MUSTAFF Ltd., Ruse, 2 Targovska Str., UIC 206640023 (hereinafter referred to as “MUSTAFF” or “we”), which manages the e-shop www.mustaffparfum.com, declares that all personal data (hereinafter only “Data”) are considered strictly confidential and are handled in accordance with the applicable legal provisions in the field of personal data protection.

The storage and security of your personal data is a priority for us. That is why we pay due attention to personal data and their protection. In this privacy statement (hereinafter only the “Declaration”) you will find information about what personal data we collect about you, on what legal grounds we process it, for what purpose we use it, how long we store it, to whom we can store it. we hand over. In the Declaration we also inform you about what rights you have in relation to the processing of your personal data.

1.     What personal data do we process?

Data required when using the services of our online store or sites (ie stores or places to receive goods), we process various of your personal data.

1.1. If you are shopping

The personal information you provide to us most often is obtained through the order form for goods or other services on our website. These are mostly data necessary for concluding the purchase contract.

This data is necessary for the execution of your order and can be divided into the following groups:

• Identification data, which are name and surname, and if you are shopping for a company – identification and tax number;
• Contact details, which are email address, postal address, billing address, telephone number, bank account details, payment details.
• Data arising from the current contract, in particular purchased products, volume of services provided, consumer segment.

1.2. If you are subscribed to receive commercial messages

If you wish, you can subscribe and receive commercial messages about favorite products that you have purchased from us. You can opt out of receiving messages at any time via the unsubscribe link found at the bottom of any email containing such messages. If you have a client account, unsubscribing is also possible through your account. Refusal of communication for advertising purposes is free of charge.

If you are a registered customer, you can also subscribe to receive commercial messages via email or push notifications. You can also receive push notifications containing commercial messages on Facebook, ie. on Messenger. This processing is guided by the Privacy Policy of the respective social network. You can opt out of receiving messages through these channels at any time.

If you are subscribed to receive such messages, we process the following data:

Identification data, in particular first name;

Contact details that allow us to communicate with you, in particular an email address.

Demographic data resulting from your settings and behavior on the website, which is data about gender and preferred language.

1.3. If you visit our website or create content on it

When you visit our website, we collect various information from you, such as your IP address, browser settings and preferred language, pages visited, and the time of the visit. In addition, we monitor your website traffic, what links you click on, so that we can best customize the content for you and offer you products and content that you like.

When you visit our site, we store cookies in your browser and device, which we then read and to which a separate chapter of this Declaration is dedicated.

In addition to cookies, we also process data about your behavior on our website, your IP address, the data provided by your browser and in particular the resolution, the operating system of your device and its version and language settings.

We are also able to connect you to social networks, including providing automatic login to your account in the relevant social network. To make this connection, in connection with the articles in the blog, our site uses the so-called. social plugins, i.e. sharing buttons that allow you to share the selected content in your account. Once connected, you may see personalized suggestions and targeted ads linking to our site on social media and other websites.

To take you even further into the world of beauty, we give you the opportunity to be active on our site and create content such as reviews of purchased products and determine their benefits or comments on blog articles. You do not need a client account to create such content. Your name and surname can be indicated next to your comments if you fill them in the form. You are responsible for the content you add and your activity on our site, so we urge you not to disclose personal data that you do not want to be publicly available.

Our website may contain links to other sites that we consider practical and contain useful information. Therefore, we would like to warn you that these sites may be owned and maintained by other companies and organizations that process personal data in accordance with their Privacy Policy. Our company has no control over this processing and is not responsible for any data, materials, products or services contained or accessible through these websites.

1.4. If you contact us on the client’s phone or through social networks

If you decide to contact us by phone or e-mail, we process primarily the records of telephone conversations that are monitored, as well as records of correspondence by e-mail.

If you contact us in connection with your request through our website or our account on certain social networks, the processing of your personal data is governed exclusively by the Privacy Policy of the company that manages the respective social network.

1.5. If you turn on the availability alert

If there is a product you are interested in, but it is not currently available, we offer you the opportunity to set up stock tracking. As soon as the product re-enters the warehouse, we will inform you about it with a message sent to the e-mail address specified by you, which we process for this purpose.

1.6. If you give us a rating in the rating portals

Upon receipt of goods, you may receive an invitation to evaluate the products and express your satisfaction through a selected evaluation portal. We are extremely grateful for any feedback, but it is up to you whether you decide to rate us or not. If you submit a rating, we process and transmit the following data to the relevant partners:

Contact details, in particular an email address used to send an evaluation invitation;

Data arising from the current contract, in particular purchased products.

1.7. If you participate in a user contest

Through our website or social network profile we organize for you attractive competitions in which you can participate. It is possible that the announcement of the winner will be public, which means that on our website or in our account in the given social network we can publish some data of the winner. Any action or communication with us through social networks and the processing of your personal data is governed by the Privacy Policy of the company that manages the respective social network.

If you enter a contest, we process the following personal data:

Identification data, which are name and surname;

Contact details, in particular your social media profile or email address, and when winning a prize also an address, postal address, billing address, telephone number to be sent to you.

1.8. If you take part in a user test or other events organized by us

If you participate in a user test program we offer, we may process the following data:

Identification data, which are name and surname;

Contact details, in particular your email address and telephone number;

Video surveillance recordings, ie your appearance.

We also organize for you various events and activities where we can process the following data:

Identification data, which are name and surname, possibly identification and tax number;

Contact details, in particular your email address and telephone number.

We will inform you about the specific personal data we process for each event.

2.     For what purpose do we process personal data?

2.1. Purchase of goods and services

The most common reason for processing your personal data is in order to fulfill a purchase contract, so that we can successfully process the order you have placed through our website, mobile application or customer’s phone, and send you the goods. The e-mail address and telephone number are used to send an order confirmation, confirm receipt of payment, send an electronic invoice, as well as to periodically inform about the status of your order and possibly other individual communication related to the specific order.

2.2. Marketing offers

For better information, we send you commercial messages for products similar to those you purchased from us. You can opt out of receiving these messages at any time using the unsubscribe link found in any email containing such messages. If you are a registered customer, we send you commercial messages via SMS or push notifications in our mobile application. You can also receive push notifications containing commercial messages on Facebook, ie. on Messenger. This processing is guided by the Privacy Policy of the respective social network. If you unsubscribe from receiving commercial messages, we will no longer use your electronic contacts for this purpose. Refusal of communication for advertising purposes is free of charge.

2.3. Customize and create content, improve the flow of the website

We want to adapt the content for you and deliver the goods you are interested in. For this reason, we use the personal information we collect to personalize the content and suggestions on our website. The marketing suggestions you see may be selected based on other information we have collected from you over time based on contact and demographic information, your favorite products, and other data related to the use of our website. We do not perform fully automated processing that would have legal consequences for you.

We process data about your behavior on our website, which allows us to obtain information on the basis of which we can continuously improve the site so that the user experience is as pleasant as possible for you. We may also use your personal information for various statistics, such as tracking traffic or measuring the performance of an ad, as well as testing new features on our website or mobile application. Information about your behavior on our website is also important to prevent any attacks on the website.

On our website, you can also create certain content. If you decide to write a review of the products you have purchased, we process your personal data in order to process and display the assessment in question. If you join the discussion to the articles in our blog and write us a comment, we process your personal data in order to process and display the comment in question.

2.4. Customer support and communication

One of our main goals is to improve the services provided by our customer service department, and in order to be able to respond as quickly as possible to your requirements and provide such service, we need your personal data to succeed. processing of your requests or elimination of potential problems in the execution of the purchase contract. When you contact us by phone, after we have warned you in advance, we will record the conversation with you so that we can continue to improve the quality of our services.

We also use the collected personal data for the purpose of communication with you and its individualization. For example, we may contact you by phone, email, mobile app, or other means to remind you that there are products in your cart or to help you complete your order. Also to inform you of the current status of your request, order or complaint or possibly to obtain additional information. We may also warn you that you must take the action necessary to maintain the active status of your client account.

2.5. Notification of availability of goods

Когато настроите следене за наличността на изчерпана стока, в момента, в който продуктът отново постъпи в склада, ще ви информираме за това със съобщение, изпратено на посочения от вас имейл адрес.

2.6. Determination of satisfaction with the help of assessment portals

In connection with the purchase, you can also receive an evaluation invitation through an evaluation portal. In this case, the purpose of the processing is to establish satisfaction.

2.7. Consumer competitions

If you decide to participate in a competition organized by us, we process your personal data in order to carry out the competition, and if you win a prize – in order to publicly announce the winner and contact you.

2.8. User tests and event organization

If you take part in a user test program we offer, we process your personal data in order to test new or existing features of our systems.

If you take part in events that we organize, we process your personal data in order to plan, implement and evaluate the events organized.

2.9. Improving services

We use your personal data to continuously improve our services and systems, as well as to add new features. We also process personal data in order to make informed decisions, using aggregated analysis and business intelligence in relation to our legitimate interest, which stems from the freedom to do business and consists in the need to improve services in order to succeed in the economic race. But in order to ensure sufficient protection of your rights and interests, we use for this purpose personal data that is anonymized as much as possible.

2.10. Protection, safety and dispute resolution

We may also store your personal information in order to ensure the protection and security of our customers and systems, to assert our rights and legal claims, to identify and prevent fraud, to resolve disputes or to validate our agreements. In addition, we may process personal data for possible verification by public authorities.

3. On what legal grounds do we process personal data?

We process personal data in different volumes and for different purposes, described in detail in Art. 1 and 2 above, namely:

1. a) Without your consent on the basis of performance of a contract, performance of a legal obligation or our legitimate interest;

б) Based on your consent

The types of processing of personal data that we may perform without your consent derive from the specific purpose of the processing, as well as from the position you are in relation to us – whether you are just a visitor to our website, whether you shop from us or register . The processing of your personal data may also occur if you are the addressee of an ordered product, if you communicate with us or if you visit our store.

3.1. Execution of a purchase contract

When you place an order or shop with us, a proposal for a purchase contract arises, which is concluded with the acceptance of the offer by us in the form of sending the ordered goods. In order to be able to successfully perform this contract, or another contract for goods and services, we need a large part of your personal data entered using the order form. The specific data that we process in this case are specified in Art. 1, para. 1 and 5.

3.2. Fulfillment of legal obligations

In addition, we must comply with certain conditions imposed on us by existing legal norms. We do not need your consent to process your personal data on the basis of these obligations. Based on this legal basis, we process your identification and contact details as well as your order details. The specific data that we process in this case are specified in Art. 1, para. 1.

3.3. Consent

For the purpose of sending commercial messages by e-mail, we may process your data with your consent. Based on your consent, we process them in case we do not process them on the basis of a legitimate interest. You can withdraw your consent at any time and unsubscribe from receiving commercial messages. The specific data that we process in this case are specified in Art. 1, para. 3.

We also want your consent in case you plan to post a review of purchased goods or a comment on the blog, if you set up the availability tracking feature or take part in a user test or other event. And in these cases, of course, you can withdraw your consent at any time. The specific data that we process in this case are specified in Art. 1, para. 4, 7 and 10.

3.4. Legitimate interest

Your personal data may also be processed on the basis of a legitimate interest so that we can improve and adapt the services offered, determine whether you have been satisfied with the execution of orders, and advertise the goods and services offered more effectively. This is the data specified in Art. 1 para. 4 and 5.

Based on a legitimate interest in direct marketing, we may also send you commercial communications about products similar to those you have already purchased from us. This is only possible if you do not object to such processing. However, if you are a registered customer, we send you commercial messages based on the performance of the contract. The specific data that we process in this case are specified in Art. 1, para. 3.

It is also in our legitimate interest to protect our legal rights, our internal records and to verify the proper performance of our services. In this case we process all categories of personal data specified in Art. 1.

Our legitimate interest is also expressed in sending an invitation to evaluate a purchase through an evaluation portal, or evaluation of the consumer competitions organized by us. The specific data that we process in this case are specified in Art. 1, para. 8 and 9.

The processing of your personal data on the basis of a legitimate interest also happens in case you visit our stores, which are monitored through a video surveillance system in order to protect the property. You can object to this processing at any time. The specific data that we process in this case are specified in Art. 1, para. 6.

4.   To whom do we transfer personal data?

We process your personal data, in most cases for personal purposes as their administrator, which means that we determine the above purposes for the collection of your personal data, determine the means for their processing and proper implementation.

We pass on your personal data to our partners only in cases where this is necessary within the framework of the execution of a purchase contract, for example to make a payment or delivery.

We also pass on your personal data to our data processors, who, of course, comply with the legal conditions for the protection of personal data. These persons process personal data in accordance with our instructions and this processing does not affect your rights in any way. With your consent, we may also share your personal information with social media or marketing tool providers to display targeted advertising on other websites.

4.1. Recipient categories

We may transfer your personal data to the following subjects:

To companies offering payment services for the purpose of processing payments on your orders, ie. performance of the purchase contract;

To transport companies for the purpose of delivery of the products or services ordered by you and settlement of claims, including termination of the purchase contract;

To the suppliers of goods or service centers in connection with a claim for a product or service ordered by you;

To partners who send commercial messages who have an obligation of confidentiality and are not allowed to use your personal data for any other purpose;

To the providers of marketing tools; which help us customize suggestions and content;

On social networks, if you communicate with us through social networks or share content using social plugins;

The vendors of the communication tools of the customer service department with you, or of an external call center;

To partners assessing customer satisfaction;

To technology and cloud service providers;

To legal or financial representatives and courts for the purpose of processing tax documents, collecting receivables or other reasons arising from the performance of our legal obligations;

To the public authorities, in case we claim our rights (for example to the police).

If third parties use your personal data in the interests of their own legitimate interests, we are not responsible for such processing. This processing is governed exclusively by the Privacy Statement of the companies and individuals concerned.

4.2. Data transmission outside the EU

When transferring your personal data to our data processors, in some cases we may also transfer your personal data to third parties who are not part of the European Union and who do not provide the appropriate level of personal data protection. Such transfer on our part will only take place if our data processor undertakes to comply with the standard contractual declarations issued by the European Commission, which you can find here.

5. For how long do we process personal data and how is it protected?

5.1. Processing time

We mainly process your personal data for the period of validity of our contractual relationship, ie. the contract of purchase. We are obliged to process the personal data that are necessary for the fulfillment of all our obligations, regardless of whether they are obligations arising only from the conclusion of a contract between us or general legal norms, for the period established by the respective legal norms or in accordance with them. . For example, in the accounting documents issued by us, as an administrator, we are obliged to store the data about you for at least 10 years from the date of issue.

First of all, we process personal data for the period of validity of the contractual relationship. In addition, we process personal data for the period necessary to be able to properly fulfill all our obligations arising from the concluded contracts and the generally applicable legal norms. For example, in the accounting documents issued by us, we are obliged to store the data about you for at least 10 years.

As part of the fulfillment of your requests and the provision of quality customer service, we process your personal data after concluding a contractual relationship, including up to 1 year from the expiration of the warranty of the purchased goods due to the resolution of any disputes.

If you communicate with us through our customer service department, we store your personal data from the communication for 2 years, including the records of the conversations that are monitored.

If you give us your consent to send commercial messages, it is valid for a period of 4 years or until its withdrawal. In addition, if you consent to us being informed of the availability of the goods you are tracking, the consent is valid until information on availability is sent, but for a maximum period of 1 year or until it is withdrawn. The consent given by sending your product review is valid for a period of 6 years or until its withdrawal. If you participate in the creation of the content of the articles in our blog, the consent given by sending a comment to the articles is valid for a period of 2 years or until its withdrawal. If you decide to take part in a user test or other events that we organize and give your consent, we will process your personal data for 1 year or until the withdrawal of consent, and this also applies to video surveillance or audiovisual recordings, if there are some.

In case you take part in competitions organized by us, we process your personal data for 1 year. If you visit our store or other premises of our company and the space around them, we process the recordings from the cameras within a period of 90 days after the date of the recording.

In other cases, the period of processing of your personal data derives from the purpose of the processing or is determined by special legal norms in the field of personal data protection. After the expiration of the set processing periods, your personal data is automatically deleted.

5.2. Protection

The personal data that we have collected about you and that we process reaches us in encrypted form, using an SSL (secure socket layer) encryption system for this process. It is this system that ensures that your personal data is secure when your browser communicates with our server. Our website and the other systems we work with are protected by appropriate technical and organizational measures from the loss and destruction of your personal data, from access by outsiders to your personal data and from their alteration or distribution.

We periodically improve protection by requiring our data processors to demonstrate the compliance of the systems they use with the GDPR.

If you register, access to your client account is possible only after entering the password of your choice. We do not have access to your password because we store it in an encrypted form that cannot be decrypted even by us.

Please note that it is mandatory not to disclose your access data to third parties. Once your client account activity is complete, we recommend that you sign out of it, especially if you share the device with other users. We are not responsible for any misuse of your password, unless we have directly caused such a situation.

6. How do we use cookies?

In order for our website to function properly, we also use cookies so that our offers can be adequate, interesting and easy to use. In order to be able to use cookies, the browser you use must support them. Our website works without cookies, but in a very limited volume and without the ability to use some basic functions.

Cookies are a standard tool for storing information related to the use of websites.

Cookies are small text files that are created automatically when you visit each website and that are stored in the browser you use on your computer or other device. Thanks to some cookies, we are able to link your activity to our website until you turn off your browser. By turning off the browser window, these cookies are automatically deleted.

There are other types of cookies that remain in your browser or device for a preset period of time and are activated each time you visit our website. In addition to cookies, we also use the so-called. tracking pixels, which are small images invisible to the average user that work on a similar principle as cookies. The period of time for the cookies to remain in your browser or device depends on the settings of the cookies themselves, as well as on your browser. We store the data received from the cookies for a maximum of 1 year.

6.1. What cookies do we use?

The cookies we use on our website can be divided into 2 main types:

Short-lived, the so-called. “Session cookies”, which are deleted immediately after the end of the visit to our website;

Long-lasting, the so-called “Persistent cookies” that remain in your browser or device for a period of time or until you remove them manually.

Depending on their functions, we can divide the cookie files into the following types:

Basic, which are technical and functional cookies, important for the basic functioning of the website. Without these cookies, you cannot put goods in the basket, send orders or log in to your customer account.

Analytics that help us increase the user convenience of our website by understanding how users use it. In addition, they allow us to analyze the impact of different sales channels.

Remarketing, which we use to customize the content of our ads and target them properly.

In practice, we use the above cookies, for example, to:

Proper functioning of the basket so that you can complete your order as easily and quickly as possible.

To save your login information so you don’t have to re-enter it.

The best possible adaptation of our website to your requirements thanks to the tracking of visits, your website traffic and the functions you use.

Get information about which ads you’re viewing so that we don’t show you ads for products that don’t interest you in the future.

Some cookies as well as their content may collect information that may subsequently be used by third parties and that may, for example, directly support our advertising activities (so-called “third party cookies”). For example, information about products purchased from our website may be displayed by an advertising agency as part of displaying and customizing advertising banners on websites you visit. However, these third-party cookies are anonymized and cannot be identified from this information.

6.2. How can you restrict cookies?

You can use your browser to completely reject cookies or just limit them to the types you choose. The settings for the use of cookies are part of the internet browser you use, and in most browsers the initial settings accept cookies. This will also limit the operation of our website and you will not be able to use the features we offer in full, including logging into your client account.

It is also possible to use anonymous browser mode, which does not completely prevent the use of cookies, but anonymizes them better and does not save the history of visited websites.

You can find information about the options for setting up cookies on the link below or in other documents of Internet browsers:

Chrome

Firefox

Internet Explorer

Android

Iphone and Ipad

You will also find an efficient tool for managing cookies on the website https://www.youronlinechoices.com/bg/.

7. What are your rights and how can you claim them?

Just as we have rights and obligations in the processing of your personal data, so you have your rights that you can claim. Among them are:

7.1. Right of access

You also have the right to request free information about the processing of your personal data – what data we process about you, for what purpose and for what period, where we receive your data and to whom we transmit it. As part of the right of access, you can ask us to send you a structured, machine-readable format of the processed data. Once we have properly verified your identity, we will be happy to generate a copy of the Personal Data Protection Officer’s e-mail address (hereinafter referred to as the “Proxy” only) info@mustaffparfum.com

7.2. Right of correction

If you find that the data being processed is incorrect or incomplete, you have the right to request that it be corrected. We will correct or supplement your data without undue delay. All you need to do is send an email to the Proxy address info@mustaffparfum.com

7.3. Right of deletion

There may be cases in which you want to use your right to delete your personal data that we process. In this case, we delete or anonymize your personal data without undue delay. However, this does not apply to those personal data that we need to fulfill our legal obligations and whose storage we are assigned by legal norms (eg the execution of an order already submitted), or the protection of our legitimate interests. Personal data is also deleted if the relevant data are no longer necessary for the respective purpose or if the storage of your personal data is inadmissible for other reasons established by law. You can ask the Commissioner to delete your personal data via email info@mustaffparfum.com

7.4. Right to limit processing

You have the opportunity to exercise your right to restrict the processing of your personal data that we process. You may request that personal data of your choice not be further processed for a limited period of time. You can ask the Commissioner to limit the processing of your personal data via email info@mustaffparfum.com

7.5. Right of portability

There are cases in which you have the right to receive from us all personal data that you have provided to us and which we process on the basis of your consent. We will provide you with personal data in a structured and machine-readable format. We will be happy to generate your data in such a format, you only need to send a request to the email address of the Proxy info@mustaffparfum.com

7.6. Right to object to the processing

You can object to the processing of your personal data, which is based on our legitimate interest. When it comes to processing for marketing purposes, we will stop processing your personal data without undue delay. But in other cases we will do so after a reassessment of our legitimate interests and your rights and arguments. You can file an objection to the processing by sending a request to the E-mail address of the Proxy info@mustaffparfum.com

7.7. Right to file a complaint

The application of the above rights and procedures does not in any way affect your right to lodge a complaint with the relevant supervisory authority. You can use this right especially if you believe that we process your personal data illegally or in violation of general legal norms. The competent authority that deals with customer complaints is the Commission for Personal Data Protection based in Sofia 1592, Blvd. “Prof. Tsvetan Lazarov ”№ 2.

Contact us

In the event of any questions, comments and requests related to this Statement and the processing of your personal data, you may at any time contact the Data Protection Officer, to whom you may contact via email info@mustaffparfum.com. Your application will be processed without undue delay, but within 30 days at the latest. In exceptional cases, especially in view of the complexity of your request, we have the right to extend this period by another two months. In case of such extension we will inform you about it and the reasons.

Do not hesitate to contact us also on our customer phone number listed at the end of this Declaration.

Contact: MUSTAFF LTD,

Ruse, 2 Targovska Str.,

Customer service: tel .: +359 893 035 253 or info@mustaffparfum.com

9. Validity

This Privacy Statement is valid and enters into force on 10.06.2022. The previous version of this Declaration, valid until 10.06.2022, can be found here.