Privacy Policy

How CarFy Varna collects, uses, and protects your personal data in accordance with GDPR and applicable data protection law.

update Last updated: 1 January 2025

1. Introduction

Welcome to CarFy Varna ("we", "us", "our"). We are a car rental aggregator operating the website carfyvarna.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services. Please read this policy carefully. By accessing carfyvarna.com you acknowledge and agree to the terms described in this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We may collect the following categories of personal data when you use our website:

  • Contact information: Name, email address, phone number provided when making a booking inquiry.
  • Booking information: Pickup and return locations, rental dates, car category, and selected extras.
  • Driver information: Driving licence number, date of birth, nationality - required by our rental partners to process your booking.
  • Technical data: IP address, browser type and version, pages visited, time spent on pages, referring URLs. Collected via cookies and analytics tools.
  • Payment information: We do not store payment card details. Payment data is processed securely by our payment service partners.

4. How We Use Your Data

We use your personal information for the following purposes:

  • Processing and confirming your car rental booking and sending you a booking voucher.
  • Communicating with you about your booking, including confirmations, changes, and cancellations.
  • Transmitting necessary booking data to the rental company that will supply your vehicle.
  • Improving our website experience based on aggregated usage data and analytics.
  • Complying with legal and regulatory obligations.
  • Preventing fraud and ensuring the security of our systems.

5. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

  • Contract performance: Processing is necessary to fulfil your booking and deliver the services you requested.
  • Legitimate interests: Analytics, fraud prevention, and website improvement.
  • Legal obligation: Where processing is required by applicable laws and regulations.
  • Consent: Where you have explicitly consented to processing, such as marketing communications.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

  • Rental partners: The car hire company that fulfils your booking receives the relevant booking and driver details necessary to prepare and hand over the vehicle.
  • Booking platform partners: Our booking engine is powered by LocalRent.com. Their privacy policy governs data processed through their platform.
  • Analytics providers: Yandex Metrika collects anonymised website usage data. Their privacy policy applies.
  • Legal authorities: We may disclose data if required by law, court order, or regulatory authority.

7. Cookies

Our website uses cookies to improve user experience and analyse traffic. Types of cookies we use:

  • Strictly necessary cookies: Essential for the website to function. Cannot be disabled.
  • Analytics cookies: Used by Yandex Metrika to collect anonymous statistical data about visitor behaviour.
  • Functional cookies: Remember your preferences (such as language settings) to personalise your experience.

You can control and disable non-essential cookies through your browser settings. Note that disabling cookies may affect some website functionality.

8. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes described in this policy, or as required by law. Booking data is typically retained for 7 years for accountancy and legal compliance purposes. Anonymous analytics data may be retained indefinitely.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), particularly when sharing data with our booking platform partner LocalRent.com or analytics services. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V requirements, including standard contractual clauses approved by the European Commission.

10. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): You may request deletion of your personal data where there is no legitimate reason for us to continue processing it.
  • Right to restriction: You may request that we restrict processing of your data in certain circumstances.
  • Right to data portability: You may request that your data be provided in a machine-readable format.
  • Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at book@carfyvarna.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted through our website, restricted access to personal data within our team, and regular security reviews. However, no internet transmission is 100% secure and we cannot guarantee absolute security.

12. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

13. Links to Third-Party Websites

Our website may contain links to third-party websites including rental partner sites. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any external website you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. We will notify significant changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of carfyvarna.com after changes are posted constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

place Popular Car Rental Locations in Bulgaria

Car Rental Bulgaria Car Rental Burgas Car Rental Sofia Car Rental Plovdiv