Privacy policy

Last changed: 11 November 2026

This is a translation for your convenience. If it differs from the Bulgarian text, the Bulgarian text applies.

1. Who is responsible for your data

The controller of the personal data in Garage koli-bg (“Garage”, “the service”) is Hristomir Kotzev, Sofia, Slatina, bl. 16

For anything about your data, write to admin@koli-bg.com

2. What data we process

• Account. The e-mail address, name and picture we receive from the koli-bg portal when you sign in.
• Your cars. Make, model, year, colour, fuel and mileage and, if you enter them, the registration number and the VIN.
• Your records. Fuel fills, service visits, documents and deadlines (insurance, technical inspection, vignette, driving licence and others), expenses and reminders.
• The files you upload. Photos of receipts and invoices, documents.
• Settings. What to notify you about and how, and the theme you chose.
• Use of photo reading. When you used the reading of a photo — so that we can count your tokens for the month. We keep nothing about what was on the photo beyond the file itself and the record you confirmed.
• Technical data. A session cookie, your IP address and requests in the server logs, error reports.

Garage does not ask for or expect sensitive data (health, political views and the like). Please do not upload any.

3. Why we process it and on what legal basis

• To provide the service — to keep the journal, work out consumption and costs, keep track of deadlines. Basis: performance of our contract with you (Art. 6(1)(b) of Regulation (EU) 2016/679, the GDPR).
• To notify you in the app and by e-mail about coming deadlines, as you have set it. Basis: performance of the contract.
• For security and fixing errors — logs and error reports. Basis: our legitimate interest in a working and protected service (Art. 6(1)(f)).
• To comply with the law where it requires us to (Art. 6(1)(c)).

4. Photos, reading them, and artificial intelligence

• When you take a photo of a receipt or an invoice, the image is sent to Google's Gemini API, which returns what it read (quantity, price, date and so on). We use the paid service, under whose terms Google does not use the content to train its models.
• Each reading spends some of your tokens for the month. When they do not cover it, the photo is kept but is not sent to Google.
• The cars' pictures are drawn by Gemini from the make, model, colour and year — no personal data. Their background is removed on our own server. The same picture is used for identical cars of different users.
• We make no automated decisions with legal effects for you. What is read from a photo is a suggestion that you confirm.

5. Who else receives data

We use providers that process data on our behalf and only for the purposes stated:

• Google (Google Ireland Limited / Google LLC) — the Gemini API for the reading and the pictures; the site's font is loaded from Google Fonts, whereby Google receives your IP address.
• BunnyWay d.o.o. (bunny.net), Slovenia — storing and serving the uploaded files.
• A hosting provider — the service's servers and database.
• An e-mail provider — sending the notifications.
• The koli-bg portal — signing in to the service.

Some of these providers may process data outside the European Economic Area (for example Google in the USA). Such transfers take place under the safeguards the GDPR requires — an adequacy decision or standard contractual clauses.

We do not sell your data or give it to anyone for advertising.

Important about files: uploaded files are opened through long addresses that are hard to guess. Anyone who has the exact address can open the file, so do not share these addresses.

6. Cookies

We use only cookies the service cannot work without:

We use no analytics or advertising cookies, which is why there is no consent banner.

7. Analytics and advertising

At present Garage uses no visitor analytics and shows no ads. If that changes, we will first update this page and ask for your consent where the law requires it.

8. How long we keep data

• The data in your account and journal — for as long as you use the service. A single record is gone when you delete it.
• The session — up to 30 days after the last use, or until you sign out.
• Server logs and error reports — for a limited time, as needed for security and for fixing problems.
• When you ask for your account to be deleted, we delete your data and files within 30 days, unless a law requires us to keep something longer.

9. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability and to object. You can download your costs and fuel fills yourself as CSV from the “Costs” page.

To exercise your rights, write to us at the address in section 1. We answer within one month.

If you believe we process your data unlawfully, you have the right to complain to the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg

10. Children

The service is intended for adults. We do not knowingly collect children's data.

11. Changes to this policy

Changes are published on this page with a new date. We will tell you about a significant change in the app or by e-mail before it takes effect.

12. Contact

Questions and requests: admin@koli-bg.com