Privacy policy

PRIVACY POLICY OF THE EMF PROTECTION WEBSITE

1. Information about the Data Controller

This Privacy Policy explains how D&V Clothing Ltd (“the Company”, “we”, “us”) collects, uses, stores and protects the personal data of its customers and users (“you”). We are committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and the Bulgarian Personal Data Protection Act.

Data Controller:
D&V Clothing Ltd, registered in the Bulgarian Commercial Register with company registration number 204965452, with its registered office and business address at:
38 Knyaz Alexander Dondukov Blvd., Floor 3, Sofia 1000, Bulgaria.

Contact details:
Tel: +359 895 631 911
Email: contact@protect-emf.com
Correspondence address: 38 Knyaz Alexander Dondukov Blvd., Floor 3, Sofia 1000, Bulgaria.

We process your personal data on the following legal grounds:

  • Performance of a contract concluded between you and us;
  • Your explicit consent (the purpose is specified in each individual case);
  • Compliance with a legal obligation.

Further details regarding the processing of your personal data, depending on the legal basis, are set out below.

2. What Personal Data We Collect

FOR THE PERFORMANCE OF A CONTRACT OR PRE-CONTRACTUAL STEPS

We process your personal data in order to fulfil our contractual and pre-contractual obligations and to exercise our rights under contracts concluded with you.

Purposes of processing:

  • Verifying your identity;
  • Managing and fulfilling your order and performing the concluded contract;
  • Issuing and sending invoices for the services or products you use;
  • Retaining correspondence relating to orders, processing requests, reporting issues, etc.;
  • Creating and maintaining a user account.

Based on our contractual relationship, we process information regarding the type and content of the contract, as well as any other information related to the contractual relationship, including:

  • Contact details – address, email address, telephone number;
  • Identification data – full name, personal identification number (EGN) or foreigner identification number, permanent address;
  • Order history via your user profile;
  • Emails, correspondence, requests for issue resolution, complaints and enquiries;
  • Credit or debit card details, bank account number or other banking and payment information relating to payments made.

Processing of the above personal data is necessary for us in order to conclude and perform the contract with you.

We may provide your personal data to third parties in order to ensure high-quality, efficient and comprehensive service.

We share personal data with the following categories of recipients (data controllers):

  • Postal operators and courier companies – for delivery of your orders;
  • Payment service providers – for processing payments;
  • Technical partners – for maintenance of our website and IT infrastructure;
  • Professional advisers and consultants in various fields.

Personal data collected on this basis is deleted five years after termination of the contractual relationship, whether due to expiry, termination or other grounds. This period reflects the five-year statutory limitation period for contractual claims.

FOR COMPLIANCE WITH LEGAL OBLIGATIONS

In certain cases, we are required by law to process your personal data, for example:

  • Obligations under anti-money laundering legislation;
  • Compliance with distance selling and off-premises sales requirements under consumer protection law;
  • Providing information to the Consumer Protection Commission or other authorised third parties;
  • Providing information to the Personal Data Protection Commission in accordance with data protection legislation;
  • Compliance with accounting and tax legislation, including the Accounting Act and the Tax and Social Insurance Procedure Code;
  • Providing information to courts and third parties in the context of legal proceedings;
  • Age verification when shopping online.

Personal data collected in fulfilment of a legal obligation is deleted once the obligation to store it has been fulfilled or ceases to apply. For example:

  • Accounting data – 11 years;
  • Provision of information to courts or competent public authorities – typically 5 years or as required by applicable law.

Where required by law, we may provide your personal data to competent public authorities or other authorised persons.

BASED ON YOUR CONSENT

We process your personal data on this basis only after obtaining your explicit, informed and freely given consent. You will not suffer any adverse consequences if you choose not to provide consent.

Consent constitutes a separate legal basis, and the specific purpose of processing is stated at the time consent is given. It does not overlap with the purposes listed above.

If you provide consent, and until it is withdrawn or our contractual relationship ends, we may send you tailored product or service offers.

On this basis, we process only the data for which you have provided explicit consent. This may include:

  • Email address;
  • Telephone number;
  • Address;
  • Name;
  • Technical information – IP address, device type, operating system, browser type and version;
  • Marketing preferences – including preferences for receiving promotional messages.

On this basis, we may share your data with marketing agencies and service providers.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal and does not affect contractual obligations.

Data collected on the basis of consent is deleted upon your request or one year after its initial collection.

PROCESSING OF ANONYMISED DATA

We may process anonymised data for statistical and analytical purposes. In such cases, the results are aggregated and no individual can be identified.

3. How We Protect Your Personal Data

To ensure appropriate protection of personal data, we implement all necessary organisational and technical measures required under applicable data protection legislation.

To ensure maximum security in processing, transmission and storage of your data, we may use additional safeguards such as encryption and pseudonymisation.

Your Rights

Every website user enjoys all rights under Bulgarian and EU data protection law.

You have the right to:

  • Be informed about the processing of your personal data;
  • Access your personal data;
  • Rectify inaccurate data;
  • Erase your personal data (“right to be forgotten”);
  • Restrict processing;
  • Data portability;
  • Object to processing;
  • Not be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects;
  • Seek judicial or administrative protection if your rights have been violated.

Right to Erasure

You may request erasure where:

  • The data is no longer necessary for the purposes collected.
  • You withdraw consent and there is no other legal basis.
  • You object to processing and there are no overriding legitimate grounds.
  • The data has been unlawfully processed.
  • Erasure is required to comply with a legal obligation.
  • The data was collected in relation to information society services offered to a child.

Right to Restriction

You may request restriction where:

  • You contest the accuracy of the data (for the period required to verify it);
  • The processing is unlawful but you oppose erasure;
  • We no longer need the data but you require it for legal claims;
  • You object to processing pending verification of overriding legitimate grounds.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit it to another controller where processing is based on consent or contract and carried out by automated means.

Right to Object

You have the right to object to the processing of your personal data. We will cease processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or for legal claims. If you object to processing for direct marketing purposes, processing will cease immediately.

Complaint to a Supervisory Authority

You have the right to lodge a complaint with the Bulgarian Personal Data Protection Commission or the competent court if you believe your data has been processed unlawfully.

4. Use of Cookies

Our website uses cookies to improve your browsing experience.

Types of cookies used:

  • Essential cookies – necessary for core website functionality;
  • Analytical cookies – to collect data on website usage;
  • Marketing cookies – to personalise advertising.

You can manage your cookie preferences through your browser settings.

5. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time. Any changes will be published on this page and will take effect from the date of publication.