Privacy Policy
Last updated: 20 July 2026
Data controller
- Legal entity
- СТО ПЛЮС МЕДИКЪЛ ООД
- Company ID
- 206896866
- VAT ID
- BG206896866
- Address
- ул. Генерал Столетов 82, ет. 1, 9000 Варна, България
- Phone
- +359882954090
1. Scope and data
This policy applies to visit.masterplusglobal.com/varna. For a callback request, we process name, phone number, selected language, consent records and the advertising source of the request. When you continue to Viber or Telegram, we create a short-lived opaque referral token fixed to Varna 1. The landing page does not collect symptoms, complaints or measurement results.
2. Purposes and lawful bases
We use the data to respond to your request, organise booking and attendance and prevent abuse. The lawful bases are taking steps at your request before providing the service and our legitimate interest in protecting the system. Meta Pixel and Conversions API are activated only after separate marketing consent, which you may withdraw at any time.
3. Recipients
Data may be processed by hosting and CRM providers and by Viber or Telegram when you choose that channel. The embedded map is provided by the OpenStreetMap Foundation; when it loads, the provider receives technical connection data including the IP address and browser information. After marketing consent, Meta receives only standard PageView, Contact and Lead events, technical fbc/fbp identifiers, user agent and a URL without parameters. Name, phone, age, gender, booking, attendance and wellness data are not sent to Meta.
4. Retention
The referral token is kept for up to 30 days. Technical callback and advertising-event idempotency records are kept for up to 24 hours. Contact and booking data are retained in the CRM for up to 24 months after the last interaction unless a legal obligation, dispute or your deletion request requires a different period.
5. Your rights
You may request access, correction, deletion, restriction, portability and objection, and withdraw consent without affecting earlier lawful processing. You may lodge a complaint with the Bulgarian Commission for Personal Data Protection. Use the listed email address to exercise your rights.
6. Automated decisions and security
We do not make automated decisions with legal or similarly significant effects. We use signed referral tokens, rate limits, honeypot protection, idempotency and data minimisation.