Privacy Notice Sky Rent A Car

Privacy Notice

This Privacy Statement explains how we collect, use and protect any information about you. The document also tells you how to contact us if you have any questions about this; we will be happy to answer them. If you are interested in how we use cookies and similar technologies, read the Cookie Policy.

We may make changes to this Notice from time to time, so please check the document to stay up to date.

We offer a range of online transportation services, including products and services, through our own websites, mobile applications, emails and text messaging (‘platforms’). We also do this through the websites of our business partners, social networks and other platforms. This Notice applies to all personal information we collect in the course of service, or when you contact us by email, chat, telephone or mail.

Our business partners can also visit our Privacy and Cookie Policy section to understand how personal data is processed in our business relationships.

Personal data that you provide to us

We cannot help you with your order or request a quote without specific information. When you place an order or request, we ask you to provide us with the necessary information in order to be able to provide the desired service. This fairly standard information may include your name, age, date and place of birth, and contact details (email address, postal address, and telephone number). It may also ask for information about your passport, ID and driver’s license, as well as your loyalty program number and billing information.

In addition, we collect some data from your computer when you use one of our platforms, even if you do not order. This may include your IP address, the browser you are using, and language settings. There are also situations where we receive information about you from third parties or automatically receive other information. This is the main information that we collect. Want to know more?

We store and use the information you provide to us. When you place an order, you must provide your name, email address and payment information. We may also request your home address, telephone number and date of birth, as well as the names of any additional drivers.

If you contact us (for example, by phone, email or social media), we also collect information about you.

After completing your booking, we may ask you to provide feedback so that we can improve our services and ensure that future customers receive a decent service.

There are other ways to provide us with information. For example, if you browse with your mobile device, you can let us know your current location so we can provide you with the best service. To simplify the process of receiving services, you can open a user account (account), which allows you to view and manage your orders, as well as save personal settings and credentials. It also makes it easier to place orders in the future.

Personal data of other people that you provide to us

You can add someone as an additional driver or you can place an order on behalf of another person, such as a friend, family member or colleague. In doing so, you must ensure that the person or persons whose personal data you have provided are aware of this, understand and agree with how we use their data (as described in this Notice). It is your responsibility

Personal data that we collect automatically

When you place an order, we record on which platform it was made and how you got to our platform (for example, moved from another site).

Even if you do not make a reservation, we may automatically collect some data when you visit our platforms. This information may include your IP address, the pages you visited, the browser you used, and information about clicks and pages displayed to you. We also receive information about your computer’s operating system, its version of the application, language settings, device settings and its characteristics, and data that identifies your device.

If you use a mobile device, we may also collect location data. We can analyze and process the basic data associated with the applications installed on it (for example, name, description and category).

Personal data that we receive from other sources

We may receive information about you from social networking platforms, our business partners, subsidiaries of the skyrentacar.eu corporate family and other third parties. For example:

We work with affiliated business partners to offer our services on other platforms. When you place an order on one of these platforms, we may share your personal information with them, and they, in turn, may share your personal information with us.
Companies that provide services booked through our platforms may be required to provide us with information about you – for example, if your booking will result in an insurance claim or customer dispute.
Our business partners may also provide us with information about you so that we can show you relevant advertisements.

We may combine any of this data with the information you provide to us directly.

Please see the section “For what purposes do we collect and use your personal data?” For more information.

For what purposes do we collect and use your personal data?

We ask for your personal information to book you a car (and other services as part of your booking) and make sure you receive decent service. We also use this information to be able to contact you and report our latest transactions and special offers. These are the main points for which we collect your personal data, but there are other reasons. Want to know more?

What do we collect and use your personal data for?

We may use your personal information in the following cases:

Reservations: First of all, we use your personal data to process and administer your reservation and send the necessary data to the company providing your car (or another product or service, such as insurance). This provision includes sending you messages related to the booking, such as confirmations, changes and reminders.
Customer Support: We provide international round-the-clock customer support in 40 languages. Our international customer service team needs your details to help you place an order or answer any questions you may have before, during or after your booking.
Customer Feedback: We may use your contact information to invite you to respond to a short survey regarding your car rental. The survey results help to better understand and improve our service and the services provided by our business partners.
Account: To simplify your experience on the site, you can create a user account on our site or in the application. We use the information you provide to us to manage your account. With its help, users can use useful services. You can manage bookings or other purchases, use special offers and change personal settings and preferences. It also makes it easier to place orders in the future.
Marketing activities: We also use your personal data for marketing purposes, for example:
- Contact you by mail, phone, e-mail or SMS (depending on the contact information you have provided us), with our latest news, special offers, discounts and updates, including detailed information about our products and services ( and / or our sister companies or business partners). You can unsubscribe from these marketing offers quickly and easily – just click the “unsubscribe” link in any email or visit our Data Request Portal.
- Contact you by phone, e-mail or SMS with information about insurance products that you did not specify when booking.
- Display of current offers on our platforms or on third-party sites, including social networks.
  Invitation to participate in promotional activities (such as referral programs or competitions).
Communication with you: There may be other cases when we will contact you by phone, e-mail or SMS. There may be several reasons for this, for example:
- Answers and processing of any inquiries made by you.
- If you have not completed your online booking, we may contact you and remind you to complete your booking. We believe that this additional measure will help you to continue booking without having to search again or fill in personal data from scratch.
- If you use our services, we can send you a questionnaire or an invitation to share your rental experience.
- We will also send you other information regarding your booking, such as how to contact us (or another company) if you need help booking.
- In addition, we send you summary information about your previous orders.
- Other administrative messages that may contain security warnings, even if you do not have an upcoming booking.
Market research: We can ask you to take part in market research. Any additional personal information you provide to us as part of this research will only be used with your consent.
Fraud Detection and Prevention: To provide a secure and reliable service, we use your personal information to detect and prevent fraud and other illegal or unwanted activities. Similarly, we may use personal data for risk assessment and security purposes, which may include user verification and bookings. Sometimes this can mean that some orders may be suspended.
Improving our services: We use personal data for analytical purposes to improve the functionality and quality of our online services and to improve the entire user interface. We are always working to make our platforms more convenient for you and enjoyable to use.
Customer Feedback: After completing your booking, we may invite you to evaluate the services provided by us or our business partner. Your feedback will help future customers make the right choice, and will also be useful for our business partners in order to improve their services. By submitting a review, you agree that it may be published as described in our Terms. You can leave a review anonymously or just enter your name and country.
Call tracking: We may record telephone calls and / or allow other employees to listen to them in order to train our colleagues and ensure that high-quality service is provided at all times. Records are stored for a limited period of time and are deleted automatically if we have no legal reason to keep them for a longer period (for example, if we believe that there are facts of fraud)
Legal purposes: In some cases, we may use your personal data to process and resolve legal disputes, to investigate at the request of public authorities and compliance with regulations, or to ensure the accuracy of our terms.

Your provision of personal data to our organization is voluntary. However, if you want to use certain types of services, they can be provided only after we receive certain personal data. For example, we will not be able to process your booking without your name and contact details.

If we use automated means of collecting personal data that will have legal consequences or have a significant impact on you, we will implement appropriate measures to protect your rights and freedoms, including the right to intervene.

To process the information as described above, we rely on the following legal bases:

Execution of the contract: We need to use your personal data to fulfill any agreement you have with us. For example, when you book a car, we need to send the booking details to the rental company to make sure that your car is prepared for you on time.
Legitimate interests: We may use your information for our “legitimate interests” (a term that applies to everything we consider an important part of the effective conduct of our business – while respecting your rights and complying with the law). For example, to provide you with the most relevant content on our platforms, including our emails and newsletters; improve and promote our products and services; as well as for administrative purposes.
Consent: We can count on your consent to use your personal data in certain circumstances, such as for direct marketing purposes. You can withdraw your consent at any time through our Data Request Portal or send an email to info@skyrentacar.eu, indicating “Privacy” in the subject line.

To which third parties do we transfer your personal information and why do we do it?

Various business partners are involved in the services we provide, and under certain circumstances we transfer your personal data to third parties. In most cases, we simply share your booking details with business partners who help us provide the service you are requesting. We also share your data with other third parties, which may include payment service providers, advertising partners, subsidiaries of the skyrentacar.eu corporate family and affiliates of the corporate booking group, as well as, in some cases, official authorities. These are the main reasons why we will share information about your personal data. Want to know more?

Company (s) providing the car to you and / or rental products and services: To place an order, we must send the relevant details to the company / companies supplying the car and / or other related services (including insurance) that you have requested. This information may include your name, age, contact information (email address, home address and telephone number), date and place of birth, passport information, driving license details and any preferences you have told us at the time of booking. If there is a dispute over your booking, insurance coverage or any other customer service issue, we will need to provide the rental company with some information about the booking process as well as the subject matter of the dispute. This can be a copy of your booking confirmation, proving that the booking was actually made, as well as any information related to your complaint. Please note that any information you provide directly to the company (s) providing you with the car and / or rental products will be stored and used in accordance with their own privacy notice and terms.
Our business partners: We work with business partners around the world. Some business partners offer or advertise our services, and also help other business partners to offer and advertise their own services related to the rental industry (including insurance). When you place an order on one of our business partner’s platforms, they send us some personal information that you have provided to them. Similarly, we send our business partners some personal data related to your booking. This helps our partners analyze, for example, their own business or run their own loyalty programs. They can also send you their special offers, but only if you have given your consent. If a business partner provides customer support, we will send them the details of your booking so that you can receive the necessary support. In any of these cases, the processing of your personal data is governed by the privacy notices of our business partners. When you place an order on a business partner’s website, please take the time to review their privacy notice and find out how they process your personal information. When you purchase a product or service provided by one of our business partners, we will send them your personal information necessary to provide these services. In addition, we may share information about our users with business partners in order to detect / prevent fraud, but only upon strict request.
Competent authorities: We may transfer your personal data to the authorities or investigative bodies if they are obliged to do so legally (or under any legal provision). These requirements include court decisions, subpoenas and orders obtained as a result of a trial or criminal investigation. We may also disclose your personal information if required to prevent, detect or prosecute criminal activity. We may be required to disclose personal information to the competent authorities to protect our rights or property, as well as the rights or property of our business partners.
Third-party service providers: We may use third-party service providers to process your personal data on our behalf and support in providing our services. For example, we may use them to contact you or to send booking information from our partner, the transportation service provider, or to manage aspects of our website, call centers or marketing activities. We may also use third-party service providers for market research and for fraud detection and prevention, including anti-fraud services. These third parties are bound by the privacy requirements and may not use your personal data for other purposes.
Advertising Partners: We may share your email address and other personal information with third-party advertising partners to ensure that you see relevant advertising when we sell our services through third-party business partners. We also work with third-party advertising networks to promote services on other platforms and engage third-party agencies to conduct analytical research. We have confidentiality agreements with all of these third parties that prohibit the use of your personal information for any purpose other than those listed above. For more information on personalized ads and your options, please see “How and why do we use these technologies?” and “It’s Your Choice: Accept or Reject” here Cookie Policy.
Payment service providers and other financial institutions: We also work with third-party payment service providers to provide a payment process or payment guarantee. If you (or the owner of the bank card used to make the booking) request a refund, we may need to provide certain booking details to the payment service provider and the relevant financial institution. This can be a copy of your booking confirmation or the IP address used to make the booking. We may also share information with relevant financial institutions if we deem it necessary to detect and prevent fraud.

The transfer of personal data in accordance with this privacy notice may take place abroad, in countries where personal data protection laws are less substantive than in the United Kingdom or the European Union. Where required by United Kingdom law, we only transfer personal data to those recipients who provide reliable protection. In this regard, the practice of concluding agreements that would serve to confirm that the protection of your personal data is carried out in accordance with the standards of the United Kingdom and the European Union. You can ask us to provide you with copies of these agreements using the contact details below.

How do we use mobile devices?

We offer free apps for a range of mobile devices, as well as versions of our regular website that have been optimized for mobile and tablet. They collect and process your personal data in the same way as our other platforms; they also allow you to find your local car rental location based on your current location. Would you like to know more?

If you agree, we may send push notifications directly to your mobile device so that you do not miss important information about your booking. Finally, if you give us access to the location or contact information of your device, we may provide additional services if you request them. Your mobile device will have instructions on how to allow push notifications and give us access to this type of data.

To provide you with better service and more relevant marketing, we can use an action known as “cross-tracking devices.” This means that we view how you use our platforms on multiple devices: we could, for example, combine data from your mobile phone and your home computer. This is a subject for the use / non-use of cookies (for more details on cookies and similar technologies, see the Cookie Policy here).

To make sure that you find the offers in our newsletter that you are most likely to be interested in, we will review the search queries and services you have made that you book on multiple devices after logging in to your account. If you do not want us to do so, simply log out of your account before viewing or unsubscribe from our newsletter.

Tracking multiple devices can also mean that when you use a single device, you can see personalized ads from many different companies, based on your actions on connected devices. NAI (Network Advertising Initiative) must stop this action if you opt out of the NAI behavioral advertising program (our Cookie Policy will provide you with the necessary link in the “This is your choice: Accept or Reject” section). Please note: simply logging out of the user’s account will not stop this process.

What procedures do we use to protect and store your personal information?

Our business systems and procedures ensure that we take all reasonable steps to protect your personal data and protect it from any misuse or unauthorized access in accordance with data protection laws in the UK and Europe. We also apply special procedures and security restrictions (both technical and physical) that restrict access to and use of any personal information we store. Only authorized personnel can access personal data – even they are only allowed to do so for certain, valid reasons.

We will retain your data as long as we deem it necessary for you to use our services, as well as to provide you with our services, including the maintenance of your account (if any), to comply with applicable laws, to resolve disputes between any by the parties, etc., as well as to conduct our activities in general, including the detection or prevention of fraud or other illegal activities. This privacy notice applies to all personal information we collect.

How do we use children’s personal data?

We do not provide services to children under the age of 18 and we reserve the right to delete any information we may receive from a child under that age. We may receive information about children in certain situations, such as in an insurance case or a customer service dispute. If this happens, we will only collect and use this information with the consent of the child’s parent or guardian.

How can you control the personal information you provide to us?

You have the right, subject to certain legal exceptions, to access, correct or delete any personal information we hold about you. You may use our Data Objects Access Portal to enforce any of these rights. If you do so, we will request additional information to verify your identity to ensure the security of your information, and we will process your request in accordance with applicable UK data protection law. You can update or delete your account at any time by logging in to our site.

When you place an order or place an order, we ask if you would like to participate in receiving marketing letters. You can opt out at any time by clicking the “unsubscribe” option in any of these marketing emails or by updating your email settings in your user account.

Who is responsible for the processing of personal data on our platforms?

Ge 2 Group Ltd. controls the process of personal data processing on its platforms. Ge 2 Group EOOD is a private limited liability company established in accordance with the legislation of Bulgaria. Its offices are located at Varna G. Popov 23. In case of questions, doubts or complaints about our activities or this privacy notice, send e-mails to info@skyrentacar.eu, indicating in the topic “Privacy”, and we We will answer you as soon as possible. You can also contact your local data protection authority. When it comes to privacy, we are always ready to listen to you.

Privacy Notice GE 2 GROUP EOOD

Basic information

How we use your personal information

Our privacy notice explains how we collect, use, transmit and protect your personal information. If this notice is changed in the future, we will publish the information on our website in a timely manner.

Your rights with respect to your personal data

In accordance with the legislation of Bulgaria, you may exercise the following rights relating to those processed by GE 2 GROUP EOOD:

to access and receive a copy of your personal data processed by GE 2 GROUP EOOD;
your personal data will be corrected in case of inaccuracy or incomplete information;
require the deletion of your data in accordance with the relevant conditions;
in cases provided by law, requiring restrictions on the processing of your personal data;
in cases provided by law, object to the processing of your personal data;
exercise your right to data portability and demand that your data be provided in a structured, widely used and machine-readable format;
when processing is based on your consent, revoke that consent at any time and without paying any fees
file a complaint with the Commission for Personal Data Protection

Detailed information on the conditions and procedure in which you can exercise your rights can be found in the Policy for the exercise of the rights of personal data subjects “GE 2 GROUP” EOOD on our website, as well as in our offices.

How to contact us?

You can contact us at the following address: Varna, 23 GGPOPOV St. E-mail: skyrent@abv.bg

Processing of your personal data

Reception of reservations (in the office, by phone or online):

What personal data we collect

Name and surname
Phone
Email address
Date of birth
Address
Company / Organization (if you want to be billed)
Your bank card details – card number and CVV code (if you have chosen to prepay or pay for the entire service online)
Other data, depending on the information you enter in the “Comment” field (if you order the service online).

Why we collect your personal data

We collect information that helps us to offer you the best possible and personalized service, as well as information for which we are obliged under Bulgarian law. Your personal information may be stored and processed for the following purposes:

Order a car – in the office, by phone or online.

On what legal basis do we collect your personal data?

Your consent to the processing of your personal data in connection with the booking of the car.
Our legitimate interest is to share the data of contractual partners for the purpose of maintaining our website or providing accounting services.

How long we store your personal data

If your booking is not confirmed due to the absence of a free car for the desired period, LLC “G 2 GROUP” will destroy and will not store or process in any way the data provided by you when booking.

To whom we transfer your personal data

We may transfer your personal information:

Contractual partners:
Accounting companies are providers of accounting services when you want to be billed.
Software development companies that are responsible for the maintenance of the website and / or its individual functions.

After confirming the reservation and concluding the car rental agreement:

After confirming the reservation, we will send a voucher containing the information you provided in the booking form.
To enter into a car rental agreement you need to provide:
Scanned or paper copy of a valid driver’s license.
The details of your bank card (card number and CVV code) with which the deposit was made to use the service.
The car rental agreement will include:
Three names
Unique civil number / Date of birth
Valid identification number
The number of a valid driver’s license and the date of its validity
Contact phone
Email address
Your bank card details are the card number and CVV code from which the amounts will be deducted in the event of damage to the car or an electronic fine (Article 189 of the Road Traffic Act).
By signing a car rental agreement, the tenant agrees that the personal data provided to him in connection with the conclusion of the contract will be used to prosecute or be prosecuted.

Why we collect your personal data

Provide you with a “car rental” service when concluding a lease agreement.
To process transactions that you can make in connection with car rental.
In cases where we are obliged to provide information to government agencies.

On what legal basis do we collect your personal data?

Your consent to the processing of your personal data.
Execution of the contract to which you are a party, as well as actions before the conclusion of the contract.
Our legitimate interest is to share the data of contractual partners for the purpose of maintaining our website or providing accounting services.
Legal basis (in cases where there is a legal obligation to provide your personal data to public authorities).

How long we store your personal data

Your personal data will be stored for 4 years and 6 months in accordance with the requirements of Article 82, para. 4 of the Law on Administrative Offenses and Penalties and Articles 80 and 81 of the Criminal Code in connection with Article 189 of the Law on Road Traffic. After this statutory period, the data stored on electronic media will be deleted and the data stored on paper will be destroyed.

To whom we transfer your personal data

We may transfer your personal information:

Government bodies or officials authorized by law to request and collect information containing personal data in the prescribed manner.
Contractual partners:
Accounting companies are providers of accounting services when you want to be billed.
Software development companies that are responsible for the maintenance of the website and / or its individual functions.

Feedback form on the site

What personal data we collect

Name and surname
Email address
Contact phone
Other data, depending on the information you entered in the “Your request” field.

Why we collect your personal data

So that we can comprehensively answer your questions.

On what legal basis do we collect your personal data?

Your consent to the processing of your personal data.
Our legitimate interest is to share data with software development companies to support the website.

How long we store your personal data

Your personal data will only be stored for the period necessary to respond to your request. However, if your request relates to a court or other type of dispute, we may store your personal information for 5 years after the request is made.

To whom we transfer your personal data

We may transfer your personal information:

Software development companies that are responsible for the maintenance of the website and / or its individual functions.

Rules for exercising the rights of personal data subjects

These rules (the “Rules”) define the conditions under which persons whose personal data are processed by G 2 Group EOOD may exercise their rights in accordance with the legislation on personal data protection.

Part 1: General principles

GE 2 Group EOOD processes and protects personal data collected in the course of its activities, honestly, lawfully and in accordance with the purposes for which this data was collected.
Employees who process personal data in order to carry out the activities of GE 2 Group EOOD, when processing personal data, observe the following principles:

i) Personal data is processed lawfully and in good faith.
(ii) Personal data is collected for specific, well-defined and legitimate purposes and is not further processed in a way incompatible with those purposes.
(iii) Personal data collected and processed in the management of human resources must be up-to-date, up-to-date and not go beyond the purposes for which they are processed.
iv) Personal data is accurate and updated as necessary.
(v) Personal data shall be deleted or corrected if they prove to be inaccurate or disproportionate to the purposes for which they are processed.
(vi) Personal data shall be kept in a form that identifies the persons concerned for no longer than is necessary for the purposes for which the data were collected.

Employees who process personal data receive initial and periodic training on data confidentiality and become familiar with applicable law.

Part 2: Definitions

The following definitions have the following meanings:

“Personal data” means any information relating to an identified natural or natural person which can be identified directly or indirectly, in particular by means of an identifier such as name, identification number, location data, online identifier or one or more functions specific to the physical, physiological, genetic, mental, intellectual, economic, cultural or social identity of that person;

“Applicable law” means the law of the European Union and the Republic of Bulgaria relating to the protection of personal data;

“Profiling” means any form of automated processing of personal data in the form of the use of personal data to assess certain personal aspects concerning a person and, in particular, to analyze or forecast aspects related to the performance of professional duties. about this person, his economic condition, health, personal preferences, interests, reliability, behavior, location or movement;

“Data subject” means an individual who can be identified directly or indirectly, in particular by an identifier such as name, identification number, location data, online identifier or one or more characteristics specific to physical, physiological, genetic, the mental, intellectual, economic, cultural or social identity of that person;

“Regulation (EU) 2016/679” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), published in the Official Journal of the European Union on 4 May 2016.

Part 3: Rights of personal data subjects

Data subjects have the following rights with respect to their personal data:

i) the right of access;
(ii) The right to adjust;
(iii) the right to data portability;
iv) Right of removal;
v) right of removal (right of oblivion);
vi) The right to demand restrictions on processing;

Right of access

Upon request, GE 2 Group EOOD provides the personal data subject with the following information:
i) information on whether GE 2 Group EOOD processes personal data or not;
(ii) a copy of the personal data of the person being processed by GE 2 Group EOOD, and
(iii) an explanation of the data being processed

2.2. The explanation under Article 2.1 (iii) includes the following information about personal data processed by GE 2 Group EOOD:

(i) processing purposes;
(ii) the relevant categories of personal data;
(iii) recipients or categories of recipients to whom personal data will be or will be disclosed, in particular recipients in third countries or international organizations;
(iv) where possible, the estimated period during which personal data will be stored and, if that is not possible, the criteria used to determine that period;
(v) having the right to request the correction or deletion of personal data or to restrict or object to the processing of personal data relating to the data subject;
(vi) the right to appeal to the supervisory authority;
(vii) if personal data are not collected by the data subject, any available information about their source;
(viii) the availability of automated decision-making as to whether the processing includes profiling and information about the logic used, as well as the significance and expected consequences of such processing for the data subject;
(ix) if personal data are transferred to a third country or internationally

The explanation regarding the processed data contains the information that GE 2 Group EOOD provides to the data subjects through privacy notifications.

At the request of the personal data subject, GE 2 Group EOOD may provide a copy of the personal data that are being processed.
When providing a copy of personal data, GE 2 Group EOOD should not disclose the following categories of data:
(i) personal data of third parties, unless they have expressly agreed to do so;
(ii) data which constitute trade secrets, intellectual property or confidential information;
(iii) other information that is protected under applicable law
Granting access to personal data subjects may not adversely affect the rights and freedoms of third parties or lead to a violation of a regulatory obligation of GE 2 Group EOOD.

4.1. If requests for access are manifestly unreasonable or excessive, especially because of their recurrence, GE 2 Group EOOD may charge a reasonable fee based on the administrative costs of providing the information or refuse to respond to the request for access.

4.2. GE 2 Group EOOD assesses in each case whether the request is manifestly unreasonable or excessive.

4.3. In case of refusal to provide access to personal data, GE 2 Group EOOD justifies its refusal and informs the data subject of his right to file a complaint to the CPDP.

The right to adjust

5.1. Data subjects may request that their personal data processed by GE 2 Group EOOD be corrected if the latter is inaccurate or incomplete.

5.2. Once a request for correction of personal data has been granted, GE 2 Group EOOD notifies other recipients to whom the data has been disclosed (eg government agencies, service providers) so that they can reflect the changes.

Right to be removed (“right to be forgotten”)

Upon request, GE 2 Group EOOD is obliged to delete personal data if there is one of the following reasons:
(i) personal data are no longer needed for the purposes for which they were collected or otherwise processed;
(ii) the data subject revokes his consent on which the data processing is based and there is no other legal basis for the processing;
(iii) the data subject objects to the processing and there is no legal basis for the processing to take precedence;
(iv) the data subject objects to the processing of personal data for direct marketing purposes;
(v) personal data have been processed unlawfully;
vi) personal data must be deleted in accordance with the legal obligation of GE 2 Group EOOD;
(vii) personal data have been collected in connection with the provision of information society services to children in accordance with Article 8 (1) of Regulation (EU) 2016/679

GE 2 Group EOOD is not obliged to delete personal data if processing is required:

(i) To exercise the right to freedom of expression and the right to information;
(ii) for compliance with the legal obligations of GE 2 Group EOOD;
(iii) for reasons of public interest in the field of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3) of Regulation (EU) 2016/679;
(iv) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89 (1) of Regulation (EU) 2016/679, as the right of removal may make it impossible or seriously impede such processing; or
(v) to establish, enforce or defend legal proceedings.
Right to limit processing

The data subject has the right to request processing restrictions if one of the following conditions applies:

(i) the data subject disputes the accuracy of the personal data; the processing restriction applies during a period that allows the controller to verify the accuracy of personal data;
(ii) the processing is unlawful, but the data subject does not want the personal data to be deleted and instead requests that their use be restricted;
(iii) GE 2 Group EOOD no longer needs personal data for processing purposes, but the data subject requires them to create, execute or protect legal claims;
(iv) the data subject objects to the processing based on the legitimate interest of GE 2 Group EOOD, and an investigation is currently underway into whether the controller’s legal grounds take precedence over the data subject’s interests.
When the data subject has requested restriction of the processing and any of the grounds under Art. 7.1. above, GE 2 Group EOOD informed him before the lifting of the processing restriction.

GE 2 Group EOOD may process personal data, the processing of which is limited, only for the following purposes:

(i) for data storage
(ii) with the consent of the data subject;
(iii) to establish, enforce or defend lawsuits;
(iv) to protect the rights of another individual; or
(v) for important reasons of public interest
When the data subject has requested a restriction on processing and any of the grounds in accordance with Article 7.1. above, GE 2 Group EOOD informed it prior to the lifting of the processing restriction.

The right to data portability

8.1. The data subject has the right to receive personal data concerning him, which he provided to GE 2 Group EOOD, in a structured, widely used and machine-readable format.

8.2. Upon request, this data may be transferred to another controller designated by the data subject, if technically possible.

8.3. The data subject may exercise the right of portability in the following cases:

(i) the processing is carried out with the consent of the data subject;
(ii) processing is based on contractual obligations;
(iii) processing is performed automatically.

8.4. The right to portability may not adversely affect the rights and freedoms of others.

The right to object

The data subject has the right to object to the processing of his personal data by GE 2 Group EOOD, if the data are processed on one of the following grounds:
(i) the processing is necessary for the performance of a task in the public interest or for the exercise of official authority conferred on the controller;
(ii) the processing is necessary for purposes related to the legitimate interests of GE 2 Group EOOD or a third party;
(iii) data processing includes profiling
GE 2 Group EOOD terminates the processing of personal data unless it proves that there are compelling legal grounds for its continuation, which take precedence over the interests, rights and freedoms of the data subject or for the establishment, enforcement or protection of lawsuits. .

The right to object to personal data for direct marketing purposes

10.1. When processing personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for this purpose, including in relation to profiling related to direct marketing.

10.2. If the data subject objects to the processing for direct marketing purposes, the processing of personal data for these purposes is terminated.

The right to human intervention in automated decision making

11.1. In cases where GE 2 Group EOOD makes individual decisions automatically, regardless of whether these decisions were made through profiling, which cause legal consequences for individuals or significantly affect them in a similar way, these individuals may request a review of the decision with human intervention, and express their point of view.

11.2. GE 2 Group EOOD provides individuals with the object of automated decision-making essential information about the logic used, as well as the meaning and expected consequences of this processing for humans.

Part 4. The procedure for exercising the rights of personal data subjects

12.1. Personal data subjects may exercise their rights in accordance with these Rules by submitting a request for the exercise of the relevant right.

12.2. A request for the exercise of the rights of personal data subjects may be submitted in the following forms:

i) In electronic form to the following e-mail address ***
ii) On site at the GE 2 Group EOOD office
iii) By mail – to the address of the head office of GE 2 Group EOOD: ****

12.3. The request for the exercise of rights related to the protection of personal data must contain the following information:

i) Identity – name and PIN code
ii) Feedback contacts – address, telephone, e-mail
iii) Request – a description of the request

12.3. GE 2 Group EOOD provides information on the actions taken in connection with the request for the exercise of the rights of entities within one month from the date of receipt of the request.

12.4. If necessary, this period can be extended for another two months, taking into account the complexity and number of requests from a particular person. GE 2 Group EOOD shall inform the person of any such extension within one month of receiving the request, indicating the reasons for the delay.

12.5. GE 2 Group EOOD is not required to respond to a request if it cannot identify the data subject.

12.6. GE 2 Group EOOD may request additional information necessary to verify the identity of the data subject when there are reasonable concerns about the identity of the person making the request.

12.7. If the request is submitted by electronic means, the information should, if possible, be provided by electronic means, unless the data subject requests otherwise.