1. Introduction
This Privacy Policy describes how ATANASOVA-MED EOOD, with its registered office and management address at: 35A Shesti Septemvri Blvd., fl. 1, Plovdiv, hereinafter referred to as the Company, collects, uses, stores, and protects the personal data of users of the website atadermacosmetics.com (hereinafter referred to as the “Site”).
We are committed to protecting the privacy of your personal data and complying with applicable data protection laws, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
2. Data We Collect
We may collect the following types of personal data from you:
- Contact details: First name, last name, email address, phone number, postal address.
- Profile data: Username and password (if you create an account on the Site).
- Order data: Information about the products you have ordered, order history, delivery and billing addresses, payment method.
- Communication data: Correspondence with us via email or telephone, including inquiries and feedback.
- Technical data: IP address, browser type, operating system, data about visits to the Site (pages visited, time spent, links clicked), data from cookies and similar technologies (see Section 8).
- Marketing data: Preferences for receiving marketing communications (if you have subscribed).
3. Purposes of Data Processing
We process your personal data for the following purposes:
- Order fulfillment: To process your orders, deliver products, handle billing, and manage payments.
- Account management: To create and manage your user account on the Site, if you have registered.
- Customer service: To respond to your inquiries, provide support, and resolve issues.
- Improving the Site and services: To analyze how you use the Site in order to improve it, optimize functionality, and offer a better user experience.
- Marketing: To send marketing communications (if you have subscribed), such as product news, promotions, and special offers that we believe may interest you. (We will only send marketing communications if you have given your explicit consent, and you will always have the option to unsubscribe at any time.)
- Legal obligations: To comply with legal obligations, such as accounting and tax requirements.
- Fraud prevention: To identify and prevent fraud and abuse.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Performance of a contract: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract (for example, to process your orders).
- Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
- Legitimate interest: Processing is necessary for the purposes of our legitimate interests, such as improving our Site and services, marketing (in accordance with legal requirements), and fraud prevention, provided that your interests and fundamental rights do not override those interests.
- Consent: In certain cases, we may process your personal data based on your consent (for example, for sending marketing communications). In these cases, you have the right to withdraw your consent at any time.
5. Sharing Personal Data
We may share your personal data with the following categories of recipients:
- Service providers: We may use third-party service providers to assist us with the operation of the Site, order fulfillment, payment processing, delivery, marketing, and customer service. These providers have access to personal data only for the purposes of performing their assigned tasks and are obligated to process it in accordance with our instructions and applicable data protection laws. Examples of such providers include:
- Courier companies: For order delivery.
- Payment processors: For processing online payments.
- Marketing agencies: For managing marketing campaigns.
- IT providers: For maintenance of the Site and IT infrastructure.
- Public authorities: We may disclose personal data to public authorities when we are legally required to do so, for example, in response to a legal claim or at the request of law enforcement agencies.
- Other parties with your consent: We may share your personal data with other parties if you have given your explicit consent to do so.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, alteration, or disclosure. These measures include:
- Data encryption: We use encryption to protect sensitive data, such as passwords and payment information.
- Access control: We restrict access to personal data only to employees and service providers who need such access to perform their duties.
- Regular security audits: We conduct regular security audits to ensure the effectiveness of our security measures.
Despite our efforts, please be aware that no method of transmission over the Internet or method of electronic storage is completely secure. Therefore, we cannot guarantee the absolute security of your personal data.
7. Data Storage
We will store your personal data for as long as necessary for the purposes for which it was collected, including for the fulfillment of legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and applicable legal requirements.
Typically, we store order data and related customer service data for 2 years after the order date for the purposes of warranties, claims, and legal requirements. Marketing data is stored until consent is withdrawn or for 2 years after the last active communication, whichever occurs first.
After the storage period expires, your personal data will be deleted or anonymized in a secure manner.
8. Cookies and Similar Technologies
The Site uses cookies and other similar technologies (e.g., web beacons, pixels) to collect information about your use of the Site, to improve functionality, personalize content, and display advertisements that may interest you.
Cookies are small text files that are saved on your device when you visit a website. You can control the use of cookies through your browser settings. You can block cookies, delete saved cookies, or set your browser to notify you before a cookie is saved. Please note that blocking cookies may affect the functionality of the Site.
9. Your Rights
You have the following rights in relation to your personal data:
- Right of access: You have the right to request access to the personal data we process about you and to receive information about the processing.
- Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data we process about you.
- Right to erasure (“right to be forgotten”): You have the right to request the deletion of your personal data under certain circumstances (for example, when the data is no longer necessary for the purposes for which it was collected, or when you have withdrawn your consent and there is no other legal basis for processing).
- Right to restriction of processing: You have the right to request the restriction of processing of your personal data under certain circumstances (for example, when you contest the accuracy of the data, or when the processing is unlawful but you do not want the data to be deleted).
- Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transfer this data to another controller when the processing is based on consent or a contract and is carried out by automated means.
- Right to object: You have the right to object to the processing of your personal data when the processing is based on legitimate interest, including against profiling, as well as for direct marketing purposes.
- Right to withdraw consent: When processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) or another competent supervisory authority if you believe that the processing of your personal data violates applicable data protection laws.
To exercise any of the above rights, please contact us using the contact details provided in Section 11.
10. Links to Other Websites
The Site may contain links to other websites that are not operated by us. This Privacy Policy does not apply to those websites. We recommend that you familiarize yourself with the privacy policies of the websites you visit. We are not responsible for the content or privacy practices of other websites.
11. Changes to the Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our personal data processing practices or in applicable laws. All changes will be published on this page, and the date of the last update will be refreshed. We recommend that you periodically review this Privacy Policy to stay informed about our current practices. In the event of significant changes affecting your rights, we will notify you in an appropriate manner, for example, via email or a notification on the Site.
ATANASOVA-MED EOOD
Address: 35A Shesti Septemvri Blvd., fl. 1, Plovdiv
Email: info@ataderma.com
Phone: +359 884 51 51 81
