ПОСЛЕДВАЙТЕ НИ във facebook

Натиснете бутона Харесай ( Like ) за да ни следвате във facebook. Ще виждате на стената ни последните продукти, снимки, снимачни сцени, много промоции и отстъпки и дори създаването на продукти в детайли.

Добре дошли в света на Lilian Edwards!






[X] ЗАТВОРИ

Privacy Notice

General information

The European Union’s General Data Protection Regulation (“GDPR”), coming into effect in 25 May 2018, lays out a new set of rules for how the personal data of people living within the EU should be handled. It sets out the protection of personal data as a guaranteed right for all citizens across EU.
As a personal data processor when order and purchase goods, LILIAN EDWARDS ( FRISH & ASSOCIATES LTD ) is compliant with all the requirements of the regulation and meets the high standards "Data privacy by design and by default". Only the required legal minimum of personal data is gathered, processed and kept secure with the appropriate technical and organisational measures.


Information about the Controller

1 Name Frish and Associates Ltd.
2 UIC/BULSTAT :201235697
3 Seat and registered address: Bulgaria, 1504 Sofia, 11 Vasil Aprilov Str.
4 Correspondence address: Bulgaria, 1504 Sofia, 11 Vasil Aprilov Str.
5 Telephone: +359 895 545454 and +359 888 836809
6 Email: shop@lilianedwards.com
7 Controller's registration number with the Commission for Personal Data Protection №


Information about the Supervisory Authority

1 Name: Commission for Personal Data Protection
2 Seat and registered address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia
3 Correspondence address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia
4 Telephone: 02 915 3 518
5 Email: kzld@government.bg, kzld@cpdp.bg
6 Website: www.cpdp.bg

The Data Controller collects and processes your personal data under Art. 6, para. 1, Regulation (EU) 2016/679, and in particular under the following:
-Obtained explicit consent from you as a user of the service/client;
-Performance of the Company’s obligations under a Contract with you;
-Processing is necessary for compliance with a legal obligation to which the Company is subject;
-Processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party.

The Company collects and processes the personal data which you as our client provide in relation to the use of the online store www.lilianedwards.com, for the purposes of performance of a contract, including the following purposes:
-registration at www.lilianedwards.com via creating a user account and ensuring its full functionality;
-individualization of a party to the contract;
-accounting purposes;
-statistical purposes;
-protection of information security;
-securing the performance of the contract for provision of the service concerned;
-optimization of the provided service;
-sending newsletters and e-mails with special offers if you have indicated you wish to receive such.

The Company adheres to the following Principles in the course of processing of your personal data:
-lawfulness, fairness and transparency;
-purpose limitation of the processing personal data;
-data minimization;
-accuracy;
-storage limitation;
-integrity and confidentiality.

In the course of processing and storage of personal data, The Company is entitled to process and keep personal data for the purposes of protection of the following legitimate interests:
-to perform its obligations towards state and municipal bodies and perform its obligations under the applicable legislation and regulations.

The Data Controller collects and processes your personal data under Art. 6, para. 1, Regulation (EU) 2016/679, and in particular under the following:

Obtained explicit consent from you as a user of the service/client;
Performance of the Company’s obligations under a Contract with you;
Processing is necessary for compliance with a legal obligation to which the Company is subject;
Processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party.
Objectives and principles in the course of collection, processing and storage of your personal data

The Company collects and processes the personal data which you as our client provide in relation to the use of the online store www.lilianedwards.com, for the purposes of performance of a contract, including the following purposes:

registration at www.lilianedwards.com via creating a user account and ensuring its full functionality;
individualization of a party to the contract;
accounting purposes;
statistical purposes;
protection of information security;
securing the performance of the contract for provision of the service concerned;
optimization of the provided service;
sending newsletters and e-mails with special offers if you have indicated you wish to receive such.

The Company adheres to the following Principles in the course of processing of your personal data:

lawfulness, fairness and transparency;
purpose limitation of the processing personal data;
data minimization;
accuracy;
storage limitation;
integrity and confidentiality.

In the course of processing and storage of personal data, The Company is entitled to process and keep personal data for the purposes of protection of the following legitimate interests:

to perform its obligations towards state and municipal bodies and perform its obligations under the applicable legislation and regulations.
What kind of data do we collect, process and keep?

The Company carries out the following operations with the personal data you provide for the following purposes:

Registration of a client in the online store and performance of a contract for sale from distance – the purpose of this operation is the creation of a user profile for using the online store for purchase of goods and provision of contact details for execution of the delivery.

Sending newsletters – The operation aims to send newsletters, e-mails with special offers, proposals, promotions, promo codes, news and new functionalities to the clients, which have indicated that they wish to receive such messages.

Exercising of right of withdrawal or return – the purpose of this operation is administrating the process of exercising the right of withdrawal or return of the purchased goods with regard to the goods, for which this is permissible.

The Company doesn’t collect and process personal data, that refers to:
revealing racial or ethnic origin;
revealing political opinions, religious or philosophical beliefs, or trade union membership;
genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Personal data is collected by The Company from the persons it refers to.

The company is not carrying out automated decision making with data.

The Company does not collect and process data of persons under the age of 16 years without their parents’ consent.

The Data Controller processes the following categories personal data and information for the following purposes and on these legal grounds:

Your individualizing data (e-mail, name, etc.)
Purpose for which we collect these data: 1) Contact with the customer and sending information to him, 2) registration of a customer at the online store, as well as 3) sending of a newsletter, e-mails with special offers, promotion, etc.
Legal ground for processing of your data – The Data Controller processes your data on the grounds of the concluded contract - Art. 6, para. 1, b. (b) GDPR. Your data for sending newsletter and e-mails is processed on the grounds of your explicit consent - Art. 6, para. 1, b. (a) GDPR.
Data for delivery (names, telephone, address, etc.)
Purpose for which we collect these data: Performance of the Data Controller’s obligations under a contract for delivery of the purchased goods.
Legal ground for processing of your data – The Data Controller processes your data on the grounds of the concluded contract - Art. 6, para. 1, b. (b) GDPR.
Information from your profiles in social media (publicly available information from your profiles in Google+, Facebook)
Purpose for which we collect these data: 1) Contact with the customer and sending information to him and 2) registration of a customer at the online store.
Legal ground for processing of your data – The Data Controller processes your data on the grounds of the concluded contract - Art. 6, para. 1, b. (b) GDPR.

Duration of personal data storage

The Data Controller stores your personal data for the whole period of maintenance of your profile in the online store or execution of the order. After this, the Data Controller makes all reasonable efforts to delete and destroy or anonymize all of your personal data without undue delay.

The Data Controller stores your personal data with regard to online orders for a period of 5 years for the purpose of protection of the Company’s legitimate interests in case of court or administrative disputes with customers of the online store, as the accounting documents are stored within the provided legal term.

The Company informs you in case that the period for the storage of the personal data is necessary to be extended in regard to performing the purposes, performing the contract, in regard to legitimate interests of the Company or other person.

The Company stores the personal data in accordance with the applicable law and the legal term for storage of such data could exceed the period of maintenance of your profile in the online store of execution of the order.

Transmission of your personal data for processing

The Company is allowed on its own decision to transmit all or part of your personal data to a data processor for performing the purposes of processing, including in other countries, by complying with the requirements of Regulation (EU) 2016/679, for which you are considered informed with this Privacy notice and the publicly available list of processors used by the Company.

The Company informs you in case of intention to transmit part or all of your personal data to third countries or international organization.

Your rights in the course of collection, processing and storage of your personal data

Withdrawal of the consent

If you no longer wish for your personal data to be processed for all or specific purposes, you may at any time withdraw your consent by filling the form in your profile or sending an e-mail with a request to the Data Controller.

The Data Controller could request you to certify your identity in a manner it considers appropriate given the circumstances.

The withdrawal of your consent for processing of personal data which is required for maintenance of your profile on our website and use of our services, will automatically deactivate your account. Of course, you can at any time make orders as guest or make new registration.

If there is a pending order made by you which is currently being processed, the earliest moment when you can withdraw your consent for processing is after the successful completion of the order.

You may at any time withdraw your consent for processing of your personal data which is used for direct marketing purposes.

The withdrawal of your consent does not affect the legality and validity of any processing of your personal data which has been made prior to the withdrawal.

Right of access by the data subject

You have the right to obtain from the Data Controller confirmation as to whether or not it is processing personal data concerning you, as you can at any time view all information we have for you in your details in your user’s profile if you are a registered customer.

You have the right to obtain access to the personal data related to you, аs well as to the information regarding the collection, processing and storage of your personal data.

The Data Controller provides on your request, a copy of the personal data related to you and processing in electronic or other suitable form, including through visualization in your profile.

The provision of access to the personal data is free, but the Data Controller keeps his right to charge administrative fee, in case of repeatability or excessiveness of the requests.

Right to rectification or completion

You could at any time rectify or complete inaccurate or incomplete information concerning you directly through your account or by sending us a request via e-mail.

Right to erasure („right to be forgotten“)

You have the right to request from the Data Controller to erase the personal data concerning you and the Data Controller has the obligation to erase personal data without undue delay where one of the following grounds applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you withdraw your consent on which the processing is based and where there is no other legal ground for the processing;
you object to the processing of personal data concerning you, including for the purposes of the direct marketing and there are no overriding legitimate grounds for the processing;
the personal data have been unlawfully processed;
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
the personal data have been collected in relation to the offer of information society services

The Data Controller is not obliged to erase the personal data if he collects and process them:

for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
for the establishment, exercise or defense of legal claims.

In case of an exercised right “to be forgotten”, the Company shall erase all your personal data, except for:

information which is necessary to certify that your right “to be forgotten” has been exercised;
technical information for the functioning of the online store which cannot be connected to your personality;
e-mail you have used for registration at the online store.

To exercise your right “to be forgotten”, you have to make the following:

Submit a request through your profile at the online store or via e-mail;
Provide a unique identification code which shall be sent to your e-mail used for the registration at the online store;
Identify yourself as a user of the account.

After we certify your identity as described above, we shall erase all personal data we store for your in accordance with para. 3 above.

If there is a pending order made by you which is currently being processed, the earliest moment when you can exercise your right “to be forgotten” is after the successful completion of the order.

By erasing your personal data, your user account shall be deactivated. Of course, you can at any time make orders as guest or make new registration.

The Company does not erase the personal data which it has a legal obligation to store or which is necessary for proving its legitimate rights against claims against the Company.

Right to restriction of processing

You have the right to obtain from the Data Controller restriction of processing where one of the following applies:

you contest the accuracy of the personal data, for a period enabling the Data Controller to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
the Data Controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims;
you have objected to processing pending the verification whether the legitimate grounds of the Data Controller override those of yours.
In case you request restriction of processing of your data, the Company shall discontinue the processing of your data but shall not remove any publications you have made on the online store.

Right to data portability

If you have given your consent for processing of your personal data or the processing is necessary for performance of a contract with the Data Controller, or your personal data is processed by automated means, you could, after identification before the Data Controller

require the Data Controller to provide you with your personal data in readable format and to transmit those data to another controller;
require the Data Controller to transmit directly your personal data to another controller, specified by you, where technically feasible.

You could exercise your right to data portability by using the “Export” option directly from your profile or by sending an e-mail to the controller and indicate the format in which you require the data to be transmitted, as well as to whom.

Right to receive information

You have the right to require the Data Controller to inform you about all recipients, to whom your personal data, for which has been required rectification, erasure or restriction of processing, have been disclosed. The Data Controller is allowed to refuse to provide this information if this is impossible or involves disproportionate effort.

Right to object

You have the right to object at any time to processing of personal data concerning you including processing for the purpose of profiling or direct marketing

Your rights in case of personal data breach

When the Data Controller detects personal data breach, which is likely to result in a high risk to your rights and freedoms, the Data Controller communicates the personal data breach to you without undue delay, as well as the measures taken or proposed to be taken by the Company.

The Data Controller is not obliged to inform you if:

the Data Controller has implemented appropriate technical and organizational protection measures, and those measures were applied to the personal data affected by the personal data breach;
the Data Controller has taken subsequent measures which ensure that the high risk to your rights is no longer likely to materialize;
it would involve disproportionate effort.
Persons, to whom your personal data is provided

For the purpose of processing your personal data and provision of the service, the Data Controller is allowed to provide your personal data to data processors:

Data processor Purpose of processing
Supplier Delivery to an address
Designated processors comply with all requirements of legality and security in the course of processing and storage of your personal data.

Other provisions

The Company does not transfer personal data in third countries.

In case of violation of the principles of data protection or your rights according to this Privacy notice, the Terms of use or the applicable law, you could file a complaint before the competent national supervisory authority:

Legal name Commission for personal data protection
Seat and registered office 2 Prof. “Tsvetan Lazarov” Blvd., Sofia 1592, Bulgaria
Address of correspondence 2 Prof. “Tsvetan Lazarov” Blvd., Sofia 1592, Bulgaria
Telephone +3592/91-53-518
Website www.cpdp.bg

You could exercise all of your rights related to the processing of your personal data by using the exemplary forms of the Company or by using the functionalities in your profile. Of course, you can also exercise your rights by sending us an e-mail with a request. Please, have in mind that the Company as a data controller with respect to your personal data may require additional information and certification of your identity for safety and security purposes.

If there is consent for transfer, the Data Controller describes the possible risks for the transfer to third countries in case of lack of decision of an adequate level of protection.

The Company may at any time amend the Privacy notice for which it shall publish a notification on its website.