Privacy policy





Milkana Ltd. is a trade company registered in the Commercial Register at the Registry Agency with UIC 114638423, with headquarters and registered office in Pleven, Zapadna Industrialna Zone, telephone for contact with a data protection official - 064/822505, e-mail This email address is being protected from spambots. You need JavaScript enabled to view it. , company website

Milkana Ltd. is an administrator of personal data within the meaning of the Personal Data Protection Act and Regulation (EC) 2016/679




This policy sets out the procedure for collecting, processing, protecting, storing and destroying information about the personal data of individuals using the services of the organization and visitors to the site

By registering the site and/or using the services of Milkana Ltd., the users give their voluntary, informed and unconditional consent to this Policy and the right of Milkana Ltd. to process and provide the collected information to third party related service providers: commercial banks, leasing companies, insurance, accounting, consulting, courier and other companies.

Upon the user’s disagreement with the terms of this Policy, the use of the site and/or other services of Milkana Ltd. shall immediately cease.




This Confidentiality and Personal Data Protection Policy of Milkana Ltd. is the basis of a system for protecting the personal data of individuals from unauthorized processing. In accordance with the applicable legislation and good practice, the organization shall implement appropriate technical and organizational measures to protect the individuals’ personal data.

The purpose of the Policy is to inform the users of the Milkana Ltd. services and the visitors to the website for the purposes of personal data processing, the recipients or the categories of recipients to whom the data, the obligations or the voluntary nature of the data provision, the right of access and the right to modify the collected data, the time-limits for storage and the right “to be forgotten”.




For the purposes of this Policy:

Personal Data is any information concerning an individual who is identified or can be identified directly or indirectly by one or more specific features;

Personal Data Processing is any action or set of actions that may be performed on personal data by automatic or other means such as collecting, recording, organizing, storing, adapting or modifying, restoring, consulting, using, disclosing by transmission , disseminating, providing, updating or combining, blocking, deleting or destroying;

A Personal Data Register is any structured set of personal data available on certain criteria, centralized, decentralized or distributed on a functional or geographic basis;

A Personal Data Administrator is a natural or legal person, a public body, an agency or other entity which, alone or jointly with others, defines the purposes and means of processing personal data;

Third party means a natural or legal person, a public authority, an agency or any authority other than the data subject, the administrator, the personal data processor and the persons entitled to process the personal data under the direct authority of the administrator or the personal data processor;

Data subject’s consent means any freely expressed, specific, informed and unambiguous indication of the will of the data subject by means of a statement or a clear confirming action expressing the consent the personal data relating thereto to be processed.




The categories of personal data that are collected are:

1.      Physical identity - name, PIN, passport data, address, telephone, e-mail;

2.      Virtual identity - data that is automatically collected during the use of the company’s website through the software used by the individual - IP address, cookie files’ information, user’s browser information, or other programme which provides access to the company’s website, access time, and more.


Groups of persons for whom data is processed:

1.      physical persons visiting the site;

2.      physical persons making inquiries (including by calling), requests, signals, complaints or other correspondence to Milkana Ltd.




As a personal data administrator, Milkana Ltd. processes personal data with automatic or non-automatic means such as collecting, recording, organizing, storing, disclosing by transmitting, providing, updating, deleting and destroying, in accordance with the following principles:

-          Legality;

-          Relevance;

-          Goodwill;

-          Transparency.

Milkana Ltd. processes the personal data independently from the employees of the organization. When Milkana Ltd. is entrusted with the processing of personal data by a third party (couriers, banks, leasing companies or other types of companies), the purposes and scope of the duties assigned by the data controller are governed by a Contract or an Annex to a contract. When Milkana Ltd. assigns the processing of personal data to third-party customers (accounting firms, IT-site maintaining companies, other application software or cloud services’ providers, social networks), the purposes and volume of the obligations are regulated by a Contract or an Annex to a Contract.




The purpose of personal data processing is to identify the individual customers of the organization in order to meet the contractual and legal requirements for the services provided (sale).

The purpose of processing personal data of the registered site visitors is to collect information about marketing activity, to share information about actions, events and advertising.

Purpose of personal data processing of registered and unregistered users of the site is also research and analysis of these data, improvement of services, development of new services and sections of the site, conducting of statistical and other research on the basis of data that has been erased.

Milkana Ltd. does not process personal data for purposes other than the above.

The terms for storing personal data are in accordance with the legal requirements and the warranty conditions of the goods purchased and the services provided. The deadline for storing e-mail addresses for distribution of newsletters, other promotional materials, promotions information and games is 2 years, after which a new request for consent to obtain such information shall be made.




Information about personal data on distance selling and servicing is necessary for the execution of the services and is mandatory. In the event of a waiver of voluntary disclosure of the requested personal data, Milkana Ltd. will not be able to provide these services.

Information about site visitors’ personal data collected for marketing and advertising purposes is not required to provide and the site has the opportunity to refuse the provision of such information.




As a personal data administrator Milkana Ltd. is entitled to disclose the processed personal data only to the following listed categories of persons:

1.      Natural persons to whom the data relates;

2.      Persons for whom the right of access is provided in an enactment or judgment;

3.      Persons for whom the right arises under a contract and for the purpose of performing the services.




Physical persons who provide personal data for processing have the following rights:

1.      The right to be informed of the data identifying the personal data administrator and his representative, the purposes of the personal data processing, the recipients or the categories of recipients to which the data may be disclosed, the mandatory or voluntary nature of the data being provided and the consequences of refusal for their provision;

2.      The right of access to data relating to them. In cases where personal data may also be disclosed to third parties in the granting of access to the individual, the administrator is required to grant partial access to them without disclosing data about the third party;

3.      The right to delete, correct or block personal data, processing of which does not meet the requirements of the Personal Data Protection Act as well as the right to request to inform the third parties to whom the person’s personal data have been disclosed; to be informed of any deletion, correction or blocking that has been done, except where this is impossible or involves excessive effort;

4.      The right to be informed about the term of personal data storing and the right to "be forgotten".

5.      The right of objection to the data administrator against the processing of the individual’s personal data provided there is a legitimate reason for doing so and against the processing and disclosure of third parties of personal data for the purposes of direct marketing. Right to be informed before his or her personal data is disclosed to third parties for the first time or used on their behalf for the purposes of direct marketing;

6.      Right of defense before the Commission for the Protection of Personal Data and by the Court.




The physical person exercises his/her right by submitting a written application in paper or electronic form to the attention of the Personal Data Protection Officer.

The term for consideration and action by Milkana Ltd. is 14 days from the date of receipt. The Personal Data Protection Officer shall inform in writing at a correspondence address specified by the physical person about the actions taken by Milkana Ltd.

When the data is not available to Milkana Ltd. or its provision is prohibited by law, the applicant is denied access to them.

In case Milkana Ltd. does not respond to the individual’s request regarding his/her personal data within the specified timeframe or the person is not satisfied with the response received and/or considers that his/her personal data protection rights are violated, he/she may exercise their right to protection.

The physical person may file a complaint with a supervisory authority if he/she considers that the personal data processing relating to him/her violates the applicable data protection legislation. The supervisory authority in Republic of Bulgaria is the Commission for Personal Data Protection, with address: Sofia 1592, bul. “Prof. Tsvetan Lazarov” 2.




The individual may at any time change (update, add) the personal data he/she has provided. They may also delete the personal data provided when registering on the company’s website. In this case, Milkana Ltd. ceases to provide the Distance Sale service.




This Policy was approved by Order of the Manager of Milkana Ltd. on 28.05.2018. Milkana Ltd. has the right to make amendments to this Confidentiality and Personal Data Protection Policy. In case of amendments, the actuality shall be verified with a date of approval by the Manager. The Policy’s new version will enter into force as of the publication of the Company’s website, unless otherwise provided in the new version.



For contacts:

Milkana Ltd

Tel.: 064 / 822 505

e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.



instagram skype gplus

Regular member of Bulgarian Doors and Windows Association

Сдружение български врати, прозорци и фасади

This website uses cookies.