Privacy policy

"S B EMPIRE" EOOD with VAT number: 206150998 and registered office address: Burgas, ul. "Adam Mitskevich" 5, collects and processes personal data of users as a Data Controller.

"S B EMPIRE" EOOD understands the importance of the confidentiality of your personal data, treats them responsibly, and guarantees the security and confidentiality of the data provided and transmitted through our platform.

With each transaction, we ensure the security of the data of all Customers and guarantee that Your personal data are kept in accordance with the legislation of the Republic of Bulgaria and the new GDPR (General Data Protection Regulation) regulation, which came into force on 25.05.2018.

GDPR is a European regulation that protects the personal data of users within the territory of the European Economic Community. In order to accept, store, and process your personal data in an environment of maximum security and full transparency, we have taken the following measures and clarified the following situations in which we use your personal data.

The Data Protection Officer of the Controller will answer all your questions regarding the processing and protection of personal data, as well as will facilitate and make the process of using your rights as a data subject easier and understandable. The address for direct contact with him/her is:

Types of personal data we process:

  1. We process the following categories of data on a contractual basis:
  2. Data about your profile in the online store of "Cosmetics Bulgaria", which is created for you after entering into an informal contract with the Controller by accepting the General Terms and Conditions of use of the website and e-shop "www.opamy.com/agecode" ("General Terms"):

 

  1. Data for online orders through the online store of "AGE CODE COSMETICS", made by you, entering into an informal distance contract with the Controller under the General Terms:
  • Personal and family name of the person for delivery;
  • Delivery address – country, city, postal code, address; 
  • Delivery phone number;
  • Invoice data – names, phone, city, country, postal code, address;
  • Delivery method;
  • Payment method;
  • Order number;
  • Payment amount;
  • Payment status;
  • Delivery status;
  1. Data obtained upon registration of an account on the website (opamy.com/agecode), entering into an informal distance contract with the Controller under the General Terms:
  • Personal and family name; 
  • Email address;
  • Password;
  1. We process the following data based on your consent, expressed through deliberate action – independently entering non-mandatory data and/or freely selecting specific options:
  2. Data about your profile in the online store of "AGE CODE COSMETICS"
  3. Contact details and sent message or published comment, provided when filling out a contact form on the e-shop "AGE CODE COSMETICS" or when sending to us via email, conventional mail, telegram, fax, phone call, SMS, commenting on the "AGE CODE COSMETICS" blog, and other forms of communication and/or expression:
  • Personal and family name;
  • Email address;
  • Phone number 
  • Address;
  • Website;
  • Content of the comment/message;
  1. Data for online orders through the online store of "AGE CODE COSMETICS":
  • Order history; You can withdraw any of the consents provided above by contacting the Data Protection Officer and requesting deletion of your profile and "forgetting" your personal data, in accordance with the prescribed form and method in this Policy. Upon withdrawal of consent, the processing of the respective type of personal data for the specified purposes ceases. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

II. We process, on a legal basis, according to local and union legislation, the following data:

  1. Data about your profile in the online store of "AGE CODE COSMETICS":
  • Personal and family name;
  • Email address;

 

  1. Data for online orders through the online store of "AGE CODE COSMETICS": 
  • Delivery address – country, city, postal code, address;
  • Delivery phone number;
  • Invoice data – names, phone, city, country, postal code, address;
  • Delivery method;
  • Payment method;
  • Order number;
  • Payment amount;
  • Payment status and history;
  • Delivery status and history;
  • Order history;
  1. Data for on-site orders:
  • Invoice data – names, phone, city, country, postal code, address;
  • Personal and family name of the person for delivery;
  • Delivery address – country, city, postal code, address;
  • Delivery phone number;
  • Delivery method;
  • Payment method;
  • Payment status;
  • Delivery status;

 

 

  1. Purposes of processing personal data:
  2. The data about your profile in the online store of "AGE CODE COSMETICS" is processed for the following purposes: 
  • Compliance with the reporting obligation of the Controller by recording legally significant credentials in electronic logs – technical logs;
  • Delivery of ordered products;
  • Provision of support in case of technical malfunctions, informing customers by operators in our contact center or in connection with complaints, tracking deliveries, payments, and others; 
  • Verification by sending an email to ensure the security of access to your profile data and when changing your password;
  • Authentication upon logging into your profile;
  • Sending messages via email and/or push notifications for the purposes of direct marketing and advertising with your explicit consent;
  • Compliance with laws, court decisions, legal orders, and decisions of authorities and supervisory bodies. This includes using your personal data to collect and verify accounting data and comply with accounting reporting rules;
  1. The data for on-site orders is processed for the following purposes:
  • Delivery of ordered cosmetic products;
  • Informing customers by operators in our contact center or in connection with complaints, tracking deliveries, payments, and others;
  • Compliance with laws, court decisions, legal orders, and decisions of authorities and supervisory bodies. This includes using your personal data to collect and verify accounting data and comply with accounting reporting rules;
  • Preventing losses, as well as detecting and preventing abuses in the submission, registration, and delivery of orders; Analyzing statistical data obtained after anonymizing your data;
  1. The contact and sent message or published comment data are processed for the following purposes:
  • Identifying you as the sender/author of the message or published comment;
  • Communicating with you, mostly related to inquiries from your side regarding the properties of our offered products and delivery deadlines.
  1. Data for loyal customers is processed for the following purposes:
  • Fulfilling contractual obligations to apply a price discount for orders;
  • Certifying and identifying the quality of "loyal customer" and the rights arising from it;

 

  • Tracking incidents and violations;
  • Preventing and reporting crimes in our stores.

 

Third parties with access to personal data, in connection with their activities and services provided jointly with AGE CODE COSMETICS:

  1. We use the following hosting service providers and programming-related services for the maintenance of the online store of AGE CODE COSMETICS:
  • "SuperHosting.BG" Ltd., with Unified Identification Code (EIK): 131449987 – provide hosting for reserved connectivity as well as for the needs of the blog of "Cosmetics Bulgaria". You can review their privacy policy at the following address: https://www.superhosting.bg/ 

 

 

 

  1. Freight companies and postal services for the purpose of quality, fast, and reliable service for all orders within the country and abroad, we use freight and postal services on which we can rely for timely deliveries to all our users. Some of them, which we use regularly, are as follows: 
  • "InTime" with EIK: 121094705, the official representatives for Bulgaria of UPS (United Parcel Service) – provide courier services within the country and abroad. More about them can be found on their websites: http://www.intime.bg/ and https://www.ups.com/bg/ 
  • "Speedy" with EIK: 131371780 – the official representatives for Bulgaria of DPD provide courier services within the country and abroad. More about them can be found on their website: https://www.speedy.bg/bg
  • "Econt" with EIK: 117047646 – provide courier services within the country. More about them can be found on their website: https://www.econt.com/
  • "Bulgarian Posts" with EIK: 121396123 – provide courier and export services to remote parts of the world. More about them can be found on their website: https://www.bgpost.bg/
  1. Government authorities and institutions in connection with checks carried out by them in accordance with legal requirements and restrictions; Regarding private entities, we require and monitor the specified third parties to apply all technical and organizational measures to protect this data.

The data is processed for the following periods:

  1. Data provided on a contractual basis:
  • Profile data – The profile data are related to and determining for online order data. In the absence of an order based on the informal agreement for you as a user, there is a legal expectation for the use of the profile, and therefore we have provided you with the functional possibility to contact us at any time to delete your profile.
  • Data for online orders – until the expiration of 5 years from the date of the specific order. The period is determined based on the statute of limitations for claims.
  1. Data in connection with the collection and verification of accounting data and compliance with accounting reporting – accounting registers and financial statements, including documents for tax control, audit, and subsequent financial inspections, are stored for 10 years from 1 January of the reporting period following the reporting period to which they relate; all other carriers of accounting information – three years from 1 January of the reporting period following the reporting period to which they relate;

 

Your rights regarding your personal data:

  1. Right of access, including the right to obtain a copy of the data being processed: 

You have the right to request information about your personal data stored at any time. You can contact us, and based on a written request and verification of your identity, the data will be provided to you.

  1. Right to rectification of inaccurate personal data:
  • You have the right to request correction of your personal data if it is incorrect, including supplementation of incomplete personal data. You can do this through your profile in the mobile application or by contacting us with a written request, after duly verifying your identity.
  1. Right to erasure ("Right to be forgotten") in the following cases:
  • No longer necessary for processing;
  • Withdrawal of consent when processing is based on consent;
  • Unlawful processing of data;
  • Legal obligation to erase; The right to be forgotten is not an absolute right and may not be respected in cases provided for by law or due to lack of proper verification of your identity.
  1. Right to restriction of processing, when: 
  • The accuracy of the data is contested, for the period during which its accuracy is verified; or 
  • The processing of the data is unlawful, but instead of erasing it, you request its restricted processing; or
  • There is a need for the data for the establishment, exercise, or defense of legal claims; or
  • Objection to the processing of the data is pending verification of whether the legitimate grounds of the controller override your interests and rights or due to legal disputes and other procedural and non-procedural actions. In case of correction, deletion, or restriction of processing, we will inform each recipient to whom the personal data has been disclosed, unless this is impossible or requires disproportionate effort.
  1. Right to data portability, whereby: 
  • We provide the data directly to you; or
  • Upon request from you and technical feasibility, the data is provided to another controller of your choice;
  1. Right to object to processing based on legitimate interest: 
  • You have the right to object to the processing of your personal data based on the legitimate interest of the Controller or a third party. The Controller will not continue to process your personal data unless it is demonstrated that there are compelling legal grounds for doing so that override your interests and rights, or due to legal disputes and other procedural and non-procedural actions, this is necessary.
  1. Right to object to direct marketing: 

 

The aforementioned rights are exercised through a written request in a form defined by the Administrator, which you can obtain at the Administrator's headquarters or electronically upon request to the Data Protection Officer and completion of the electronic form received in response, after providing the necessary documents. If you are registered with "AGE CODE COSMETICS," you will receive a response to your inquiry within one month of receiving your written request. We do not use automated decision-making processes, including profiling.

Use of Cookies:

Regarding the data contained in the cookies of the online store and/or blog of AGE CODE, you can refer to our Cookie Policy.

Types of Cookies:

Essential:

Without these cookies, our website services may not function properly. Such cookies inform your browser whether to stay logged in or if your session has expired.

Analytical:

We use these cookies to anonymously track which pages users visit on the site. We use this data to make improvements to our website.

Functional:

We use these cookies to remember certain choices you have made. For example, the option for your browser to remember your login data so you don't have to enter it again. Similar cookies may be Google Analytics cookies.

Targeting:

We use this type of cookies for internet advertising and targeting. Without these cookies, we will not be able to show you relevant ads matching your interests. You can change your browser settings to disable cookies that track your activity. Please note that you may experience issues if you do so while using our site.

Here are possible options to disable cookies that track you:

  • Google Analytics – https://tools.google.com/dlpage/gaoptout/
  • Facebook pixel – https://www.facebook.com/help/568137493302217

Useful links

  • GDPR Information Portal: https://www.eugdpr.org/
  • GDPR Regulation in full text: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN

European Commission website: https://ec.europa.eu/info/law/law-topic/data-protection_en