Last updated: 03/11/2025
This Privacy Policy explains how Megalan Ltd. (“the Company”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use the website mds.bg and the services provided through it.
Megalan Ltd.
UIC: 111548860
Registered office and principal place of business:
4 Yordan Yosifov Street,
Studentski Grad, Studentski District,
Sofia 1700, Bulgaria
Managing Director: Diyan Tundzhev
Contact email: office@mds.bg
Megalan Ltd. is a personal data controller within the meaning of Regulation (EU) 2016/679 (the General Data Protection Regulation – GDPR) and the Bulgarian Personal Data Protection Act.
Depending on how you use our website and services, we may collect and process the following categories of personal data:
– Contact data – your first name, last name, telephone number, email address, and delivery address.
– Order-related data – information about the products or services you purchase, billing details, UIC, and VAT number, where applicable.
– Correspondence data – the content of enquiries, feedback, and any other communications you send to us.
– Job applicant data – education, qualifications, professional experience, and information included in a CV or resumé.
Megalan Ltd. processes your personal data only where necessary and on a lawful basis, including:
– For the performance of a contract or order – to process enquiries, arrange delivery, issue invoices, and provide customer support.
– For compliance with legal obligations – such as accounting and tax requirements.
– On the basis of legitimate interest – to improve our services, maintain website security, and protect our rights and legitimate interests.
– On the basis of consent – when you subscribe to our newsletter or agree to receive marketing communications.
– For recruitment purposes – when you apply for a job with us.
Megalan Ltd. retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal requirements:
– Customer and order data – up to 5 years after the last business communication.
– Accounting data – for 10 years, in accordance with the Accounting Act.
– Marketing data – until consent is withdrawn.
– Job applicant data – for up to 6 months after the completion of the recruitment process, unless consent has been given for a longer retention period.
Megalan Ltd. does not sell, lease, or otherwise disclose your personal data to third parties, except where this is necessary for:
– the performance of a contract or service – for example, courier companies and accounting service providers;
– compliance with legal obligations – such as tax authorities and regulatory bodies;
– the protection of our legitimate interests – for example, in connection with the establishment, exercise, or defence of legal claims.
All third-party service providers who process personal data on our behalf are bound by written agreements and are required to implement appropriate technical and organisational measures to protect such data.
Megalan Ltd. implements appropriate technical and organisational measures to protect your personal data against unauthorised access, misuse, loss, or destruction. These measures include:
– encrypted communication and secure servers;
– access management and controls over data processing;
– regular backups and system monitoring;
– employee training and confidentiality obligations.
You have the following rights in relation to the processing of your personal data:
– Right of access – to obtain confirmation as to whether we process your personal data and information about the data we process and the purposes for which it is processed.
– Right to rectification – to request the correction of inaccurate or incomplete personal data.
– Right to erasure (“right to be forgotten”) – to request the deletion of your personal data in certain circumstances.
– Right to restriction of processing – in the cases provided for by applicable law.
– Right to object – to the processing of your personal data where such processing is based on legitimate interests.
– Right to data portability – to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
– Right to withdraw consent – where processing is based on your consent.
To exercise any of these rights, you may contact us at: office@mds.bg
If you believe that your rights have been violated, you have the right to lodge a complaint with:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
Sofia 1592, Bulgaria
Website: www.cpdp.bg
All texts, images, graphics, logos, documents, and other materials published on the website mds.bg are protected by copyright and are the property of Megalan Ltd., unless expressly stated otherwise.
Users may use the website content solely for personal and non-commercial purposes, provided that such use does not infringe the Copyright and Related Rights Act.
Any other use, reproduction, distribution, or modification of the content without the prior written consent of Megalan Ltd. is prohibited.
Megalan Ltd. makes every reasonable effort to keep the information on the website accurate and up to date, but shall not be held liable for:
– technical errors or omissions;
– interruptions to website access;
– the actions of third parties or the content of external links referenced on the website.
Use of the website is entirely at the user’s own risk.
Megalan Ltd. reserves the right to update this Privacy Policy at any time. Any changes will be published on this page and will take effect from the date of publication.
