Privacy policy

PRIVACY AND PERSONAL DATA PROTECTION POLICY

This Privacy Policy explains how MUSE Cosmetics EOOD collects, uses, stores and protects your personal data when you use www.musecosmetics.bg, make a purchase, communicate with us and use the services related to the site.

1. Personal data controller

The controller of your personal data is:

MUSE Cosmetics EOOD
Company ID (EIK): 207345289
Address: 2 Strandzha St., entr. A, fl. 6, apt. 6
Email: info@musecosmetics.bg

For all questions related to the processing of your personal data or the exercise of your rights, you can contact us at the email address given.

2. What personal data we process and why

Data related to orders and purchases

When you place an order, we may process your name, telephone number, email address, delivery and billing address, order information, the chosen payment method, payment status, order history, information about returns and complaints, and other data needed to fulfill the order.

We use this data to:

• process and fulfill your order;
• arrange payment and delivery;
• communicate with you in connection with the order;
• process returns, refunds and complaints;
• comply with applicable accounting, tax and other legal obligations.

The legal basis is the performance of a contract or taking steps prior to entering into one, as well as compliance with legal obligations, where applicable.

User account data

If you create a user account, we may process the data you provided at registration, as well as information related to your account and order history.

We process this data to provide you with the account's features and to make managing your purchases easier.

Communication data

When you contact us by email, through a contact form, a social network or another communication channel, we may process your contact details and the content of the communication.

We use this information to respond to your inquiry, to provide assistance, to conduct the necessary correspondence and, where necessary, to establish, exercise or defend legal claims.

The legal basis may be the performance of a contract, taking steps at your request, or our legitimate interest in providing customer service and protecting our rights, depending on the specific case.

Technical data and data about use of the site

When the site is used, technical data may be processed, such as IP address, device and browser type, operating system, date and time of the visit, pages viewed, interactions with the site and other similar data.

Data that is necessary for the proper functioning, security and protection of the site may be processed on the basis of our legitimate interest in maintaining a secure and functioning online environment.

Where technical data is used for analytics, audience measurement, personalization or advertising through non-essential cookies and other tracking technologies, the processing is carried out after obtaining your consent, where such consent is required.

Marketing data

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may process your name, email address, telephone number, marketing preferences and information about your interaction with our messages.

We use this data to inform you about new products, offers, campaigns and other news from MUSE Cosmetics.

Where the law requires consent, marketing messages are sent on the basis of your consent.

Where you are our customer, in the cases provided for by law we may use the electronic contact details you have provided to inform you about our similar products or services, provided that you are given a clear and easy opportunity to opt out of such communication.

You can unsubscribe at any time through the unsubscribe link in the relevant message or by contacting us.

Analytics and advertising

With your consent, we may use analytics and advertising tools that help us understand how the site is used, measure the effectiveness of content and campaigns, and improve the user experience.

At present the site may use Microsoft Clarity and Microsoft Advertising to analyze interaction with the site and for marketing purposes. These technologies may use cookies and other similar identifiers.

The use of such non-essential technologies follows the choice you have made through the cookie settings.

3. Special categories of personal data

We do not require and do not aim to collect special categories of personal data, such as information about your health, racial or ethnic origin, religious or political beliefs, genetic or biometric data, or information about sex life and sexual orientation.

In individual cases you may provide us with such information yourself - for example in an inquiry related to a reaction to a product. In such cases we will process the information only to the extent necessary to handle your specific request and to the extent permitted by applicable law.

Please do not provide us with sensitive information that is not necessary for handling your question.

4. How we obtain your data

We may obtain personal data:

• directly from you - when you place an order, register, send an inquiry, subscribe or otherwise communicate with us;
• automatically when the site is used, through technically necessary technologies and, after consent has been given, through analytics or marketing cookies and similar technologies;
• from providers involved in fulfilling your order, such as payment operators and courier companies;
• from third-party platforms and services, when you interact with us through them and where the law allows this.

5. Cookies and similar technologies

The site uses cookies and other similar technologies.

Necessary cookies are used for the functionality, security, cart, payment and other core functions of the site and may be active without your consent where they are strictly necessary to provide the service.

Analytics and marketing cookies are used only when you have given the necessary consent.

Through the cookie banner and settings you can accept or refuse the individual categories of non-essential cookies. You can change or withdraw your choice at any time through the settings available on the site.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

6. Marketing communications

You can ask to stop receiving marketing messages from MUSE Cosmetics at any time.

The easiest way is through the unsubscribe link in the relevant email or by writing to us at info@musecosmetics.bg.

Opting out of marketing communications does not affect messages that are necessary for the performance of a contract or order - for example order confirmation, delivery information, a return or a refund.

We will not provide your personal data to independent third parties for their own direct marketing purposes without the necessary legal basis and, where required, your express consent.

7. Who we may share your personal data with

Where necessary, we may provide personal data to:

• providers of e-commerce platform, hosting, IT and technical services;
• payment operators and financial institutions;
• courier and logistics companies;
• providers of customer communication services;
• providers of email and other marketing services;
• providers of analytics and advertising services, where the necessary legal basis or consent is in place;
• accountants, lawyers, auditors, insurers and other professional advisers;
• state, judicial, tax or other competent authorities, where we are required to by law;
• potential acquirers, investors or other parties in the event of a reorganization, sale or transfer of part of the business, where this is necessary and lawful.

We require providers that process personal data on our behalf to use it only for the agreed purposes and to apply appropriate measures to protect it.

8. Transfer of data outside the European Economic Area

Some of the providers of technology, analytics, payment or marketing services that we use may process data outside the European Economic Area.

Where such a transfer takes place, we take the necessary measures to ensure an adequate level of protection under applicable law - for example on the basis of a European Commission adequacy decision or by using approved standard contractual clauses and other appropriate safeguards.

You can request further information about the applicable safeguards by contacting us.

9. How long we keep your personal data

We do not keep personal data for longer than is necessary for the purposes for which it was collected.

When determining the retention periods we take into account the type and purpose of the data, the length of our relationship with you, the applicable legal requirements and the need to establish, exercise or defend legal claims.

In particular:

• data on orders, invoices and accounting documents is kept for the periods required by applicable accounting and tax law;
• correspondence and data related to complaints or disputes may be kept for the period needed to handle the case and protect our legal rights;
• marketing data is processed until consent is withdrawn or an objection to marketing is made, and we may retain minimal information about the opt-out in order to ensure that it is respected;
• data from cookies and similar technologies is kept in line with the lifetime of the respective technology and the settings you have made.

When the data is no longer needed, it is deleted or anonymized in an appropriate manner.

10. Security of personal data

We apply appropriate technical and organizational measures to protect your personal data against accidental or unlawful loss, destruction, alteration, disclosure or unauthorized access.

Access to personal data is given only to persons and partners who need it to carry out specific tasks and who are bound by appropriate confidentiality and data protection obligations.

In the event of a personal data breach, we will take the actions required by applicable law, including notifying the competent supervisory authority and, where required, the persons affected.

11. Your rights

Under applicable data protection law, where the relevant conditions are met, you have the right:

• to obtain information about and access to your personal data;
• to request the correction of inaccurate or incomplete data;
• to request the erasure of your personal data;
• to request the restriction of processing;
• to receive your data in a structured, commonly used and machine-readable format, where the right to portability applies;
• to object to processing based on legitimate interest;
• to object at any time to the processing of your personal data for direct marketing;
• to withdraw consent you have given at any time;
• to lodge a complaint with the competent supervisory authority.

The right to object to direct marketing is especially important: after such an objection, the personal data must no longer be processed for direct marketing.

To exercise any of your rights, you can write to us at info@musecosmetics.bg.

We will normally respond without undue delay and no later than one month from receiving the request. For complex or numerous requests this period may be extended by up to two further months, and we will inform you of this and of the reasons for the delay.

Exercising your rights is, as a rule, free of charge. For manifestly unfounded or excessive requests, the law allows a reasonable administrative fee to be charged or action to be refused.

Where we have reasonable doubts about the identity of the person making the request, we may ask for additional information needed to confirm it.

12. Complaint to a supervisory authority

If you believe that your personal data is being processed in breach of applicable law, you have the right to lodge a complaint with:

The Commission for Personal Data Protection (CPDP)

Information on how to lodge a complaint is available at cpdp.bg. The CPDP handles complaints about infringements of rights under the GDPR and the Personal Data Protection Act.

We would be glad if you contact us first if you have a question or concern, so that we have the opportunity to help.

13. Automated decision-making and profiling

We do not make decisions about you that are based solely on automated processing and produce legal effects for you or similarly significantly affect you.

With your consent, tools for analytics, audience measurement, personalization or the creation of advertising audiences may be used. This does not constitute automated decision-making with legal or similarly significant effects within the meaning of the GDPR.

14. Links to third-party sites and services

The site may contain links to third-party sites, applications or services.

We do not control how these third parties process personal data. When you leave our site, we recommend that you read the privacy policy of the respective provider.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the way we process data, the technologies used or applicable law.

The current version will always be published on the site, and in the event of material changes we will take appropriate steps to notify you, where necessary.

16. Contact

If you have questions about this Privacy Policy or the way we process your personal data, you can contact us at:

MUSE Cosmetics EOOD
info@musecosmetics.bg