Privacy policy

1. Data controller

We would like to provide you with information about the way we collect and process your personal data on the site www.musecosmetics.bg. The data controller of the site (hereinafter also referred to as "We", "Us") is MUSE Cosmetics EOOD, Company ID (EIK): 207345289, which is responsible for safeguarding your personal data.

To contact us:

MUSE Cosmetics EOOD, with address 2 Strandzha St., entr. A, fl. 6, apt. 6, email: info@musecosmetics.bg

It is extremely important that the information we hold about you is accurate and up to date. Please let us know if your personal information changes at any time by clicking here to update your personal data in your user account.

Please note - by providing your personal data, you confirm that you are over 18 years of age. If this is not the case, you should contact us immediately so that we can take action to erase it.

  1. What data we collect about you, for what purpose and on what basis we process it

Personal data is any information that can identify a person. Anonymous data is not included in this category. We process the following categories of personal data:

  • Communication data Includes any message you send us, whether through the contact form on our site, by email, by a message or post on social networks, or any other kind of message sent. We process this data in order to communicate with you, to keep records and to establish, pursue or defend legal claims. The legal basis for this processing is our legitimate interests, which in this case are responding to the messages sent to us, keeping records and pursuing or defending legal claims.
  • Customer data. Includes data related to the purchase of goods and/or services, such as your name, billing address, delivery address, email address, other contact details (telephone number), statistics about your purchases and others. We process this data in order to deliver the goods and/or services you have purchased and to keep records of such transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.
  • User data. Includes data about how you use our website and other online services, together with any data you post on our website or through other online services. We process this data in order to operate our website and ensure that we provide you with relevant content, to ensure its security, to maintain backups of our website and/or database, and to be able to manage and administer our website, other online services and business. The legal basis for this processing is our legitimate interests, which in this case allow us to properly administer our website and business.
  • Technical data. Includes data related to the use of our website and online services, such as your IP address, login details, details about your browser, length of visit to the pages of our website, page views and navigation paths, details about the number of visits to our website, time zone settings and other technologies on the devices you use to access our website. The source of this data is our analytics tracking system. We process this data in order to analyze the use of our website and other online services, to administer and protect our business and website, to provide relevant content and advertisements, and to understand the effectiveness of our advertising. The legal basis for this processing is our legitimate interests, which in this case will allow us to properly administer our website and business, to grow our business and to determine our marketing strategy.
  • Marketing data. Includes data related to your preferences for receiving marketing information from us and third parties, and your preferred means of communication. We process this data so that we can include you in our promotions, such as games, prizes and free gifts, provide you with relevant content and advertisements, and accordingly understand the effectiveness of those advertisements. The legal basis for this processing is our legitimate interests, which in this case will help us study how customers use our products/services, develop them, grow our business and determine our marketing strategy.
  • We may use Customer data, User data, Technical data and Marketing data to provide you with relevant content and advertisements (including advertisements on Facebook or other advertisements) and accordingly to understand the effectiveness of the advertisements provided. The legal basis for this processing is our legitimate interests, which are related to growing our business. We may also use this data to send you other marketing messages. The legal basis for this processing is either consent or legitimate interests (namely growing our business).

Sensitive data

We do not collect any sensitive data about you. Sensitive data is data relating to your race or ethnic origin, religious or philosophical beliefs, sex life, sexual orientation, political views, trade union membership, information about your health, genetic and biometric data. We do not collect information about criminal convictions and offenses.

Please note - where we are required to collect personal data by law or under the terms of the contract between us and you do not provide us with that data when requested, we may not be able to perform the contract (for example, to deliver goods or services to you). If you do not provide us with the requested data, we may have to cancel the product you ordered, but if we do so, we will notify you in good time.

We will use your personal data only for the purpose for which it was collected or, if necessary, for a purpose closely related to the original one. For more information, please write to us at info@musecosmetics.bg. If we need to use your data for an unrelated new purpose, we will notify you and set out the legal grounds for our actions.

We may process your personal data without your knowledge or consent, but only to the extent permitted by law. We do not carry out automated decision-making or automated profiling.

  1. How your personal data is collected:
  • Provided to us personally by you (for example by filling in forms on our site or by sending emails);
  • Automatic collection of certain data obtained from you when you use our website, through the use of cookies and other similar technologies.
  • We may receive data from third parties, such as: analytics providers (for example Google) based outside the EU; advertising networks (for example Facebook) based outside the EU; search information providers (for example Google) based outside the EU; providers of technical, payment and delivery services, information brokers or aggregators.
  1. Marketing communications

The legal basis for processing your personal data for the purpose of marketing communications is: your consent or our legitimate interests (for example - to grow our business).

Under the legal provisions on personal data protection and electronic communications, we may send you marketing messages if:

(A) you make a purchase, register on our site or send us an inquiry about our goods or services; or
(B) you have agreed to receive marketing messages, and in both cases you have not expressly opted out of receiving such messages. Under the legal provisions, if you are a legal entity, we may send you marketing emails without your consent as well. In this case you may also opt out of receiving marketing emails from us at any time.

Before we share your personal data with third parties for their marketing purposes, we will ask for your express consent.

You may ask us to stop sending you marketing messages at any time by logging in to the website and your account and checking or unchecking the relevant fields/options to adjust your marketing preferences.

Please note - if you opt out of receiving marketing messages, this opt-out does not apply to personal data provided as a result of other transactions such as purchases, warranty records, etc.

  1. Sharing your personal data

We may share your personal data with the following parties:

  • Service providers that provide IT services and system administration;
  • Professional advisers, including lawyers, bankers, auditors and insurers;
  • Government authorities that require us to report on processing activities;
  • Courier companies;
  • Third parties that acquire or merge with parts of our business or assets.

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. Third parties may process your personal data only for specifically defined purposes and in accordance with our instructions.

  1. Data security

We have put security measures in place to prevent your personal data from being accidentally lost, used, altered, disclosed or accessed without authorization. We provide access to your personal data only to those employees and partners who have a business need to use such data. They are instructed to process your personal data according to our instructions and to observe the rules of confidentiality.

We have a procedure for dealing with any suspected breach of your personal data and will notify you, as well as the relevant regulators, of such breaches if and when necessary.

  1. Data retention

We will keep your personal data for as long as necessary to fulfill the purposes for which we collected it, or to satisfy legal, accounting or reporting requirements.

When deciding how long to keep this data, we consider its amount, nature and sensitivity, the potential risk of unauthorized use or disclosure and the purposes of the processing, as well as whether these can be achieved by other means, and legal requirements.

Please note - tax laws require us to keep basic information about our customers (such as contact, identity, financial and transaction data) for up to ten years after you cease to be our customer.

In certain circumstances we may turn your personal data into anonymous data for research or statistical purposes, and in such cases we may use this information indefinitely and without notifying you.

  1. Your rights

Under data protection laws you have rights in relation to your personal data, which include the right to request access, correction, erasure, restriction, transfer, to object to processing, data portability and (where the legal basis for processing is consent) to withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us at: info@musecosmetics.bg

No fee is payable for access to your personal data (or for exercising any of the other rights) . However, the law allows us to charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This security measure ensures that your personal data is not disclosed to persons who have no right to receive it. We may also contact you to ask for further information in relation to your request, in order to speed up our response.

The time limit for responding to all legitimate requests is one month. If your request is particularly complex or you have made several requests and we cannot respond within a month, we will notify you.

If you are not satisfied with the way your data is collected and used, you have the right to lodge a complaint with the Commission for Personal Data Protection (https://www.cpdp.bg). We would be grateful if, in case of an objection or complaint, you contact us first so that we can find a way to resolve the problem.

  1. Third-party links

This website may include links to other third-party websites, plug-ins and applications. Clicking on those links or enabling them may allow third parties to collect or share data about you. We do not control these websites and accordingly are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps and session replay, in order to improve and market our products/services. Website usage data is collected using first- and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. In addition, we use this information for site optimization, fraud/security purposes and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

  1. Cookies

You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.