Privacy Policy

PRIVACY POLICY
This Policy aims to clarify to USERS what personal data
we collect, why we collect it and how we process it, how we use your information
and the ways in which you can exercise your rights.
This Privacy Policy applies to your personal data when
you visit brandearoma.bg  or place orders for items and goods through this site.
The online store - brandearoma.com is owned and operated by "MI AROMA" EOOD,
UIK 207742718.
This Privacy Policy does not apply to other sites or services
that are not owned by "MI AROMA" EOOD.
This Privacy Policy is an integral part of the General
Terms.
The Personal Data Protection Policy, as well as the General Terms and Conditions are provided for
getting acquainted with our website – brandearoma.com
ADMINISTRATOR OF PERSONAL DATA
The Company - Administrator of Personal Data is "MI AROMA" EOOD, UIC
207742718, with registered office and registered address: Country: BULGARIA, Region: Sofia
(capital), Municipality: Stolichna, Settlement: Sofia, p.k. 1404, Triaditsa district, residential district
Gotse Delchev, bl. 4B, entrance V, floor 4, ap. 355, represented by its Manager MLADEN
BISEROV IVANOV, email: sales@brandearoma.bg
 "MI AROMA" EOOD is a personal data administrator with respect to your data
as USERS of the site - brandearoma.com
"MI AROMA" EOOD acts in its capacity as a personal data processor.
PERSONAL DATA. METHOD OF COLLECTION. PROCESSING.
Personal data is any information by which an individual can
be identified (names, age, email address, telephone, geolocation, etc.).
"MI AROMA" EOOD does not process "sensitive" data revealing race or
ethnic origin, political views, religious or philosophical beliefs
or membership in trade union organizations and processing of genetic data, biometric
data for the purpose of uniquely identifying an individual, health or data
regarding the sexual life or sexual orientation of an individual.
"MI AROMA" EOOD collects personal data only for the purpose of buying and selling items from the
online store and sending the ordered items to the USER.
"MI AROMA" EOOD processes personal data only for statutory reasons.
"MI AROMA" EOOD collects and processes your personal data on the basis of Art. 6, par.
1 of the General Data Protection Regulation (Regulation 2016/679).
We do not provide your personal data to third parties without a legal or contractual
basis, we do not sell them or distribute them in any other way.
We may share them with service providers and courier services only
when this is necessary to fulfill our contractual obligations.
"MI AROMA" EOOD has minimized the information collected in order to effectively
fulfill its obligations as a seller of goods through the online store -
brandearoma.bg.
Access (visit, viewing items, inquiries) to our online store
brandearoma.bg is free and does not require registration.
To successfully make a purchase from the online store, the following data must be
provided:
- Names;
- Phone;
- Email;
- Address;
The data that we process on a contractual basis and are provided voluntarily are:
Personal and family name of the delivery person; Delivery address - country, city,
postal code, address; Delivery phone number; Invoice data - names, phone, city,
country, postal code, address; Delivery method; Payment method; Order number; Payment amount; Payment status; Delivery status;
We process and use data that USERS of the online store
brandearoma.bg have provided voluntarily. This means that each USER is responsible for not providing data to third parties in violation of their rights to personal data protection, since we have no practical opportunity to control whether the data provided to third parties is entered with their knowledge and consent. Each person is fully personally responsible for data provided to a third party without their knowledge or without obtaining their consent in fulfilling the requirements of the applicable personal data protection legislation. "MI AROMA" EOOD processes personal data independently or jointly with other administrators such as service providers, courier services, payment service providers, system operators defined in the Payment Services and Payment Systems Act. Data related to online payments. Such data for the identification of the USER are processed jointly with payment service providers. By accepting this privacy policy, the User consents to the collection of other data such as: IP address, time of visit, location from which the website is accessed, name and version of the web browser, operating system and other parameters provided by the web browser through which brandearoma.bg is accessed and any other information. The collected data can be used by by "MI AROMA" EOOD for statistical, analytical and marketing research, to improve the functionality of the online store.
DATA OF MINORS AND DATA OF THIRD PARTIES
In the event that we receive information that we have collected personal data from a person under 18 years of age without the necessary consent, we will immediately delete them.
The same applies to data for persons over 18 years of age, when their data was provided without their knowledge and consent.
In connection with the above, you can contact us immediately, using the contact forms specified for this purpose.
DATA STORAGE PERIOD AND DELETION PERIOD
We will retain your personal information for a period necessary to fulfill the purposes set out in this Personal Data Protection Policy, unless a longer period is required by law. According to the type of data and the purposes for which they were collected, a storage period is determined, after which the information is permanently deleted. Reasons for keeping this data:  to prevent data loss;  to honor complaints and claims;  to resolve any judicial and extrajudicial disputes that may arise, to collect claims and to comply with applicable legislation, including the requirements of the Accounting Act and applicable tax legislation. RIGHTS OF THE PERSONAL DATA SUBJECT You have the right to request a copy of your personal data at any time, to check the accuracy of the stored information, to correct or update this information, to request that your personal information be deleted if there are grounds for doing so. You have the right to file a complaint for a violation when your rights to personal data protection have been violated.  you have the right to request confirmation as to whether personal data relating to you are being processed and to request a copy of your personal data; as well as to information relating to the collection, processing and storage of your personal data;
 you have the right to request that your personal data be erased on one of the following grounds: the personal data are no longer necessary for the purposes for which they were collected; where you have objected to the processing; where the processing is unlawful; where the data are processed on the basis of your consent and you withdraw that consent; where the personal data must be erased for compliance with a legal obligation under Union law or Member State law to which the controller is subject;
 you have the right to request that your personal data be rectified if inaccurate or completed if incomplete;
 you have the right to request that the processing of your personal data be restricted, if this is applicable and there are grounds for doing so, for example: you contest the accuracy of the personal data, for a period that allows us to verify the accuracy of the personal data; the processing is unlawful, but you do not want the personal data to be erased, but only to have their use restricted; we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; you have objected to the processing pending verification whether our legitimate grounds override your interests.  you have the right to request to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format and you have the right to transfer these data to another controller, where the processing is based on consent or a contractual obligation and the processing is carried out by automated means
 you have the right to object to such processing of your personal data to the data protection officer, if there are grounds for doing so.
All requests are addressed to a representative of "MI AROMA" EOOD. It is possible that when exercising your rights we may request additional information in order to establish your identity.
We may refuse to process requests that are unreasonably repetitive, require disproportionate technical efforts, endanger the confidentiality of other customers, requests that are extremely impractical or to which access is otherwise not required by law.
Please note that when your requests are manifestly unfounded, excessive or threaten the privacy of other customers, we may:
1. impose a fee, taking into account the administrative costs of
providing the information or communication, or taking the
requested action, or
2. refuse to take action on the request.
SUPERVISORY AUTHORITY
For violations of your rights in relation to your personal data, you can file a complaint
with the supervisory authority of Bulgaria, which is the Commission for Personal Data Protection. 
More information can be found at: www.cpdp.bg.
CHANGES TO THE PERSONAL DATA PROTECTION POLICY
In the event of a change to this policy, each USER will be notified in an
appropriate manner. Access to the updated Policy will be provided, in a prominent
place on the brandearoma.com website