Privacy Policy

Privacy Policy

Mandatory Information Regarding Personal Data Protection Rights

Information about the data controller:

Company Name: "PROODOS I" Ltd.
Registration Number: 204039547
VAT Number: BG204039547
Registered Address: Bratsigovo, Angel Simonov Str. 20, Bulgaria
Correspondence Address: Plovdiv, Bratanitsa Str. 12, Deva Fashion Beauty Salon, Bulgaria
Phone: +359 894 665 168
Email: info@devafashion-shop.com
Website: www.devafashion-shop.com

Supervisory Authority for Personal Data Protection:

Name: Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Phone: +359 2 915 3518
Website: www.cpdp.bg

"PROODOS I" EOOD (hereinafter referred to as the "Data Controller" or "Company") operates in accordance with the Bulgarian Personal Data Protection Act and Regulation (EU) 2016/679 (GDPR). This policy is designed to inform you about how your personal data is processed and your rights related to this processing.

Legal Grounds for Collecting, Processing, and Storing Your Personal Data

Article 1. The Company collects and processes your personal data in connection with your use of the online store www.devafashion-shop.com and the conclusion of contracts with the Company based on:

• Your explicit consent;

• Fulfillment of contractual obligations with you;

• Compliance with legal obligations applicable to the Company;

• Legitimate interests pursued by the Company or a third party.

Purposes and Principles of Data Collection, Processing, and Storage

Article 2. (1) The personal data you provide is processed for:

• Creating an account and providing full functionality of the online store;

• Concluding and executing distance sales contracts;

• Individualizing a party to the contract;

• Accounting purposes;

• Statistical analysis;

• Ensuring information security;

• Ensuring the fulfillment of the provided service;

• Sending newsletters upon your explicit request.

(2) The processing of personal data adheres to these principles:

• Lawfulness, fairness, and transparency;

• Limitation to specified purposes;

• Minimization of data collection;

• Accuracy and up-to-date information;

• Limited storage for achieving purposes;

• Integrity, confidentiality, and appropriate security measures.

(3) Personal data may also be processed to protect the Company’s legitimate interests, including compliance with obligations to public authorities.

Types of Personal Data Collected and Processed

Article 3. The Company processes the following categories of personal data:

1. Personal identifiers (e.g., email, name):

   • Purpose: To contact you, process your account registration, and send newsletters (upon your explicit consent).

   • Legal Basis: Contractual necessity (GDPR Art. 6(1)(b)) or explicit consent (GDPR Art. 6(1)(a)).

2. Delivery information (e.g., name, address, phone):

   • Purpose: To fulfill purchase and delivery contracts.

   • Legal Basis: Contractual necessity (GDPR Art. 6(1)(b)).

3. Additional profile information (optional):

   • Purpose: To enhance your profile information.

   • Legal Basis: Explicit consent (GDPR Art. 6(1)(a)).

Data Storage Period

Article 4. (1) Personal data is stored no longer than the existence of your account. Upon account deletion, all personal data is deleted or anonymized without undue delay unless legal obligations require otherwise.

(2) Personal data from guest orders is stored until the completion of the order unless you provide explicit consent for further processing (e.g., personalized offers or newsletters).

(3) Data related to online orders is stored for 5 years to comply with legal obligations and defend the Company’s legal interests.

Your Rights Regarding Personal Data

1. Right to Access: You may request confirmation of whether your data is processed and access to it.

2. Right to Rectification: You may correct inaccurate or incomplete data.

3. Right to Erasure (“Right to Be Forgotten”): You may request the deletion of your data unless legal obligations or legitimate interests necessitate its retention.

4. Right to Restriction: You may request restricted processing under certain conditions.

5. Right to Data Portability: You may request your data in a machine-readable format or its direct transfer to another controller.

6. Right to Object: You may object to the processing of your data for direct marketing or other purposes.

7. Right to Withdraw Consent: You may withdraw consent at any time for processing based on your consent.

Data Sharing

Article 5. (1) The Company may share your personal data with third-party processors for:

• Delivery services;

• Payment processing;

• IT support services.

(2) Data transfers comply with GDPR requirements, ensuring data protection and lawful processing.

(3) No data is transferred outside the EU/EEA unless compliant with GDPR standards.

Cookies

Article 6. The Company uses cookies to enhance website functionality, improve user experience, and analyze site usage. For more information about our cookie policy, visit the dedicated Cookies Policy.

Filing Complaints

If you believe your rights under GDPR have been violated, you have the right to file a complaint with:

Commission for Personal Data Protection (CPDP):
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Phone: +359 2 915 3518
Website: www.cpdp.bg

This policy was last updated on 01.01.2025. For further inquiries, please contact us at info@devafashion-shop.com.