Privacy Policy

1. Identification of ASAP-HT EOOD (hereinafter "Administrator") is the administrator of personal data. ASAP-HT EOOD is a sole proprietorship with limited liability, entered in the Bulgarian Trade Register at the Registration Agency with EIK 131350448, registered as an online trader in the NRA register , represented by the manager Hristo Stefanov.

1.1 Relationship with the Administrator

You can contact the Administrator in any of the following ways:

  • Postal address: Sofia, 73 Korab Planina St
  • on email: hello@plamenna.boutique
  • website: plamenna.boutique
  • contact person: Hristo Stefanov
2. Personal data processed by the Administrator

The Administrator collects and processes your personal data in connection with your access to and use of the website maintained by the Administrator plamenna.boutique , making contact with users of the website, as well as the functioning of the online store of the Administrator on the website plamenna.boutique and concluding contracts for purchase and sale of goods from the online store, including - in the course of the execution of contracts for the purchase and sale of goods from the online store, on the basis of Article 6, paragraph 1 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (hereinafter "the General Data Protection Regulation").

In addition, to personalize your preferences in order to better serve you, the Administrator may collect and subsequently process certain anonymized information about your behavior when browsing the website and using the online store.

When operating the online store, the Administrator may store and collect information using cookies and similar technologies in accordance with the Policy on the use of cookies and other similar technologies (hereinafter the "Cookie Policy") available on the website of the online store.

The administrator does not collect or otherwise process sensitive data included in special categories of personal data in the General Data Protection Regulation. In addition, the Administrator does not wish to collect or process data of minors under the age of 16. The administrator does not collect or store credit/debit card information of users.

3. Personal data

The personal data that the Administrator collects and processes for you are:

3.1. Personal data collected automatically:

  • Log Files – when accessing the plamenna.boutique website from your side, the Administrator automatically receives information from log files (set of system information about the user): Internet Protocol (IP) addresses, browser type and language, Internet Service Provider (ISP), referral pages and exit pages, operating system , the date/time stamp, as well as clickstream data; the time you spent on the site and which pages on the site you visited. The information contained in these files includes the use of cookies - more information on the use of cookies can be found in the Cookies Policy available at plamenna.boutique

3.2 . Personal data you provide:

  • name and surname;
  • postal address, email address;
  • telephone;

The data that you may be required to provide during payment – ​​bank account, number, dates and/or bank card data are not received by the Administrator, but by the third party through which the payment is made. In cases where the payment is made by Cash on Delivery, the data is processed by the respective courier service provider (Speedy or Econt). When the payment is made with a credit/debit card, its data is processed and stored by Stripe Inc. The administrator has no control over the processing of this data by the third party and cannot be responsible for its processing.

3.3. Legal basis for the processing of personal data by the Administrator

The administrator processes your personal data on the basis of:

a/ Art. 6, paragraph 1, letter a) of the General Data Protection Regulation, namely - on the basis of the express consent given by you in connection with the access to and viewing of the website of the online store and/or communication with the online store and/ or the creation of a profile in the online store and/or the use of cookies;

b/ Art. 6, paragraph 1, letter b) of the General Regulation on data protection, namely for taking steps before concluding a contract, as well as for the conclusion and execution of the concluded contract for the purchase and sale of goods from the online store;

in/ art. 6, paragraph 1, letter c) of the General Data Protection Regulation, namely - the processing is necessary to comply with a legal obligation that applies to the Administrator, including, but not limited to - to comply with the legal obligations of the Administrator under the Act on accounting and applicable tax law;

d/ Art. 6, paragraph 1, letter f) of the General Regulation on data protection, namely - the processing is necessary for the purposes of the Administrator's legitimate interests for the implementation and protection of its business activity (including, but not limited to - measures to protect the website and its users, measures to prevent and detect fraud attempts; measures to manage various other risks);

3.4. Purposes of personal data processing by the Administrator

The specified personal data provided by you in connection with accessing and browsing the plamenna.boutique website, communicating, creating a profile and using the online store, including - when concluding a contract for the purchase and sale of goods from the online store, are processed by the Administrator for the following purposes:

  • access to and browse the website plamenna.boutique , on which the online store is located;
  • contacting users of the plamenna.boutique website;
  • creating a profile and providing full functionality when using the online store;
  • individualization of a party to the contract and execution of the contract for the purchase and sale of goods from the online store (order processing, confirmation, delivery and invoicing of an order made; verification, confirmation and processing of payments and transfers; refusal of orders, complaints, return of goods and other actions of any nature related to an order and/or contract for the purchase and sale of goods from the online store; providing access to services, including the execution of contracts for the purchase and sale of goods from the online store and all relations between the parties in connection with such contracts), as well as fulfillment of the resulting legal and contractual obligations of the Administrator;
  • for the operation and improvement of the website of the online store, for the analysis of the behavior of website visitors and marketing purposes;
  • in fulfillment of legal obligations in the field of accounting and tax legislation.

3.5. Your specified personal data may be provided to the following recipients and categories of recipients:

a) competent state authorities - in fulfillment of the Administrator's duties according to Bulgarian legislation;

b) providers of various services to the Administrator, as follows:

  • legal, tax and other consultants and auditors;
  • supplier under a contract for the provision of accounting and financial services;
  • courier under a contract for courier services for the delivery of goods ordered by you, in your capacity as a user of the online store and a buyer under the concluded contract for the purchase and sale of goods from the online store;
  • providers of payment/banking services and banking institutions (all banks and bank branches on the territory of the Republic of Bulgaria) regarding the administration of money transfers in connection with the concluded contract for the purchase and sale of goods from the online store;
  • marketing service providers;
  • providers of market research services;
  • insurance companies;
  • IT service providers;
  • other companies with which the Administrator can develop joint programs for selling on the market the goods offered by the Administrator in the online store.
  • other companies - suppliers of the Administrator in connection with the functioning of the website and online store, including - suppliers of programs and web solutions: Google platforms, Facebook or other online platforms.

If the Administrator is required by law, or if this is necessary to protect its legitimate interests, the Administrator may also disclose certain personal data to public authorities.

The administrator ensures that access to your data by private legal entities-third parties is carried out in accordance with the legal provisions in the field of data protection and information confidentiality, based on contracts concluded with them.

3.6. Term of storage by the Administrator of the provided personal data

a) For the period of validity of the contract for the purchase and sale of goods from the online store concluded between you and the Administrator and in the 5-year limitation period thereafter;

b) For the duration of the existence of your account in the online store. After deleting your account, the Administrator will take the necessary measures to delete and/or anonymize your personal data provided in connection with the use of the online store;

c) For the period until the website user's consent is withdrawn (if the processing of personal data depends on the website user's consent), respectively - for the period until the website user raises an objection (if the processing of personal data is related to the technology of "cookies" and other similar and/or marketing activities) and according to the technical possibilities to delete these files while using the browser/device settings;

d) In a longer period, if the law (e.g. accounting or tax regulations) provides for this. In the event that an extension of the data storage period is necessary in order to fulfill a legal or contractual obligation of the Administrator and/or legitimate interests of the Administrator or a third party, you will be duly notified by the Administrator.

3.7. Provision of personal data outside the territory of Bulgaria

The administrator does not intend to provide your collected personal data to recipients in countries outside the European Union and/or the European Economic Area. However, in the event that some of your personal data are transferred to entities located outside the European Union, including in countries for which the European Commission has not recognized an adequate level of protection of personal data, the Administrator will take steps to ensure that that any international transfer of personal data is carefully managed to protect your rights and interests.

4. Your rights in relation to your personal data processed by the Administrator

You have the right at any time to request the following from the Administrator:

4.1. Correcting your personal data in the event that the personal data processed about you is inaccurate. You also have the right to have your incomplete personal data completed, including by adding a declaration.

4.2. Deletion of your personal data if:

a) the personal data are no longer necessary for the purposes for which they were collected and processed;

b) withdraw your consent on the basis of which your personal data were processed (for personal data processed on the basis of consent), as detailed in item 4.5 below;

c) objections to the processing, as detailed in item 4.4 below, and there are no overriding legal grounds for the processing, as well as in all cases where you object to the processing of personal data for the purposes of direct marketing, including -profiling insofar as it is related to direct marketing;

d) your personal data has been processed unlawfully;

e) the personal data must be deleted in order to comply with a legal obligation of the Administrator according to the Bulgarian legislation and/or the legislation of the European Union;

The administrator may not comply with your request to delete your personal data if their processing requires:

– to comply with a legal obligation; or

– to establish, exercise or defend a legal claim;

4.3. Restriction of the processing of your personal data in case:

a) You dispute the accuracy of personal data - for a period allowing the Administrator to verify the accuracy of your data;

b) The processing of the personal data is illegal, but you do not want the personal data to be deleted, but to limit its use;

c) The administrator no longer needs your personal data for the stated purposes, but you require them for the establishment, exercise or defense of legal claims.

d) Objections to the processing, as detailed in item 4.4 below, pending verification of whether the legal grounds of the Administrator take precedence over your interests;

  • You have the right at any time to:

4.4. You object to the processing of your personal data if:

a) the processing of your personal data is necessary for the purposes of the legitimate interests of the Administrator or a third party;

b) your personal data is processed for direct marketing purposes;

c) your personal data is processed for scientific and/or historical research or for statistical purposes.

4.5. Withdraw consent to data processing.

You may withdraw your consent to the processing of your personal data at any time (in respect of personal data processed on the basis of consent) - but this will not affect the lawfulness of the processing carried out by the Administrator on the basis of the consent given by your consent prior to your withdrawal of consent. Nevertheless, the Administrator will process your data for purposes related to the execution of the contract concluded between you and the Administrator for the purchase and sale of goods from the online store, as well as any possible disputes between you and the Administrator in connection with or arising from the concluded contract for purchase and sale of goods from the online store.

5. Rights under item 4 may be exercised by making a written request to the Administrator's address or sending an electronic request to the Administrator's e-mail, specified above in item 2 of this document.

5.1. Right of access to data

You may request from the Administrator:

a) to confirm that it is processing your personal data;

b) provide you with a copy of that data;

c) provide you with information about your personal data;

If you wish to obtain additional copies of a medium on which your personal data has been provided, you may be charged a reasonable administrative fee.

5.2. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the Administrator in an appropriate format and to transfer this data to another personal data administrator, in relation to the personal data that is processed by the Administrator, based on the your consent or to fulfill the contractual obligations under the contract for the purchase and sale of goods from the online store, and when the processing of this personal data is carried out in an automated way (i.e. through automated electronic systems and not in a paper archive version) . You have the right to obtain a direct transfer of personal data from the Controller to another personal data controller when this is technically feasible.

5.3. Right of appeal to a supervisory authority

You have the right to file a complaint with the Bulgarian Commission for the Protection of Personal Data (PCPD) if you believe that your personal data is being processed illegally or your rights in relation to your personal data have been violated.

Contact with CPLD:

Sofia 1592, Prof. Tsvetan Lazarov Blvd No. 2,

Email: kzld@cpdp.bg,

Website: www.cpdp.bg.

6. Provision of personal data

The provision of your personal data in connection with placing an order and concluding a contract for the purchase and sale of goods from the online store is necessary for the conclusion and execution of the contract for the purchase and sale of goods from the online store concluded by you and your rights arising therefrom from the concluded contract or the applicable law. You are not obliged to provide your personal data in connection with placing an order for goods from the online store and concluding a contract for the purchase and sale of goods from the online store, but providing your personal data is an absolutely necessary condition and requirement for concluding a contract for the purchase and sale of goods from the online store and its execution. You may choose not to provide this personal data, and at any time you may exercise your rights regarding the personal data provided by you, but if the Administrator does not have this personal data, this may prevent the performance of the contract you entered into for purchase and sale and the fulfillment of contractual or legal obligations of the Administrator in connection with the concluded contract.

The provision of your personal data in connection with the access to the web page of the online store, its viewing and use, including - the creation of a profile in the online store, as well as in connection with sending a message to the online store/Administrator, is necessary for the use of the web page in its full functionality, respectively – for communication with the online store/Administrator. You may choose not to provide this personal data, as well as at any time you may exercise your rights in relation to the personal data provided by you in connection with access to the web page of the online store, its viewing and use, respectively - in connection with the implementation of contact with the online store/Administrator, but in this case the Administrator cannot provide you with access to the content of the online store or guarantee that you will be able to use the website in full functionality, respectively - in this case you cannot communicate with the online store/Administrator.

7. Use of an automated decision-making system

In order to carry out analyzes to improve the performance of the site and provide personalized service to each individual user of the webpage, according to his individual preferences, the Administrator may collect and process data on the interests and preferences of the user, such as analyzing the number of visits and/or viewed /goods ordered by this user. This allows for a better understanding of the user's expectations and adaptation to his needs, without, however, significantly affecting his decisions. Thanks to the use of advanced technologies by the Administrator, the above activities can be performed by the system automatically, thanks to which the content sent will be as up-to-date and useful as possible for the user of the web page.

Analysis of interests or preferences may also be used to automatically create, provide and execute user-specific advertisements, offers or promotions (discounts). The result of such actions by the Administrator may significantly affect your user choices – e.g. the result can be a very good temporary offer of goods addressed only to you based on your purchase history and your behavior on the online store site, which other users of our site will not be able to access.

You may ask the Administrator not to be subject to a decision based solely on automatic processing, but only where that decision:

a) gives rise to legal consequences for you; or

b) affects you in a similar and significant way.

This right is inapplicable if the decision made after the automatic decision:

  • is necessary for the Administrator, in order to conclude and/or execute a concluded contract for the purchase and sale of goods from the online store;
  • is permitted by law and there are adequate safeguards for your rights and freedoms; or
  • is based on your express consent.
8. Links to Other Websites

The online store may contain links to other websites. You can familiarize yourself separately with the terms and privacy policies applied to these other websites, and the Administrator is not responsible for them. This Policy applies only to the above-mentioned activities of the Administrator.

This Privacy Policy was adopted on 04/01/2019, edited on 06/21/2021 and is valid until its cancellation or amendment by publishing such cancellation or amendment on the plamenna.boutique website .