Back to site

Privacy Policy

Last updated: 27 October 2026

This is a translation for your convenience. In case of any discrepancy, the Bulgarian version prevails.

In short

  • We only collect the data you send us yourself: your name, phone number, message and, if you wish, your email address, so that we can answer your enquiry.
  • We do not use advertising, analytics or tracking cookies.
  • On your first visit, your IP address is sent to the ipapi.co service so that we can show the site in your language.
  • The maps on the site are loaded from Google, which receives your IP address.
  • You can ask at any time to see, correct or delete your data.

1. Who we are

The controller of your personal data is:

Name
SD "Blitz – Dimitrov & Co." (СД „Блиц – Димитров и Сие“)
Address
ul. Mir 81, 9010 Varna, Bulgaria
Email
blitz_and_co@yahoo.com
Phone
+359 887 624 375, +359 52 307 774

We have not appointed a data protection officer, because as a small family workshop we are not required to. Please send any questions about your personal data directly to us using the contact details above.

2. What data we process and why

2.1. When you write to us or call us

Data
The name, phone number, message and, if you give it, the email address that you enter in the contact form, as well as anything else you choose to share (for example the make and model of your car). When you call us or send an email, we process your number or address and the content of your email.
Why
To answer your enquiry, give you a quote or book an appointment.
Legal basis
Taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and, for general questions, our legitimate interest in answering the people who contact us (Article 6(1)(f) GDPR).
Is it required?
No. Without your name and phone number, however, we cannot get back to you. Your email address is optional: if you give it, we can also reply in writing.

Enquiries from the form are sent by the website's server (Cloudflare) as an email to our mailbox blitz_and_co@yahoo.com, which is provided by Yahoo. If you have given your email address, we can reply to it directly. Phone calls are not recorded.

If your enquiry leads to a repair or a sale, we keep the data in the documents we issue (for example an invoice) for as long as the Bulgarian Accountancy Act and tax legislation require.

When you start filling in the form, the Cloudflare Turnstile service checks that the form is being filled in by a person and not by a spam program. For this, Cloudflare processes technical data about your browser and device and your IP address (our legitimate interest in protecting the form from abuse, Article 6(1)(f) GDPR). The check is not loaded if you are only browsing the site.

2.2. The site's language (ipapi.co)

Data
Your IP address.
How
On your first visit, your browser sends a request to the ipapi.co service of Kloudend, Inc. (USA), which uses your IP address to determine the country you are browsing from. We use the country only to choose the language (Bulgarian, English, Russian or German). We do not receive or keep your IP address; we only save the code of the chosen language in your browser (see section 3).
Legal basis
Our legitimate interest in showing the site in a language you understand (Article 6(1)(f) GDPR). You can object – see section 7. If you choose a language from the menu yourself, it is saved and the check is not repeated.

2.3. Google Maps

The "Location" section contains two embedded Google Maps. When you reach them, your browser connects to Google's servers; Google receives your IP address and may set or read cookies in accordance with its privacy policy. We do not receive this data. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for it. If you do not want this, you can block third-party cookies in your browser settings.

2.4. Technical data on every visit

As with any website, the server hosting the site records technical data about requests: IP address, date and time, the page loaded and the type of browser. This serves security and troubleshooting (legitimate interest, Article 6(1)(f) GDPR). The site is hosted by Cloudflare, Inc. (the Cloudflare Workers service), which keeps these records in accordance with its privacy policy.

3. Cookies and browser storage

The site does not set any cookies of its own and does not use analytics, advertising or social media pixels. The fonts are loaded from our own server, not from an external service.

In your browser (localStorage) we only save the site's language:

  • blitz-lang – the language you chose from the menu;
  • blitz-lang-auto – the language determined automatically on your first visit (section 2.2).

They contain only the language code (for example "en"), do not expire on their own and are not sent anywhere. You can delete them at any time by clearing the data for this site in your browser settings. The cookies that Google may set when the maps load are described in section 2.3.

4. Who receives the data

  • Cloudflare – hosting the site, sending your enquiries as email and the spam check (sections 2.1 and 2.4);
  • Yahoo – the provider of our mailbox, where enquiries arrive;
  • Kloudend, Inc. (ipapi.co) – your IP address on your first visit (section 2.2);
  • Google – when the maps load (section 2.3);
  • public authorities, where the law requires it.

We do not sell your data or share it for advertising.

5. Transfers outside the EU

Some of the services listed above are provided by companies in the USA: Cloudflare, Inc., Yahoo, Kloudend, Inc. (ipapi.co) and Google LLC (an affiliate of Google Ireland). Such transfers are based on the European Commission's adequacy decision under the EU–US Data Privacy Framework, for companies certified under it, or on standard contractual clauses approved by the European Commission.

6. How long we keep data

  • Enquiries (form, email, messages): up to 6 months after our last contact, unless they have become part of an order.
  • Documents for completed repairs and sales: the periods required by the Bulgarian Accountancy Act and tax legislation.
  • The language in your browser: until you delete it yourself.
  • Technical server records: in accordance with Cloudflare's policy (section 2.4).

7. Your rights

Under the General Data Protection Regulation (GDPR), you have the right:

  • to receive information about, and a copy of, the data we hold about you (Article 15);
  • to ask us to correct it (Article 16) or delete it (Article 17);
  • to ask us to restrict its processing (Article 18);
  • to receive the data you have given us in a convenient format (Article 20);
  • to object to processing based on our legitimate interest (Article 21) – for example to the language being determined from your IP address.

To exercise your rights, write to us at blitz_and_co@yahoo.com, call +359 887 624 375 or visit the workshop. We reply within one month. We may ask you to confirm your identity so that we do not give your data to someone else.

If you believe we are infringing your rights, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection (КЗЛД): 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg.

8. Other

Automated decisions

We do not make decisions about you based solely on automated processing, and we do not carry out profiling.

Children

The site is not intended for children, and we do not knowingly collect data from anyone under 14.

Security

The connection to the site is encrypted (HTTPS). Only the partners and staff of the workshop have access to enquiries.

Changes to this policy

When we change the way we process data, we will update this page and the date at its top.