You can reach our data protection officer at info@spotins.bg.

If personal data is collected and processed by SPOTINS.bg, the storage and processing takes place on systems of spotins.bg or on systems of service providers integrated in accordance with data protection within the framework of the law and within non-European countries.

When you visit our website, we collect data on every access to the server, based on our legitimate interests within the meaning of Art. 6 Para. 1f GDPR. The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited website, IP address and the requesting provider).

SPOTINS.bg also has a legitimate interest in accordance with Art. 6 Para. 1f GDPR to analyze your usage behavior in a pseudonymized form in order to determine the right need for content and to improve our presented information. SPOTINS.bg does not use any external service for this, but only evaluates the corresponding server data. The IP address is automatically masked because of this. We cannot personally identify you through this usage analysis. For security reasons (e.g. to clarify misuse or fraudulent activities), log file information is stored for a max. of seven days and then deleted. Data, the further storage of which is necessary for evidence purposes, remains stored until the respective incident has been finally clarified.

If you contact us using the contact form, we will save the title, first name, last name, your contact details (E-Mail address and, if applicable, telephone number) and the content of the message. We only use this data to process your request and to communicate with you regarding your request. Processing is necessary for this and is based on Art. 6 Para. 1 b GDPR. It will not be passed on to third parties. The data will be deleted 1 year after your request has been processed. If a contractual relationship is established between you and our company because of your inquiry, we will delete the data after the statutory retention period (six or 10 years).

If you use a service to enter data (e.g. contact form, registration in the CMS), you will be asked to enter certain displayed characters in order to detect and prevent improper use of the services by machines. The captchas are generated and verified on the SPOTINS.bg servers. There is no transmission of data to third parties.

Personal data is passed on to third parties by %% BRAND_COMPANY_ALIAS under the following conditions:

• To fulfill the purpose of the contract according to Art. 6 Para. 1 lit. b GDPR to affiliated companies. %% BRAND_COMPANY_ALIAS only shares personal and non-personal data with its affiliates and only as long as is necessary to fulfill the purposes for which they were collected. The term "affiliates" refers to companies that may be named "%% BRAND_COMPANY_ALIAS", or that are jointly owned or controlled;
  
  
• To service providers integrated on the basis of Art. 28 of GDPR, which %% BRAND_COMPANY_ALIAS can commission for the provision of services.

In special circumstances, we transfer personal data to other parties,

• if this is necessary due to court orders or other orders from government or law enforcement agencies to meet legal requirements (Art. 6 Para. 1 lit. c GDPR);
  
  
• in connection with a group event, such as a merger, transfer, restructuring or the sale of all or part of the business of %% BRAND_COMPANY_ALIAS, on the occasion of which %% BRAND_COMPANY_ALIAS is forced to disclose information to a potential buyer and its professional advisors (Art. 6 para. 1 f GDPR),
  
  
• to enforce our contractual rights, to take precautionary measures against liability, to investigate suspected or actual illegal activities or to defend ourselves against claims or claims by third parties (Art. 6 Para. 1 f GDPR)
  
  
• to protect the rights, personal security or property of our customers or the public (Art. 6 Para. 1 b, c, f GDPR).

Some service providers that we use are located outside of your country or process your personal data there. The level of data protection in other countries may not match that of your country.

SPOTINS.bg only transfers data to those countries for which the EU Commission has decided that they have an adequate level of data protection. Alternatively, SPOTINS.bg takes data protection measures to ensure that all recipients achieve an adequate level of data protection. SPOTINS.bg concludes data protection agreements using standard EU clauses.

Your personal data is transmitted to the SPOTINS.bg servers over the Internet via website forms. The transmission is protected.

SPOTINS.bg uses the SSL/TLS transport protocol for this. E-Мail notifications from our servers are sent with STARTTLS encryption. Your data is therefore adequately protected against unauthorized access during transport.