Privacy Policy

Disclaimer: This document is a translation of the original Bulgarian text, in case of divergence the Bulgarian original shall prevail.

1. Data of the administrator

Petrol AD, with registered office and address of management in the town of Lovech, 5500, 12 Targovska Str., With UIC 831496285, uses, processes and stores the received personal data in accordance with the provisions of the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation). The website is owned by Petrol AD ​​and is managed by the company.

You can contact the administrator:
(a) by e-mail to:
(b) at the address of management of the company: Lovech, PO Box 5500, 12 Targovska Str.
The choice whether to communicate with Petrol AD ​​by e-mail or by mail / courier is personal. The e-mail message may not be encrypted for technical reasons.

This policy does not apply to persons who use cards under a loyalty program organized by Petrol AD ​​and/or visit social networks in which there is a profile of Petrol AD, incl. but not restricted to a mobile app, Facebook page, YouTube channel, and Google profile.

2. Purpose of this privacy policy

The information here is meant for any individual, regardless of whether he/she acts personally, as a representative, or employee of a legal entity in relations with Petrol AD. The purpose is to provide information about the personal data we collect; why we collect it; the manner and terms in which we process and protect it, the rights that individuals have in connection with the processing of their personal data.

3. Grounds for personal data processing

Petrol AD ​​processes personal data only on the grounds provided by law, namely: a) consent to the processing of personal data for one or more specific purposes; (b) where the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject before the conclusion of a contract; (c) the processing is necessary to comply with a legal obligation that applies to the controller; (d) the processing is necessary for the legitimate interests of the controller or of a third party; e) other grounds specified by law.

The provision of personal data is always voluntary and can be withdrawn at any time.

4. Purposes of personal data processing

The information collected by and for individuals – subjects of personal data – is processed by Petrol AD ​​only for identification about concluding, performing, amending contracts; provision of requested services; processing of submitted applications, orders and inquiries, as well as for fulfillment of legal obligations of the administrator and requirements of state bodies and agencies.

We do not require the provision of personal information to view our website or access most of its content.

5. Types of processed personal data

Petrol AD ​​processes the following types of personal data: name, PIN, location data, contact data (email, telephone) in combination with personal data, contract data, data on obligations, data on payments. Video surveillance for security purposes is carried out at all sites (stations) of Petrol AD. The website uses cookies to track and improve the customer experience. More information about cookies and their use and management can be found in the Cookie Policy.

6. Categories of recipients of personal data

For the purposes of processing and in accordance with the current legislation, the personal data collected by Petrol AD ​​may be included in a database of third parties acting on behalf of and under the control of Petrol AD, trade partners, suppliers of goods and services, as well as to bodies of state or local authority, when this is provided for in a normative act.

7. Transfer of personal data to a third country or international organization

Petrol AD ​​does not provide personal data outside the territory of the European Union and the European Economic Area.

8. Term for which the personal data will be stored

Petrol AD ​​will process your personal data for a period not longer than the period necessary to achieve the purposes for which they are processed and an additional period of time to comply with the requirements of the legislation and to protect a legitimate interest, in court disputes until their final resolution and settlement of relations.

9. Ensuring the protection of personal data

Petrol AD ​​has adopted internal rules and policies for ensuring confidentiality and protection of personal data. The Company takes the necessary technical and organizational measures to protect the data from accidental or illegal destruction, or accidental loss, from unauthorized access, alteration or dissemination, as well as from other illegal forms of processing.

The company sets deadlines for conducting periodic reviews on the need for data processing, as well as for their deletion.

10. Rights of the subjects related to the processing of personal data

Everyone has the right to:
(a) have access to personal data concerning him;
(b) at any time to request from Petrol AD ​​to 1) correct, delete (“be forgotten”), to limit his personal data, the processing of which does not meet the requirements of the current legislation, as well as to 2) notify the third parties to whom his personal data have been disclosed, for any correction, deletion or restriction made in accordance with sub-item 1), except for the cases when this is impossible or related to excessive efforts for Petrol AD;
(c) to receive a direct transfer of personal data from one controller to another (right of portability) where technically feasible;
(d) to object to Petrol AD ​​against the processing of his personal data in the presence of a legal basis for this, when the objection is justified and there are no convincing legal grounds for the processing, which take precedence over the interests, rights and freedoms in its capacity of data subject, or to establish, exercise or defend legal claims;
(e) a complaint to a supervisory authority;
(f) all other rights under the LPPD and the General Regulation on Data Protection.

Each person may exercise his rights as a subject of personal data in any of the ways of contact specified in section 1.

In the event of a breach of your rights under applicable data protection law, a complaint may be lodged with the Data Protection Commission.
at the address: Sofia 1592, bul. “Prof. Tsvetan Lazarov ”№ 2, phone: 02 915 3 518
by email:,

11. Adoption and changes in this Privacy Policy

Date of entry into force: 15.05.2018
Last change: 15.05.2018

Notification for changes in the Privacy Policy is carried out with its publication on the company’s website