Policy on consumer rights in the processing, storage, and protection of personal data (Privacy policy)

Date of update: 03.09.2025

The company that processes your data at www.ragner.eu is:

  • RAGNER Ltd.; BULSTAT: 207656475 with registered office and address of management: Blagoevgrad, 7A Stara Planina St. Contact telephone number: +359 894 416633; E-mail: ragner.office@gmail.com; Website: www.ragner.eu

Information regarding the competent supervisory authority for personal data protection:

  • Name: Commission for Personal Data Protection
  • Headquarters and management address: Sofia 1592, No. 2 Prof. Tsvetan Lazarov Blvd.
  • Correspondence address: Sofia 1592, No. 2 Prof. Tsvetan Lazarov Blvd.
  • Telephone: 02 915 3 518
  • Website: www.cpdp.bg

RAGNER Ltd. (hereinafter referred to as “We”, “Administrator”, “Company”, “Website”, or “www.ragner.eu”) operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. This information is intended to inform you about all aspects of the processing of your personal data by the Company and your rights in relation to such processing.

Basis for collecting, processing, and storing your personal data

The Administrator collects and processes your personal data in connection with contacting you, as well as when concluding contracts with the Company on the basis of Article 6, paragraph 1, Regulation (EU) 2016/679 (GDPR), and more specifically on the following grounds:

  • Explicit consent obtained from you as a customer;
  • Performance of the Administrator’s obligations under the contract with you;
  • Compliance with a legal obligation applicable to the Administrator;
  • For the purposes of the legitimate interests of the Administrator or a third party;

What personal data we collect

  1. First and last name
  2. Telephone number
  3. E-mail

Why we collect, process, and store your personal data

  1. We collect and process your personal data provided by you personally by phone or via the contact form on the website in connection with the process of communicating with you and also:
  • to respond to your inquiries sent through our contact form;
  • to contact you regarding the provision of our services;
  • for any other purpose expressed in this privacy statement.

2. We adhere to the following principles when processing your personal data:

  • lawfulness, fairness, and transparency;
  • storage limitation for the purposes of achieving the objectives;
  • integrity and confidentiality of processing and ensuring an appropriate level of security for personal data.

3. When processing and storing personal data, the Administrator may process and store personal data for the purpose of protecting its legitimate interests:

  • fulfilling its obligations to the National Revenue Agency, the Ministry of Interior, and other state and municipal authorities.

4. The Administrator does not collect or process personal data that relates to the following:

  • reveals racial or ethnic origin;
  • reveals political, religious, or philosophical beliefs, or trade union membership;
  • genetic and biometric data, health data, or data concerning sex life or sexual orientation.

5. The Administrator does not collect data for persons under 18. If we find out that we have received personal data for a person under 18, this data will be deleted as soon as possible.

6. Personal data is collected by the Administrator from the persons to whom it relates.

7. The Company does not make automated decisions based on data.

8. The Administrator does not collect personal data for marketing or bulletin registration purposes.

9. Basis for processing your personal data – By accepting the general terms and conditions between the Administrator and you, a contractual relationship is created, on the basis of which we process your personal data – Article 6, paragraph 1, item (b) of the GDPR.

Provision of personal data to third parties

  1. We do not provide personal data to third parties unless we are required to do so by law.

Cookies

The Administrator may use so-called “cookies” for the purposes of providing full functionality of the website, improving the user experience, statistical purposes, easier access, etc., to which you agree by continuing to browse our website, closing the cookie notice, or by clicking on any element on the page outside the cookie notice. Detailed information about the cookies we use can be found in our Cookie Policy.

Storage period of your personal data

1. The Administrator stores your personal data for no longer than the existence of your profile on the website. After the expiration of this period, the Administrator takes the necessary care to delete and destroy all your data without undue delay (within 1 month).

2. The Administrator notifies you in case the storage period of the data needs to be extended due to compliance with a regulatory obligation or in view of the legitimate interests of the Administrator or otherwise.

3. The Administrator stores the data provided in connection with online reservations for a period of 5 years to protect the legal interests of the Administrator in judicial or administrative disputes with website users, while accounting documents are stored for the respective legally defined period.

4. The Administrator stores personal data that it is required to keep under applicable law for the relevant period, which may exceed the duration of your registration.

How we protect your personal data

To ensure adequate protection of the Company’s and its customers’ data, we implement all necessary organizational and technical measures provided for in the Personal Data Protection Act.

For maximum security in the processing, transfer, and storage of your data, we may use additional protection mechanisms such as encryption, pseudonymization, and others.

User rights

Every user of the website enjoys all rights for the protection of personal data under Bulgarian legislation and European Union law.

Each user has the right to:

  • Be informed (in connection with the processing of their personal data by the Administrator);
  • Access their own personal data;
  • Correct (if the data is inaccurate);
  • Erase personal data (right “to be forgotten”);
  • Restrict processing by the Administrator or the data processor;
  • Portability of personal data between different administrators;
  • Object to the processing of their personal data;
  • Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;
  • Judicial or administrative protection in case the data subject’s rights have been violated.

Right of access

1. You have the right to request and receive confirmation from the Administrator whether personal data related to you is being processed.

2. You have the right to access the data related to you, as well as the information concerning the collection, processing, and storage of your personal data.

3. The Administrator provides, upon request, a copy of the processed personal data related to you, in electronic or other appropriate form.

4. Providing access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of repetitive or excessive requests.

Right to correct or complete

1. You have the right to request from the Administrator to:

  • Correct inaccurate personal data related to you;
  • Complete incomplete personal data related to you.

2. You can correct the personal data stored about you at any time by sending us an email with a correction request.

Right to erase (“to be forgotten”)

1. You have the right to request that the Administrator erase some or all of your personal data, and the Administrator has the obligation to erase it without undue delay when any of the following grounds apply:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • You withdraw your consent on which the processing is based and there is no other legal basis for the processing;
  • You object to the processing of your personal data, including for direct marketing purposes, and there are no legitimate grounds for the processing that take precedence;
  • The personal data has been processed unlawfully;
  • The personal data must be erased for compliance with a legal obligation under EU law or the law of a Member State to which the Administrator is subject;
  • The personal data have been collected in relation to the offer of information society services.

2. The Administrator is not obliged to erase personal data if it stores and processes them:

  • For exercising the right to freedom of expression and information;
  • For compliance with a legal obligation requiring processing under EU law or the law of a Member State applicable to the Administrator or for the performance of a task carried out in the public interest or in the exercise of official authority vested in it;
  • For reasons of public interest in the area of public health;
  • For archiving purposes in the public interest, scientific or historical research, or statistical purposes;
  • For the establishment, exercise, or defense of legal claims.

3. In case you exercise your right to be forgotten, the Company will erase all your data, except for the following information:

  • Information necessary to verify that your right to be forgotten has been fulfilled – email;
  • Technical information about the functioning of the online identification, which cannot be linked in any way to your identity.

4. To exercise your right to be forgotten, you need to send an email request for the deletion of your personal data processed by the Administrator, either by filling out the form in Appendix No. 2 or in free text.

5. The Administrator may request verification of your identity and the identity of the person to whom the data relates.

6. Upon deletion of your personal data, your profile will become inactive. However, you will still be able to browse the website and the offered services and become a user again.

7. The Administrator does not erase data that it is legally obliged to store, including for defense against legal claims or to prove its rights.

Right of restriction

1. You have the right to request that the Administrator restrict the processing of data related to you when:

  • You contest the accuracy of the personal data, for a period that allows the Administrator to verify the accuracy of the personal data;
  • The processing is unlawful, but you do not want the personal data to be erased, only its use to be restricted;
  • The Administrator no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of your legal claims;
  • You have objected to the processing pending verification whether the legitimate grounds of the Administrator override your interests.

2. You can exercise the right of restriction by sending us an email request in free text. Upon receiving your request, we will send you an email to the address from which we received the request, containing detailed instructions for verifying your identity as the subject of the personal data for which the restriction of processing has been requested.

3. After verification in accordance with point 2, the Company will cease processing your data.

Right to portability

1. You have the right:

  • To request the Administrator to provide you with your personal data in a readable format and transfer it to another Administrator;
  • To request that the Administrator directly transfer your personal data to an administrator specified by you, where technically feasible.

2. You can exercise your right to portability by sending us an email request in free text.

3. After verifying your identity as the subject of the personal data for which the request has been made, we will send you the data we process about you in a structured, commonly used, and machine-readable format to the email address you have provided.

Right to obtain information

1. You have the right to request that the Administrator inform you of all recipients to whom the personal data for which correction, erasure, or restriction of processing has been requested has been disclosed. The Administrator may refuse to provide this information if it would be impossible or require disproportionate effort.

Right to object

1. You may object at any time to the processing of personal data by the Administrator that relates to you, including if it is processed for the purposes of profiling or direct marketing.

Your rights in case of a violation of the security of your personal data

1. If the Administrator discovers a breach of the security of your personal data that may pose a high risk to your rights and freedoms, it shall notify you without undue delay of the breach and of the actions that have been taken or are to be taken.

2. The Administrator is not obliged to notify you if:

  • It has taken appropriate technical and organizational measures to protect the data affected by the security breach;
  • It has subsequently taken measures to ensure that the breach will not result in a high risk to your rights;
  • Notification would require disproportionate effort.

People we share your data with

1. For the purposes of processing your personal data and providing the service in its full functionality and in view of your interests, the Administrator may provide the data to the following persons who are data processors:

Accounting firm serving the needs of the Administrator.

2. Personal data processors comply with all requirements for legality and security in the processing and storage of your personal data.

The Administrator does not transfer your data to third countries.

What to do in case of violation of your rights

1. As our Company is responsible for the protection of your personal data, if you discover a violation, please inform us immediately by email: ragner.office@gmail.com

2. In accordance with the above or applicable personal data protection legislation, you have the right to file a complaint with the Commission for Personal Data Protection as follows:

  • Name: Commission for Personal Data Protection
  • Headquarters and management address: Sofia 1592, No. 2 Prof. Tsvetan Lazarov Blvd.
  • Correspondence address: Sofia 1592, No. 2 Prof. Tsvetan Lazarov Blvd.
  • Telephone: 02 915 3 518
  • Website: www.cpdp.bg

3. You can exercise all your rights regarding the protection of your personal data using the forms attached to this information. Of course, these forms are not mandatory, and you can submit your requests in any form that contains a statement to that effect and identifies you as the data owner.

4. If the consent relates to a transfer, the Administrator describes the possible risks of the transfer of data to third countries in the absence of an adequate decision and appropriate means of protection.