Privacy Policy

Name: MTM College

Website: https://mtmcollege.org

Email: info@mtmcollege.org

MTM College acts as the data controller within the meaning of Article 4(7) GDPR for personal data processed through the Website.

To connect with our data protection representative, please contact us at: gdpr@mtmcollege.org.

Depending on how you interact with the Website, we may collect the following categories of personal data:

• Identity data: full name, date of birth;

• Contact data: email address, telephone number, postal address;

• Educational data: qualifications, grades, application documents;

• Technical data: IP address, browser type, device type, pages visited (via cookies and analytics tools);

• Correspondence data: content of enquiries submitted via contact forms or email.

We do not collect or process special categories of personal data (Article 9 GDPR) without your explicit consent, unless required by law.

• Performance of a contract (Art. 6(1)(b) GDPR): managing the application and enrolment process, providing educational services;

• Legal obligation (Art. 6(1)(c) GDPR): compliance with the Higher Education Act and other applicable legislation;

• Legitimate interests (Art. 6(1)(f) GDPR): ensuring Website security, traffic analysis and service improvement, administration of enquiries;

• Consent (Art. 6(1)(a) GDPR): sending marketing communications, news, and newsletters; use of non-essential cookies.

The Website uses cookies – small text files stored on your device. We use:

• Strictly necessary cookies: required for the Website to function; no consent required;

• Analytical cookies: to measure traffic and user behaviour (e.g. Google Analytics); require your consent;

• Marketing cookies: to display relevant content; require your consent.

On your first visit, a cookie management banner will be displayed allowing you to grant or withhold consent. You may change your preferences at any time through your browser settings.

We may share your personal data with:

• Internal staff of MTM College who require access to perform their duties;

• Data processors – IT service providers, e-learning platforms, accounting and audit firms, acting on our instructions and in compliance with GDPR;

• Public authorities – where required by law (e.g. Ministry of Education and Science, National Revenue Agency, Commission for Personal Data Protection).

We do not sell or provide your personal data to third parties for their own marketing purposes.

Where we use services provided by entities established outside the European Union or European Economic Area, we ensure that any data transfer is subject to appropriate safeguards, including:

• European Commission adequacy decision;

• Standard Contractual Clauses (SCCs);

• Binding Corporate Rules (BCRs).

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Student and applicant data – in accordance with the Higher Education Act;

• Marketing communication data – until consent is withdrawn;

• Technical log data – up to 12 months;

• Correspondence data – up to 3 years from the last contact.

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15) – to request a copy of the personal data we hold about you;

• Right to rectification (Art. 16) – to request correction of inaccurate or incomplete data;

• Right to erasure (Art. 17) – to request deletion of your data where grounds exist;

• Right to restriction (Art. 18) – to request restriction of processing where accuracy or lawfulness is disputed;

• Right to data portability (Art. 20) – to receive your data in a structured, machine-readable format;

• Right to object (Art. 21) – to object to processing based on legitimate interests or for direct marketing;

• Right to withdraw consent – at any time, without affecting the lawfulness of processing prior to withdrawal;

• Right to lodge a complaint with the CPDP – Commission for Personal Data Protection: www.cpdp.bg, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria.

To exercise your rights, please send a written request to: info@mtmcollege.org. We will respond within 30 days.

MTM College implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or disclosure, including SSL/TLS encryption, access controls, and regular security reviews.

MTM College may update this Privacy Policy. For significant changes, we will notify you via a prominent notice on the Website. The date of the last update is indicated at the top of this document.

MTM College – Data Protection

Website: https://mtmcollege.org

Email: info@mtmcollege.org

Supervisory authority: Commission for Personal Data Protection (CPDP) – www.cpdp.bg