Privacy and Cookie Policy
This policy explains how ET “MILCHOVA – HRISTINA MILCHOVA” (“we”, “the Controller”) processes personal data via mladostsimitli.com (orders, reservations, contact forms, accounts and cookies) under Regulation (EU) 2016/679 (GDPR) and Bulgarian data protection law.
1. Controller
| Name | ET “MILCHOVA – HRISTINA MILCHOVA” |
|---|---|
| UIC (EIK) | 101653375 |
| Venue | Bar&Dinner Mladost |
| Address | 33 Hristo Botev St, 2730 Simitli, Bulgaria |
| Email (incl. GDPR) | restorant@mladostsimitli.com |
| Phone | +359 74 871 744 |
No Data Protection Officer is appointed. Contact us at the email above.
2. Data we process
Contact form
Name, email, phone (optional), message and related technical data on submission.
Reservation
Full name, phone, email (optional), number of guests, seating preference, date, time, notes.
Online store (WooCommerce)
Food and non-alcoholic drinks. We process: name, email, phone, delivery/billing address, order details, payment method and status (we do not store full card numbers), company invoice details when needed, account data if you register, order history and wishlist.
Guest checkout is available.
Allergens
See our allergen information. If you voluntarily share allergies or dietary restrictions, that special-category data (Art. 9 GDPR) is processed only to fulfil your request, based on explicit consent and/or vital interests.
Automatic data
IP address, browser, device, pages viewed; Google Analytics 4 – only after consent to analytics cookies.
We do not process data for: newsletters, SMS/email ads, Google Ads or Facebook Pixel. “Warehouse” and “Staff training” pages are admin-only.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Order, delivery, payment, reservation, invoice | Art. 6(1)(b) GDPR (contract) |
| Responding to enquiries | Art. 6(1)(b) / (f) |
| Accounting and tax records | Art. 6(1)(c) (legal obligation) |
| User account | Art. 6(1)(b) |
| Security and spam prevention | Art. 6(1)(f) |
| Google Analytics 4 | Art. 6(1)(a) (consent) |
| Allergy data (if provided) | Art. 9(2)(a) / (c) |
4. Payment and delivery
- cash on delivery;
- card online;
- bank transfer.
5. Who we share data with
- SuperHosting.BG – hosting;
- SMTP / host email – system and order messages;
- payment provider and courier – once selected;
- Google – Analytics 4 (with consent only);
- public authorities – where required by law;
- accountant – if an external service is used.
We do not sell personal data.
6. Transfers outside the EEA
Google Analytics may process data outside the EEA under GDPR safeguards and your analytics consent. Hosting is in the EEA/Bulgaria.
7. Retention
| Data | Period |
|---|---|
| Orders and invoices | per Accountancy Act / tax law (typically 5–10 years) |
| Reservations and contact messages | until closed + up to 12 months |
| Account | while active; then legal order retention |
| Allergy notes | only as needed for that order/reservation |
| GA4 / cookies | per settings and your consent |
8. Cookies
Cookies are small files stored on your device.
Categories
- Necessary – session, cart, login, security, language, cookie choice. No consent required.
- Analytics – Google Analytics 4. Only after consent.
- Marketing – not used.
Managing consent
A banner appears on visit. You may accept, refuse non-essential cookies, or change your choice later (banner / browser settings).
Main cookies
| Cookie | Purpose | Type |
|---|---|---|
| woocommerce_*, wp_woocommerce_session_* | cart and checkout | necessary |
| wordpress_logged_in_*, wordpress_sec_* | login | necessary |
| cookie_notice_accepted (or equivalent) | store preference | necessary |
| _ga, _ga_* | statistics (GA4) | analytics |
9. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and to lodge a complaint with the CPDP (cpdp.bg), 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia.
Requests: restorant@mladostsimitli.com.
10. Security
We use HTTPS, limited admin access, updates and need-to-know access to data.
11. Children
Services are not directed at persons under 14. If a child has provided data, contact us for deletion.
12. Third-party links
Links to Facebook, Instagram, Google Maps etc. have their own policies; we do not control their processing.
13. Changes
Updates are published on this page with a new date (e.g. when a payment provider or courier is chosen).
14. Contact
ET “MILCHOVA – HRISTINA MILCHOVA”
UIC 101653375
33 Hristo Botev St, 2730 Simitli, Bulgaria
restorant@mladostsimitli.com · +359 74 871 744