My Basket | Политика за сигурност

This document contains the Policy for the security of personal data of individuals (Policy) and is an integral part of the General Terms and Conditions. Unpleasant, but in case you do not agree with the General Terms and Conditions, there is no possibility to enter into contracts with Premier Cosmetics Bulgaria Ltd. If the Policy changes, the changes will be posted here.

Your privacy is extremely important to us. This Security Policy discloses what personal data we collect from you through our joint relationship and how we use that data.

With the purpose for the purpose of concluding and executing the contract for distance sales and delivery of the ordered goods on the site www.mybasket.bg, PREMIER COSMETICS BULGARIA Ltd (WE), with management address: Sofia, Yuzhen Park, bl. 28, entrance B, ground floor, Company ID: 202766882, processes personal dat (DATA SUBJECTS "YOU"), in accordance with this Policy.

PREMIER COSMETICS BULGARIA Ltd is the data controller regarding the information collected when browsing this site and purchasing our products. In the processing of personal data, PREMIER COSMETICS BULGARIA Ltd complies with all legal acts on the protection of personal data applicable to its activity, including, but not limited to, Regulation (EU) 2016/679 (Regulation) and the Personal Data Protection Act, because for us the security of the personal data of our customers is of primary importance.

According to the Regulation, personal data is any information that relates to you and by which you can be identified or have already been identified. Processing of personal data (“Processing”) is any action or set of actions that may be performed with respect to personal data by automatic or other means.

I. Categories of subjects whose personal data WE process:

In connection with the conclusion and performance of contracts, WE process information about the following data subjects:

- Users of the Site without registration;

- Users of the Site with registration, as Customers;

- Users who sent inquiries (including by calling), requests, signals, complaints or other correspondence to PREMIER COSMETICS BULGARIA Ltd;

(d) Users with whom WE conclude contracts for the online sale of goods.

II. Personal data we process:

1. Which You Provide:

It is impossible for us to provide you with our Services or enter into a contract with you and execute it if you do not provide us with information. In this regard, we require certain information from you. You decide whether and how to use our services or whether to to conclude a contract for the online sale of goods provided through the Site. In the forms through which personal data is entered, we clearly indicate the mandatory or voluntary nature of providing the data. The data, the filling of which is mandatory, are those without which it is impossible to conclude the relevant contract. These are pretty simple things:

- First and last name;
- E-mail address;
- Current address for correspondence;
- Contact phone number.

Correspondence, complaints and reports

In order to resolve submitted complaints, signals, disputes, inquiries, requests or other questions addressed in communication to PREMIER COSMETICS BULGARIA Ltd, made through electronic forms on the Site, by calling the specified phone for a connection on the Site, by sending by regular or e-mail, We store and process this information, as well as the result of this processing.

Subscriptions

The Site allows you to subscribe and receive notifications on your e-mail address about new ads published on the Site, with criteria chosen by you. The service can be used with or without registration. In case you use the service without registration, you need to provide an email address where you wish to receive the subscription. Subscription can be terminated at any time.

Special categories of (sensitive) data

The functionalities provided on the Site are not intended for storage and processing of special categories of data within the meaning of Art. 9 and Art. 10 of the Regulation.

Other data

PREMIER COSMETICS BULGARIA Ltd may also process other data relating to you, in cases where you voluntarily provide such data by filling in the relevant electronic consent form on the Site, add preferences, settings etc.

2. Which are related to the process of using the Site

In addition, we collect information from your computer, phone, tablet or other device you use. This information may include, for example, data about your IP address, the browser you use, etc. Also, there are situations where we receive information from our other partners or automatically collect other information

IF THE DESCRIBED BELOW IS FOUND:

Quick links to repeat previous searches allow you to repeat your searches instead of typing them each time. The functionality can be used with or without registration. When using the Site, a cookie with a randomly generated number is stored in your browser, enabling the Site to show you quick links for repeating previous searches. The site stores and displays the last 10 searches associated with this browser, and when you log in to your account, you can save and use them in it. In case you use the Service with registration, the last 10 searches are stored in your account.

Logs related to security, technical support, development, etc.

The Site uses logs for the following purposes:

- To ensure the reliable functioning of the Services and to identify technical problems;
- To ensure the security of the Services and detect malicious actions;
- To develop and improve the Services on the Site;
- To measure the attendance and usability of the Site;
- Logs in cases where this is required by law (such as logs of electronic agreements).

Account login log. This log makes it possible to detect and automatically block unregulated attempts to access accounts. It is maintained for a period of up to 1 /one/ year, containing the date and time of the account login, status, whether the login was through a mobile version, application or desktop browser, IP address.

Server logs, logs of security protection devices (Web Application Firewalls), etc. devices falling into this category. These logs are necessary to diagnose technical problems, detect malicious actions, etc. of the above objectives. They are stored for a period of up to 1 /one/ year. Logs may contain the following information: date and time, IP address, URL, browser and device information. In addition, some of the devices may use cookie-based security technology.

III. For what purposes we process your personal data:

The main purpose for which WE process your personal data is generally related to conclusion and execution of contracts for the online sale of goods. We also use your personal data to contact you and inform you about our latest offers and special offers, as well as other products and services that we think will be of interest to you.

PREMIER COSMETICS BULGARIA Ltd collects, uses and processes the information described above for the purposes provided for in this Policy, which may be related to:

- the conclusion of the contract for online sales between you and PREMIER COSMETICS BULGARIA Ltd - we require your identification, contact and payment data in order to conclude a contract with you;

- the fulfillment of legal obligations of PREMIER COSMETICS BULGARIA Ltd;

- performance of the concluded contract (please note that we may retain your data for a reasonable period of time after you have completed the transaction in order to fulfill any contractual obligations such as refunds, warranties, etc., and to fulfill all legal obligations to retain transaction data);

- informing you about products and services for which you want us to send you information by e-mail, post, mobile phone and / or through other digital means (depending on your stated preferences), including social media platforms;

- your registration on the website (in which case We will also use your personal information to maintain and update your profile (for example, such as a change of address or a change in your marketing preferences);

Our legitimate interest in the processing of your personal data arises from the need to ensure the protection and protection of the legal interests of PREMIER COSMETICS BULGARIA Ltd and/or third parties, which is related to:

- ensuring the normal use of the Site by you and other users, resolution of disputes, detection and prevention of malicious actions.

- detection and resolution of technical or functionality problems, development and improvement of the purpose of the Site.

- carrying out communication with you, including electronically on important issues related to the conclusion and execution of contracts.

- receiving and processing received signals, complaints, requests and other correspondence;

- implementation and protection of the rights and legal interests of PREMIER COSMETICS BULGARIA Ltd, including by court order, and providing assistance in the implementation and protection of the rights and legal interests of other users of the site and/or affected third parties.

For these purposes, it may be necessary to process some or all of the above categories.

Our legal obligations include the fulfillment of obligations provided for by law to preserve or provide information upon request of a relevant institution from competent state or judicial authorities, when providing the authorities the control to fulfilling obligations provided for in the Regulation on protection of personal data related to notifying you of various circumstances related to your rights, the Services provided or the protection of your data, etc. For these purposes, it may be necessary to process some or all of the above categories.

Your data may be processed on the basis of your express consent, and the processing in this case is specific and to the extent and scope provided for in the relevant consent.

IV. How long do we keep your personal data?

When storing data, WE apply the general principle of storing data in a minimum volume and for a period not longer than the necessary performance of the contracts, ensuring their security and reliability and the requirements of the law.

Data types

Storage period

Clarifications

Registration data (such as first name, last name, email address) and information about registration and agreement to the Terms (date, time, IP address)

For the entire period of maintaining the account on the Site and up to 1 /one/ year from termination of registration

The data identifies you as a party to the Online Sale Agreement on the Site. In order to resolve possible disputes after the termination of the agreement for the use of the Site and in connection with ZEDEUU (see below), this data is stored for a period of up to 1 /one/ year after the termination of the account.

Subscriptions for notifications of new ads with selected criteria or from selected companies (email address, criteria)

For the period for which the subscription is active, until its termination and/or the account is closed

The Site enables you to subscribe and receive notifications to your e-mail address about new ads published on the Site, with criteria you choose (such as town, business category, keywords, etc.) or from Employers you choose. The service can be used with or without registration. In case you use the service without registration, you need to provide an email address where you wish to receive the subscription. Subscription can be terminated at any time.

Automatic login

For a period of up to 6 /six/ months from the last entry to the Site

This option allows you to automatically log in to the Site from a computer on which you have selected this option. You should not use this option if anyone other than you has access to this computer.

Settings

Until they are deleted by you or until your registration is terminated. In case they are stored in a cookie, up to 6 /six/ months from the last use

This category includes settings such as language selection, etc.

Account login log (contains date and time of account login, status, whether login is via mobile version, app or desktop browser, IP address)

For a period of up to 1 /one/ year from the last login or until the account is closed

This log makes it possible to detect and automatically block unregulated attempts to access accounts.

Correspondence, complaints and alerts, requests, incoming phone calls

Correspondence, complaints and signals are stored for a period of up to 5 /five/ years.
In order to ensure the reliability of the service, incoming telephone calls are stored for a period of up to 3 /three/ months

In order to resolve submitted complaints, signals, disputes, inquiries, requests or other questions addressed in communication to Us, received through electronic forms on the Site, by calls to the telephone exchange of PREMIER COSMETICS BULGARIA Ltd, by sending by regular or electronic mail. We store and process this information, as well as the result of this processing. Given the statute of limitations according to Bulgarian legislation for the purpose of resolving disputes, this information is stored for a period of up to 5 /five/ years.

When you make a purchase through our website, we will retain certain limited personal information, such as your name, email address, shipping address, until you ask us to update or delete this information.

We will retain your information for a short time after the specified retention period to allow information review and possible deletion.

In the event of a legal dispute or proceeding requiring the retention of data and/or a request from a state authority, it is possible to retain data for longer than the specified terms until the final conclusion of the dispute or proceeding before all instances. The stated terms may be changed in the event that a different requirement to retain the information is established under current legislation.

Backups

In order to ensure the reliability of the Services and to prevent data loss for technical reasons, the Site applies a data redundancy policy. The maximum update period (including data deletion) of all backups is 30 days.

V. Do we share your personal data with third parties?

PREMIER COSMETICS BULGARIA Ltd does not provide your personal data to third parties, in any other way, except in the cases described in this Policy and provided by law. To provide the best conditions under the contracts with our partners, WE provide your personal data to:

- our employees;
- suppliers, business partners and subcontractors;
- competent state or judicial authority, if duly requested;
- persons for whom we have your express consent to provide your personal data;
- our third-party advertisers.

When working with the above-mentioned categories of persons to whom we provide your personal data, WE require them to strictly follow our instructions, in accordance with this Policy.

In the event of a merger, acquisition or sale of assets affecting the processing of personal data, you will be notified in advance.

We may also disclose your personal data when we have a legal obligation to do so in connection with the prevention or detection of crime in order to establish, exercise or protect our legal rights or when we believe we receive a valid request for disclosure. This also includes sharing information with other companies and organizations for the purpose of fraud protection and credit risk reduction.

VI. Your rights in relation to personal data

According to the General Data Protection Regulation, you have the following rights:

Right of information

This Policy aims to inform you in detail about the processing of your personal data.

Right of access

You have the right to receive confirmation as to whether your personal data is being processed, access to it and information about how it is being processed and your rights in this regard. Such access can be obtained at any time by completing an online request on the Site.

Right to correct

You have the right to correct your personal data if it is incomplete or inaccurate. You have the option to request us to correct your data at any time by completing an online request on the site.

Right to erasure (right to be forgotten)

You have the right to request deletion of data, except in cases where there is a substantial reason and/or legal obligation for their processing.

Account closure

In case you wish, you have the possibility to close your account at any time, through the option provided for this.

After closing the account, all data, part of it, is deleted. In connection with our obligations, responsibilities and requirements of the law for a period of up to 1 /one/ year are stored for the purpose of resolving possible disputes after the account was closed.

In order to ensure the reliability of the services and to protect against data loss for technical reasons, the Site applies a data redundancy policy. The maximum update period (data deletion) from all backups is 30 days.

Right to restriction in relation to data processing

The General Data Protection Regulation provides the possibility to restrict the processing of your personal data if there are grounds provided.

Right to notify third parties

If applicable, you have the right to request the Administrator of your personal data to notify the third parties, when they have provided your data, regarding the correction, deletion or restriction of the processing of your personal data.

Right to data portability

You have the right to receive the personal data concerning you that you have provided in a structured, widely used and machine-readable format and you have the right to transfer this data to another controller without permission from us, in case the processing is based on consent or contractual obligation or the processing is automated.

Right to withdraw consent

You have the right, at any time, to withdraw the consent you have given in connection with the processing your personal data on the basis of your consent. Such withdrawal does not affect the lawfulness of the processing based on the consent given until the time of its withdrawal.

In the case of services such as the subscription to e-mail announcements, for which the subscription is made on the basis of your will (consent), the possibility of unsubscribing at any time (withdrawal of consent) is provided.

Right to object

You have the right to object to data processed on the basis of legitimate interest.

In the event of such an objection, We will consider Your request and, if justified, We will comply with it. If we believe that there are compelling legal grounds for the processing or that it is necessary for the establishment, exercise or defense of legal claims, We will inform you.

Right of appeal to a supervisory authority

You have the right to submit a complaint with the supervisory authority if you consider that the processing of personal data concerning you violates the applicable legislation on the Protection of personal data. The supervisory authority in the Republic of Bulgaria is the Commission for the Protection of Personal Data with address: Sofia 1592, Prof. Tsvetan Lazarov 2.

In the event that you exercise these rights manifestly unfounded or excessively, in particular due to their repetition, PREMIER COSMETICS BULGARIA Ltd reserves the right to impose a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the required action, or refuse to take action on the request.

VII. Accuracy of information

PREMIER COSMETICS BULGARIA Ltd is not responsible for the accuracy of the data provided by you, does not carry out checks in this sense and does not guarantee the actual identity of the individuals who provided the data. In all cases of doubt on your part, of established fraud and/or abuse, please notify us immediately. You undertake, when providing any information on the Site, not to violate the rights of other individuals in connection with the protection of their personal data or their other rights.

VIII. How we protect your personal data

In order to ensure the best possible data protection of the company and its customers, WE implement all necessary organizational and technical measures provided for in the General Data Protection Regulation and the Personal Data Protection Act, as well as the best practices from international standards.

The company has adopted the necessary rules and procedures related to the lawful processing of your personal data, including an action plan in the event of a data security breach, has established structures to prevent abuses and security breaches.

For maximum security when processing, transferring and storing your data, we may use additional protection mechanisms such as encryption, pseudonymization, etc.

IX. Contacts

Questions and requests related to the exercise of the rights to protect your personal data can be addressed to PREMIER COSMETICS BULGARIA Ltd:

Correspondence address: Yuzhen Park residential complex, bl. 28, ground floor
Email: sales@basket.bg
Phone: 0887 559950