Privacy policy

1. Controller

The controller of your personal data is Georgi Nastev, гр. София, ул. Каварна 9, natok.bg@gmail.com.

2. What data we process and why

Account: email, password (stored only as a hash), name, account type (private/dealer), dealer name. Purpose: to create and run your account. Basis: contract (Art. 6(1)(b) GDPR).

Listings: car data, photos, price, location (province and town/village), the phone number you choose to show. Purpose: to publish your listing. Basis: contract. Listings are public.

Messages: name, email/phone and text sent through the contact form; they are delivered to the seller. Basis: legitimate interest and contract.

Favourites: the listings you save in your account.

Security and technical logs (IP address, browser) kept by our hosting providers to keep the site working and safe. Basis: legitimate interest (Art. 6(1)(f)).

3. Cookies and local storage

We do not use advertising or analytics cookies. Your browser stores a login session and your language/filters preferences, which are needed for the site to work. The map loads tiles from OpenStreetMap servers, which receive your IP address.

4. Who receives data

Service providers that process data on our behalf: Supabase (database, login, photo storage), Vercel (hosting), Resend (sending emails). Data of public listings is visible to everyone. We do not sell personal data. Some providers may process data outside the EU under standard contractual clauses or equivalent safeguards.

5. Retention

Account and listing data are kept while your account exists; you can delete listings at any time and ask us to delete the account. Messages are kept as long as needed for the purpose, then deleted. We may keep data longer where the law requires it.

6. Your rights

You can ask for access, correction, deletion, restriction, portability, and object to processing, by writing to natok.bg@gmail.com. You can complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg), 2 Prof. Tsvetan Lazarov Blvd., Sofia.

7. Children

The site is intended for adults (18+).

8. Changes

We may update this policy; the date at the top shows the latest version.