Privacy Policy

Last updated: July 2026

This policy explains how MiEli EOOD processes your personal data when you contact us or use this website, and what rights you have in relation to that processing. We apply Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and the Bulgarian Personal Data Protection Act.

The data controller is MiEli EOOD, UIC 205876421, with registered office at: Sofia 1797, Mladost district, Mladost 1, bl. 96A, entr. B, fl. 3, apt. 81, Bulgaria. Represented by: Elena Valerieva Ivanova.

For questions about your personal data and to exercise your rights, you can reach us at +359 897 330130 or via the contact details listed on this website.

We only collect the data you provide to us yourself in order to book an appointment or get in touch: your name, phone number and email address.

We do not collect or process health information or any other special categories of personal data through this website. Please do not send us such data via the site's forms or messages.

When you visit the site and give your consent, we also collect aggregated technical information via analytics cookies (see the Cookie Policy).

Booking an appointment and communicating with you — we process your name, phone and email to arrange and confirm your reservation and to answer your enquiries. Legal basis: steps taken at your request prior to entering into a contract, and performance of the contract (Art. 6(1)(b) GDPR).

Accounting and tax obligations — where applicable, we process data to issue and store accounting documents. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

Website usage statistics via analytics cookies — only with your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time.

We do not sell your personal data. We may share it only with providers that help us operate — for example the online booking system provider, hosting/website infrastructure and our accountant. They process data on our instructions and under confidentiality obligations (data processors).

Some of these providers (e.g. web infrastructure and analytics) may process data outside the EU/EEA. In such cases appropriate safeguards under the GDPR apply, such as standard contractual clauses.

We may also disclose data to competent public authorities where required by law.

Booking and correspondence data is kept for as long as needed to serve you, and for up to 5 years after our last contact, unless the law requires otherwise.

Accounting and tax documents are kept for the statutory periods (as a rule up to 10–11 years for accounting records).

Data processed on the basis of consent is deleted when you withdraw consent or when the purpose no longer applies.

You have the right to: access your personal data; rectify inaccurate data; erasure (the “right to be forgotten”); restriction of processing; data portability; objection to processing; and the right to withdraw any consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, contact us using the details above. We will respond within one month.

If you believe your rights have been violated, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria; phone +359 2 915 3518; email kzld@cpdp.bg; website www.cpdp.bg.

We may update this policy if our activities or the legislation change. The current version is always available on this website with the date of the last update indicated.