Privacy Policy

Last updated: 17 September 2026

This Privacy Policy explains how “EN VI – 2025” Ltd. collects, uses and protects the personal data of visitors to hamali-transport.bg and clients of our transport and moving services. We process personal data in line with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

1. Data controller

2. What data we collect

  • Data you provide through the request form: name and phone number.
  • Data from calls, email, Viber or WhatsApp: name, phone number, email address and any information you share (pick-up and delivery addresses, description of items, preferred date and time).
  • Invoicing data: where applicable – name or company name, company ID and other details required by accounting law.
  • Technical data: IP address, browser and device type, pages visited and cookie data (see section 7).

3. Purposes and legal bases

  • Replying to requests and preparing quotes – steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Performing the ordered service (transport, moving, porter services, removal) – performance of a contract (Art. 6(1)(b)).
  • Issuing accounting documents and complying with tax law – legal obligation (Art. 6(1)(c)).
  • Website security and abuse prevention – legitimate interest (Art. 6(1)(f)).
  • Visit statistics and advertising measurement – your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Retention periods

  • Requests that did not lead to an order – up to 6 months.
  • Client data – for the duration of the service and until the limitation period for claims expires.
  • Accounting documents – for the period required by the Bulgarian Accountancy Act.
  • Cookie data – according to the lifetime of each cookie.

5. Who we share data with

We do not sell personal data. Data may be shared with:

  • hosting, website maintenance and email providers;
  • accountants and public authorities where required by law;
  • analytics and advertising providers (Google, Meta) – only with your consent;
  • Cloudflare – for website security and faster loading.

Some of these providers may process data outside the European Union. In such cases, transfers are based on a European Commission adequacy decision or standard contractual clauses.

6. Your rights

You have the right to:

  • access your personal data;
  • have inaccurate data corrected;
  • have your data erased (“right to be forgotten”);
  • restrict processing;
  • data portability;
  • object to processing based on legitimate interest;
  • withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email us at nvtransport2023@gmail.com. We will reply within one month.

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.

7. Cookies

The website uses:

  • Necessary cookies – for the website to work properly and securely. They do not require consent.
  • Analytics cookies (Google Analytics / Google Site Kit) – for visit statistics.
  • Marketing cookies (Meta Pixel) – to measure the effectiveness of Facebook and Instagram ads.
  • Third-party content – Google reviews (Trustindex), fonts and icons (Google Fonts, Font Awesome), which may receive your IP address.

Analytics and marketing cookies are used only with your consent. You can delete or block them in your browser settings.

8. Security

We apply appropriate technical and organisational measures to protect personal data – encrypted connection (HTTPS), restricted access and regular backups.

9. Changes to this policy

We may update this policy. The current version is always published on this page with the date of the last change. In case of discrepancy, the Bulgarian version prevails.