BSTransfers(“we”, the “Provider”) respects your privacy and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act of the Republic of Bulgaria.
This policy describes what data we collect, why we use it, and what rights you have as a data subject.
1. Data controller
BSTransfers
Black Sea Coast, Bulgaria
Phone: 359 888 10 5858
2. What data we collect
When you make a booking or an enquiry, we may process:
- First and last name
- Phone number and email address
- Transfer details — route, date, time, flight number
- Number of passengers and information about children / child seats
- Additional notes you voluntarily provide
- Technical data when visiting the website — IP address, cookies, browser type (see below)
3. Purposes and legal basis
- Fulfilment of a booking — processing necessary for the conclusion and performance of the transfer contract
- Communication — responding to enquiries and confirming booking details
- Legal obligations — accounting and tax documents, where applicable
- Legitimate interest — improving the service and protecting against abuse
- Consent — for marketing communications, only if you have given explicit consent
4. Retention period
Booking data is stored for as long as necessary to perform the service and comply with legal obligations — usually up to 5 years after the transfer is completed, unless a longer period is required by law.
5. Sharing with third parties
We do not sell personal data. We may share information only with:
- Drivers and operational staff involved in performing the transfer
- IT service providers (hosting, email, captcha protecting the booking form)
- Public authorities, where required by law
When hCaptcha is used to protect the booking form, technical data may be processed by Intuition Machines, Inc. in accordance with their privacy policy.
6. Cookies
The website may use necessary cookies for functionality and security. Analytics or marketing cookies are used only with your consent, should such tools be implemented.
7. Your rights
You have the right to request:
- Access to your personal data
- Correction of inaccurate data
- Erasure (“right to be forgotten”), where applicable
- Restriction of processing
- Data portability
- Objection to processing based on legitimate interest
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing
To exercise your rights, call us at 359 888 10 5858. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).
8. Security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss, or misuse. Communication over open channels (email, messengers) carries a certain risk; please do not send unnecessarily sensitive information.
9. Changes
We may update this policy. The new version is published on this page with its effective date indicated.