1. Data Controller
The data controller responsible for the processing of personal data under this Privacy Policy is:
KHL Moto Travel LTD
UIC (ЕИК): 206060692
Country: Bulgaria
Email: info@khlmototravel.com
2. Personal Data We Collect
We collect and process only the personal data necessary for the operation of our website and services.
2.1 Contact Forms
When you contact us via the website contact form, we may collect:
- Name
- Email address
- Phone number
- Message content
Purpose:
To respond to inquiries, provide information about tours, and take pre-contractual steps at the user’s request.
Legal basis (GDPR Art. 6(1)):
- Pre-contractual measures (Art. 6(1)(b)), and/or
- Legitimate interest (Art. 6(1)(f)) in responding to inquiries.
Retention period:
Up to 24 months from the last communication, unless a contractual relationship is established or legal obligations require longer storage.
3. Payments
Payments on our website are processed by third-party payment providers:
- Stripe Payments Europe Ltd
- Electronic POS terminal provided by a licensed banking institution
We do not store or process full payment card details on our servers. All payment information is handled directly by the respective payment provider in accordance with their own privacy and security policies.
Legal basis:
Processing is necessary for the performance of a contract (GDPR Art. 6(1)(b)).
Users are encouraged to review Stripe’s privacy policy:
https://stripe.com/privacy
4. Cookies
Our website uses strictly necessary cookies required for basic website functionality (e.g. session management, security, and user preferences).
We do not use:
- Analytics cookies
- Marketing or advertising cookies
- Tracking pixels
As only essential cookies are used, explicit cookie consent banners are not required.
5. Embedded Content from Other Websites
Pages on this website may include embedded content (e.g. videos, images, or maps). Embedded content from other websites behaves in the same way as if the visitor had visited that external website directly.
These external websites may collect data about you, use cookies, and monitor your interaction with their embedded content in accordance with their own privacy policies.
6. Data Sharing
We may share personal data only with the following categories of recipients, strictly for operational purposes:
- Website hosting and IT service providers
- Payment service providers (Stripe, banking institutions)
- Email service providers used for business communication
All service providers process data in accordance with applicable data protection laws and, where required, under Data Processing Agreements (DPAs).
7. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations.
8. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Restrict or object to processing
- Request data portability
To exercise your rights, contact us at:
info@khlmototravel.com
9. Supervisory Authority
You have the right to lodge a complaint with the competent supervisory authority:
Commission for Personal Data Protection (CPDP), Bulgaria
Website:
https://www.cpdp.bg/
10. Data Security
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.
11. Changes to This Policy
We reserve the right to update this Privacy Policy when necessary to reflect legal or operational changes. The current version is always available on our website.