GENERAL TERMS AND CONDITIONS OF THE ONLINE STORE
www.devafashion-shop.com

I. SUBJECT

Art. 1. These General Terms and Conditions are intended to regulate the relations between “PROODOS I” Ltd., town of Bratsigovo, 20 Angel Simonov St., hereinafter referred to as the SUPPLIER, and the customers, hereinafter referred to as USERS, of the online store www.devafashion-shop.com, hereinafter referred to as the “ONLINE STORE”.

II. SUPPLIER INFORMATION

Art. 2. Information pursuant to the E-Commerce Act and the Consumer Protection Act:

Supplier’s name: “PROODOS I” Ltd., owner of the online store www.devafashion-shop.com

Registered office and management address: town of Bratsigovo, 20 Angel Simonov St.

Address where the activity is carried out: Plovdiv, 12 Bratanitsa St., Hair salon

Correspondence address: Plovdiv, 12 Bratanitsa St., Hair salon “Deva fashion”

Public registers: UIC (Bulstat) 204039547; VAT No.: BG204039547

Supervisory authorities:
(1) Commission for Personal Data Protection
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Tel.: +359 2 940 20 46
Fax: +359 2 940 36 40
Email: kzld@government.bg, kzld@cpdp.bg
Website: www.cpdp.bg

(2) Commission for Consumer Protection
Address: 1000 Sofia, 4A Slaveykov Sq., floors 3, 4 and 6
Tel.: +359 2 980 25 24
Fax: +359 2 988 42 18
Hotline: 0700 111 22
Website: www.kzp.bg

III. CHARACTERISTICS OF THE ONLINE STORE

Art. 3. The online store is accessible at www.devafashion-shop.com, through which Users may enter into contracts for sale and delivery of the goods offered by the ONLINE STORE, including the following:

Art. 4. The Supplier delivers the goods and guarantees the Users’ rights as provided by law, in accordance with good faith, established practice, and the criteria and conditions of consumer or commercial law.

Art. 5.
(1) Users conclude a contract for the sale of the goods offered by the ONLINE STORE through the Supplier’s interface, accessible on the Supplier’s website or by other means of distance communication.
(2) Under the concluded sales contract, the Supplier undertakes to deliver and transfer ownership of the goods selected through the interface to the User.
(3) Users shall pay the Supplier remuneration for the delivered goods in accordance with the conditions set out on the ONLINE STORE and these General Terms. The remuneration equals the price announced by the Supplier on the ONLINE STORE website, and where dual display is available, conversion between Bulgarian lev (BGN) and euros (EUR) is performed at the official fixed exchange rate: 1 EUR = 1.95583 BGN.
(4) The Supplier delivers the goods ordered by the Users within the time limits and under the conditions set by the Supplier on the ONLINE STORE website and these General Terms.
(5) The delivery price is determined separately and expressly from the price of the goods.

Art. 6.
(1) The User and the Supplier agree that all statements between them related to the conclusion and performance of the sales contract may be made electronically and through electronic statements within the meaning of the Electronic Document and Electronic Trust Services Act and Art. 11 of the E-Commerce Act.
(2) It is assumed that electronic statements made by Users on the website are made by the persons indicated in the data provided during registration, if the User has entered the respective username and password.

IV. USE OF THE ONLINE STORE

Art. 7.
(1) To use the ONLINE STORE to conclude sales contracts, the User must enter a chosen username and password for remote access where registration is required.
(2) The username and password are determined by the User upon online registration on the Supplier’s website.
(3) By completing their data and clicking “Yes, I accept” or “Register”, the User declares that they are familiar with these General Terms, agree with their content, and undertake to comply with them unconditionally.
(4) The Supplier confirms the User’s registration by sending an email to the address provided by the User, which also includes information for activating the registration. The User confirms the registration and the conclusion of the contract via an electronic link in the confirmation email. After confirmation, a User account is created and contractual relations arise between the User and the Supplier.
(5) During registration, the User undertakes to provide true and up-to-date data and to update them in a timely manner if changes occur.
(6) To use the full functionality of the Supplier’s online store, the User undertakes to register. The Supplier is not liable if, due to lack of registration, the User could not use the full functionality of the online store, including exercising contractual rights, claiming a lower price, and similar features.
(7) These General Terms may also be accepted without registration through an explicit statement, including via the ONLINE STORE interface.

Art. 8.
(1) The email address provided upon initial registration, as well as any subsequent email address used for exchanging statements between the User and the Supplier, is the “Primary Email Address” under these General Terms. The User may change the Primary Email Address.
(2) Upon a request to change the Primary Email Address, the Supplier sends a confirmation request to the new address provided.
(3) The change is completed after confirmation by the User through a link contained in the confirmation request sent to the new Primary Email Address.
(4) The Supplier informs the User of the change by email sent to the Primary Email Address used before the change under para. 2.
(5) The Supplier is not liable for unlawful change of the Primary Email Address.
(6) The Supplier may require use of the Primary Email Address in specific cases.

V. TECHNICAL STEPS FOR CONCLUDING A SALES CONTRACT

Art. 9.
(1) Users mainly use the Supplier’s website interface to conclude contracts for the sale of goods offered in the ONLINE STORE.
(2) The contract is concluded in Bulgarian language.
(3) The contract between the Supplier and the User consists of these General Terms available on the ONLINE STORE website.
(4) The contracting party on the User’s side is the User according to the data provided during registration and contained in the User’s account. For the avoidance of doubt, these are the data used to create the account.
(5) The Supplier provides technical means in the interface for identifying and correcting errors when entering information before submitting the statement to conclude the contract.
(6) This contract is considered concluded from the moment the User registers with the Supplier or accepts the General Terms in another explicit manner, including through a statement on the Supplier’s website. The contract for the sale of a specific good is considered concluded from the moment the User orders it through the Supplier’s interface.
(7) The Supplier expressly informs the User in an appropriate manner through electronic means about the conclusion of this contract and the sales contract for a good.
(8) The statement to conclude the contract and the confirmation of receipt are deemed received when the recipients can access them.
(9) The Supplier delivers the goods to the address indicated by the User and is not liable if the provided data are incorrect or misleading.

Art. 10.
(1) Users conclude a sales contract with the Supplier through the following procedure:
– Registering in the ONLINE STORE and providing the required data, if the User has no registration yet, or ordering goods without registration;
– Logging into the ordering system by identifying with username and password or another identification method;
– Selecting one or more goods and adding them to a shopping list/cart;
– Providing delivery details;
– Choosing a method and time of payment;
– Confirming the order.
(2) Users may also conclude a sales contract without registration using the respective functionality of the online store interface.

VI. RIGHTS AND OBLIGATIONS OF THE PARTIES

Art. 11. A successfully registered User, as well as a User who places an order by phone or through the website of the online store www.devafashion-shop.com, has the right to order the offered products and services, or to cancel or claim them in accordance with the applicable procedure.

Art. 12. The User has the right:
12.1. To browse, order upon individual request and receive products from the online store www.devafashion-shop.com under the procedure and conditions stated therein.
12.2. To be informed about the status of their order.
12.3. To receive delivery of the ordered product(s) or service to the delivery address provided in the order, after paying the sales price under these General Terms.

Art. 13. The User is obliged:
13.1. To pay the price valid at the time of placing the order under these General Terms.
13.2. Not to infringe the rights and freedoms of citizens under all legal and secondary legal acts in Bulgaria and EU rules.
13.3. To observe internet etiquette and the rules for using the products and services provided by “PROODOS I” Ltd.
13.4. Not to infringe third-party property or non-property rights and interests, including ownership rights, intellectual property rights, etc.
13.5. To notify “PROODOS I” Ltd. and the competent authorities immediately of any discovered or committed violation in the use of the provided services.
13.6. Not to perform malicious actions.

Art. 14. The online store www.devafashion-shop.com has the right:
14.1. To deny access and cancel user registrations.
14.2. To refuse orders without incurring costs for the User. In such case www.devafashion-shop.com owes no compensation to the User, except to refund amounts paid in advance when technical errors in publishing information have occurred.
14.3. To edit the content of the website at its discretion — including prices, terms of use, products, services, information, images, etc.
14.4. To use at its discretion any comments, proposals, ideas, etc. sent or proposed by Users of www.devafashion-shop.com. They remain the property of “PROODOS I” Ltd.; the company is not limited in their use and owes no compensation to Users for their comments, ideas or proposals.
14.5. To store materials and information used/placed on the server where www.devafashion-shop.com is hosted or made available to third parties by a User and to provide them to third parties and competent state bodies where necessary to protect the rights and legitimate interests, property and security of “PROODOS I” Ltd. and third parties, including in cases of claims related to infringement of rights, or where materials/information are requested by state authorities under an explicit legal provision;
14.6. To terminate, suspend or change the provided services at any time without notice to the User when the User uses the services in violation of these General Terms.

Art. 15. The online store www.devafashion-shop.com:
15.1. Has neither the obligation nor the objective ability to control how Users use the provided services.
15.2. Does not assume a guarantee for the accuracy and completeness of published product information.
15.3. Together with its suppliers or third parties, bears no liability under any circumstances for any damages, including but not limited to lost profits, loss of information or other damages arising from the use, inability to use, or results of use of www.devafashion-shop.com. If damages arise as a result of using www.devafashion-shop.com, products or services, you assume full responsibility and all costs related to remedying the damages.
15.4. Is not liable for possible differences in colors of purchased products due to specifics of computer screens. Placing an order is considered the User’s expressed consent regarding the appearance and quality of the products.
15.5. Is not liable to Users and third parties for damages and lost profits arising from termination, suspension, change or limitation of services, deletion, modification, loss, inaccuracy or incompleteness of messages, materials or information transmitted, used, stored or made available through www.devafashion-shop.com.
15.6. Is not liable for damages to software, hardware or telecommunications equipment or for data loss arising from materials or resources searched, loaded or used in any way through the provided services.

Art. 16. Advice, consultations or assistance provided by specialists and employees of the online store www.devafashion-shop.com in connection with the use of services by Users does not create any liability or obligations for “PROODOS I” Ltd.

VII. SPECIFIC OBLIGATIONS OF THE SUPPLIER. CONSUMER PROTECTION

Art. 17. The rules of this section apply to Users who, based on the data provided for concluding the sales contract or during registration, can be considered consumers under the Consumer Protection Act, the E-Commerce Act and/or Directive 2011/83/EU of the European Parliament and of the Council of 25 October 2011.

Art. 18.
(1) The main characteristics of the goods offered by the Supplier are stated in the product page/profile of each item on the ONLINE STORE website.
(2) The price of the goods including all taxes is determined by the Supplier in the product page/profile of each item.
(3) Postal and transport costs not included in the price of the goods are calculated automatically on the checkout page before order confirmation, depending on the chosen delivery method, destination and current courier partner tariffs.
(4) Payment method, delivery and performance are determined in these General Terms and the information provided to the User on the Supplier’s website.
(5) The information under this article is current at the time it is displayed on the Supplier’s website before concluding the sales contract.
(6) The Supplier must indicate delivery terms for individual goods on its website.
(7) The Supplier indicates the total value of the order for all goods included therein before the conclusion of the contract.
(8) Users agree that all information required under the Consumer Protection Act may be provided through the interface of the ONLINE STORE platform or by email.

Art. 19.
(1) The Consumer agrees that the Supplier may accept advance payment for concluded sales contracts and the delivery of goods.
(2) The Consumer independently chooses whether to pay the delivery price before or at the time of delivery.

Art. 20.
(1) The Consumer has the right, without owing compensation or penalty and without stating a reason, to withdraw from the contract within 14 days from the date of accepting the goods, using the standard withdrawal form available on the Supplier’s website. Information on exercising the right of withdrawal is available on the Supplier’s website. Consumers may also use another unequivocal statement that can be recorded on a durable medium.
(2) The right of withdrawal under para. 1 does not apply in the following cases:

Art. 21.
(1) The delivery time and the start moment from which it runs are determined for each item separately at the time of concluding the contract through the Supplier’s website, unless the goods are ordered in one delivery.
(2) If the Consumer and the Supplier have not agreed a delivery time, the delivery time is 30 working days from the date following the date the order is sent by the Consumer to the Supplier through the online store.
(3) If the Supplier cannot perform the contract because it does not have the ordered goods, it must inform the Consumer and refund the amounts paid.

Art. 22.
(1) The Supplier hands over the goods to the Consumer after confirming that the information obligations under the Consumer Protection Act have been fulfilled.
(2) The Consumer and the Supplier confirm the circumstances under para. 1 in writing at the time of delivery by handwritten signature, unless otherwise agreed.
(3) The Consumer and the Supplier agree that the requirements under para. 1 are complied with if the confirmation is performed by a person who, according to the circumstances, can be assumed to deliver the information to the Consumer — a party to the contract.

Art. 22a. (Currency, dual display and transition period)
(1) In connection with the Republic of Bulgaria’s entry into the euro area, during a transition period until 31/01/2026, prices in the ONLINE STORE may be displayed in both Bulgarian lev (BGN) and euros (EUR).
(2) In case of dual display, conversion between BGN and EUR is performed at the official fixed exchange rate: 1 EUR = 1.95583 BGN.
(3) In case of discrepancy caused solely by rounding during conversion, the amount displayed on the checkout page shall apply.

VIII. PRICES AND DELIVERY TERMS

Art. 23. Delivery of products with a total value over EUR 50.00 for Bulgaria, or over the specified amounts for the respective foreign destinations, is at the expense of www.devafashion-shop.com.

Art. 24. The delivery price for orders below these amounts is calculated automatically at checkout and is aligned with the current tariffs of the courier companies we work with.

24.1. Deliveries are made within Bulgaria and to selected countries of the European Union, including: Romania, Greece, Cyprus, Croatia, Slovenia, Hungary, Slovakia, Poland, the Czech Republic, Germany, Italy, Spain and France.

24.2. In Bulgaria, delivery is performed by a courier company (e.g., Speedy or BOX NOW) to an address, office or parcel locker, Monday to Friday between 9:00 and 17:00. No deliveries are made on Sundays and official public holidays.

24.3. Delivery time:
– Bulgaria – 1 to 3 working days from the dispatch date
– Abroad – 2 to 8 working days depending on the destination
“PROODOS I” Ltd. is not liable for delays caused by courier companies. During peak periods, it is possible that an order is dispatched up to 10 working days after it is placed.

24.4. Orders placed after 14:00 on working days are processed on the next working day. Orders placed on Saturday and Sunday are processed on Monday.

24.5. The User is obliged to check the contents of the shipment before payment. By signing and paying for the order, the User confirms their consent to the type and contents of the delivery.

24.6. If the shipment is not accepted on the first delivery attempt, the courier will contact the customer for a second attempt on the same or the next working day. The second visit is not charged additionally.

24.7. In case of refusal of a prepaid order, the product amount is refunded within 7 days after the returned shipment is received by us, by a reversal transaction to the card used for payment. Transport costs are borne by the customer.

24.8. The User has the right to cancel an order at any time.

24.9. In case of a missing or incorrect product, replacement is performed within 3 working days at the expense of “PROODOS I” Ltd. In such case, no new delivery fee is charged.

24.10. During active promotions, free delivery may be offered for orders below EUR 50.00 within Bulgaria.

24.11. The User has the right to return a product within 14 days of receipt, provided that the product is in intact commercial condition. Return shipping costs are borne by the customer. Exceptions apply to personal hygiene products unless they are defective.

IX. OTHER TERMS

Art. 25. The Supplier delivers and hands over the goods to the User within the time limit determined when concluding the contract.
Art. 26. The User must inspect the goods at the time of delivery and handover and, if they do not meet the requirements, notify the Supplier immediately.

X. PERSONAL DATA PROTECTION

Art. 27.
(1) The Supplier takes measures to protect the User’s personal data in accordance with the Personal Data Protection Act.
(2) For personal data security reasons, the Supplier will send data only to the email address provided by the User at registration.
(3) The Supplier adopts and publishes a Personal Data Protection Policy on its website.
(4) Users agree that the Supplier has the right to process their personal data necessary for fulfilling orders in the online store and performing the contract.

Art. 28.
(1) At any time, the Supplier has the right to request the User to identify themselves and prove the authenticity of any circumstances and personal data declared during registration.
(2) If the User has forgotten or lost their username or password, the Supplier has the right to apply the published procedure for lost or forgotten usernames and passwords.

XI. AMENDMENTS AND ACCESS TO THE GENERAL TERMS

Art. 29.
(1) These General Terms may be amended by the Supplier, who will inform all registered Users in an appropriate manner.
(2) The Supplier and the User agree that any supplement or amendment will have effect for the User after explicit notification and if the User does not declare within 30 days that they reject the amendments.
(3) The User agrees that all Supplier statements related to amendments will be sent to the email address provided at registration. The User agrees that emails sent under this article do not need to be signed with an electronic signature to be valid.

Art. 30. The Supplier publishes these General Terms on its website together with any supplements and amendments.

XII. TERMINATION

Art. 31. These General Terms and the contract between the User and the Supplier terminate in the following cases:
– upon termination and liquidation or insolvency of one of the parties;
– by mutual written consent;
– unilaterally, with notice by either party in case of non-performance by the other party;
– due to objective impossibility for one of the parties to perform its obligations;
– upon seizure or sealing of equipment by state authorities;
– upon deletion of the User’s registration in the ONLINE STORE. In such case, concluded but unperformed sales contracts remain in force and are subject to performance;
– in case of exercising the right of withdrawal under Art. 55(1) of the Consumer Protection Act. In such case, only the delivery contract for the respective ordered item terminates where the right of withdrawal applies.

XIII. FINAL PROVISIONS

Art. 32. The possible invalidity of any provision of these General Terms does not lead to invalidity of the entire contract.

Art. 33. For all matters not regulated herein related to performance and interpretation, the laws of the Republic of Bulgaria apply.

Art. 34. All disputes between the parties shall be resolved by the competent court or the Commission for Consumer Protection. For online dispute resolution, you may use the EU Online Dispute Resolution platform.


MANDATORY INFORMATION ON THE RIGHTS OF DATA SUBJECTS (PERSONAL DATA PROTECTION)

Information about the company processing your data:
Company name: “PROODOS I” Ltd.
UIC/Bulstat: 204039547
VAT No.: BG204039547
Registered office and management address: town of Bratsigovo, 20 Angel Simonov St.
Correspondence address: Plovdiv, 12 Bratanitsa St., Hair salon “Deva fashion”
Phone: 0894665168
Email: info@devafashion-shop.com
Website: www.devafashion-shop.com

Information about the competent supervisory authority for personal data protection
Name: Commission for Personal Data Protection
Registered office and address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
Website: www.cpdp.bg

“PROODOS I” Ltd. (hereinafter the “Controller” or the “Company”) carries out its activity in compliance with the Personal Data Protection Act and Regulation (EU) 2016/679 (GDPR). This information aims to inform you about all aspects of processing your personal data by the Company and the rights you have in relation to such processing.

Legal basis for collecting, processing and storing your personal data

Art. 1. The Controller collects and processes your personal data in connection with the use of the online store www.devafashion-shop.com and the conclusion of contracts with the Company on the basis of Art. 6(1) GDPR, specifically on the following grounds:
– Explicit consent obtained from you as a customer;
– Performance of the Controller’s obligations under a contract with you;
– Compliance with a legal obligation applicable to the Controller;
– For the legitimate interests of the Controller or a third party.

Purposes and principles in collecting, processing and storing your personal data

Art. 2.
(1) We collect and process the personal data you provide in connection with using the online store and concluding a contract with the Company, including for the following purposes:
– creating an account and providing full functionality of the online store;
– concluding and performing a distance contract;
– identifying a contracting party;
– accounting purposes;
– statistical purposes;
– information security protection;
– ensuring performance of the contract for the relevant service;
– sending a newsletter upon your explicit request.
(2) We observe the following principles when processing your personal data:
– lawfulness, fairness and transparency;
– purpose limitation;
– data minimisation and relevance;
– accuracy and up-to-date data;
– storage limitation;
– integrity and confidentiality and ensuring appropriate security.
(3) The Controller may process and store personal data to protect the following legitimate interests:
– performance of obligations towards the National Revenue Agency, Ministry of Interior and other state and municipal authorities.

What types of personal data our company collects, processes and stores

Art. 3.
(1) The Company performs the following operations with the personal data you provide for the following purposes:
– User registration and performance of a distance sales contract: creating an account for purchasing goods and providing contact details for delivery. Registration is not mandatory; services are available to a significant extent without an account.
Impact assessment conclusion: Based on the performed impact assessment, the operation “User registration and performance of a distance sales contract” is permissible and provides sufficient safeguards for the rights and legitimate interests of data subjects in accordance with GDPR.
– Concluding and performing a commercial transaction with a customer or partner: administration of the relationship. Given the limited scope of collected data and that some data are from publicly available sources, a DPIA is not required.
– Sending newsletters: administration of sending newsletters to customers who requested them. Given the limited scope, a DPIA is not required.
– Exercising the right of withdrawal or making a complaint: administering the process. Given the limited scope, a DPIA is not required.
(2) The Controller processes the following categories of personal data and information for the following purposes and on the following legal grounds:

Identification data (email, name, etc.)
Purpose: (1) Contact and providing information; (2) user registration; (3) newsletter delivery.
Legal basis: By accepting the General Terms and registering or placing an order without registration, or by concluding a written contract, a contractual relationship is created, on the basis of which we process your personal data – Art. 6(1)(b) GDPR. Newsletter data are processed based on your explicit consent – Art. 6(1)(a) GDPR.

Delivery data (names, phone, address, etc.)
Purpose: Performance of the Controller’s obligations under a sales and delivery contract.
Legal basis: Contract – Art. 6(1)(b) GDPR.

Additional data provided by you – If you wish to complete your profile, you may fill in name, surname, phone number.
Purpose: Completing information in the user account.
Legal basis: Explicit consent – Art. 6(1)(a) GDPR at the time of registration. Providing these data is not mandatory for registration.

(3) The Controller does not collect or process personal data that:
– reveal racial or ethnic origin;
– reveal political, religious or philosophical beliefs or trade union membership;
– genetic and biometric data; health data; data concerning sex life or sexual orientation.
(4) Personal data are collected by the Controller from the data subjects.
(5) The Company does not perform automated decision-making with data.

Art. 4.
(1) The Company performs the following operations with personal data provided by you as legal representatives or authorized persons of legal entities (commercial partners):
– Concluding and performing a commercial transaction: we process only the full name of the legal representative or authorized person.
Impact assessment conclusion: Given the small number of individuals and the limited scope of data, a DPIA is not required.
(2) Personal data are collected by the Controller from the data subjects and from the Commercial Register at the Registry Agency.
(3) The Company does not perform automated decision-making with data.

Art. 5. The Controller may use “cookies” to provide full website functionality, improve user experience, for statistical purposes, easier access, etc., to which you agree by using our website. You may control and/or delete cookies at any time through your browser settings. Cookies do not constitute personal data and are not used to identify visitors and users of the online store.

Retention period of your personal data

Art. 6.
(1) The Controller stores your personal data for no longer than your account exists in the online store. After account deletion, the Controller takes necessary steps to delete and destroy your data without undue delay or to anonymize them.
(2) The Controller processes personal data provided for an order without registration until the order is completed, unless you have given explicit consent to process the data for service improvement, recommended content, individual conditions, promotions and statistics.
(3) The Controller stores personal data related to online orders for 5 years to protect the Controller’s legal interests in judicial or administrative disputes with users.
(4) The Controller notifies you if the retention period needs to be extended due to a legal obligation or legitimate interests.
(5) The Controller stores personal data that must be retained under applicable legislation for the legally prescribed period, which may exceed the duration of your account or order completion.

Art. 7. The Controller stores personal data of legal representatives of commercial partners for the term of contract performance and for compliance with legitimate interests and legal obligations, which may exceed the contract term.

Transfer of your personal data for processing

Art. 8.
(1) The Controller may, at its discretion, provide part or all of your personal data to processors for fulfilling the processing purposes you have agreed to, in compliance with GDPR.
(2) The Controller notifies you if it intends to transfer part or all of your personal data to third countries or international organizations.

Your rights regarding your personal data

Withdrawal of consent

Art. 9.
(1) If you do not wish your personal data to be processed for marketing purposes and newsletters, you may withdraw your consent at any time by completing Appendix No. 1 or by sending a free-text request by email.
(2) After receiving your request, we will send an email with verification instructions to confirm your identity as the newsletter recipient and data subject.
(3) Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right of access

Art. 10.
(1) You have the right to request confirmation whether personal data relating to you are processed by sending a free-text request by email.
(2) You have the right to access your data and information about collection, processing and storage.
(3) After receiving your request, we will send verification instructions to the email used for registration or orders.
(4) After verification, the Controller provides, upon request, a copy of the processed personal data related to you in electronic or other suitable form.
(5) Access is provided free of charge, but the Controller reserves the right to impose an administrative fee in case of repeated or excessive requests.

Right to rectification

Art. 11.
(1) You may correct or complete inaccurate or incomplete personal data through “Edit profile”.
(2) You may also request rectification by email using Appendix No. 4 or a free-text request.

Right to erasure (“right to be forgotten”)

Art. 12.
(1) You have the right to request erasure of part or all personal data related to you, and the Controller must erase them without undue delay where one of the following grounds applies:
– the data are no longer necessary;
– you withdraw consent and there is no other legal basis;
– you object and there are no overriding legitimate grounds;
– unlawful processing;
– legal obligation to erase;
– data were collected in relation to information society services.
(2) The Controller is not obliged to erase personal data where processing is necessary:
– for freedom of expression and information;
– for legal obligations or public interest tasks/official authority;
– for public interest in public health;
– for archiving in the public interest, scientific/historical research or statistics;
– for establishment, exercise or defence of legal claims.
(3) To exercise the right to erasure, send an email request using Appendix No. 2 or a free-text request; then we will send verification instructions to the email used for registration or orders.
(4) After verifying identity, we will erase the data we process for you in accordance with para. 3.
(5) If you have an order in process, the earliest moment to request erasure is after successful completion of the order.

Right to restriction

Art. 13.
(1) You may request restriction of processing by free-text email where:
– you contest accuracy (for the period required for verification);
– processing is unlawful but you request restriction instead of erasure;
– we no longer need the data but you require them for legal claims;
– you have objected pending verification of overriding legitimate grounds.
(2) After receiving your request, we will send verification instructions to the email used for registration or orders.
(3) After verification, we will restrict processing, but we will not remove content you have posted in the online store, if any.

Right to data portability

Art. 14.
(1) Where you have provided consent, or processing is necessary for contract performance, or data are processed by automated means, you may:
– request your personal data in a readable format and transfer them to another controller;
– request direct transfer to another controller where technically feasible.
(2) You may exercise portability by email using Appendix No. 3 or a free-text request; then we will send verification instructions.
(3) After verification, the Company will send the processed data to your specified email in XML format.

Right to be informed

Art. 15. You may request information about recipients to whom personal data have been disclosed in relation to rectification, erasure or restriction. The Controller may refuse if impossible or requires disproportionate effort.

Right to object

Art. 16. You may object at any time to processing of personal data relating to you, including processing for profiling or direct marketing.

Rights in case of a personal data breach

Art. 17.
(1) If the Controller establishes a breach likely to result in a high risk to your rights and freedoms, it will notify you without undue delay and inform you of the measures taken or to be taken.
(2) The Controller is not obliged to notify you if:
– appropriate technical and organisational measures have been applied to protect the data;
– measures have been taken afterwards ensuring the breach will not result in high risk;
– notification would involve disproportionate effort.

Recipients of your personal data

Art. 18.
(1) For the purposes of processing and providing services, the Controller may disclose data to the following processors:

Personal data processor — Purpose of personal data processing
............................................... — .....................................................................
............................................... — .....................................................................
............................................... — .....................................................................

(2) Processors comply with all legal requirements for lawful and secure processing and storage.

Art. 19. The Controller does not transfer your data to third countries.

Art. 20. If your rights are violated, you have the right to file a complaint with the Commission for Personal Data Protection:
Name: Commission for Personal Data Protection
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
Website: www.cpdp.bg

Art. 21. You may exercise your rights using the forms attached to this information. The forms are not mandatory; requests may be made in any form that contains a statement and identifies you as the data subject.

Art. 22. If consent concerns a transfer, the Controller describes possible risks of transferring data to third countries in the absence of an adequacy decision and appropriate safeguards.


APPENDIX No. 1

Form for withdrawal of consent for processing purposes
Your name*: .........................
Your email used in the online store*: .........................
Contact email*: .........................

To
Company name: .........................
UIC/Bulstat: .........................
Registered office and management address: .........................
Correspondence address: .........................
Phone: .........................
Email: .........................
Website: .........................

I hereby withdraw my consent for processing of the personal data provided by me for the purposes of receiving newsletters, advertising messages or other marketing materials, and I confirm that I am aware of the conditions for withdrawal in accordance with the Mandatory Information on Data Subject Rights.

In case of violation of your rights, you may lodge a complaint with the Commission for Personal Data Protection:
Name: Commission for Personal Data Protection
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
Website: www.cpdp.bg

APPENDIX No. 2

“Right to be forgotten” request – request for erasure of personal data relating to me
Your name*: .........................
Your email used for registration or orders*: .........................
Contact email*: .........................

To
Company name: .........................
UIC/Bulstat: .........................
Registered office and management address: .........................
Correspondence address: .........................
Phone: .........................
Email: .........................
Website: .........................

Please erase all personal data that you collect, process and store, provided by me or by third parties, related to me according to the identification above.

I declare that I am aware that some or all of my personal data may continue to be processed and stored by the Controller for the purpose of complying with legal obligations.

In case of violation of your rights, you may lodge a complaint with the Commission for Personal Data Protection:
Name: Commission for Personal Data Protection
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
Website: www.cpdp.bg

APPENDIX No. 3

Request for data portability
Your name*: .........................
Your email used for registration or orders*: .........................
Contact email*: .........................

To
Company name: .........................
UIC/Bulstat: .........................
Registered office and management address: .........................
Correspondence address: .........................
Phone: .........................
Email: .........................
Website: .........................

Please send all personal data relating to me that you collect, process and store in your databases in XML format to:

Email: .........................

Receiving Controller: .........................
Company name: .........................
Identification number (UIC/Bulstat / registration number): .........................
Email: .........................

In case of violation of your rights, you may lodge a complaint with the Commission for Personal Data Protection:
Name: Commission for Personal Data Protection
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
Website: www.cpdp.bg

APPENDIX No. 4

Request for data rectification
Your name*: .........................
Your email used for registration or orders*: .........................
Contact email*: .........................

To
Company name: .........................
UIC/Bulstat: .........................
Registered office and management address: .........................
Correspondence address: .........................
Phone: .........................
Email: .........................
Website: .........................

Please rectify the following personal data you collect, process and store, provided by me or by third parties related to me, as follows:

Data to be rectified:
..................................................

Please rectify as follows:
..................................................

In case of violation of your rights, you may lodge a complaint with the Commission for Personal Data Protection:
Name: Commission for Personal Data Protection
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
Website: www.cpdp.bg


COOKIE POLICY

We at www.devafashion-shop.com are committed to providing quality services and maintaining your trust.

In this section you will learn about cookies used on the Site and/or your mobile devices so that you can manage them.

  1. What is a “cookie”?
    A “cookie” is a text file containing letters and numbers stored on your computer and mobile device when you visit a website. Cookies allow you to remember actions (e.g., username, language, font size, etc.) for a period of time so you do not need to re-enter them each time you visit the site or move from one page to another. They may also store information related to your preferences.

  2. How does www.devafashion-shop.com use cookies?
    The team of www.devafashion-shop.com complies with European legislation and best practices regarding cookies. Our website is updated in accordance with European Commission guidelines on security and personal data protection, as well as Directive 2002/58/EC (ePrivacy) and Regulation (EU) 2016/679 (GDPR).

  3. What cookies do we use?
    Below are the different types of cookies that may be used on the Site.

  1. Who controls and has access to cookies?
    Pages of www.devafashion-shop.com may include services provided by the Site and services provided by other websites (e.g., Facebook). The Site controls and has access to cookies used by its services. For cookies used by third-party services, please refer to the respective third party’s website.

  2. How can you manage the information we collect?
    You can control and/or delete cookies whenever you wish. Preference, analytics and marketing cookies can be managed by configuring your browser to notify you when cookies are set, or to block cookies from specific domains or all domains.

When you manage cookies used by www.devafashion-shop.com services, keep in mind that our services rely on cookies to function properly.

www.devafashion-shop.com will not use cookies for purposes other than those described in this policy.

For more information about cookies, you can consult widely used public resources dedicated to cookie information and browser cookie management.