Privacy policy
Last changed: 6 October 2026
This is a translation of the Bulgarian policy. If the two versions differ, the Bulgarian text applies.
This policy describes what personal data the lotuscars.bg site collects, why it collects it and what rights you have.
Who processes the data
The data controller is Lotus Sofia Ltd., 4 Pimen Zografski St., 1172 Sofia, Bulgaria, the organiser of Lotus Driving School together with Lotus Sofia Motorsport Club.
For questions and requests about your personal data, write to LDS@lotuscars.bg.
What data we collect
You can browse the site without giving any personal data. We collect data only when you fill in the registration form:
- first and last name;
- email address and phone number;
- the date, course or gift voucher you choose;
- the gift voucher number, if you are redeeming one;
- whatever you write yourself in the additional information field;
- the country the request was sent from (determined automatically from the network address) and the language of the form.
After a bank transfer we also receive the payment details from the bank: the name of the payer, the amount and the payment reference.
Please do not put health or other sensitive information in the free text unless it is needed for your participation.
Why we collect it and on what basis
| Purpose | Basis |
|---|---|
| To process your request, hold a place, put you on the waiting list or tell you about a confirmed date | Taking steps at your request before entering into a contract, and performing the contract (Art. 6(1)(b) of Regulation (EU) 2016/679) |
| To contact you about the payment and the organisation of the course | Performing the contract (Art. 6(1)(b)) |
| To issue and keep accounting documents | Legal obligation (Art. 6(1)(c)) |
| To protect the form from abuse and automated requests | Legitimate interest (Art. 6(1)(f)) |
We do not use your data for advertising and we do not send you marketing messages unless you have expressly asked for them.
How long we keep it
Requests from the form are deleted automatically two years after they are submitted. Accounting documents for payments made are kept for the periods required by law.
To limit the number of requests from the same source, we keep an irreversibly transformed (hashed) record of the network address for one hour. The address itself is not stored.
Who has access to the data
Only the people in the Lotus Driving School team who process registrations have access. We do not sell your data or give it to third parties for their own purposes.
To run the site we use providers that process data on our behalf:
- Cloudflare: hosting of the site, the database of requests, and protection of the form from automated requests (Cloudflare Turnstile);
- the provider that maintains our mail server: for the confirmation emails.
When you take part in a course, the organiser may ask for further data on site, for example to check your driving licence. You will be told about that separately.
Cookies
The site does not use cookies for advertising or statistics and does not track visitors.
The registration page loads the Cloudflare Turnstile check, which tells people from automated programs. It may use technical data about your browser and device for that purpose only.
Your rights
You have the right:
- to get access to the data we hold about you, and a copy of it;
- to ask us to correct it if it is inaccurate;
- to ask us to delete it or to restrict its processing;
- to object to processing based on legitimate interest;
- to receive your data in a structured form, so that you can transfer it elsewhere.
To exercise any of these rights, write to LDS@lotuscars.bg. We will reply within one month.
If you believe we are processing your data unlawfully, you have the right to complain to the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg.
Changes
When we change this policy, we will publish the new version on this page with the date of the change.