Personal data protection

Privacy Policy

RamaCar Rent a Car respects your privacy and processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Bulgarian data protection law. This policy explains what information we collect, why we collect it and what rights you have.

Last updated: May 2026

1. Who we are

The data controller is RamaCar Rent a Car, registered at 123 Brezovsko Shose Str., 4003 Plovdiv, Bulgaria. For questions about your personal data: office@ramacar.com or +359 888 427 410.

2. What data we collect

Booking data

First and last name, email, phone, rental dates, pickup/return location, driver's license details (at contract signing).

Payment data

Payment information is processed by licensed providers. We do not store bank card numbers.

Technical data

IP address, browser type, visit timing and site behaviour via analytics cookies.

Communications

Email content, contact form messages, Viber/WhatsApp exchanges — for service delivery and quality improvement.

3. Why we collect it (legal basis)

We process your data on the following grounds: (a) performance of a rental contract; (b) legal obligations (accounting and tax); (c) legitimate interest — site operation, fraud prevention and service improvement; (d) your consent — for marketing communications and analytics cookies.

4. How long we keep your data

Booking and contract data — 5 years after the end of the rental (accounting requirement). Contact data from inquiries — up to 12 months. Technical logs — up to 12 months. Consent cookies — up to 12 months or until withdrawn.

5. Who we share data with

We do not sell personal data. We only share with: licensed payment processors; insurance companies (in case of a claim); our accounting firm; authorities upon legal request (police, traffic authority, tax authority); EU-based hosting providers.

6. Your rights (GDPR)

Right of access to your data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with the Commission for Personal Data Protection (CPDP)

7. Cookies

We use technically necessary cookies (for site function) and analytics cookies (only with your consent). You can manage your preferences in your browser settings at any time.

8. Security

We apply technical and organisational measures to protect your data — encrypted traffic (HTTPS), restricted access for authorised personnel only, regular security reviews.

9. Changes to this policy

We may update this policy when laws or our services change. The current version is always on this page, with a clear last-updated date.

10. Contact us

For questions about your personal data, exercising your rights or complaints: office@ramacar.com · +359 888 427 410 · 123 Brezovsko Shose Str., 4003 Plovdiv.