Well, as luck would have it, Bulgaria being part of the EU, they must comply with the GDRP regulations.
As they do not, you can report a violation to the data protection authorities:
https://commission.europa.eu/law/law-topic/data-protection/r...
As they do not, you can report a violation to the data protection authorities:
https://commission.europa.eu/law/law-topic/data-protection/r...