PRIVACY POLICY
Revised: 5 October 2026.
1. Who is responsible for your information
The controller for megataxi.bg and enquiries to Mega Taxi is МЕГА Р ТАКСИ ООД, a Bulgarian limited liability company, Unified Identification Code 204936454.
- Registered office and address: Kyustendil, 4 Rodopi Street, Bulgaria.
- Contact address: 4 Rodopi Street, Kyustendil 2500, Bulgaria.
- Data protection questions and requests: office@megataxi.bg, +359 88 600 6000.
This policy covers website visits, its forms and subsequent communication. Section 7 discusses the separate online taxi booking system.
2. Information you provide
The contact form contains name, email, telephone, subject and message. The general homepage form also allows details of a planned transfer.
The airport transfer, intercity and “Hotels and addresses” forms include contact details, pickup and destination addresses, date and time, passenger and luggage numbers and an additional message. The airport form also allows a flight number, terminal and travel direction. Fields marked as required are needed to submit that form. You can also contact us by telephone or email.
During subsequent communication, we process the information you provide to clarify an enquiry or agreed journey. Do not send payment codes, card numbers, identity documents or sensitive information when unnecessary. If you provide information about another passenger, limit it to what is needed for organising the journey and inform that person.
3. Why we use information
| Purpose | Legal basis |
|---|---|
| Answering a travel enquiry, preparing an offer and arranging a confirmed service | Steps at your request before a contract and performance of a contract — GDPR Article 6(1)(b) |
| Answering a general question, technical security, preventing misuse and defending claims | Legitimate interests — Article 6(1)(f), taking your rights into account |
| Documents required by an applicable legal obligation | Article 6(1)(c) |
These bases follow Article 6 of Regulation (EU) 2016/679. An enquiry is not treated as consent to advertising messages. Where consent is necessary, it is requested separately for the particular purpose.
4. Receipt, access and storage
Forms send a message to office@megataxi.bg. An enquiry is reviewed so we can reply and discuss the journey; the form does not automatically decide whether a reservation is accepted.
The website uses Contact Form 7. By default, that plugin does not keep a separate register of submitted messages. This does not mean that emails, technical records or backups contain no information. Contact Form 7 documentation.
People handling enquiries and hosting, email and technical support providers have access to the extent necessary for the assigned service. The website and business email office@megataxi.bg are served through SuperHosting.BG. The provider describes its role as a processor for customer information stored through hosting. SuperHosting.BG information.
When organising a confirmed journey, dispatchers and drivers use the route and necessary contact information to provide it. Information may be supplied to competent authorities where there is a legal basis, and to people assisting with establishing or defending legal claims, limited to what is necessary.
5. Website statistics
Independent Analytics keeps statistics in this WordPress website’s database. Reports cover pages visited, referral sources, device/browser characteristics and approximate location. The plugin uses an IP address and browser information to create a hashed identifier; its documentation states that it does not store the original IP address in analytics records, use analytics cookies or send these analytics data to an external analytics server. This describes the plugin, not every service used by the website. Independent Analytics privacy documentation.
The purpose is to understand which pages are useful and improve the website. The basis is the legitimate interest in measuring usage and improving the service, taking your rights and right to object into account. The hashed identifier is not a name or contact detail, but hashing is not presented as a guarantee that no personal information is processed.
The current configuration does not automatically refresh the value used to hash the identifier. This may allow recognition of repeat visits while the browser and IP information remain the same. Automatic deletion of old analytics records is also disabled: records are kept without a defined expiry until manually deleted. The three-month enquiry rule below does not apply to these statistics.
6. Cookies and external content
The bilingual website uses Polylang. To remember the language, it may use the pll_language cookie, containing a language code. The plugin’s standard setting is one year; that setting allows a different duration or disabling the cookie. This is a language-preference cookie; Independent Analytics does not use analytics cookies. Official Polylang documentation.
Reviews from Mega Taxi’s public Google profile are displayed through Trustindex and selected public comments with attribution. Authors, ratings, text and, where available, public profile images and dates are shown. The purpose is to let visitors read opinions about the service; the basis for displaying them is legitimate interests, taking the authors’ rights into account. Contact us about a review displayed on the website.
When external resources load, the browser connects to their provider, which may receive an IP address and other technical information. Links for viewing or writing a review open Google. Trustindex policy and Google policy.
Some interface, icon and calendar scripts and styles load through jsDelivr and cdnjs/Cloudflare. Requests to these external networks provide the technical information needed for delivery, including an IP address. See jsDelivr privacy information and Cloudflare’s policy.
Links to Google Maps, Facebook, YouTube and X open those services, where their own data information also applies. On the homepage and contact page, Google Maps is a link rather than an embedded map; reviews do load external resources, including images from Google.
The website has an active Akismet plugin for spam protection. Its use for a particular Contact Form 7 form depends on enabling the relevant options in that form. Those options are not enabled in the inspected contact and general homepage forms. When a check is enabled, Contact Form 7 sends submitted information and technical request details to Akismet for a spam assessment; a message identified as spam may not be emailed. This is not an automatic decision to accept a journey. Contact Form 7 documentation and Akismet privacy information.
You can delete and limit cookies through your browser. This may affect functions that rely on saved preferences. Browser controls do not replace necessary website choices for technologies requiring consent. EU information about cookies and privacy.
7. Separate online booking system
“Online booking” opens https://online-mega.st-soft.eu/. Information you provide there belongs to a separate booking process rather than Contact Form 7. Check the data information and confirmations provided in that system before sending a booking request.
ST SOFT publishes a separate privacy policy for its taxi applications, expressly listing “MEGA TAXI Kjustendil” and describing telephone and route/location processing for bookings. That information concerns the provider’s applications; it is not presented as a substitute for a notice covering every separate web-system function. For processing relating to a booking handled by МЕГА Р ТАКСИ ООД, contact us at office@megataxi.bg.
8. Retention and processing outside the EEA
Closed enquiries that have not resulted in an agreed journey are manually deleted three calendar months after the last communication. This period applies to the enquiry’s working records and does not mean that all systems are automatically cleared.
Information relating to agreed or completed services is retained for contractual purposes, applicable legal obligations or disputes, for as long as those purposes require. Technical records and backups have a separate lifecycle. Deleting working correspondence does not necessarily remove all archived copies immediately.
Technical records are used for diagnosing and resolving technical problems and protecting against misuse; backups are used for recovery after a failure. Retention depends on the relevant system’s lifecycle, continuing diagnostic/recovery needs and any dispute or legal requirement. Analytics records are kept according to the actual current setting described in section 5. For a specific data request, you can obtain information about the available records and why they need to be retained.
External resource providers may process technical information outside the European Economic Area. Cloudflare states that information is processed in the U.S. and EEA and describes reliance on the EU–U.S. Data Privacy Framework for the relevant transfers to the U.S., and Standard Contractual Clauses in the other circumstances it describes. Trustindex describes adequacy decisions, Standard Contractual Clauses or another permitted mechanism, depending on the transfer. jsDelivr uses an international network and describes possible transfers outside the EEA. This is the providers’ information, not a claim that every website system operates only in the EU. Cloudflare — international transfers, Trustindex — transfers between countries and jsDelivr — privacy.
For information or a copy concerning applicable safeguards for processing for which МЕГА Р ТАКСИ ООД is responsible, email office@megataxi.bg. For details of processing for which an external provider is independently responsible, also use the contacts in its policy.
9. Your rights
Subject to the legal conditions, you can request access, correction, erasure, restriction and portability. You can object to processing based on legitimate interests and withdraw consent. These rights have applicable conditions and exceptions. European Commission explanations.
Send requests to office@megataxi.bg, providing enough information to identify the relevant records without unnecessary documents. Necessary identity verification may be requested where there is reasonable doubt. Replies are generally due within one month, with an extension and notice where the law permits. GDPR Article 12.
You may complain to Bulgaria’s Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592. See the official complaint instructions and current contact details.
10. Updates
This policy is updated when forms, providers or actual processing change. The new version and its date are published on this page.