Privacy Policy

01 Data controller

The controller of your personal data is “Soners Group”, UIC 147246077, a licensed insurance broker entered in the register of the Financial Supervision Commission (licence No. 812-ЗБ, certificate No. 678-ЗБ), based in Burgas, Bulgaria.

For any questions about the processing of your personal data you can contact us at info@soners.bg, by phone on 0876 533 522, or at our office: ground floor – direct entrance from Lazur 65 district, Demokratsia Blvd., 8000 Burgas.

02 What personal data we collect

Depending on how you interact with us, we may process the following categories of personal data:

• Identification and contact data — name, phone number, email, and, when arranging a policy, additional data required by the insurer (e.g. national ID number, address, ID document details).
• Insurance risk data — information about property, a vehicle, a trip or another object of insurance, needed to prepare a quote.
• Enquiry data — the content of messages you send us via the contact form, email, phone or Viber.
• Technical usage data — IP address, device and browser type, pages you visit, and data collected through cookies (see the “Cookies” section).

03 Purposes and legal bases for processing

We process your personal data only where a lawful basis exists, including:

• To respond to your enquiries and provide advice — on the basis of taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• To compare offers and act as an intermediary in concluding and servicing an insurance contract — for the performance of a contract or pre-contractual relations.
• To comply with our legal obligations — including under the Insurance Code, requirements of the Financial Supervision Commission and anti-money-laundering rules (Art. 6(1)(c)).
• To operate and improve the website and to inform you of services that may be of interest — on the basis of our legitimate interest (Art. 6(1)(f)).
• To send marketing communications where you have consented — on the basis of your consent (Art. 6(1)(a)), which you may withdraw at any time.

04 Special categories of data

For certain types of insurance (for example health or life insurance) it may be necessary to process data about your health. Such data is processed only with your explicit consent or where necessary to conclude and perform the insurance contract, and is disclosed only to the relevant insurer.

05 Recipients of the data

We do not sell your personal data. We may share it with the following categories of recipients only to the extent necessary for the stated purposes:

• Insurance companies we work with, to prepare quotes and arrange policies at your request.
• Service providers acting on our behalf (e.g. IT, hosting, accounting), bound by confidentiality obligations.
• Competent public authorities and institutions where required by law — including the Financial Supervision Commission.

06 Retention period

We retain your personal data only for as long as necessary for the purposes for which it was collected, or for the period required by applicable law. Data relating to concluded insurance contracts is kept for the statutory periods under the Insurance Code and accounting and tax legislation. Enquiry data that does not lead to a contract is kept for a reasonable period, after which it is deleted or anonymised.

07 Cookies

The website uses cookies and similar technologies to function correctly and to improve your experience. Strictly necessary cookies enable the core functions of the site. Analytics and functional cookies are used only with your consent. You can manage or delete cookies through your browser settings; blocking some cookies may limit the functionality of the site.

08 Your rights

Under the GDPR you have the following rights in relation to your personal data:

• The right to access your personal data and to receive a copy of it.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure (the “right to be forgotten”) under certain conditions.
• The right to restriction of processing.
• The right to data portability.
• The right to object to processing based on legitimate interest or for direct marketing purposes.
• The right to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, contact us at info@soners.bg. We will respond within the periods provided by law.

09 Data security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Access to the data is limited to staff and partners who need it to carry out their duties.

10 International data transfers

As a rule, your personal data is processed within the European Economic Area (EEA). If, in certain cases, a transfer outside the EEA is required, it will take place only where appropriate safeguards are in place in accordance with the GDPR.

11 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our activities or in the law. The current version is always available on this page, and the date of the latest update is shown at the top.

12 Contact and complaints

If you have any questions or complaints about how we process your personal data, please contact us first at info@soners.bg. You also have the right to lodge a complaint with the supervisory authority — the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, email kzld@cpdp.bg, website cpdp.bg.