The application of the General Data Protection Regulation in the European Economic Area, including Bulgaria, starts from 25 May 2018 - https://www.cpdp.bg/?p=element&aid=991. Its purpose is to provide the highest degree of protection for the personal data of all subjects – natural persons. The main rights of the data subjects, the protection of which MAISON ESTRELLA observes and ensures, are, not exhaustively:
Right of access to your personal data: you are entitled to receive a confirmation from us whether and to what extent we process your personal data, and if so, you are entitled to access them;
Right of correction of personal data: if you ascertain that the personal data that we process about you is incorrect, you are entitled to cause us to correct such personal data;
Right of deletion of personal data (the right to be forgotten): under specific circumstances, for example, if your personal data is processed illegally or if you have withdrawn your consent, you are entitled to request the deletion of your personal data from the systems that we use;
Right of objection against processing: you are entitled to object against the processing of your personal data by us;
Right of transferability of the data: if your personal data is processed using automatic means with your consent or with the purpose of complying with out contractual relationships, you are entitled to request that we provide your personal data in a machine-readable format for transfer to another personal data operator;
Right of submission of complaints to a control body: you are entitled to submit a complaint with regard to our processing of your personal data to the respective control body (Commission for Personal Data Protection); etc.
All data that can be used to identify any user of the Site (including any visitor) shall be deemed personal data. Such data can be e-mail, names, mobile telephone, home address, IP address, etc.
Collected and processed personal data
The personal data that you submit to MAISON ESTRELLA will be used in relation to your service as a customer, as well as for the processing and delivery of your ordered items, the establishment of contact with you and the provision of information in the form of an information bulletin, if you have given your explicit consent for the latter.
Types of collected and processed personal data
Data collected from registered users of the Site
Personal data for registration of the user – data submitted to us by the respective user upon registration on the Site, as specified in the General Terms and Conditions, in particular: name and surname of the customer, and valid e-mail address, as well as an individual password for each user (the individual password of the user is accessible and processed only by the third party processor Shopify, with whom MAISON ESTRELLA has a contractual relationship – in this regard, see section “Disclosure of your personal data to third parties” below);
Personal data for delivery of purchased items – name and surname of the recipient of the delivery; delivery address and contact telephone number;
Personal data concerning payments by the user – banking information; information about debit and/or credit cards (as specified in the General Terms and Conditions of the Site). This type of data is collected and processed by PayPal – a third party processor, with whom MAISON ESTRELLA has a contractual relationship – in this regard, see section “Disclosure of your personal data to third parties” below;
Data collected by reading cookies – for more information read section “Cookies policy” in the General Terms and Conditions of the Site;
Identifier of the browser used by the user;
History of searches in the categories of items offered on the Site, as well as history of your purchases;
Some types of behavior – for example, list of viewed advertisements according to their category and your interaction with them – presence of the advertisement in the visible part of your browser; clicks made; button presses to hide the advertisement; etc
Data collected from visitors (unregistered users) of the Sit
History of searches in the categories of items offered on the Site, as well as history of your purchases;
Some types of behavior – for example, list of viewed advertisements according to their category and your interaction with them – presence of the advertisement in the visible part of your browser; clicks made; button presses to hide the advertisement;
Data collected by reading cookies – for more information read section “Cookies policy” in the General Terms and Conditions of the Site; etc.
Purpose of personal data processing
We process the personal data submitted by you for various purposes, including, but not limited to:
Compliance with our obligations as a seller and supplier of items with the brand MAISON ESTRELLA
Provision of the Site functionalities in the most effective manner;
Provision of information, products or services, which you have requested from us;
Market analysis and statistical researches for internal purposes of MAISON ESTRELLA; etc.
Disclosure of your personal data to third parties
I.MAISON ESTRELLA and the Site use the popular e-commerce platform Shopify, in order to create and support its electronic store. In particular, the information we provide to Shopify can include: user names; e-mail addresses; delivery addresses; payment data; contact telephone; IP addresses; information about initiated orders (including incomplete orders); browser and device information, etc. The submitted information is used for administration of the orders placed, for fraud prevention (including with personal data), for authentication of registered users who have forgotten their individual password or user name, as well as for improvement of the services provided by the Site and the platform Shopify, including for performance of automated operations (using the so called “artificial intelligence” method for performance of automated operations).
For more information about the privacy rules applied by the platform Shopify, please visit the following link: https://www.shopify.com/legal/privacy.
II. MAISON ESTRELLA accepts payments using credit and debit cards (as listed in the General Terms and Conditions of the Site) for the items selected and purchase by you, whereas the payments are administered entirely and solely by a third party – PayPal, with whom MAISON ESTRELLA has a contractual relationship (PayPal processes personal data upon assignment by MAISON ESTRELLA, which processing guarantees the highest level of protection of the users’ personal data; for more information: https://www.paypal.com/us/webapps/mpp/ua/privacy-full). In fact, MAISON ESTRELLA does not have any direct access to your personal data related to payments through PayPal, because it is visible only for the processor PayPal.
III. We can disclose your personal data to other third parties – service providers, including, but not limited to, for the purposes of delivery of your ordered items by courier, sending of physical mail, e-mail, SMS, etc., or who provide services to us, for example, but not limited to, delivery of fabrics and tailor’s accessories, etc. Such disclosure is permitted, provided that the respective third parties need access to the data, in order to provide their services, but will not be allowed to use it for any other purposes, in particular for their own internal business purposes, unless there are legal grounds for it (compliance with contractual obligations; user consent; collaboration with the competent authorities; etc.).
In particular, with regard to the courier companies with whom MAISON ESTRELLA operates and respectively to whom it may provide access to your personal data, only for the purpose of delivery of your ordered items, they are, as follows:
Speedy (https://www.speedy.bg/bg) – for the territory of the Republic of Bulgaria;
FedEx (http://www.fedex.com/us/security/privacy-policy-us.html) – for the entire world;
TNT (https://www.tnt.com/express/en_gc/site/privacy-policy.html) – for the entire world.
MAISON ESTRELLA notes that in order to perform deliveries outside the EU/EEA the personal information of the users who ordered the respective items may be transferred to states outside the EU/EEA, whereby upon placing an order with a delivery address outside the EU/EEA you agree to such type of transfer of your personal data. The local laws in the jurisdiction of delivery outside the EU/EEA may not cover the standards of the laws in effect in the EU/EEA, of which circumstance you are considered duly informed. We recommend that you read the personal data processing policies of FedEx and TNT prior to placing an order that needs to be services by them on a territory outside the EU/EEA.
Withdrawal of consent for submission, processing and storage of personal data
In this regard you can contact us by telephone or e-mail, as listed in section “General Information” of the General Terms and Conditions of the Site.
After the user states their request for withdrawal of their consent for processing and storage of their personal data, respectively – cancelation of the registration made by the user, all of their data will be deleted from the system of MAISON ESTRELLA, so that MAISON ESTRELLA no longer has any access thereto.
MAISON ESTRELLA undertakes to implement appropriate technical and organizational measures, in order to ensure the security of your personal data in compliance with all imperative requirements of the applicable European and Bulgarian law.
All of the personal information about you, which we receive, is stored on servers of the e-commerce platform Shopify, whereas MAISON ESTRELLA does not own or operate its own servers.
The user shall be responsible for keeping the confidentiality of the selected individual password upon registration on the Site (if such was made).
Personal data storage period
The storage of your personal data will continue, as long as we have grounds for its storage, i.e. as long as we have a contractual relationship (including, until expiration of the warranty periods or other periods in accordance with the applicable law). Even after expiration of the aforementioned periods, we and the third party processors, with whom we have contractual relationships, may continue to store your personal data, in order to comply with statutory obligations, unless we receive your explicit request to forget and delete your data. We will continue to store anonymous or anonymized data, for example, but not limited to – site visits (without identifiers), etc., for the purposes of internal statistics, improvement of our services, etc.
Every single user can purchase from MAISON ESTRELLA without any concerns, because we make all efforts to ensure the security of your personal data and purchases.
If any conflicts arise between the user and MAISON ESTRELLA, they shall be settled in the spirit of mutual understanding and compromise, and failing that – the competent court to review and settle the dispute shall be the Bulgarian court, applying Bulgarian and European law.