FFS Repair LTD Privacy Policy

§ 1 Name and contact details of the body responsible for the data processing (“Controller”)

  • This Privacy Policy applies to the data processing by:
  • FFS Repair LTD
  • Asen Yordanov 26 1592 Sofia

§ 2 Collection and use of your data

The scope and nature of the collection and use of your data differ according to whether you only visit our website for obtaining information or use any offers we propose on our website which require you to disclose further data concerning you. 

§ 2a When you visit our website

When you visit our website, the browser which you use on your terminal automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. 

The following information is collected without any contribution on your part and stored until its automated deletion:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which the access is made (referrer URL),
  • the browser used and, as the case may be, the operating system of your computer and the name of your access provider.

If you visit our website for information purposes only, we only collect and use the aforesaid information as non-personalised data. The collection and use of this data is indispensable to enable the use of the web pages you have accessed and to enable us to control whether the web pages are displayed to you in an optimal manner.

We use the IP address only for the duration of your visit and store the data exclusively in anonymised form for logging purposes; for this, we shorten the IP address such that it can no longer be related to a specific computer.

The legal basis for the processing is Art. 6 (1) sentence 1 point (f) GDPR (weighing of interests) and the processing is based on our interest in displaying our web pages to you in a reliable and preferably failure-free manner.

§ 2b When you use the contact form

We can propose the option to contact us through the contact form provided on our website. In this case, you will be asked to fill in certain required fields, which may differ depending on the nature and purpose of the request or contact form.

We collect your personal data if you voluntarily disclose them to us for the purposes of your request or when you contact us. You can see from the entry forms which data we collect.

The data processing for the purpose of contacting us is based on your voluntary consent according to Art. 6 (1) sentence 1 point (a) GDPR. The personal data we collect when you use the contact form will be deleted after your request has been processed.

If you are already our customer and send us a request in the context of our contractual relationship, we will use the data you have provided to us for processing your requests in accordance with Art. 6 (1) sentence 1 point (b) GDPR (necessary for contract performance). After the request has been finally processed or the contract has been performed, the further processing of your data will be restricted and the data will be deleted after expiry of the statutory retention periods.

§ 3 Registration / Customer account

If you use our website or another communication channel to enter into a contract with us for the use of FFS Repair LTD, your data will be stored
in a customer account.

We collect personal data if you disclose them to us voluntarily in the context of contract initiation or when you contact us or when a customer account is established. Required fields are specifically marked because we are in need of these data for contract performance, for processing your contact request or for establishing the customer account. The purchase order and/or opening of the customer account cannot be completed and/or the contact request cannot be processed without these data.

You can see from the entry forms and/or the fields in the forms which data are collected. We use the data you have disclosed to us for performing the contract and for processing your requests, as provided for by Art. 6 (1) sentence 1 point (b) GDPR (necessary for contract performance). After the contract performance has been completed or your customer account has been deleted, the further processing of your data will be restricted and the data will be deleted after expiry of the retention periods prescribed by tax law and commercial law.

The use of the data will only be continued if you have explicitly consented to the further processing of your data or we have reserved the right of further use of the data, provided this is permitted by law and we have informed you about such further use in this Privacy Policy. You can delete the customer account at any time, either by sending a message to the contact address stated herein. 

§ 4 Transfer of data

Your personal data are not transferred to third parties for purposes other than those stated in this Privacy Policy.

We only disclose or transfer your personal data to third parties if:

  • you have explicitly consented to the disclosure or transfer according to Art. 6 (1) sentence 1 point (a) GDPR,
  • the disclosure or transfer is necessary for the establishment, exercise or defence of legal claims according to Art. 6 (1) sentence 1 point (f) GDPR and there is no reason to assume that you have an overriding interest in the non-disclosure of your data,
  • there is a legal obligation to disclose or transfer the data according to Art. 6 (1) sentence 1 point (c) GDPR, and
  • this is permitted by law and necessary for performing contractual relationships with you according to Art. 6 (1) sentence 1 point (b) GDPR.

§ 5 Cookies

We use cookies on our website. These are small files which are automatically generated by your browser and stored on your terminal (laptop, tablet, smartphone or the like) when you visit our website. Cookies do not cause any harm to your terminal, they do not contain viruses, trojans or other malware.

In the cookie, information is stored which arises in connection with the specific terminal used. However, this does not mean that we can immediately identify you by that information.

First of all, the use of cookies helps us make the use of our website more comfortable for you. We use so-called session cookies to recognise that you have already visited individual pages of our website before. These cookies are deleted automatically when you have left our website.

In addition, also for the purpose of optimising the user-friendliness of our website, we use temporary cookies which are stored on your terminal for a certain specified period. If you come back to our website and use our services again, we automatically recognise that you have already visited us before and we know which entries you have made and which settings you have chosen before to spare you from entering them again.

You can in your discretion set your browser to accept or block the setting and retrieval of cookies. You can, for instance, completely disable the storage of cookies in your browser or restrict their storage to certain websites or configure your browser to alert you automatically when a cookie is being set and ask you for acceptance or refusal. You can also block or delete certain individual cookies. This may however cause certain features of our website to be impaired for technical reasons so that they no longer work properly.

  • Essential cookies enable the basic features and functions and are necessary to ensure faultless operation of the website.
  • Statistics cookies collect information in anonymous form. This information helps us understand how our visitors interact with our website.
  • Contents of video platforms and social media platforms are blocked by default. If cookies of external media are accepted, access to these contents no longer requires manual acceptance.
  • Functional cookies allow user choices and preferred user settings to be saved (e.g. the disabling of automatic language redirection).

We only use statistics cookies, cookies of external media and largely functional cookies if you consent to their use. You can accept or refuse these cookies by clicking a banner which appears when the cookie which is necessary for choosing the aforesaid functions has not yet been set (consent cookie). The acceptance or refusal is saved in this consent cookie which is an essential cookie. 

§ 6 Consent and withdrawal of consent

If and to the extent that we are not allowed to process personal data for the purposes of our legitimate interests (Art. 6 (1) sentence 1 point (f) GDPR) or for the purposes of contract performance (Art. 6 (1) sentence 1 point (b) GDPR), as described in the foregoing provisions, the processing is based on the consent given by you (Art. 6 (1) sentence 1 point (a) GDPR).

As far as our website is concerned you can give consent by filling Contact Form.

You may at any time withdraw your consent by sending an appropriate message via the Contact Form.

§ 7 Google Maps

Our website uses the Google Maps API for the visual presentation of geographic information. When Google Maps is used, Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043) also collects, processes and uses data about how the Maps features are used by the visitors of the websites. These data may include, without limitation, IP addresses and position data of the users and the data may be processed in the USA.

Further details regarding the data processing by Google are contained in the data protection information of Google which is available under the following link:

https://policies.google.com/privacy

§ 8 Rights of the data subject

You have the right

  • under Art. 15 GDPR to obtain information about, and access to, your personal data processed by us. You may in particular (without limitation) request information about the purposes of the processing, the categories of the personal data concerned, the categories of recipients to whom your data have been or are being disclosed, the envisaged period of storage, the existence of the right to request rectification or erasure of personal data or restriction of processing or the right to object to the processing, the existence of the right to lodge a complaint, the source of the data if they have not been collected by us as well as about the existence of automated decision-making including profiling and, if applicable, meaningful information about the details thereof.
  • under Art. 16 GDPR to request and obtain without undue delay the rectification of inaccurate, or completion of incomplete, personal data concerning you which we have stored;
  • under Art. 17 GDPR to request and obtain the erasure of your personal data stored by us unless the processing is necessary for exercising the right of freedom of expression and the right to information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • under Art. 18 GDPR to request and obtain the restriction of the processing of your personal data if the accuracy of the personal data is contested by you, the processing is unlawful and you oppose the erasure of the personal data and we no longer need the personal data but they are required by you for the establishment, exercise or defence of legal claims or if you have objected to the processing pursuant to Art. 21 (1) GDPR;
  • under Art. 20 GDPR to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request the transmission of the data to another controller;
  • under Art. 7 (3) GDPR to withdraw your consent given to us at any time. As a consequence, we will no longer be allowed to continue the data processing, which was based on that consent, in the future; and
  • under Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can lodge the complaint with the supervisory authority at the place of your habitual residence or your place of work or our company domicile.

§ 9 Right to object

You have the right under Art. 21 GDPR to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on legitimate interests according to Art. 6 (1) sentence 1 point (f) GDPR, or if your data are processed for direct marketing purposes. In the latter case, you have an unconditional right to object to the processing, which we will admit and implement without any need for you to state a particular situation.

For exercising your right of withdrawal or objection, it will be sufficient to send an email to the email address indicated in this Privacy Policy. 

§ 10 Data security

While you are visiting our website, we use the common SSL procedure (Secure Socket Layer) in combination with the highest encryption level that is supported by your browser. This usually is the 256-bit encryption. If your browser does not support 256-bit encryption, we use the 128-bit v3 technology instead. You can see by the closed key or lock symbol in the status bar at the bottom of your browser window whether or not the transmission of individual pages of our website is encrypted.

In addition, we use appropriate technical and organisational measures to protect your data from accidental or wilful manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continuously improved according to technological progress.