GDPR

Travel by Electric Hub Ltd. is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (“GDPR”). This page explains the rights you have over your personal data and, in particular, the exact procedure for having your account and personal data permanently deleted.

1. Data controller

Travel by Electric Hub Ltd. (UIC 207824097)
84 Kumata Str., Vitosha District, Sofia 1618, Bulgaria
Email: legal@travelbyelectric.com

Travel by Electric Hub Ltd. is the controller of the personal data processed through the travelbyelectric.com website and the Travel by Electric mobile application (the “App”).

2. Your rights under the GDPR

As a data subject, you have the following rights, which you may exercise at any time free of charge by writing to legal@travelbyelectric.com:

  • Right of access (Art. 15) – to obtain a copy of the personal data we hold about you.
  • Right to rectification (Art. 16) – to have inaccurate or incomplete data corrected.
  • Right to erasure / “right to be forgotten” (Art. 17) – to have your personal data deleted. See the procedure in section 3 below.
  • Right to restriction of processing (Art. 18).
  • Right to data portability (Art. 20) – to receive your data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21), including to direct marketing at any time.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
  • Right to lodge a complaint with a supervisory authority (see section 6).

We respond to all requests within one month of receipt, in accordance with Art. 12(3) GDPR.

3. Data deletion procedure

You may request the deletion of your Travel by Electric account and of the personal data associated with it at any time. The procedure below applies to both the website and the App, including accounts created or accessed through Facebook Login.

Step 1 – Send your deletion request

Send an email to legal@travelbyelectric.com with the subject line “Data Deletion Request”. Please send it from the email address registered to your Travel by Electric account. Alternatively, you may submit the request through our contact form or by post to the address in section 1.

Step 2 – Tell us what should be deleted

To help us locate your record, please include in your request:

  • your first and last name as registered in the account;
  • the email address and/or phone number registered in the account;
  • whether you want your entire account deleted or only specific categories of data erased;
  • if you registered or signed in using Facebook Login, please state this so that we can also locate the record by your Facebook user ID.

Step 3 – Identity verification

To protect your data against unauthorised deletion, we verify that the request originates from the account holder. Where the request is sent from the email address registered to the account, this normally suffices. If it is sent from another address, we may ask you for additional information reasonably necessary to confirm your identity (Art. 12(6) GDPR).

Step 4 – Acknowledgement

We acknowledge receipt of your request by email within 3 business days.

Step 5 – Deletion

Your account and the associated personal data are deleted from our production systems and from our backups within 30 days of the verified request. In exceptional cases, where the request is particularly complex, this period may be extended by up to two further months; we will inform you of the extension and the reasons for it within the first month.

Step 6 – Written confirmation

Once deletion is complete we send you a written confirmation by email, stating what has been deleted and identifying any data that we are legally required to retain, together with the legal basis and the retention period.

What is deleted

  • your account and profile data: first and last name, email address, phone number, billing address;
  • company/organisation data linked to your personal profile, where applicable;
  • vehicle registration number(s);
  • RFID card records and identifiers associated with your account;
  • charging session history linked to your account;
  • correspondence submitted through our contact and support forms;
  • newsletter subscriptions and marketing consents;
  • geolocation data associated with your account;
  • all data received from Meta through Facebook Login (name, email address and Facebook user ID).

If you signed in with Facebook

If you created your account or signed in using Facebook Login, the only data we receive from Meta is your name, your email address and your app-scoped Facebook user ID. All of it is erased as part of the deletion procedure described above.

You may additionally disconnect the App from your Facebook account at any time: Facebook → Settings & Privacy → Settings → Apps and Websites → Travel by Electric → Remove. Removing the App in Facebook stops any further sharing of data between Meta and Travel by Electric, but it does not by itself erase the data already stored by us. To have that data erased, please send a deletion request as described in Step 1.

Data we may be required to retain

In accordance with Art. 17(3) GDPR, we may not be able to erase certain data where processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims. This concerns in particular:

  • Accounting and tax documents (invoices, payment records) – retained for 10 years from 1 January of the year following the year of issue, as required by Bulgarian accounting and tax legislation;
  • Data necessary for legal claims – retained until the applicable statutory limitation period expires;
  • Records required by other applicable law.

Any such data is restricted from all further use and is kept solely for the legal purpose for which it must be retained.

Please note

  • Deletion is permanent and irreversible. Once your account, documents and records have been deleted, they cannot be recovered.
  • If you have an active subscription, deletion of your account terminates the subscription agreement. Any amounts already due remain payable.
  • Deletion requests are handled free of charge. Where a request is manifestly unfounded, excessive or repetitive, we may charge a reasonable administrative fee or refuse to act on it, as permitted by Art. 12(5) GDPR.

4. Security of your data

We apply appropriate technical and organisational measures to protect personal data, including encryption of data in transit and at rest. All personal data is stored on servers located within the European Union, with the limited exceptions described in our Privacy Policy, where transfers take place under Standard Contractual Clauses adopted by the European Commission.

5. Contact

For any question relating to the processing of your personal data, or to exercise any of the rights described above:
Email: legal@travelbyelectric.com
Post: Travel by Electric Hub Ltd., 84 Kumata Str., Vitosha District, Sofia 1618, Bulgaria

6. Complaints

If you consider that we process your personal data unlawfully, please contact us first at legal@travelbyelectric.com. You also have the right to lodge a complaint with your local supervisory authority. In Bulgaria this is:

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Phone: +359 2 915 35 18
Email: kzld@cpdp.bg

7. Related documents

Last updated: 25 July 2026