Privacy Policy
1. Information about the Data Controller
1.1. Name of the Controller: OPM BG Ltd, UIC: 203470320
. 1.2. Registered office and management address: 8150 Sarafovo, Burgas, Bulgaria
1.3. Contacts: Phone: +359 889 77 87 88; E-mail: info(at)theboatsmarket.com
2. Data Processing Principles
We are committed to processing your personal data in strict compliance with the following principles established by the General Data Protection Regulation (GDPR):
2.1. Lawfulness, fairness, and transparency
We process your data lawfully, fairly, and in a transparent manner in relation to you. We provide you with all necessary information regarding the processing (via this Policy).
2.2. Purpose limitation
We collect data for specified, explicit, and legitimate purposes (such as providing classified ad services, communication, security) and do not process it in a manner incompatible with those purposes.
2.3. Data minimization
We process only personal data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed (the 'necessity' principle).
2.4. Accuracy
We take all reasonable steps to ensure that the personal data being processed is accurate and, where necessary, kept up to date.
2.5. Storage limitation
We store your personal data for a period no longer than necessary for the purposes for which it is processed. Upon expiry of the period, the data is deleted or anonymized.
2.6. Integrity and confidentiality
We process personal data in a manner that ensures an appropriate level of security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by implementing appropriate technical and organizational measures.
3. Categories of Personal Data Collected, Purposes and Legal Basis
3.1 Individual Users
3.1.1 In the event that an individual user of the platform wishes to publish an advertisement or contact another registered user, and in order to ensure the security of both parties and the platform, we require the user to register by identifying themselves with their legal names. For technical registration requirements, the user must enter their email and a password for platform access. Without this data, a user would not be able to use the parts of the platform related to publishing ads and communicating with other users. If the user wishes to publish an ad, they will also need to specify the region (country, city) for which they wish to post the advertisement.
3.2 Business Users
3.2.1 In the event that a Business User of the platform wishes to publish an advertisement or contact another registered user, and in order to ensure the security of both parties and the platform, we require them to fulfill the conditions listed in point 3.1.1 as well as provide the following additional data related to the company they represent:
3.2.2 Business users of the platform are obliged to enter information regarding: Company Name, Registration Number (UIC/VAT), company's registered address, and a contact phone number for the company representative. If these data are not entered, the user will not be able to use the platform as a Business User.
4. Data Retention Period
Profile Data: Stored as long as the User has an active profile. After deleting the profile, the data is anonymized or deleted within a reasonable period (e.g., 30 days), unless a longer period is required by law.
Advertisement Data: After the advertisement expires, the data may be retained for [specify a reasonable period, e.g., 6 months] for archiving purposes and protection of legitimate interests.
Marketing Data: Until consent is withdrawn.
5. Disclosure of Data (Recipients)
Public Data: The name, phone number, and other data that the User has explicitly specified to be public in the advertisement are displayed to all visitors of the Website.
Service Providers (Data Processors): Third parties that assist in the functioning of the site, e.g., hosting providers, email services, analytical tools.
State Authorities: Data may be disclosed to state authorities (police, court) upon legal requirement.
6. Rights of Users (Data Subjects)
A platform user has the following rights regarding the processing of the entered data:
6.1. Right of access: To request information on whether we process your data and a copy of it.
6.2. Right to rectification: To correct inaccurate data.
6.3. Right to erasure ('Right to be forgotten'): To request the deletion of your data when there is no legal basis for its processing.
6.4. Right to restriction of processing: To limit processing under certain conditions, e.g., while the accuracy of the data is being verified.
6.5. Right to data portability: To receive your data in a structured, commonly used, and machine-readable format and to transfer it to another controller.
6.6. Right to object: To object to the processing of personal data for direct marketing purposes.
6.7. Right to withdraw consent: At any time, if processing is based on consent. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
7. Right to Lodge a Complaint
Users have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) of [The country where the Provider is registered] if they believe their rights have been violated.
