CART 0

Cookie Policy

Effective date: 01.09.2026
Last updated: 01.09.2026
Content

1. Who we are

This website, midauto.com (the "Site"), uses shared technical infrastructure for MID Auto Ltd., M I D Auto - Sofia Ltd. and MID AUTO INTERNATIONAL Ltd. Their roles and personal-data processing are described in the Privacy Policy.

For any questions about this Cookie Policy, contact us at [email protected] (Bulgaria) or [email protected] (international).

2. What cookies are

Cookies are small text files that a website stores on your device (computer, tablet, phone) when you visit it. They are widely used to make websites work, to remember your preferences, and to provide information to the site owner. Similar technologies such as local storage, pixels and tags are covered by this Policy under the same rules; we refer to all of them as "cookies".

3. Categories of cookies we use

3.1 Strictly necessary cookies

These cookies are essential for the Site to function: they keep your session active, remember the contents of your shopping cart, your language and currency selection, and your login state in the B2B account area. They also store your cookie consent choices. Strictly necessary cookies do not require your consent and cannot be switched off through the consent banner.

3.2 Analytics cookies

Only with your consent, we use Google Analytics 4 loaded through Google Tag Manager to measure visits and interactions. Online identifiers and related information may constitute personal data even though they do not directly contain your name. Google Tag Manager must be configured so analytics tags do not fire before consent.

3.3 Functional cookies

These cookies remember optional choices you make (for example, interface preferences) to improve your experience. They are set only with your consent.

3.4 Marketing cookies

At launch, the Site does not use marketing or advertising cookies. If this changes, this Policy and the consent banner will be updated first, and such cookies will be set only with your prior consent.

3.5 Payment provider cookies

During card payment, Stripe may use technologies objectively necessary to perform the payment operation requested by you securely and to prevent fraud. They are activated only in the checkout context to the extent necessary and are also governed by Stripe’s notices.

4. Cookie table

The table lists the expected principal identifiers. The exact current list, provider, purpose and duration must be displayed dynamically in the Cookie Settings panel and verified through a production-Site scan before launch and after every material change.

Cookie Provider Purpose Category Duration
OCSESSIDmidauto.comKeeps your session active (cart, login, checkout)Strictly necessarySession
languagemidauto.comRemembers your language selection (EN/BG)Strictly necessary30 days
currencymidauto.comRemembers your currency selectionStrictly necessary30 days
consent_preferences\*midauto.com / selected CMPStores the consent choice and compliance recordStrictly necessaryUp to 12 months\*
_gaGoogleDistinguishes visitors for statistics (GA4)Analytics2 years
_ga_<measurement-id>*GoogleMaintains GA4 session stateAnalytics2 years
__stripe_midStripeFraud prevention during card paymentStrictly necessary (checkout only)1 year
__stripe_sidStripeFraud prevention during card paymentStrictly necessary (checkout only)30 minutes

5. Legal basis

Access to or storage of information on terminal equipment is governed by the applicable Bulgarian Electronic Commerce Act rules. Strictly necessary technologies are used only where needed to transmit a communication or provide a service expressly requested by you; subsequent processing relies on contract and/or legitimate interest in security. Analytics, functional and marketing technologies are used only after valid consent under Article 6(1)(a) GDPR, withdrawable prospectively.

6. Managing your consent

On the first visit, the banner provides equally easy and clearly visible options to “Accept all”, “Reject optional cookies” and choose by category. Optional categories are not preselected and optional tags do not load before affirmative consent. A persistent “Cookie settings” footer link reopens the panel, allowing change or withdrawal as easily as consent was given. We retain a minimal record of the choice, banner version and time to demonstrate compliance.

You can also control cookies through your browser settings: block all cookies, delete existing ones, or receive a warning before a cookie is stored. Please note that blocking strictly necessary cookies will prevent core functions of the Site, such as the shopping cart and checkout, from working. Instructions are available in the help sections of all major browsers (Chrome, Firefox, Safari, Edge).

7. Third-party data transfers

Google, Stripe or other providers may process data outside the EEA. The safeguards in the Privacy Policy apply only after verification of the specific recipient and mechanism: an adequacy decision, valid EU-US Data Privacy Framework participation, or Standard Contractual Clauses with any required supplementary measures.

8. Changes to this Policy

We update this Policy and the dynamic cookie inventory when technologies or purposes change. A new optional purpose or provider not covered by the previous consent is not activated before the user makes a new choice.

Effective date: 1 September 2026. See also: Privacy Policy, Terms and Conditions.