Privacy Policy

1. Who we are

This policy explains how the website midtravel.net (the “website”) processes your personal data when you book tickets, order transfers or contact us.

The data is processed by MID-TRAVEL EOOD (Bulgaria, UIC 204969657, 158 Vladislav Varchik St., Varna) and FOP Yakhnis O.M. (Ukraine, 28 Topolyna St., Odesa), each within its own passenger transportation activity.

2. What data we collect

• Contact form: name, phone number, email (optional), subject and text of your message.
• Ticket booking: first and last names of passengers, phone number, email, comment, selected trip and date, boarding and arrival points, number of seats, price and booking status, date and time of the booking.
• Payment: the payment is made on the side of the LiqPay payment service. We do not receive or store your bank card details — only the order number and the payment status.
• Calls and messages: if you call us or write to us via Viber, WhatsApp, social networks or email, we process the information you give us.
• Technical data and analytics: IP address, device and browser type, pages viewed, referral source — collected with Google Analytics and Google Ads (see the cookies section).

3. Purposes and legal grounds

• Concluding and performing the transport contract: making a booking, confirmation, contacting the passenger about the trip, refunds.
• Replying to your requests — our legitimate interest and your request.
• Complying with legal obligations, including accounting and tax requirements.
• Visit statistics and measuring advertising effectiveness — based on your consent (cookies) or our legitimate interest where applicable law allows it.
• Protecting the website against abuse and fraud — our legitimate interest.

4. Cookies, analytics and third-party services

The website uses Google Analytics and Google Ads (Google tags) to count visits and measure advertising campaigns. These services may store cookies in your browser and receive your IP address and information about how you use the website.

Fonts are loaded from Google Fonts servers, so your IP address is transmitted to Google when a page is opened.

You can disable or delete cookies in your browser settings and manage your advertising preferences in your Google account. Disabling cookies does not prevent you from booking tickets.

Links to Facebook, Instagram, YouTube, Viber and WhatsApp lead to third-party services with their own privacy policies — we do not control them.

5. Who we share data with

• Google Cloud — website hosting and the booking database (data centres in Europe); Google Analytics, Google Ads and Google Fonts.
• LiqPay — online payment processing.
• Telegram and an email service — internal notifications to our dispatcher about new requests and bookings, and confirmation emails to customers.
• Public authorities — only where required by law.
• We do not sell your personal data. If data is transferred outside the EU/EEA or Ukraine, we rely on our providers applying the safeguards required by law.

6. How long we keep data

Booking and payment data are kept for as long as necessary to provide the service, handle possible claims and meet accounting and tax requirements. Messages sent via the form are kept for as long as needed to handle them. After that the data is deleted or anonymised.

7. Data security

We apply technical and organisational security measures: the website works over the secure HTTPS protocol, access to booking data is restricted, and payment data is processed by a certified payment service.

8. Your rights

Under Regulation (EU) 2016/679 (GDPR) and, for users from Ukraine, Ukrainian personal data protection law, you may:

• obtain information about the data we process about you and a copy of it;
• request correction of inaccurate data;
• request erasure of your data or restriction of its processing;
• object to processing based on our legitimate interest;
• receive your data in a structured format (portability);
• withdraw your consent at any time — this does not affect the lawfulness of processing before withdrawal;
• lodge a complaint with a supervisory authority: in Bulgaria — the Commission for Personal Data Protection (cpdp.bg), in Ukraine — the Ukrainian Parliament Commissioner for Human Rights.

9. Minors

Tickets for minors are booked by parents or legal guardians, who provide the child’s data and are responsible for doing so. The website is not intended for independent use by children under 16.

10. Changes to this policy

We may update this policy. The current version is always published on this page, and the date of the last update is shown at the top.

11. Contact for data questions

To exercise your rights or ask a question about data processing, write to us: