8 Lege Street, Sofia – map on Google Maps (opens in a new window)

Live music Corporate parties Catering Sushi bar
Facebook (opens in a new window)
Magnito Piano Bar

0888 144 777

Data Protection

Privacy Policy

Here we explain what personal data we collect via Magnito.bg and at the venue, why we collect it, how long we keep it, and what rights you have. We process this data in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act.

1. Who is responsible for your data?

The data controller is:

  • Company: „LEKTOR 21“ Ltd
  • Company Registration Number: 201493911
  • VAT number: BG201493911
  • Registered office and business address: Sofia, „Zapaden Park“ residential estate, No. 10, Entrance B, 7th floor, Flat 52
  • Represented by: Rositsa Tosheva Andreeva
  • Address of the establishment: 8 Lege Street, Sofia
  • Telephone: 0888 144 777
  • Email: info@magnito.bg
  • Website: Magnito.bg

For anything relating to your personal data, please write to info@magnito.bg.

2. What data do we collect and why?

Enquiry form, telephone number and email address

  • Details: name, telephone number, email address and the information you provide (e.g. date, number of guests, occasion).
  • Purpose: to get back to you and prepare a quote for the event.
  • Legal basis: steps taken prior to entering into a contract at your request (Article 6(1)(b) of the GDPR).
  • Validity: up to 12 months from the date of our last letter, unless we enter into a contract.

Submissions via the form are sent by email to info@magnito.bg. The website does not store them in its database.

Table bookings

  • Details: name and telephone number.
  • Aim: to keep the table and get in touch with you if there are any changes.
  • Legal basis: processing your request (Article 6(1)(b) of the GDPR).
  • Retention period: we delete them within 30 days of the booking date.

Quotations, contracts and invoices for events

  • Details: the company’s details and those of the contact person.
  • Objective: to fulfil the contract and issue the documents in accordance with the law.
  • Legal basis: performance of a contract and a legal obligation (Article 6(1)(b) and (c) of the GDPR).
  • Retention period: as required by the Accounting Act and tax legislation, usually up to 10 years.

Technical data when visiting the website

  • Data: IP address, browser and device type, date and time of the visit.
  • Objective: website security and the identification of technical issues.
  • Legal basis: legitimate interest (Article 6(1)(f) of the GDPR).
  • Retention period: for as long as they are required for the security of the website, in accordance with our hosting provider’s rules regarding server logs.

Visitor statistics

  • Data: a random identifier in a cookie, which pages you visit, device and browser type, approximate location (city). Google Analytics 4 does not store your IP address.
  • Aim: to see which pages are being read and to improve the website.
  • Legal basis: your consent as given in the cookie banner (Article 6(1)(a) of the GDPR). You may withdraw your consent at any time.
  • Retention period: cookies are stored for up to 2 years, whilst data in Google Analytics is stored for up to 14 months.

Photos and videos from the evenings and events

  • We sometimes take photos in the hall and post them on the website and on Facebook to give an idea of the atmosphere.
  • Legal basis: legitimate interest (Article 6(1)(f) of the GDPR). For close-up shots in which you are the main subject, we require your consent.
  • If you’re in a photo and don’t want to be in it, please email info@magnito.bg and we’ll get rid of it.

Our Facebook page

When you message us on Facebook, Meta also processes your data in accordance with its own policies. With regard to the page’s statistics, Meta and we are joint controllers.

3. Cookies and similar technologies

Which cookies we use, what they are used for and how long they are stored is described in detail in Cookie Policy. In short:

  • Required (cmplz_*): they save your choice in the cookie banner.
  • Statistics (Google Analytics 4): only if you enable it in the banner.
  • mgMusic (sessionStorage): remembers whether you have played music whilst navigating between pages. It does not contain any personal data and is deleted when you close the tab.
  • WordPress technical cookies: only for people who log in to the site’s admin panel.
  • The maps on the home page and in the „Contact“ section are images and do not set cookies. When you click on one, you are taken to Google Maps, where Google’s terms and conditions apply: policies.google.com/privacy.

You can change or withdraw your selection in the banner at any time in Cookie Policy, point 4. You can also delete or block cookies via your browser settings.

4. Who we share the data with

We do not sell personal data. We only share it with those who need it, and only as much as is necessary:

  • „SuperHosting.BG“ Ltd (SuperHosting.BG): website and email hosting info@magnito.bg;
  • Google Ireland Limited, for website analytics, only if you have given your consent;
  • our accountant, regarding the invoices;
  • partners with whom we organise an event (for example, a photographer or a decorator), only if we use their services for your event;
  • public authorities, where required by law.

5. Transfer outside the EU

Google and Meta may process data in the US. Both companies are part of the EU-US Data Privacy Framework, which the European Commission recognises as providing adequate protection.

6. Your rights

You are entitled to:

  • to find out what data we hold about you and to obtain a copy;
  • to correct incorrect or incomplete data;
  • to delete your data when we no longer need it or if you withdraw your consent;
  • to restrict the processing of such data;
  • to receive your data in a convenient format and to pass it on to someone else (portability);
  • to object to processing on the grounds of legitimate interest, for example, to object to a photograph;
  • to withdraw your consent at any time. This does not affect the processing carried out prior to the withdrawal.

To exercise your rights, please write to info@magnito.bg. We’ll get back to you free of charge within a month.

If you believe that we are infringing your rights, you may lodge a complaint with the Personal Data Protection Commission: 2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592, tel. 02 91 53 518, kzld@cpdp.bg, cpdp.bg.

7. Do you need to provide us with data?

It’s not compulsory. However, without your name and telephone number or email address, we won’t be able to reply to you or book a table or an event for you.

8. Automated solutions

We don’t just make decisions for you automatically, and we don’t create profiles.

9. Children

This website is not intended for persons under the age of 16, and we do not knowingly collect their data.

10. Security

The website operates via a secure connection (HTTPS). Only those who need the data for their work have access to it.

11. Changes

We may amend this policy. The new text comes into effect upon its publication on this page. Last amended: 5 October 2026.