No products in the cart.
Return To ShopRULES FOR THE PROCESSING OF PERSONAL DATA OF MECHTA A-YA EOOD
https://denimbg.com/
Basic information
It is essential for us to protect your personal data and to process it in accordance with the rules provided for in the legislation, in particular with the General Regulation on the Protection of Personal Data of April 27, 2016. (General Data Protection Regulation of 27 April 2016 – “GDRP”).
Our goal is to provide you with detailed information and the ability to control the processing of your data, as well as to provide tools through which you can exercise your rights arising from legal provisions. Below you will find information about how we process your personal data, how we take care of their security, with whom we share it and what rights you have. If you have additional questions regarding the use of your data, please ask us at the following email address: mechtaya@abv.bg
How do we get your data?
We use your personal data because you decided to shop in our online store https://denimbg.com/ ("The Store") you have either consented to receive information about our offers electronically at the email address provided by you, or you have provided us with your data in another way while using the Store's website.
Who is the controller of your personal data?
The administrator of personal data is “Mechta A-YA” Company with its registered office and management address in Sofia city, zip cpde 1220, Nadezhda district, Nadezhda-2 residential complex, Aprilsko Vustanie 3 Str., 2nd floor, apt. 10.
How can I contact the Data Protection Officer?
To contact our Personal Data Protection Officer, write to us at mechtaya@abv.bg or call the 0886305799.
DEFINITIONS
Personal data administrator
Administrator means a natural or legal person who determines the purposes and means of personal data processing. The administrator is responsible for establishing practices and policies in accordance with applicable data protection laws;
Personal Data means any information relating to an identified or identifiable natural person ("data subject");
A data subject is any natural person who is identified or identifiable and to whom the personal data relates. An identifiable natural person may be identified directly or indirectly, in particular by reference to identifiers such as name, identification number, location data, online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
For the purposes of these Rules, Data Subjects may be customers, as well as other persons whose personal data may be processed by the Store. Processing of personal data means any operation or set of operations carried out with or without automatic means in relation to personal data, such as collection, recording, organization, storage, adaptation or modification, retrieval, reference, use, disclosure by sending, distribution or otherwise provide, arrange or combine, block, delete or destroy. Automated decision-making (decision-making by automated means only, without human intervention) means any form of automated processing of personal data consisting of the use of personal data for the assessment of certain personal aspects relating to an individual, including the assessment of personal data relating to the individual solely on the basis of automatic processing which gives rise to legal consequences for him or affects him equally significantly.
HOW DO WE PROCESS YOUR PERSONAL DATA?
If you use our Store, we will process your personal data for the following purposes:
1. In order to fulfill contracts concluded with you for the purchase of goods from the Store - the basis for the processing of your data in this case will be the Contract concluded with the Administrator by accepting the Rules of the Store. For this purpose, we will require a large amount of data from you, but only those that are necessary for the execution of the sales contract and delivery of the purchased goods; the provision of your data for this purpose is not mandatory, but is necessary for the execution of the Agreement;
2. For the purposes of managing your profile on the Store page - the basis for the processing of your data in this case will be the Agreement concluded with the Administrator by creating a profile and accepting the Rules of the Store. Creating an account in the Store will provide you with access to the data provided by you, including the history of your purchases, and will give you the opportunity to exercise certain rights related to data processing; the provision of your data for this purpose is not mandatory, but is necessary for the execution of the Agreement;
3. In order to carry out complaint procedures - in this case, the basis for processing the data is the obligation of the Administrator, arising from the prescriptions of the law, in connection with the responsibility for discovering defects of the sold goods. The provision of data in the complaint form is necessary for the proper consideration of your complaint;
4. If you express separate consent, we will send to the e-mail address provided by you commercial information about goods offered in the Store, including our promotional offers - in this case, the basis for the processing is your consent, which is not mandatory and you can you can withdraw it at any time by contacting us via the above address details or by clicking on the link we provide in every e-mail we send with commercial information. Withdrawal of consent does not affect the lawfulness of data processing from the period before the withdrawal.
5. If you express a separate consent, we will send to the mobile phone number specified by you commercial information about goods offered in the Store, including our promotional offers - in this case, the basis for data processing is your consent, which is not mandatory and you can withdraw it at any time by contacting us at the above address details. Withdrawal of consent does not affect the lawfulness of data processing from the period before the withdrawal.
6. In order to send you individual marketing messages on the Store's website, for example, in the form of an offer to purchase goods, using profiling. The messages will be sent based on an analysis of your purchases - the basis for processing your data in this case will be the Company's legitimate interest in advertising the goods offered by the Store, which may be both the Administrator's and its suppliers';
7. For marketing purposes - to the contact address provided by you, we may sometimes send information about the offers of our business partners. The basis for the processing of your data in this case will be a legitimate interest - ours or our partners', consisting in advertising the goods offered by the Store. You can at any time object to the processing of your data for such a purpose and we will stop processing them. You can make such an objection by contacting us at mechtaya@abv.bg or 0886305799.
8. For the purposes of statistics and for the needs of the internal commercial activity of the Administrator - in this case, the basis for the processing will be a legitimate interest of the Administrator, consisting of collecting information that allows the development of its commercial activity and its adaptation to the needs of users ;
9. In order to ensure the fulfillment of our obligations, to make legal claims or to defend ourselves against those made against us, or to prevent or detect fraud - the basis for the processing in this case will be a legitimate interest of the Administrator, namely the protection of his rights, the confirmation of the fulfillment of his obligations and the receipt of remuneration due from customers. We value transparency in the processing of your personal data. In case you have any questions regarding the process or the rules of processing, please contact us. We process your data in accordance with the law and ensure that they remain up-to-date and correct. That is why from time to time we will remind you about the need to update the data by sending you a message to the e-mail address you provided. Your personal data will not be processed for the purpose of automatic decision-making without your express consent.
Is it mandatory to provide personal data?
The decision whether to provide us with your data and which data is yours; however, please remember that if you shop in the Store, the provision of certain data will be mandatory for the execution of the sales contract, since without them we will not be able to fulfill your order. Failure to provide the required data will result in the impossibility of submitting the order. For the execution of the contract concluded with you for the purchase and sale of goods, it is not necessary to give consent to receive commercial information at the provided e-mail address or telephone number. If you express such consent, you can withdraw it at any time.
Who might we share your personal data with?
In certain cases, we may transfer your data to entities that cooperate with us in the execution of the contract for the purchase and sale of the goods ordered by you:
1. Depending on the method of delivery of goods you have chosen, we will provide your data necessary for the delivery to the relevant couriers we use.
2. Depending on the payment method you have chosen for the ordered goods, we will provide your data, necessary to receive or pay for the goods, to the following persons: The above-mentioned courier company, if you have chosen "with cash on delivery'; Paysera – if you chose the online payment system as a payment method; Other payment operators with whom we will cooperate in order to obtain the price of the purchased goods.
3. If you have expressed your consent to receive commercial information at the e-mail address or telephone number submitted by you, we will provide your data to subjects who, on our behalf, perform services for sending commercial information, such as:
4. In addition, your data will be provided to persons who, on our assignment, process the personal data of our customers, to the extent necessary for hosting the web pages of the Store: Dream A-Ya Ltd.
5. It is also possible to provide your personal data to persons from the above categories with whom we can start cooperation;
6. If we are required by law or if it is necessary to protect our legitimate interests, we may disclose certain personal data to public authorities.
HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?
We will process your personal data for the period:
1. Necessary for the implementation of the sales contract, as well as for complaint procedures, confirmation of the fulfillment of our obligations, filing of claims or defense against claims that may be directed against us - but no longer than 5 years from the date of your last order or other communication with us;
2. In the event that you submit a request to delete your profile in the Store, we may process your data during the period necessary for the execution of the sales contract, for conducting complaint procedures, for guaranteeing the fulfillment of our obligations, for bringing or defending claims that may be brought against us – but no longer than 5 years from the date of your last order or other communication with us.
How do we protect your data?
In order to minimize the risk of data leakage and destruction, we apply a number of technical and organizational measures, including: a firewall system, anti-virus and anti-spam systems, internal procedures for access, processing and emergency recovery of data, as well and a backup system operating at different levels. Our Store provides a very high level of security, thanks to the implementation of "Web application firewall" (WAF) and the protection system against DdoS type attacks; we implement a very high level of encryption on HTTPS/SSL connections according to best practices; we cooperate with carefully selected hosting service providers who have certificates in the field of quality management ISO 9001 and meet the requirements AQAP-2110, as well as information security management certificate according to ISO/IEC 27001. However, please remember, that the use of the Internet always carries the risk of security-related incidents, but we assure you that thanks to the procedures in place for regular checks of information systems and their updating, as well as active monitoring of critical points in the system, we strive to limit the risk to the greatest extent.
What are your rights in relation to the processing of your data?
According to the GDPR, you have a number of rights in relation to the personal data processed by us, such as:
a) Right to information on how your personal data is processed - if you have any questions about whether and how we process your data, contact us using the contact form available on this page or by writing to us at mechtaya@abv.bg, and we will gladly answer you;
b) Right to access and update data - you have permanent access to your personal data from your profile in the Store. In it you can edit the data you have provided and update it. If you do not have an account in the Store, contact us using the contact form available on this page, or write to the Data Protection Officer with a request for access to your data - we will give you information about how we process your data and update at your request;
c) Based on the provisions of the GDPR, you also have the right to: Delete data - if you want us to no longer process your data, you can delete your account in the Store or submit such a request to us. However, remember that this is not an absolute right and we may refuse to remove your data that we have a reason to process (eg to fulfill a legal obligation or to make claims or defend against claims that may be brought against us); Request to restrict the processing of your data; Filing an objection against the processing of your data, if the basis for the processing is the legitimate interest of the Administrator or the performance of tasks of public interest; Withdrawal of consent if the data is processed on the basis of your consent; Transfer of data if the processing is based on a contract or your consent.
How soon will you receive an answer from us?
We will try to satisfy your requests and answer your questions about your data as quickly as possible. In any case, you should receive a message from us no later than 30 days from the date of receipt of your request. Within this period, we will provide you with a response or inform you of a possible extension of the deadline, explaining the reason for this. If we have any doubts about whether the request was submitted by you, we may ask a few additional questions in order to verify your identity.
Information about the relevant authority for filing a complaint:
If you believe that we are processing your personal data in violation of the law, you can file a complaint with the Commission for Personal Data Protection. If you have any questions related to the processing of your personal data or want to exercise your rights arising from the GDPR, use the contact form or write directly to the Data Protection Officer: mechtaya@abv.bg
INFORMATION ON THE USE OF "COOKIES" (Cookies)
I. DEFINITIONS
1. Administrator means "Mechta A-YA" Company with registered office and management address in Sofia city, zip code 1220, Nadezhda district, residential building Nadezhda-2, Aprilsko Vustanie street No. 3, fl. 2, app. 10, which offers electronic services, stores and accesses information in the User's devices;
2. Website means a site or application through which the Administrator manages its website of the domain https://denimbg.com/
3. Cookies are information data, in particular small text files, recorded and saved on devices through which the User uses the Website;
4. Cookies of the Administrator means Cookies placed by the Administrator, related to electronic services offered by the Administrator, through the Website;
5. External cookies are Cookies placed by commercial partners of the Administrator through the Website;
6. Device means an electronic device through which the User accesses the Website;
7. User means an entity for whose benefit electronic services can be provided or with whom a contract for the provision of electronic services can be concluded, according to the Rules and legal provisions.
II. TYPES OF COOKIES USED
1. The cookies that the Administrator uses are safe for the User's Device. In particular, they cannot install viruses or other unwanted or malicious software on the User's device. Cookie files enable the identification of the software used by the User and tailoring the functioning of the Website to each User. Cookies usually contain names of the domains from which they originate, the period for their storage on the Device and their specified value.
2. The administrator uses two types of cookies:
a) SESSION COOKIES: they are stored on the User's Device and remain there until the end of the session of a given search engine/browser. The recorded information in this case is permanently removed from the Device's memory. The mechanism of session cookies does not allow personal data or confidential information to be retrieved from the User's Device;
b) Persistent cookies: they are stored on the User's Device and remain there until the end of the browser session. Ending a browser session or turning off the device does not delete them from the User's Device. The mechanism of persistent cookies does not allow personal data and confidential information to be extracted from the User's Device. The User has the possibility to limit or disable the access of Cookies to his Device. In the event that this option is selected, the use of the Website will be possible, with the exception of functions that by their nature require Cookies.
III. PURPOSES OF COOKIES
1. The administrator uses OWN cookies for the following purposes:
a) WEBSITE SETTINGS
(i) Adapting the content of the Website to the User's preferences and optimizing its use;
(ii) Recognition of the user's Device and its location, displaying the content of the Website in accordance with the individual needs of the User.
b) User authentication and securing a user session on the website
(i) Maintaining the User's session on the Website (after registration), thanks to which the User does not have to re-enter his username and password on every page of the Website;
(ii) Proper configuration of requested features of the Website, which allows authentication of the browser session;
(iii) Optimizing and increasing the efficiency of the services provided by the Administrator.
c) implementation of the processes necessary for the full functionality of the WEBSITE pages
(i) Adapting the content of the Website pages to the User's preferences and optimizing the use of the pages. More specifically, these files allow to recognize the basic parameters of the User's Device and to display the Website according to the User's needs;
(ii) Proper service of the affiliate program, in particular providing the possibility to authenticate the sources from which the User is redirected to the Website;
(iii) Providing the ability to use the "Selected" and "Cart" functions.
d) REVIEW OF ANALYSES, RESEARCH AND INSPECTIONS
(i) Creation of anonymous statistics that help to understand how Users use the Website, which allows the improvement of its structure and content.
e) ENSURING THE SECURITY AND RELIABILITY OF THE SITE
2. The administrator uses external cookies for the following purposes:
a) Layout of the pages of multimedia content obtained from external websites, e.g. YouTube;
b) Collection of general and anonymous statistical data through analytical tools, e.g. Google Analytics;
c) Displaying advertisements tailored to the User's preferences by using internet advertising tools, e.g. Google Analytics;
d) Entering the Website through pages in social networks, e.g. Facebook.com;
e) The use of interactive functions to promote the Website using pages in social networks, e.g. Facebook.com, Pinterest.com;
f) Displaying opinions on the Website recorded from external pages, e.g.;
g) Use of features that facilitate communication through the Website, provided by external sites, such as Live Chat.
IV. POSSIBILITIES TO DETERMINE THE TERMS OF STORING OR ACCESSING COOKIES
1. The user can independently and at any time change the settings of the Cookies by determining the conditions for their storage and obtaining access from them to their device. Such a change can be made by the User through the settings of the Internet browser. These settings can be changed, for example, to block the automatic processing of Cookies in the Internet browser settings or to notify each time cookies are saved on the User's device. Detailed information on the possibilities and ways to maintain Cookies are available from the settings of the software used (browser).
2. The user can remove cookies at any time by selecting the appropriate functions in the internet browser used.
3. The restriction in the use of Cookies may affect some of the functions offered by the Website.
Publication date: 05/20/2023
