Privacy Policy

1. Introduction

Welcome to BG Vignette Pro ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website toll-bolgatr.pro and purchase our Bulgarian e-vignette products and services.

BG Vignette Pro is an official provider of Bulgarian electronic vignettes (e-vignettes), operating under registration number 36520260. We work in accordance with Bulgarian data protection laws and the European Union's General Data Protection Regulation (GDPR).

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

2. Information We Collect

2.1 Personal Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

• Purchase an e-vignette through our website
• Create an account on our platform
• Contact our customer support team
• Subscribe to our newsletter or marketing communications
• Participate in surveys or promotions
• Submit feedback or reviews

The personal information we may collect includes:

• Contact Information: First name, last name, email address, phone number, billing address, postal code, city, and country
• Vehicle Information: License plate number, vehicle category, vehicle registration country
• Payment Information: Credit card details, billing address, payment method preferences (processed securely through certified payment processors)
• Account Information: Username, password (encrypted), account preferences
• Communication Data: Any information you provide when contacting customer support, including email correspondence and chat transcripts

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

• Device Information: IP address, browser type and version, operating system, device type, screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, exit pages
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies (see Section 6 for details)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions for transaction verification
• Analytics providers (Google Analytics, Facebook Pixel) for website performance data
• Marketing partners for advertising effectiveness measurement
• Bulgarian Road Infrastructure Agency for vignette validation and compliance

3. How We Use Your Information

We use the information we collect for the following legitimate business purposes:

3.1 To Provide and Manage Our Services

• Process and fulfill your e-vignette purchases
• Register your vignette with the Bulgarian Road Infrastructure Agency database
• Send vignette confirmation emails and digital certificates
• Manage your account and preferences
• Provide customer support and respond to inquiries
• Process refunds and handle disputes

3.2 To Improve Our Services

• Analyze website usage patterns and user behavior
• Conduct research and development to enhance our platform
• Test new features and functionalities
• Monitor and improve website performance and security
• Troubleshoot technical issues

3.3 To Communicate With You

• Send transactional emails (order confirmations, vignette certificates, payment receipts)
• Provide important service updates and announcements
• Send expiration reminders for your vignettes
• Respond to your comments, questions, and support requests
• Send marketing communications (with your consent)

3.4 For Marketing and Advertising

• Send promotional offers and newsletters (with your consent)
• Personalize advertising content based on your interests
• Measure advertising campaign effectiveness
• Conduct market research and customer surveys

3.5 For Legal and Security Purposes

• Comply with legal obligations and regulatory requirements
• Prevent fraud, unauthorized transactions, and abuse
• Protect our legal rights and interests
• Enforce our Terms and Conditions
• Respond to legal requests from authorities

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you when you purchase an e-vignette
• Legal Obligation: Processing is required to comply with Bulgarian law and EU regulations regarding electronic toll collection
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and service improvement
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you can withdraw at any time

5. How We Share Your Information

We may share your personal information with the following categories of recipients:

5.1 Essential Service Providers

• Bulgarian Road Infrastructure Agency: We share vehicle license plate information and vignette details to register your toll pass in the official database
• Payment Processors: Secure payment partners (Stripe, PayPal) process your payment information according to PCI-DSS standards
• Email Service Providers: To deliver confirmation emails and vignette certificates
• Cloud Hosting Providers: For secure data storage and website hosting

5.2 Analytics and Advertising Partners

• Google Analytics: To analyze website traffic and user behavior (anonymized data)
• Facebook Pixel: For advertising measurement and campaign optimization
• Google Ads: For targeted advertising and conversion tracking

5.3 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, or legal representatives when:

• Required by law or legal process
• Necessary to protect our rights or property
• Responding to valid legal requests
• Complying with regulatory investigations
• Preventing fraud or illegal activities

5.4 Business Transfers

If we undergo a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections.

5.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

We do not sell your personal information to third parties for their marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our website.

6.1 Types of Cookies We Use

Essential Cookies: Required for website functionality, including shopping cart management, secure login, and payment processing. These cookies cannot be disabled.

Analytics Cookies: Help us understand how visitors interact with our website through Google Analytics, including page views, session duration, and user flow.

Marketing Cookies: Used for targeted advertising through Google Ads and Facebook Pixel, tracking conversions and measuring ad campaign effectiveness.

Preference Cookies: Remember your settings and preferences, such as language selection and cookie consent choices.

6.2 Managing Cookies

You can control cookie preferences through our cookie consent banner when you first visit our website. You can also manage cookies through your browser settings:

• Chrome: Settings → Privacy and Security → Cookies
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and Website Data
• Edge: Settings → Cookies and Site Permissions

Please note that disabling certain cookies may affect website functionality and your user experience.

7. Data Security

We implement robust technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmission is protected using SSL/TLS encryption (HTTPS)
• Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment processors; we do not store full credit card details
• Access Controls: Strict employee access restrictions based on job responsibilities
• Regular Security Audits: Periodic security assessments and vulnerability testing
• Data Backup: Regular encrypted backups to prevent data loss
• Firewall Protection: Advanced firewall systems to prevent unauthorized access
• Password Protection: User passwords are encrypted using industry-standard hashing algorithms

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our security practices.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Retention Periods

• Transaction Data: Retained for 7 years to comply with Bulgarian tax and accounting regulations
• Account Information: Retained while your account is active and for 2 years after account closure
• Marketing Communications: Retained until you unsubscribe or withdraw consent
• Customer Support Records: Retained for 3 years for quality assurance and dispute resolution
• Website Analytics Data: Typically retained for 26 months in Google Analytics

8.2 Data Deletion

After the retention period expires, we securely delete or anonymize your personal information. You can also request deletion of your data at any time (see Your Rights section below).

9. Your Rights and Choices

Under the GDPR and applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format.

9.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings.

9.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal information when:

• The information is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The information has been unlawfully processed

Note: We may be required to retain certain information to comply with legal obligations.

9.4 Right to Restriction of Processing

You can request that we limit how we use your personal information in certain circumstances, such as while we verify the accuracy of disputed data.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and transmit it to another data controller.

9.6 Right to Object

You can object to:

• Processing based on legitimate interests
• Direct marketing communications (including profiling)
• Processing for scientific or historical research purposes

9.7 Right to Withdraw Consent

Where we rely on your consent for processing, you can withdraw consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

9.8 Right to Lodge a Complaint

You have the right to file a complaint with the Bulgarian Commission for Personal Data Protection or your local data protection authority if you believe we have violated your privacy rights.

9.9 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in Section 14. We will respond to your request within 30 days.

10. International Data Transfers

BG Vignette Pro is based in Bulgaria, a member of the European Union. If you are accessing our services from outside the EU/EEA, please be aware that your information may be transferred to, stored, and processed in Bulgaria and other countries where our service providers operate.

For data transfers outside the EU/EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with service providers
• Adequacy decisions by the European Commission for certain countries
• EU-U.S. Data Privacy Framework compliance (where applicable)

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.

Vignette purchases require vehicle ownership or authorization, which typically involves adults. If we become aware that we have collected personal information from a child under 18 without proper parental consent, we will delete that information promptly.

12. Third-Party Links and Services

Our website may contain links to third-party websites, services, and social media platforms. We are not responsible for the privacy practices or content of these external sites. This Privacy Policy applies only to information collected by BG Vignette Pro.

We encourage you to review the privacy policies of any third-party sites you visit. Third-party services we integrate with include:

• Payment processors (Stripe, PayPal)
• Social media platforms (Facebook, Twitter, Instagram, LinkedIn)
• Analytics services (Google Analytics)
• Advertising networks (Google Ads, Facebook Ads)

These services operate under their own privacy policies and terms of service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if you have an account with us
• Display a prominent notice on our website
• Request your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes are posted constitutes your acceptance of the updated Privacy Policy.

Previous versions of this Privacy Policy are available upon request.

14. Contact Us

15. Additional Information for EU/EEA Residents

If you are a resident of the European Union or European Economic Area, you have additional rights under the GDPR:

• You can request information about the legal basis for processing your data
• You can request details about data retention periods
• You can request information about third-party recipients of your data
• You can request the source of your personal data if not collected directly from you
• You have the right to be informed about automated decision-making and profiling

Supervisory Authority for Bulgaria:
Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: www.cpdp.bg

16. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Exercise privacy rights without discriminatory treatment

To exercise these rights, contact us at info@toll-bolgatr.pro with "CCPA Request" in the subject line.

17. Consent and Acknowledgment

By using our website and services, you acknowledge that:

• You have read and understood this Privacy Policy
• You consent to the collection, use, and disclosure of your information as described
• You understand your rights and how to exercise them
• You are at least 18 years of age or have parental/guardian consent

For questions about this Privacy Policy or our privacy practices, please contact us using the information provided in Section 14.

Thank you for trusting BG Vignette Pro with your personal information. We are committed to protecting your privacy and providing transparent, secure services.