Legal

Merchant information

Under Art. 4 of the Bulgarian Electronic Commerce Act, the information society service provider and operator of the website redline-speed.com is:

• Company name: BOTEV GROUP EOOD („БОТЕВ ГРУП“ ЕООД)
• Company ID (EIK): 204973207
• VAT No.: BG204973207
• Registered office: 53 Mogila St., Lozen 1151, Pancharevo district, Sofia Municipality, Bulgaria
• Workshop address: 45th St., Vrazhdebna, Sofia
• Email: redlinespeedoffice@gmail.com
• Phone: +359 879 000 708
• Business activity: vehicle diagnostics, car repair, pre-purchase inspections, sale of spare parts and accessories

Supervisory authorities:

• Consumer Protection Commission (KZP) — 4A Slaveykov Sq., floors 3, 4 and 6, Sofia, tel. 0700 111 22, kzp.bg
• Commission for Personal Data Protection (CPDP) — 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, tel. +359 2 91 53 518, cpdp.bg

Terms of service

1. General

These terms govern the use of the website redline-speed.com (the “Site”), operated by BOTEV GROUP EOOD under the trade name Redline Speed (the “Workshop”). By using the Site you accept these terms. The Bulgarian text is binding; this English translation is provided for convenience.

2. Information on the Site

The Site presents the Workshop’s services and products and lets you send a booking request, a pre-purchase inspection request or a product inquiry. The information in articles and descriptions is general and does not replace an actual check of your car. Prices are in euro and include VAT. Product availability and the final price are confirmed in our reply to your inquiry. The Site does not offer online purchase or payment.

3. Requests and inquiries

Sending a request or an inquiry does not conclude a contract. The Workshop contacts you by phone or email to confirm the day, time, scope and price. The contract is formed after this confirmation.

4. Pre-purchase inspection

• Scope. We inspect cars and motorcycles. The inspection covers a visual and technical check, computer diagnostics (where the vehicle supports it), a check of the documents and the VIN and — where possible — a road test or test ride. Prices are published on the “Pre-purchase inspection” page; the exact scope and price are confirmed before the inspection.
• What it does not include. The inspection does not include dismantling of components or assemblies unless explicitly agreed. Faults that do not show during the inspection (e.g. intermittent faults), hidden damage that cannot be found without dismantling, and conditions deliberately concealed by the seller cannot be identified. Mileage and history are checked against the available documents and the data stored in the control units. A VIN history report from an external service (e.g. carVertical) can be ordered separately, for a fee.
• The report. The report describes the vehicle’s condition on the date and at the place of the inspection and the opinion of the Workshop’s specialists. It is not a guarantee of its future condition. Repair amounts stated are estimates.
• Access to the vehicle. The inspection depends on the access provided by the seller. If some checks cannot be carried out, this is noted in the report. If the vehicle isn’t registered or doesn’t run, we can arrange transport to the workshop with a tow truck on request. The tow truck is not included in the inspection price; it is charged separately and its price is confirmed up front.
• The purchase decision is yours.
• Report link. The report is provided through a personal link and can be saved as a PDF. The link is meant for you; if you share it, others will see the report. The report is available for 12 months from the inspection date (see “Retention” in the Privacy policy) — keep a PDF copy.

5. Intellectual property

The texts, photos, logo and design of the Site belong to the Workshop or are used with permission. Copying or distributing them without written consent is not permitted. Manufacturers’ trademarks and logos belong to their owners and are shown to indicate the brands the Workshop works with; this does not mean an official partnership unless explicitly stated. Some illustrative images on the Site (for example at the top of some pages and in the blog articles) were created with artificial intelligence and do not show the actual workshop or real customer cars.

6. Liability

The Workshop takes care that the information on the Site is accurate and up to date, but it may contain inaccuracies and is not individual advice. The Workshop is not liable for damage resulting from the use of the general information on the Site or for the content of external sites linked from it. This does not limit the Workshop’s liability for intent or gross negligence, nor your statutory rights as a consumer, including for services the Workshop performs under a contract.

7. Governing law and disputes

Bulgarian law applies. Disputes are settled by mutual agreement or, failing that, by the competent Bulgarian court. As a consumer you may file a complaint with the Consumer Protection Commission (KZP) and turn to its conciliation commissions for out-of-court dispute resolution.

8. Changes

The Workshop may change these terms. Changes apply from their publication on the Site; the date of the last update is shown on this page.

Privacy policy

1. Data controller

The controller of your personal data is BOTEV GROUP EOOD, company ID 204973207, registered office: 53 Mogila St., Lozen 1151, Pancharevo district, Sofia Municipality, Bulgaria. For questions and requests about your personal data: redlinespeedoffice@gmail.com, tel. +359 879 000 708.

2. What data we process, why and on what legal basis

a) Booking requests, inspection requests and product inquiries. Name, phone, email, car or motorcycle details (type, make, model, year, engine, VIN), preferred date, description of the service or your message, selected products. For an inspection request, also where the vehicle is and a link to the listing. We use them to handle the request, contact you and perform the service. Legal basis: steps taken at your request before entering into a contract and performance of the contract (Art. 6(1)(b) of Regulation (EU) 2016/679 — GDPR). Name and phone are required, and for an inspection also the email (we send the report there); without them we cannot handle the request. All other fields are optional. The box “I have read the Privacy Policy” confirms that you have received this information; it is not consent.

b) The seller’s details. When you request an inspection, you may give us the seller’s name and phone. We receive them from you and use them only to arrange the inspection. Legal basis: your and the Workshop’s legitimate interest in arranging the inspection (Art. 6(1)(f)). At the first contact we tell the seller where we got their details and where they can read this policy.

c) Inspection report. Car or motorcycle details (including the VIN), findings and photos, which may show the registration plate and VIN. The report is available through a personal link with a secret code and is not indexed by search engines. Legal basis: performance of the contract (Art. 6(1)(b)).

d) Email confirmation. If you give an email address, we send you a confirmation that your request was received.

e) Staff notes. Staff may keep notes on a request and on the customer (by phone number) to organise the work. Legal basis: legitimate interest (Art. 6(1)(f)). You have the right to access these notes and to object to them.

f) Security. We record which staff member changed what in the admin panel. For failed sign-in attempts to the panel we process the IP address of the attempt to prevent unauthorised access. The hosting provider briefly processes technical request data (e.g. IP address) to deliver and protect the Site. Legal basis: legitimate interest in security (Art. 6(1)(f)).

g) Technical errors. When a server error occurs, we send a technical description of the error to an error-monitoring service (Sentry). We remove form contents, cookies, request headers, the IP address, phone numbers and email addresses. Legal basis: legitimate interest in keeping the Site working (Art. 6(1)(f)).

h) Statistics and analytics — only with your consent. Anonymous counting of page visits (we store the page, date and load time — no IP address, no identifier and no cookies) and Microsoft Clarity (see “Cookies”). Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time via “Cookie settings”.

i) Map (Google Maps) — only with your consent or at your request. The map on the home page loads automatically only if you allowed it in the cookie banner (“Accept all”, or “Map” under “Settings”). Otherwise it loads only when you click “Show the map”. When it loads, your browser connects to Google’s servers, and Google receives your IP address and technical browser data. Legal basis: your consent (Art. 6(1)(a)), given through the banner or by clicking the button.

We do not use your data for advertising, we do not sell it, and we do not carry out automated decision-making or profiling.

3. Recipients and processors

Only authorised Workshop staff have access to the data. We use the following providers, which process data on our behalf under contract:

• Vercel Inc. (USA) — hosting of the Site and server and storage of uploaded photos;
• MongoDB, Inc. (USA) — database (MongoDB Atlas);
• Google Ireland Limited (Gmail) (Ireland) — the mailbox redlinespeedoffice@gmail.com where we receive your emails and reply from; the Site also sends its automatic emails (e.g. request confirmations) through it;
• Functional Software, Inc. (Sentry) (USA) — monitoring of technical errors, without the personal data listed in point 2(g);
• GitHub, Inc. (USA) — storage of database backups for up to 30 days;
• Microsoft — Microsoft Clarity, only if you have given consent.

Google (Google Maps) receives your IP address when the map loads (see section 2(i)). Google processes this data further as an independent controller under Google’s privacy policy.

Where data is transferred to the USA, this is based on the European Commission’s adequacy decision (EU–US Data Privacy Framework) for certified companies or on standard contractual clauses approved by the European Commission. We may disclose data to public authorities where the law requires it.

4. Retention

• Requests, inquiries and staff notes — 12 months from receipt (or from the agreed date, if later), then deleted automatically.
• Inspection reports and their photos — 12 months from the inspection date, then deleted automatically.
• Record of changes in the admin panel — 12 months.
• Backups — deleted data remains in backups for up to 30 days.
• Accounting documents (e.g. invoices for services performed) are kept for the periods required by the Bulgarian Accountancy Act, outside the Site.
• Anonymous statistics contain no personal data. Data in Microsoft Clarity is kept under Microsoft’s rules.

5. Security

We apply technical and organisational measures against unauthorised access, loss or destruction of data: encrypted connection (HTTPS), access to the admin panel only with personal accounts and passwords, limits on sign-in attempts and roles with different permissions.

Cookies and browser storage

By “cookies” we also mean the small records the Site keeps in your browser (localStorage and sessionStorage). Without your consent, the Site uses only the necessary records below.

Necessary (no consent needed)

• cookie_consent, cookie_consent_meta (localStorage) — your cookie choice and when you made it. The choice is valid for 12 months, after which we ask again.
• rs-theme (localStorage) — light or dark theme, if you changed it. Kept until you delete it.
• rs-inquiry-v1 (localStorage) — the products in your inquiry list. Deleted when you send or clear the list.
• rs-booking-draft-v1 (sessionStorage) — an unsent draft of the booking form so you don’t lose what you typed when changing pages. Deleted when you send the form or close the browser tab.
• token, csrf-token (cookies) — only for staff signed in to the admin panel: session and protection against forged requests.

Analytics (only with your consent)

• Anonymous visit statistics — uses no cookies and stores no IP address.
• Microsoft Clarity — shows how the Site is used (clicks, scrolling, session recordings with masked form fields). It sets cookies on the Site (_clck — up to 1 year, _clsk — 1 day) and on Microsoft domains (e.g. clarity.ms, bing.com). It is not used for advertising. More: Microsoft Privacy Statement.

Third-party content (only with your consent or after a click)

• Google Maps — the map on the home page. It loads automatically only if you allowed it (“Accept all”, or “Map” under “Settings”); otherwise only after you click “Show the map”. When it loads, Google may set its own cookies on its domains (e.g. google.com). More: How Google uses cookies.

How to change your choice

Click “Cookie settings” at the bottom of any page. You can accept everything, keep only the essentials, or use “Settings” to allow “Statistics and analytics” and “Map” separately. If you withdraw your consent, Clarity stops, its cookies on the Site are deleted, and the map no longer loads automatically. The Site cannot delete cookies that Microsoft and Google set on their own domains. You can delete them, together with the other records, in your browser settings.

Your rights

Under Regulation (EU) 2016/679 you have the right:

• of access to the personal data we process about you;
• to rectification of inaccurate or incomplete data;
• to erasure (“the right to be forgotten”);
• to restriction of processing;
• to data portability — to receive your data in a structured format;
• to object to processing based on legitimate interest;
• to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, write to redlinespeedoffice@gmail.com or call +359 879 000 708. We reply within one month. If you believe your rights have been infringed, you may lodge a complaint with the Commission for Personal Data Protection (cpdp.bg).