Privacy Policy

This Privacy Policy (“Policy”) describes how Mellon Bulgaria (“Mellon”, “we”, “our”, “us”), with registered address in 100 “Knyaginya Maria Luiza” Blvd., 3rd floor, Sofia, Bulgariauses your personal data collected via its website (“Website”). Please read this Policy carefully. Mellon is the data controller of your personal data.

1. Use of Your Personal Data

a. When you use our Contact Form

The Contact Form is used to contact us, in order for us to address any queries/concerns you may have. The mandatory fields are the name, the email and the type of need or question you may have. In this case, processing is based on your prior consent or on our legitimate interests which are not overridden by your interests, fundamental rights or freedoms. We may also email after your enquiry in order to follow up on your interest and ensure that we have answered it to your satisfaction.

b. Informative Form

Upon request, we may send you informative forms related to our products and services to your email account. In this case, processing is based on your prior consent. The mandatory fields are the name, the email and any data included in your request.

c. Newsletter

In case you subscribe to our newsletter, we will use your email address to update you, through our newsletter, about our products and services. In this case, processing is based on your prior consent.  The mandatory fields are your email, the name and your country of residence.

d. CV Submission

You may upload your CV for any job position we have on offer on our site; your CV is sent to our HR department where they will contact you about your interest. The mandatory fields are your name and your contact details (email and telephone number) but we may process any data that you include in your CV in order to be able to better understand the profile and the experience of a candidate. In this case, processing is based on your prior consent.

Refusal to provide us with any personal data necessary for performing the above purposes may consequently prevent us from processing your request.

If you transmit personal data about third parties, you are responsible for complying with the applicable data protection legislation/regulations. This may require obtaining the consent of these persons for the transmission of this data.

As a rule, we do not use your data for fully-automated decision-making or profiling. If such processes are used in isolated cases, you will be informed separately.

Your data will be processed within the European Union.

2. Disclosure of Your Personal Data

Your personal data will be accessible by authorized personnel of Mellon, and service providers (e.g. IT, telecommunications, marketing, advertising service providers, courier/dispatch companies) acting on our behalf, on a need-to-know basis. We will also respond to requests for personal data where required by to do so by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on us.

3. Retention of Your Personal Data

Our general approach is to retain your personal data only for as long as required to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

4. Your Rights

You have the following rights with respect to your personal data:

a. Right to withdraw consent – where applicable, you have the right to withdraw your consent at any time. For example, if you wish to opt-out of receiving our newsletter, you can use the “unsubscribe” link provided in our newsletter.

b. Right of access, rectification and erasure – you have the right to request access to and obtain a copy of any of your personal data that we may hold, to request correction of any inaccurate data relating to you and to request the deletion of your personal data under certain circumstances.

c. Right of data portability – Under certain conditions, you have the right to receive all such personal data which you have provided to us in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.

d. Right to restriction of processing – you have the right to restrict our processing of your personal data where:

  • you contest the accuracy of the personal data until we have taken sufficient steps to correct or verify its accuracy;
  • the processing is unlawful but you do not want us to erase the data;
  • we no longer need your personal data for the purposes of the processing, but you require such data for the establishment, exercise or defence of legal claims; or
  • you have objected to processing justified on legitimate interest grounds (see below) pending verification as to whether we have overriding compelling legitimate grounds to continue processing.
  • Where personal data is subject to restriction in this way, we will only process it with your consent or for the establishment, exercise or defence of legal claims.

e. Right to object to processing justified on legitimate interest grounds – where we are relying upon legitimate interest to process personal data, then you have the right to object to that processing. If you object, we must stop that processing unless we can either demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or where we need to process the data for the establishment, exercise or defence of legal claims. Where we rely upon legitimate interest as a justification for processing we believe that we can demonstrate such compelling legitimate grounds, but we will consider each case on an individual basis.

f. You also have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes applicable law; in Bulgaria, this is the Commission for Personal Data Protection, at:

For further information regarding your rights, to exercise any of your rights, or if you have any questions regarding the processing of your personal data please contact our Group Data Protection Officer via email at

Please note that we may request proof of identity, and we reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. We will endeavour to respond to your request within all applicable timeframes.

5. Changes to this Policy

We may occasionally change this Policy, for example, to comply with new requirements imposed by the applicable laws or technical requirements. We will post the updated Policy on the Website. We may also notify you in case of material changes and seek your consent to those changes, where required by applicable law. You are thus encouraged to periodically review this page for any changes.

These Terms have been conducted in English and have subsequently been translated into Bulgarian. In case of discrepancy, the English text prevails.