Privacy Policy (GDPR)
Privacy Policy & Personal Data Protection
Effective Date: September 2026
DIGITAL GLOBAL TECHNOLOGIES LTD, UIC: 204471845, address: Lyuben Karavelov str. 2, 3 floor, office 5, Plovdiv, 4000, Plovdiv, Bulgaria, represented by Founder MMAIS: Julia Goncharova (hello@mmais.biz) (hereinafter "we", "us", "our", or "Company"), acts as the Data Controller under Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR).
1. Data We Collect
We collect and process the following categories of personal data:
Identity & Contact Data: Full name, company name, corporate email address, telephone number, business postal address, country of tax residency, and VAT registration number.
Transaction & Financial Data: Payment transaction identifiers, billing history, invoicing records, and order details. (Note: sensitive payment card information is securely collected and tokenized directly by certified PCI-DSS compliant processors such as Stripe, PayPal, or Revolut).
Technical & Usage Data: IP address, browser type and version, language preferences, operating system, pages visited, time stamps, referring URLs, and telemetry collected through aggregated first-party beacons.
Communication Data: Records of communications sent through our contact forms, audit request forms, and customer support channels.
2. Legal Bases for Processing (Art. 6 GDPR)
Contract Performance (Art. 6(1)(b)): To execute services, deliver digital software, process payments, and manage client subscriptions.
Legal Obligation (Art. 6(1)(c)): To maintain corporate, accounting, and tax records under Bulgarian and EU laws.
Legitimate Interests (Art. 6(1)(f)): To safeguard infrastructure, prevent fraud, improve platform performance, and ensure system reliability.
Consent (Art. 6(1)(a)): For non-essential cookies and marketing communications, which can be withdrawn at any time.
3. Data Sharing & Third-Party Processors
We do not sell, rent, or trade your personal data. We only share data with trusted data processors acting under binding data processing agreements (DPAs):
Payment processors: Stripe Inc., PayPal (Europe) S.a.r.l., Revolut Ltd.
Hosting and cloud infrastructure providers located within the European Economic Area (EEA).
Transactional email and communications infrastructure providers.
Bulgarian statutory authorities (National Revenue Agency - NRA, judicial bodies) when required by mandatory law.
4. Data Retention Period
We retain transaction and billing records for ten (10) years in accordance with Bulgarian accounting and tax statutes. Account data and communication records are retained for the duration of the active contractual relationship plus five (5) years for the protection of legal claims.
5. Your Rights as a Data Subject
Under the GDPR, you have the following enforceable rights:
Right of Access (Art. 15): Obtain confirmation and copy of personal data held about you.
Right to Rectification (Art. 16): Correct inaccurate or incomplete personal records.
Right to Erasure (Art. 17): Request deletion of your data ("Right to be Forgotten") subject to legal retention obligations.
Right to Restrict Processing (Art. 18): Restrict processing under statutory conditions.
Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format.
Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing.
Right to Lodge a Complaint: You have the right to lodge a formal complaint with the supervisory authority: Commission for Personal Data Protection of the Republic of Bulgaria (CPDP / КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, website: www.cpdp.bg.
6. Data Protection Contact
For any inquiries, requests to exercise your rights, or questions regarding personal data handling, contact our Representative (Founder MMAIS): Julia Goncharova at hello@mmais.biz.