Who processes your data
The controller of the personal data is МГ Перфект Консулт ЕООД, company number (UIC) 203812496, address гр. Девин, ул. Освобождение 19, ет. 3, офис 3, operating as “Офис Девин” (the “Company”). For questions and requests: mg_milena@abv.bg, 0885922721. Data Protection Officer: none has been appointed.
What this page is about
Here we explain what personal data we process when you browse the site, send an enquiry or request the deletion of data, why, on what legal basis, for how long, and what your rights are. The site collects enquiries: it does not conclude contracts and does not accept payments. Data that you provide when concluding and performing a contract with the Company is governed separately and is not covered by this page.
Enquiries from the site
When you send an enquiry through the site, the data you enter in the form is recorded and sent to the Company by e-mail so that it can reply to you. This is the data you have chosen to share — usually your name, telephone, e-mail, the service selected and a message. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) of Regulation (EU) 2016/679, the “GDPR”). An enquiry is not a contract and does not create one.
Data deletion requests
When you request the deletion of data, we process your request in order to carry it out and to be able to prove that we have done so. Legal basis: a legal obligation (Article 6(1)(c) of the GDPR).
How long we keep the data
We keep enquiries from the site and deletion requests until the Company deletes them or until you ask for them to be deleted — through the “Data Deletion” page or through the contact details at the top of this page. We do not delete them automatically after a set period.
The site and cookies
The site uses only necessary cookies; they are described on the “Cookie Policy” page.
Marketing
We do not use your data for advertising or newsletters unless you have given separate, express consent. Consent can be withdrawn at any time, without affecting the lawfulness of the processing carried out before the withdrawal.
Who we share data with
Your data is received only by those who need it:
- the provider of the ISKA platform (Irodopi EOOD), through which the site is maintained — as a processor acting on behalf of the Company;
- the hosting provider — OVH, in Poland (in the EU), where the site runs;
- the platform's outgoing mail, through which the enquiry reaches the Company — the platform's own infrastructure;
- competent authorities (court, prosecutor's office, Ministry of the Interior, tax authorities) where the law requires it.
The site does not use advertising networks or analytics providers.
Transfers outside the EU
The site is hosted in Poland, in the EU, and the main hosting is not a transfer outside the EU.
Automated decisions
We do not take decisions that affect you solely on the basis of automated processing.
Your rights
You have the right to:
- request access to your data and a copy of it;
- correct it;
- request deletion;
- request restriction of processing;
- data portability;
- object to processing based on a legitimate interest;
- withdraw your consent where the processing is based on it.
Not all rights apply in every case — for example, data that we are required by law to keep cannot be deleted before the statutory periods expire.
How to exercise your rights
Write to us at mg_milena@abv.bg or at the address гр. Девин, ул. Освобождение 19, ет. 3, офис 3, or call us on 0885922721. We may ask you to confirm your identity. We reply within one month of receiving the request; for complex or numerous requests the period may be extended, in which case we will notify you. The request is free of charge unless it is manifestly unfounded or excessive. For deletion, see also the “Data Deletion” page.
Complaint
If you believe your rights have been infringed, you can lodge a complaint with the Commission for Personal Data Protection (https://www.cpdp.bg) or with the competent court.
Children
We do not knowingly collect data from children through the site. If a parent believes that a child has sent data, they can request its deletion.
Security
The connection to the site is encrypted. The session cookie is sent only over a secure connection. Access to the data in the ISKA platform is through named users with permissions.
Changes
We may update this page. Last revised: 2026.