your visits to other sites or to detect any personal information about you other than what you have voluntarily given us in your relations with the www.avis.bg. The cookies do not harm your computer, programs or files.
What is the purpose of processing of your data?
А. Car reservation
Above all, we use your personal data to make and administer your reservation, to contact you if we have any problems with your request or to send you an electronic confirmation for the reservation made. If you are a member of Avis Preferred, we link your membership number with the information that we store in the main customer database in order to speed up the process of reservation.
B. Customer service
The Customer Service Department processes your data for example to help you make a reservation or to answer your possible questions before, during or after the reservation.
C. Customer feedback
We may use your contact details for sending you a short questionnaire regarding your reviews of the car rented and the services provided. This helps us understand and improve our services and optimize our business processes.
D. Profile creation
By creating a profile on our platform, you can manage your reservations and manage your personal settings and preferences. It also makes future reservations easier.
E. Protection of legitimate interest
In some cases, it may be necessary to use your personal data to defend and resolve court disputes, regulatory inspections, to contest tickets and instruments issued by the Traffic Police, to file insurance claims, etc.
What is the legal basis of processing of your data?
In most cases, we process the personal data that we collect for the following purpose and legal basis:
А. Processing of data necessary for the entering into or performance of a contract
• Customer identification;
• Car reservation;
• Preparation of offers, contracts and any other documents supporting the contract. Administration and fulfilment of your orders;
• Preparation of accounting documents as a receipt or invoice for the services used;
• Notices relating to our products and services.
B. Processing of data necessary for the fulfilment of our statutory obligation
• Fulfilment of obligations regarding the provisions of the Road Traffic Act;
• Obligations provided for in the Accountancy Act and the Tax and Social Security Procedure Code and other related regulations regarding the proper and lawful book-keeping;
• Obligations to provide information to all governmental commissions and regulatory bodies;
• Provision of information to the Court and law enforcement bodies.
C. Processing of data on the basis of our legitimate interest
• Video surveillance in our business and administrative offices and recording telephone calls.
With whom do we share your information?
“M RENT” EAD uses third parties for the supporting of given contractual activities or for the fulfilment of statutory obligations. We do not give your personal data to any third parties before we make sure that all technical and organizational measures for the protection of these data have been implemented and we try to exercise strict control on the achievement of this goal.
А. Some of the recipients of personal data may be insurance companies, agencies where you have made the reservation, external consultants and experts, debt collection companies and law firms, banks, security companies, commercial agents, etc.
We share such data only when there are reasonable grounds to do so. We do it based on a written agreement with the recipients guaranteeing an adequate level of security.
B. In some cases, we are obliged to provide personal data in order to fulfil our statutory requirements, for example to regulatory bodies, incl. governmental commissions, institutions and agencies, the National Revenue Agency, the National Social Security Institute, the Court, the Public Prosecutor’s Office and others to whom we are required to provide personal data under the laws in force;
C. Payment service providers and other financial institutions with which we settle payments or payment guarantees. If you (or the holder of the bankcard used to make the reservation) request charging, it may be necessary to share some data about the reservation with the payment service provider and the relevant financial institution. This may include a copy from the confirmation of reservation or IP address used to make the reservation. Furthermore, we may exchange information with the relevant financial institutions if we consider it necessary for the purpose of detection and prevention of fraud.
Automated algorithms
We do not use any tools for automated decision-making.
Security
Security of the data that you have entrusted to us is very important for us. That is why we protect your data by implementing all appropriate technical and organizational measures, which we have at our disposal, for preventing any unauthorized access, unauthorized use or misuse, loss or early deletion of information.
“M RENT” EAD takes measures to protect your personal data against accidental loss and unauthorized access, use, alteration or disclosure. There are policies and procedures aimed at protecting the information against loss, misuse and unlawful disclosure. Furthermore, we take additional measures for information security, including access control, strict physical protection and reliable practices for collecting, storing and processing the information. Some of the actions taken are:
1. Physical organizational and technical measures for protection:
• Determination of the access-controlled areas; • determination of the premises where personal data are processed, including where our servers are located and access restriction; • determination of the organization of physical access; • determination of the technical tools used for physical protection – in special rooms and locked cabinets; • assignment of a breach response team;
2. Personal protection:
• Communication of the special requirements for personal data processing and the regulations for personal data protection, this policy and other relevant internal regulations to the staff; • information confidentiality; • employee training;
3. Documentary protection:
• Determination of storage periods; • rules for distribution, procedures for destruction, verification and control of processing.
On the other hand, we have also implemented some specific technical measures like encryption, pseudonymization and anonymization of the personal data collected.personal data collected.
When do we delete your personal data?
We store all the information that we have collected for you and we destroy it within the statutory periods. In case that there are no such periods, within the periods determined by us and after the final settlement of any financial relations between us. We do not keep your data for indefinite period.
Part of the periods are:
- 5 years of the performance of a contract – within the limitation periods for filing a claim as provided for in the Obligations and Contracts Act;
- 10 years pursuant to the Accountancy Act for storing and processing accounting data;
- 30 days of video surveillance recording;
- 30 days of sound recording.
Transfer of data between countries
“M RENT” EAD may transfer your data outside the EU and EEA, guaranteeing that the recipient ensures an adequate level of protection of the personal data transferred. The company uses the internal international reservation system for renting cars. This system is entitled Wizard and it is available in any countries all over the world where Avis Budget Group has offices. It is possible this website to transfer information, which is necessary to make a reservation and rent a car. Sometimes, this information may include personal data, but if you have not given your consent, your personal data will not be used for any other purpose whatsoever.
Your rights regarding personal data
At any time, you may request from “M RENT” EAD to give you information about the personal data, which have been collected and stored for you. You may also require from “ M RENT” EAD to rectify, delete or update such personal data. “M RENT” also ensures your right to object and restrict the processing of personal data, and your rights regarding the automated decision-making.
At any time, you may withdraw your consent to the collection, storage and use of your personal data towards “M RENT” EAD. However, such withdrawal will not affect the personal data lawfully processed until then.
Part of your rights, such as deletion of the data or objection to the processing may be restricted under the laws in force.
Applications for access to information or for rectification are to be submitted in person or by a person explicitly authorized by you with an explicit power of attorney in writing. Such application may be submitted electronically pursuant to the Act on Electronic Documents and Electronic Signatures.
If you elect to exercise any of the above rights, we may require from you some additional information in order to confirm your identity, to keep your information confidential. We will examine your application in compliance with the laws in force and will notify you within the statutory periods.
We would like to inform you that under the laws in effect as to now, in case of unlawful processing of your data, you have the right to lodge a claim with the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, or www.cpdp.bg.
Modifications in this Personal Data Protection Policy
This procedure for personal data protection may be modified over time. Such modifications will become effective immediately after their disclosure. Regular reviews of this page guarantee you that you will always know what information we collect, how and for what purpose “M RENT” EAD uses it and under what circumstances (if any) it will be shared with any other parties.
If you have any questions or elect to assert your rights regarding data protection, you may contact the employees of “M RENT” EAD in the following manners:
Email: a.stoyanova@mrent.bg
Telephone: +359 (0) 700 911 50
Or on-site at the company offices.
This Personal Data Protection Policy was last updated on 30.01.2024.