PRIVACY POLICY 

1. Data Controller

We would like to provide you with information about how we collect and process your personal data on the website. www.musecosmetics.bg. Data Controller of the website (hereinafter also referred to as "We", "Us") is MYZ Cosmetics Ltd., UIC: 207345289, which is responsible for the protection of your personal data.

To contact us:

The company MYZ Cosmetics Ltd. with the address at ul. Strandja № 2, in. 6, app. 6,[email protected]

It is essential that the information we hold about you is accurate and up to date. Please let us know if at any point there is a change to your personal information by clicking hereto update your personal information in your profile.

Please note - by providing your personal data, you confirm that you are over 18 years of age. If this is not the case, you should contact us immediately so that we can take action to delete it.

2. What data we collect about you, for what purpose and on what basis we process it

Personal data is any information that can identify a person. Anonymous data is not included in this category. We process the following categories of personal data:

• Communication data Includes any communication you send to us, whether it is via the communication form on our website, via email, a message or post on social media or any other type of message sent. We process this data for the purposes of communicating with you, for record keeping and for establishing, enforcing or defending legal claims. The legal justification for this processing is our legitimate interests, which in this case are responding to communications sent to us, keeping records and to pursue or defend legal claims.
• Customer details. Includes data related to the purchase of goods and/or services, such as your name, billing address, shipping address, email address, other contact details (phone number), statistics about your purchases, etc. We process this data to deliver the goods and/or services you have purchased and to keep records of such transactions. The legal justification for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.
• User data. Includes data about how you use our website and other online services, together with any data you post on our website or through other online services. We process this data to operate our website and ensure that we provide you with relevant content, to ensure its security, to maintain back-up copies of our website and/or database and to enable us to manage and administer our website, other online services and business. The legal justification for this processing is our legitimate interests, which in this case allow us to properly administer our website and business.
• Technical data. Includes data relating to the use of our website and online services, such as your IP address, login details, details of your browser, length of visit to pages on our website, page views and navigation paths, details of the number of visits to our website, time zone settings and other technologies on the devices you use to access our website. The source of this data is from our analytics tracking system. We process this data to analyse the use of our website and other online services, to administer and protect our business and website, to provide relevant content and advertisements, and to understand the effectiveness of our advertisements. The legal justification for this processing is our legitimate interests, which in this case will allow us to properly administer our website and business, grow our business and determine our marketing strategy.
• Marketing data. Includes data relating to your preferences for receiving marketing information from us and third parties and your preferred method of communication. We process this data to enable us to include you in our promotions such as games, prizes and freebies, to provide you with relevant content and advertisements, and to understand the effectiveness of these advertisements accordingly. The legal justification for this processing is our legitimate interests, which in this case will help us to understand how customers use our products/services, develop them, grow our business and determine our marketing strategy.
• We may use Customer Data, User Data, Technical Data and Marketing Data to provide you with relevant content and advertisements (including Facebook Ads or other advertisements) and to understand the effectiveness of the advertisements provided accordingly. The legal justification for this processing is our legitimate interests, which are related to growing our business. We may also use this data to send you other marketing communications. The legal justification for this processing is either consent or legitimate interests (namely growing our business).

Confidential data

We do not collect any confidential data about you. Confidential data includes data relating to your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, genetic and biometric data. We do not collect information about criminal convictions and offences.

Please note - where we are required to collect personal data by law or under the terms of a contract between us and you do not provide this data to us on request, we may not be able to perform the contract (for example, to supply you with goods or services). If you do not provide us with the requested data, we may have to cancel the product you have ordered, but if we do, we will notify you in good time.

We will only use your personal data for the purpose for which it was collected or if necessary for a purpose similar in purpose to the main purpose. For more information, please email us at [email protected]. If we need to use your data for an unrelated new purpose, we will notify you, setting out the legal reasons for our actions.

We may process your personal data without your knowledge or consent, but only to the extent permitted by law. We do not carry out automated decision-making or automated profiling.

3. Ways of collecting your personal data:

• Provided to us personally by you (for example, by filling in forms on our website or by sending us emails);
• Automatic collection of certain data obtained from you when you use our website through the use of cookies and similar technologies. 
• We may receive data from third parties such as: analytics providers (e.g. Google) based outside the EU; advertising networks (e.g. Facebook) based outside the EU; search information providers (e.g. Google) based outside the EU; technical, payment and delivery service providers, information brokers or aggregators.

4. Marketing Communications

The legal justification for processing your personal data for marketing communications purposes is: your consent or our legitimate interests (for example - to expand our business).

In accordance with data protection and electronic communications laws, we may send you marketing communications if:

(A) make a purchase, register on our site or make an enquiry to us about our goods or services; or
(B) you have consented to receive marketing communications, in either case you have not expressly opted out of receiving such communications. Under the law, if you are a legal entity, we may send you marketing emails without your consent. In this case, you may also opt-out of receiving marketing emails from us at any time.

Before we share your personal data with third parties for their marketing purposes, we will ask for your explicit consent.

You can request that we stop sending marketing messages to you at any time by logging into the website and your account, and adding, or unchecking the relevant boxes/options to adjust your marketing preferences.

Please note - if you opt-out of receiving marketing communications, this opt-out does not apply to personal data provided as a result of other transactions such as purchases, warranty records, etc.

5. Sharing your personal data

We may share your personal data with the following parties:

• Service providers that provide IT services and system administration;
• Professional advisers including lawyers, bankers, auditors and insurers;
• Government bodies that require us to report on processing;
• Courier companies;
• Third parties who acquire or merge parts of our business or assets.

We require all third parties to whom we transfer your data to respect the security of your personal data and treat it in accordance with the law. Third parties may only process your personal data for specified purposes and in accordance with our instructions.

6. Data security

We have security measures in place to prevent the accidental loss, use, alteration, disclosure or unauthorised access to your personal data. We only provide access to your personal data to those employees and partners who have a business need to use such data. They are instructed to process your personal data according to our instructions and to comply with confidentiality rules.

We have a procedure for dealing with suspected leaks of your personal data and will notify you, and the relevant regulators, of such breaches if and when necessary.

7. Data saving

We will retain your personal data for as long as is necessary to fulfil the purposes for which we collected it or to satisfy any legal, accounting or reporting requirements.

When deciding how long to keep this data, we consider its quantity, nature and sensitivity, the potential risk of unauthorised use or disclosure and the purposes of the processing, and whether these can be achieved by other means and legal requirements.

Please note - tax laws require us to keep basic information about our customers (such as contact, identity, financial and transaction details) for up to ten years after you cease to be our customer.

In certain circumstances, we may make your personal data anonymous for research or statistical purposes, in which case we may use this information without restriction and without notifying you.

8. Your rights

Under data protection laws, you have rights in relation to your personal data which include the right to request access, rectification, erasure, restriction, transfer, objection to processing, data portability and (where the legal basis for processing is consent) to withdraw your consent.

If you wish to exercise any of your rights above, please contact us at [email protected]

There is no fee to access your personal data (or to exercise any of your other rights). However, the law allows us to charge a reasonable fee if your request is manifestly unfounded, repetitive or excessive, or is not compatible with your request in the above circumstances.

We may need to ask you for specific information to confirm your identity and to ensure your right to access your personal data (or to exercise any of your other rights). This security measure ensures that your personal data is not disclosed to persons who are not entitled to receive it. We may also contact you to request further information regarding your request in order to expedite our response.

The deadline for responding to all legitimate requests is one month. If your request is particularly complex or you have made multiple requests and we cannot respond within one month, we will let you know.

If you are dissatisfied with the way your data is collected and used, you have the right to lodge a complaint with the Data Protection Commission (https://www.cpdp.bg). We would be grateful if, if you have an objection or complaint, you would contact us first so that we can find a way to resolve the problem.

10. Third Party Links

This website may include links to other third party websites, plugins and applications. Clicking on or activating these links may allow third parties to collect or share data about you. We do not control these websites and accordingly are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of each website you visit.

We partner with Microsoft Clarity and Microsoft Advertising to record how you use and interact with our website through behavioural metrics, heat maps and session replay in order to improve and market our products/services. Website usage data is collected through first- and third-party cookies and other tracking technologies to determine product/service popularity and online activity. We also use this information for site optimization, fraud/security and advertising purposes. For more information about how Microsoft collects and uses your data, visit Microsoft's Privacy Statement.

11. Cookies

You can set your browser to refuse all or some cookies or to warn you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or may not function properly.