Privacy policy
Last updated 2026-11-05
This policy explains how WashDesk processes the personal data of the owners and staff of the car washes that use WashDesk and of visitors to this site. For the data of the car washes' customers (drivers), the car wash itself is the controller and WashDesk is the processor under the data processing agreement. Every car wash has its own “Personal data” page for its customers.
Who we are
Controller: [ФИРМА], UIC [ЕИК], [АДРЕС], [ИМЕЙЛ].
What data we process
- owners and managers: name, email, password (stored only as a hash) and login sessions;
- car wash staff: name, role, shifts, commission and daily wage; the PIN code is stored only as a hash;
- technical data: IP address to limit login attempts (kept in server memory for minutes), and cookies only for login, authorised devices and the theme choice.
We do not use advertising or analytics cookies.
Why
- to provide WashDesk to the car wash under our contract (Art. 6(1)(b) GDPR);
- for security: protection against password and PIN guessing (legitimate interest, Art. 6(1)(f));
- for legal obligations such as accounting, once billing for the software starts (Art. 6(1)(c)).
How long
- the account and the car wash data: for as long as the car wash uses WashDesk;
- after termination the car wash data is deleted within 30 days and disappears from backups within 14 days after that;
- login sessions expire on their own.
Who else sees it
- Hostinger: the server and the database, in Frankfurt, Germany (EU);
- LINK Mobility Bulgaria EAD, UIC 131384920 (SMSAPI.bg), Bulgaria (EU): SMS messages to drivers, only the phone number and the message text;
- Sendinblue SAS (Brevo), Paris, France (EU): emails to drivers, only the address and the message text.
The data does not leave the European Union. We do not sell data or share it for advertising.
How we protect it
Every car wash has a separate database. Connections are encrypted (HTTPS), passwords and PIN codes are stored only as hashes, permissions are checked on the server, and a backup with a tested restore is made every night.
Your rights
You can ask for a copy of your data, its correction or erasure, restriction of processing, object to it, or receive your data in a file. Write to [ИМЕЙЛ]; we reply within one month.
You may lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.
Changes
If we make a material change, we notify the car washes by email and update the date above.