PRIVACY POLICY
Last updated: 21 September 2026
1. General provisions
This Privacy Policy explains how Madison Bulgaria Ltd. collects, uses, stores and protects personal data in connection with the website hrmadison.com.
This Privacy Policy applies when using the website, contact forms, the recruitment cost calculator, and when submitting enquiries or documents electronically.
Personal data is processed in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian legislation.
2. Data Controller
The data controller responsible for personal data processed in connection with this website and the services provided through it is:
Madison Bulgaria Ltd.
UIC: 200251314
Address: “Stariya Vazal” Complex, Block 2, Entrance G, 8240 Nessebar, Bulgaria
Represented by: Alexander Nikolov
Email: office@hrmadison.com
For questions regarding the processing of personal data, you may contact us at the email address above.
3. Personal data we may process
Depending on how you use our website and services, we may process different categories of personal data.
3.1. Data of employers’ representatives and contact persons
When submitting an enquiry or using the recruitment cost calculator, we may process:
first and last name;
business email address;
telephone number, when provided;
company name;
information regarding a vacant position;
information regarding candidate requirements;
required professional experience;
other information voluntarily provided in connection with the enquiry.
3.2. Candidate data
When applying for a position or providing candidate documents, we may process:
first and last name;
telephone number;
email address;
professional experience;
education and qualifications;
information contained in a CV;
date of birth, where required for a specific procedure;
photograph, when provided as part of an application;
information contained in an identity document or passport, where required for a specific procedure;
other documents and information provided by the candidate in connection with a specific employment opportunity.
Identity documents and passports are not required to be uploaded through the recruitment cost calculator. Where such documents are necessary for a specific recruitment, employment or administrative procedure, they may be provided through an appropriate secure channel, including email where necessary.
4. Purposes of processing
Personal data may be processed for the following purposes:
processing enquiries from employers and candidates;
providing information about HR Madison services;
recruitment and employment intermediation;
communicating with employers and candidates;
processing vacant positions;
presenting suitable candidates to employers;
preparing and administering documents related to recruitment and employment procedures;
providing indicative price information through the recruitment cost calculator;
sending the calculated indicative price to the email address provided;
complying with legal and administrative obligations;
protecting the rights and legitimate interests of the company;
sending marketing communications where the required consent has been provided;
maintaining and improving the functionality and security of the website.
5. Legal bases for processing
Depending on the particular circumstances, the processing of personal data may be based on one or more of the following legal grounds:
5.1. Performance of a contract or steps prior to entering into a contract
Where processing is necessary to provide a requested service, prepare a contractual relationship with a client, or perform contractual obligations.
5.2. Compliance with a legal obligation
Where processing is necessary to comply with obligations arising from applicable legislation.
5.3. Legitimate interests
Where processing is necessary for the legitimate interests pursued by Madison Bulgaria Ltd. or a third party, provided that such interests are not overridden by the fundamental rights and freedoms of the data subject.
5.4. Consent
Where processing is based on the explicit consent of the data subject, for example for receiving marketing communications.
Where processing is based on consent, the consent may be withdrawn at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6. Recruitment Cost Calculator
When using the recruitment cost calculator, we process the information entered into the form, including:
company name;
email address;
first and last name of the contact person;
vacancy;
required professional experience;
information regarding the consents provided.
This information is necessary to calculate and send the indicative recruitment cost.
Following submission of the form, the data may be received by Madison Bulgaria Ltd. and by technical service providers supporting the operation of the website and the delivery of electronic communications.
The calculated price is indicative and does not by itself constitute the conclusion of a contract.
7. Email communications
For sending communications related to the use of the website and requested services, we use email and technical infrastructure services, including Brevo and WP Mail SMTP.
These services may process the information necessary for the transmission and delivery of electronic communications.
Where the user has separately provided consent to receive marketing communications, their data may also be used to send information about HR Madison services, news and offers.
Marketing consent is voluntary and is not a condition for using the recruitment cost calculator or submitting an enquiry.
8. Website analytics
The website uses Google Analytics, integrated through Google Site Kit, to obtain statistical information about the use of the website.
Google Analytics is used in accordance with the user’s consent choices and the website’s cookie consent management mechanism.
Statistical technologies are not intended to identify individual users beyond what is permitted by the applicable services and settings.
Further information about cookies is provided in the Cookie Policy.
9. Cookies and consent management
The website uses cookies and similar technologies.
We use Complianz to manage cookie consent.
Depending on the type of cookies and the user’s choices, the website may use:
necessary/functional cookies;
statistical cookies;
other categories where applicable.
Statistical and other cookies for which consent is required are activated in accordance with the user’s choices.
Users may change or withdraw their cookie preferences through the available consent management tool.
10. Recipients of personal data
Where necessary, personal data may be disclosed to:
employers, where necessary for employment intermediation;
candidates, where necessary for communication concerning a specific recruitment procedure;
partner agencies and organisations involved in a specific recruitment process;
IT, hosting, email and other technical service providers;
accounting and administrative service providers;
competent public authorities and institutions where required by law;
other data processors where necessary to provide our services.
Personal data is disclosed only to the extent necessary for the relevant purpose.
11. Recruitment of third-country nationals
When providing services related to the employment of third-country nationals, certain personal data and documents may be provided to partner organisations outside the European Union/European Economic Area where this is necessary for a specific procedure.
This may include, where applicable:
identification data;
passport information;
education and qualification documents;
professional documents;
documents required for visa, migration, employment or administrative procedures.
Where international transfers of personal data are necessary, Madison Bulgaria Ltd. takes appropriate measures in accordance with applicable data protection legislation.
12. Service providers
The website and our services may rely on the following categories of service providers:
WordPress – content management system;
SuperHosting – hosting and technical infrastructure;
WPForms – processing of information submitted through website forms;
WP Mail SMTP – technical email delivery;
Brevo – email and marketing communications;
Google Analytics / Google Site Kit – website statistics and analytics;
Complianz – cookie consent management.
Depending on the particular service, the relevant providers may act as data processors or as independent controllers in accordance with their own terms and policies.
13. Data retention periods
Personal data is retained only for as long as necessary for the relevant purpose, unless a longer period is required by law.
As a general principle:
employer enquiries and data submitted through the recruitment cost calculator – up to 3 years;
candidate CVs – up to 6 months, unless another legal basis exists for longer retention;
candidate documents – up to 6 months, unless a longer period is necessary for a specific procedure or required by law;
accounting and other documents for which a statutory retention period applies – for the period required by applicable law.
Where longer retention is necessary due to a legal dispute, statutory obligation or another lawful reason, the data may be retained for the applicable period.
14. Rights of data subjects
Where applicable under the GDPR, data subjects have the right to:
receive information about the processing of their personal data;
obtain access to their personal data;
request correction of inaccurate or incomplete data;
request erasure of their personal data;
request restriction of processing;
object to certain types of processing;
receive their personal data in a structured, commonly used and machine-readable format, where applicable;
withdraw consent where processing is based on consent.
The exercise of a particular right depends on the applicable legal basis and the specific circumstances.
15. How to exercise your rights
To exercise your rights, you may submit a request to:
office@hrmadison.com
The request should contain sufficient information for us to understand its subject and take the necessary action.
Where there is reasonable doubt regarding the identity of the requester, additional information may be requested to verify their identity.
16. Security of personal data
Madison Bulgaria Ltd. takes appropriate technical and organisational measures to protect personal data against:
unauthorised access;
loss;
destruction;
alteration;
unauthorised disclosure;
other unlawful processing.
Access to personal data is limited to persons who need such access to perform their relevant professional or contractual duties.
Despite the measures taken, no system for transmitting or storing information over the Internet can be guaranteed to be completely secure.
17. Children’s personal data
The services provided through the website are not intended for children.
We do not intentionally collect personal data from persons who are below the age at which they can independently provide the relevant consent under applicable law.
If we become aware that we have received personal data relating to a child without an appropriate legal basis, we will take reasonable steps to delete such data.
18. Complaints
If you believe that the processing of your personal data violates applicable data protection legislation, you may first contact us at:
office@hrmadison.com
You also have the right to lodge a complaint with the competent data protection supervisory authority.
In Bulgaria, this is:
Commission for Personal Data Protection (CPDP)
19. Changes to this Privacy Policy
This Privacy Policy may be updated when necessary due to changes in legislation, technologies, services or the way we process personal data.
The current version of this Privacy Policy is published on this page.
Last updated: 21 September 2026