Cookie name | Active |
---|---|
Name: "PANDEA 2022" EOOD
UIC/BULSTAT: 207067555
Office and management address: Smolyan, 45 "Spartak" St
Address for correspondence: Smolyan, 45 "Spartak" St
Phone: +359 896 965 335
Email: pandeabeauty@gmail.com
Website: www.pandeabeauty.com
Name: Personal Data Protection Commission
office and management address: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Address for correspondence: Sofia 1592, "Prof. Tsvetan Lazarov" No. 2
Phone: 02 915 3 518
Website: www.cpdp.bg
"PANDEA 2022" EOOD carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data. This information is intended to inform you about all aspects of the processing of your personal data by the Company and the rights you have in relation to this processing.
Basis for collecting, processing and storing your personal data:
Art. 1. The administrator collects and processes your personal data in connection with the use of the Pandea beauty electronic store and the conclusion of contracts with the company on the basis of Art. 6, para. 1, Regulation (EU) 2016/679 (GDPR), and more specifically on the following grounds:
Express consent received from you as a customer;
Fulfillment of the Administrator's obligations under a contract with you;
Compliance with a legal obligation that applies to the Administrator;
For the purposes of the legitimate interests of the Administrator or a third party;
Purposes and principles in the collection, processing and storage of your personal data
Art. 2. (1) We collect and process the personal data that you provide us in connection with the use of the electronic store and the conclusion of a contract with the company, including for the following purposes:
creating a profile and providing full functionality when using the online store;
conclusion and performance of a contract at a distance;
individualization of a party to the contract;
accounting purposes;
statistical purposes;
protection of information security;
ensuring the performance of the contract for the provision of the relevant service.
sending a newsletter if you wish;
(2) We observe the following principles when processing your personal data:
legality, good faith and transparency;
limitation of processing purposes;
relevance to the purposes of the processing and minimization of the data collected;
accuracy and timeliness of data;
limitation of storage in order to achieve the objectives;
integrity and confidentiality of processing and ensuring an appropriate level of personal data security.
(3) When processing and storing personal data, the Administrator may process and store personal data in order to protect the following legitimate interests:
fulfillment of obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal entities.
What types of personal data does our company collect, process and store
Art. 3. (1) The company performs the following operations with the personal data provided by you for the following purposes:
Registration of a user in the e-store and execution of a remote purchase and sale contract - the purpose of this operation is to create a profile for using the e-store to purchase goods and provide contact details for delivery of purchased goods. Registering and creating an account to use the online store is not a mandatory step of providing the service and it is available to a large extent without creating an account.
Conclusion of the impact assessment: Based on the impact assessment carried out, the operation "Registration of a user in the e-shop and execution of a contract of purchase and sale at a distance" is permissible to carry out and provides sufficient guarantees to protect the rights and legitimate interests of the subjects of the data in accordance with the requirements of the GDPR.
Conclusion and execution of a commercial transaction with a customer or partner - the purpose of this operation is the conclusion and execution of a contract with a commercial partner or customer and its administration. Given the limited scope of the collected personal data and the fact that some of them are collected from publicly available sources, conducting an impact assessment is not necessary to conduct an impact assessment of the operation.
Sending a newsletter (newsletter) - the purpose of this operation is to administer the process of sending newsletters to customers who have indicated that they wish to receive them. Given the limited scope of personal data collected, the evaluation ofimpact it is not necessary to carry out an impact assessment of the operation.
Exercising the right of refusal or making a complaint - the purpose of this operation is to administer the process of exercising the right of refusal or complaint by the customer. Given the limited scope of personal data collected, conducting an impact assessment is not necessary to conduct an impact assessment of the operation.
(2) The administrator processes the following categories of personal data and information for the following purposes and on the following grounds:
Your individualizing data (email, address, etc.)
Purpose for which the data is collected: 1) Making contact with the user and sending information to him, 2) for the purposes of user registration in the online store, as well as 3) for sending an information letter.
Basis for processing your personal data - With the acceptance of the general conditions and registration in the electronic store or placing an order without registration, or upon concluding a written contract, a contractual relationship is created between the Administrator and you, on the basis of which we process your personal data - art. . 6, para. 1, b. (b) GDPR. Your data for sending a newsletter is processed based on your express consent - Art. 6, para. 1, b. (a) GDPR.
Delivery data (email, phone, address, etc.)
Purpose for which the data is collected: Fulfillment of the administrator's obligations under the sales contract and delivery of the purchased goods.
Basis for processing your personal data - With the acceptance of the general conditions and registration in the electronic store or placing an order without registration, or upon concluding a written contract, a contractual relationship is created between the Administrator and you, on the basis of which we process your personal data - art. . 6, para. 1, b. (b) GDPR.
Additional data provided by you - If you wish to complete your profile, you can fill in your name, surname, phone number.