Privacy policy
Last updated: 19 October 2026
Who processes your data
The data controller is Meditsinski Tsentar Levitas EOOD (Levitas Medical Center), UIC 203357340, registered office: 138 Vasil Levski Blvd, 1504 Sofia, Bulgaria. The medical center is at 94A Cherni Vrah Blvd, floors 1-5, Sofia. Contact: info@levitas.bg, +359 884 74 74 44.
What we collect
- When you book: your name, phone, email, the chosen service, doctor, date and time, payment method and any notes you write.
- When you order a voucher: your name, phone, email, the recipient’s name, the message on the voucher, the type of voucher and the payment method.
- When you ask us to call you: your name, phone, topic and message.
- When you pay by card: your card details are entered only on BORICA’s secure payment page. We never see or store them. We only receive the result of the payment: whether it succeeded, the amount and the order number.
- Technical data and cookies, as described in the Cookie policy.
Why we use it and on what basis
- To book and confirm your visit, contact you about it and prepare for it (entering into and performing a contract, Article 6(1)(b) of the General Data Protection Regulation). Where the chosen service says something about your health, we process this for the purposes of medical care (Article 9(2)(h)).
- To process, take payment for and issue vouchers (contract), and for our accounting and tax obligations (legal obligation, Article 6(1)(c)).
- For analytics and marketing cookies, only with your consent (Article 6(1)(a)), which you can withdraw at any time.
Who receives it
Your data is handled by our staff and by providers acting on our instructions: the Fitsys appointment system, the website’s hosting provider, the email provider, BORICA AD and Municipal Bank AD for card payments, and Google (Tag Manager and Analytics) only if you accepted those cookies. We do not sell personal data.
How long we keep it
We keep your data while it is needed for the service and for the periods the law requires, for example for medical and accounting records. After that we delete it.
Your rights
You can ask to see your data, correct it, have it deleted or its processing restricted, object to the processing, receive your data in a portable format and withdraw your consent. Write to info@levitas.bg. If you think your rights have been breached, you can complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).
Security
The website only works over a secure connection (HTTPS). Only authorised staff and the providers listed above can access your data.