Last updated: August 10, 2026.
This policy explains how MG Global Ltd. processes personal data when using mgglobal.eu, when sending an inquiry or request for a quote and when contacting us by email or phone. It does not constitute consent to use of the site and does not replace special notices that may be provided in contractual, certification, audit or training relationships.
1. Personal data administrator
„MG Global Ltd.
Address: 1700 Sofia, 9 Simeonovsko Shose Blvd., entrance B, floor 2
Email for questions and exercising rights: info@nqa.bg
Phone: +359 884 51 70 90
2. What data do we process?
The site does not require registration from ordinary visitors. Personal data is processed when you decide to contact us or request a quote.
- Contact details: name, surname, work or personal email and phone number.
- Organization and inquiry details: organization, activity, site address, number of employees and shifts, selected standards, desired service and other information you voluntarily provide.
- Correspondence: message content and subsequent communication.
- Technical data: IP address, date and time, referring address, browser/device, and diagnostic logs, to the extent they are created by the web server and security systems.
We do not request special categories of personal data under Art. 9 GDPR through the site. Please do not send health data, data about political, religious or trade union beliefs, biometric data or other sensitive information unless this is explicitly necessary and agreed in advance.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Reviewing an inquiry, preparing a quote and taking pre-contract action | Art. 6, par. 1, b. (b) GDPR |
| Communication with customer and partner representatives, relationship management and protection of legal interests | Art. 6, par. 1, b. "f" GDPR — legitimate interest for the normal performance and protection of the activity |
| Fulfillment of legal, accounting, tax, accreditation or regulatory obligations | Art. 6, par. 1, b. "c" GDPR |
| Site security, abuse prevention and technical diagnostics | Art. 6, par. 1, b. "f" GDPR — legitimate interest in protecting systems and services |
We do not use consent as a basis for processing necessary to respond to an inquiry or prepare an offer. If we offer an optional newsletter, marketing communication or non-essential cookies in the future, we will ask for separate and freely given consent where required by law.
4. Mandatory and optional data
Fields marked as required are required for us to assess your request and prepare an adequate response or quote. Failure to provide them may result in our inability to process your request. The remaining fields are optional.
5. Recipients and processors of personal data
Access is granted only to persons for whom the information is necessary in connection with the inquiry or service. Data may be processed by:
- authorized employees and experts of MG Global;
- an accounting service provider acting as a processor, to the extent that it processes personal data on behalf of MG Global and on our instructions;
- the hosting, email, technical support and information security provider acting as processors on our instructions;
- professional consultants, auditors or subcontractors, where necessary and appropriate confidentiality is ensured;
- competent government, judicial, accreditation or regulatory authorities, when provision is mandatory or necessary to protect legal rights.
We do not sell personal data or provide it to advertising platforms.
6. International transfers
We do not send form data to advertising or analytics platforms. If a specific technical provider processes data outside the European Economic Area, the transfer will only take place under an applicable mechanism under Chapter V of the GDPR - an adequacy decision, standard contractual clauses or another valid basis.
7. Storage periods
- Inquiries that do not lead to a contract: up to 24 months after the last meaningful communication, unless earlier deletion is appropriate or the data is necessary for the defense of a legal dispute.
- Contractual and customer relations: for the duration of the relationship and thereafter in accordance with applicable statute of limitations, accreditation and sector requirements.
- Accounting, tax and related contractual documents: for the applicable statutory period, increased by one year according to MG Global's internal policy, except where longer storage is necessary for the establishment, exercise or defense of legal claims.
- Technical records: for the minimum period necessary for security, diagnostics and incident investigation, as defined in the hosting and security systems configuration.
After the applicable period has expired, the data is deleted, anonymized or access to it is restricted, unless law requires longer storage.
8. Cookies and similar technologies
As of the date of the last check, the site does not use Google Analytics, Meta Pixel, advertising cookies or profiling. The public homepage does not set a cookie via the initial server response.
Depending on the function used, only technical or functional cookies may be created:
- to select and save a language;
- for secure session and login of authorized administrators;
- for cart and user session if WooCommerce store features are used in the future.
WooCommerce Order Attribution is disabled and the site does not use cookies for advertising attribution of orders. Since no non-essential analytics or advertising cookies are currently enabled, no consent banner is displayed. If such technology is added, it will be blocked until valid consent is received and this policy will be updated.
You can delete or block cookies through your browser settings. Blocking strictly necessary functionality may limit the operation of the relevant service.
9. Automated solutions
We do not carry out automated decision-making or profiling that produces legal effects or affects you in a similar significant way.
10. Your rights
Under the terms of the GDPR, you have the right to:
- information and access to your data;
- to correct inaccurate or incomplete data;
- to deletion when there is no reason for further storage;
- to restrict processing;
- of portability, when the legal conditions are met;
- to object to processing based on legitimate interest;
- to withdraw consent at any time where processing is based on consent, without affecting the previous lawfulness;
- to file a complaint with Personal Data Protection Commission, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
To exercise your right, write to info@nqa.bg. We will respond without undue delay and as a rule within one month. We may request additional information solely for the purpose of identity verification and data protection.
11. Security
We implement appropriate technical and organizational measures commensurate with the risk, including access control, secure communication, archiving and vulnerability management. No Internet system can guarantee absolute security, but if an incident is identified, we act in accordance with applicable assessment, containment and notification requirements.
12. External links
The site may contain links to other organizations and official sources. Their own privacy policies apply after you leave mgglobal.eu.
13. Policy changes
We update this policy as our services, technology, or legal requirements change. The date of the last update is indicated at the top of the page. In the event of a material change, we will provide appropriate notice.
English 
Български