Personal data in enquiries
Review version · 17 October 2026. Legal details and retention require confirmation before launch.
Who processes your data
NV Auto is the vehicle brand and NV Global is the corporate identity. The confirmed contact address is 39 Hadzhi Dimitar Street, Botevgrad, Bulgaria; email: nvautogroup.logistics@gmail.com. The legal controller requires confirmation before public launch. This version is prepared for final legal review.
What data and why
Name, email, phone and acknowledgement of this notice are required. General, vehicle, import and consulting enquiries require a description. Logistics requires addresses and parcel details, plus date and time for scheduled collection. Company, selected vehicle link, weight, dimensions and extra instructions are optional. We use this information to respond, clarify your request and take requested pre-contractual steps. Do not send identity documents or sensitive data through the form.
Processing grounds
Requested pre-contractual steps rely on GDPR Article 6(1)(b); general correspondence and abuse protection rely on legitimate interests under Article 6(1)(f), subject to a balancing assessment. Specific application requires legal confirmation. The checkbox acknowledges this notice and is not a subscription or marketing consent.
Transmission, providers and security
Enabled forms send details through the server to Resend and the configured business mailbox. Enquiry content is not stored in the website database, localStorage or an administrative inbox. Cloudflare hosting uses Workers, D1/R2 for listings and images, and Turnstile for anti-spam. Technical network data, including IP addresses, is processed. Cloudflare D1 stores hashed rate-limit identifiers with counter expiry of up to 10 minutes, cleaned on later requests; Node keeps them in memory. Success confirms email provider acceptance, not proven inbox delivery.
Retention and international transfers
Retention for mailbox correspondence, Resend and infrastructure logs must be confirmed by the operator and recorded here before launch. We do not promise a period that is not configured. Cloudflare, Resend and mailbox providers may process data outside the EEA. Applicable agreements, subprocessors, locations and transfer safeguards must be checked for the actual accounts before launch.
Your rights
Subject to applicable conditions, you have rights of access, correction, deletion, restriction, objection and portability. Where processing relies on consent, it can be withdrawn for the future. Enquiries involve no automated decision-making or profiling. You may complain to the Bulgarian Commission for Personal Data Protection through its official website cpdp.bg. Use the contact details below to exercise your rights.