Last updated: 14 October 2026
Who we are
This website, veroilenergy.com, is run by Veroil Energy, a Bulgarian company that trades fuel and arranges its transport, runs a tax warehouse and stores fuel for its clients. Veroil Energy is the controller of the personal data described in this policy: we decide why and how it is used.
- Company
- VEROIL ENERGY Ltd (Веройл Енерджи ЕООД)
- Registered address
- 16 Biser St., floor 2, apt. 1, Lozenets, 1421 Sofia, Bulgaria
- UIC (ЕИК)
- 208868520
- VAT number
- BG208868520
- Phone
- +359 888 913 551
- Orders
- orders@
veroilenergy.com - Administration
- administration@
veroilenergy.com
For any question about your personal data, write to us at administration@
In short
- We only process what the website needs to work and what you choose to send us.
- Google Analytics runs only if you click “Accept” in the cookie banner. You can change your choice at any time under , which is also at the bottom of every page.
- The website has no forms, accounts, newsletter or advertising.
- We do not sell personal data or use it for automated decisions about you.
When you visit the website
Each time a page is requested, the servers of our hosting provider automatically record technical data about the request.
- Data
- Your IP address, the date and time, the page requested, the address of the page you came from, and your browser and operating system as your browser reports them.
- Purpose
- To deliver the pages to you, keep the website secure, and find and fix errors.
- Legal basis
- Our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).
- Retention
- These server logs are deleted automatically after 30 days.
Google Analytics, only with your consent
If you click “Accept” in the cookie banner, we use Google Analytics 4 to see how the website is used, for example which pages and language versions are read. If you do not accept, Google Analytics is not loaded at all and no analytics data is sent to Google. The cookies it uses are listed in our Cookie policy.
- Data
- A random identifier stored in the _ga cookies; the pages you view and how you use them (for example scrolling and clicks on links); the date and time; the website you came from; your device type, browser, screen size and language; and your approximate location (country, region or city). Google uses your IP address only to work out that approximate location and does not store it.
- Purpose
- To measure visits and improve the website.
- Legal basis
- Your consent (Article 6(1)(a) GDPR, and Article 4a of the Bulgarian Electronic Commerce Act for the cookies). You can withdraw it at any time under ; this does not affect the processing carried out before you withdrew it.
- Processor
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes the data on our behalf. Google signals and ad personalisation are switched off, so the data is not used to show you ads.
- Retention
- Google deletes user-level and event-level data after 14 months; after that, only aggregated statistics that do not identify you remain. The cookies expire after 13 months unless you delete them or withdraw your consent sooner.
When you call or email us
The website has no contact forms. If you call or email us, we receive what you choose to tell us: usually your name, your company and position, your phone number or email address, and the content of your message, including any attachments.
- Purpose
- To answer your enquiry, prepare an offer and stay in touch about it.
- Legal basis
- If you contact us as an individual about a possible contract, the steps you ask us to take before entering into it (Article 6(1)(b) GDPR). If you write on behalf of a company, our legitimate interest in communicating with our business partners and their staff (Article 6(1)(f) GDPR).
- Retention
- If your enquiry does not lead to business, we delete the correspondence within two years of our last contact. If it does, the next section applies.
If your company becomes our client or supplier
We keep the details of our contact persons at client and supplier companies, and our correspondence with them, for as long as we work together. This is based on our legitimate interest in managing the business relationship (Article 6(1)(f) GDPR) and, where the law requires us to keep or disclose records, on our legal obligations (Article 6(1)(c) GDPR).
When the relationship ends, we keep the data for as long as we may need it to establish or defend legal claims, usually five years (the general limitation period under Bulgarian law). Contracts, invoices and other accounting documents are kept for the periods required by Bulgarian accounting and tax law.
Who receives your data
- Google, which hosts this website on Firebase App Hosting (Google Cloud servers in the Netherlands) and, if you consent, provides Google Analytics. Google acts as our processor.
- Our email hosting provider, which keeps our mailboxes on servers in the EU.
- The company that builds and maintains this website for us, which also manages our Google Analytics property and so can see the analytics data, under our instructions.
- Public authorities, such as tax and customs authorities or courts, when the law requires it.
- Professional advisers, such as accountants or lawyers, where needed and under a duty of confidentiality.
We do not sell your personal data or share it for advertising.
Transfers outside the EU
The website and our email are hosted in the EU. Personal data may leave the European Economic Area only when Google LLC in the United States processes it for Google Analytics (if you consent) or in connection with Google’s hosting services.
These transfers rely on the European Commission’s adequacy decision of 10 July 2023 on the EU–U.S. Data Privacy Framework, under which Google LLC is certified, with the EU Standard Contractual Clauses in Google’s data processing terms as a fallback. You can read about the framework at dataprivacyframework.gov and ask us for a copy of the safeguards at administration@
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data erased, for example when we no longer need it or you withdraw your consent, unless the law requires us to keep it;
- restrict how we use your data, for example while we check whether it is accurate;
- receive the data you gave us on the basis of consent or a contract in a structured, machine-readable format, or have it sent to another company where this is technically possible;
- withdraw your consent to Google Analytics at any time under .
To exercise your rights, email administration@
Google Analytics data is linked only to a random identifier in your browser, not to your name, so we usually cannot find it from your name or email address. Withdrawing consent or deleting your cookies stops any further collection.
Your right to object
Where we process your data on the basis of our legitimate interests (server logs and business correspondence), you have the right to object at any time, on grounds relating to your particular situation. We will then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims.
We do not send marketing emails.
Complaints
If you think we have handled your data unlawfully, you can contact us at administration@
- Bulgaria, where we are established: Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, kzld@cpdp.bg, www.cpdp.bg
- Italy: Garante per la protezione dei dati personali, www.garanteprivacy.it
- Greece: Hellenic Data Protection Authority, www.dpa.gr
Do you have to give us your data?
No law or contract requires you to give us personal data. The technical data from your visit is needed to show you the website. Contacting us is up to you, but without your contact details we cannot reply. Google Analytics is optional, and the website works the same whether you accept or reject it.
Automated decisions
We do not make decisions about you based solely on automated processing, including profiling.
Children
This website is meant for businesses and is not directed at children.
Changes to this policy
We update this policy when the way we handle personal data changes, and change the date at the top of the page. If a change affects what you consented to, we will ask for your consent again.