General information
In connection with the General Data Protection Regulation adopted by the European Union, which enters into force on 25 May 2018 and aims to ensure the protection of data of natural persons from all EU Member States and to
unify the regulations for their processing, the company "YANA" LTD in its capacity as an online trader, ensures that it meets all the requirements of the new regulation, collecting only personal data insofar as it is necessary for the
sale and the accompanying ongoings (notifications of the order and marketing notices) and keep them responsibly and lawfully.
Information about the Personal Data Administrator
Name of the Supplier: YANA LTD
Headquarters and address of management: Burgas
Correspondence data: tel: +359 886088555
Entry in public registers: UIC 102004258
Information on the personal data protection officer
Email: trade@yanabg.eu
Information on the competent supervisory authority
Title: Commission for Personal Data Protection
Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
Correspondence data: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
Telephone: 02 915 3 518
Email: kzld@government.bg, kzld@cpdp.bg
Website: cpdp.bg
YANA LTD operates in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the
processing of personal data and on the free movement of such data
Reason for collecting, processing and storing your personal data
Art. 1. (1) YANA LTD collects and processes your personal data in connection with a purchase from your side pursuant to Art. 6, para. 1, Regulation (EU) 2016/679, and in particular on the basis of the following:
Explicit consent received from you as a customer;
Compliance with a legal obligation that applies to YANA LTD;
For the purposes of the legitimate interest of YANA LTD.
(2) YANA LTD is an administrator of personal data regarding your data as customers of our online store. Regarding the personal data that you process using our services, YANA LTD acts as a processor of personal data.
Objectives and principles in the collection, processing and storage of your personal data
Art. 2. (1) YANA LTD collects and processes the personal data that you provide to us in connection with a purchase in our online store, as well as for registration for notifications regarding future promotions and events. Including
the following purposes:
Create an account needed to track your orders, as well as to facilitate the execution of new ones.
Registration
Accounting purposes;
Statistical purposes;
Information security protection;
Sending information messages, messages about changes in the status of the orders, messages for promotions, messages about future events related to our activities.
(2) YANA LTD observes the following principles in the processing of your personal data:
Legality, good faith and transparency;
Restriction of processing purposes;
Relevance to the purposes of processing and minimizing the data collected;
Accuracy and timeliness of data;
Limitation of storage in order to achieve the objectives;
Integrity and confidentiality of the processing and ensuring an appropriate level of security of personal data.
(3) In the processing and storage of personal data, YANA LTD may process and store personal data in order to protect the following legitimate interests:
fulfillment of its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal bodies.
What types of personal data does YANA LTD collect, process and store?
Art. 3. (1) YANA LTD performs the following operations with the personal data for the following purposes:
User registration on the website in order to make or facilitate a purchase. Conclusion of the impact assessment: Based on the above-mentioned impact assessment, the Data Protection Officer considers that the operation "Making or
facilitating a purchase" is admissible and provides sufficient guarantees to protect the rights and legitimate interests of the subjects of data in accordance with the requirements of the GDPR.
Sending information messages - the purpose of this activity is to administer the process of sending messages to customers, which relate to tracking the status of an order.
Sending a newsletter - the purpose of this operation is to administer the process of sending newsletters containing information about promotions, discounts, events or new products to customers who have stated their wish to receive;
(2) YANA LTD processes the following categories of personal data and information for the following purposes and on the following reasons:
Data: Your personal data (name and surname, e-mail, country, address, telephone)
Purpose for which the data is collected: 1) User registration; 2) Making contact with the user and sending information to him, including, if stated - newsletters and advertising messages;
Reasons for processing your personal data - By accepting the general terms and conditions and registering in the website and purchasing a product, a contractual relationship is created between YANA LTD and you, on the basis of
which we process your personal data - Art. 6, para. 1, p. (b) GDPR.
Other data that YANA LTD processes - When logging into our website or in your account, YANA LTD collects data about the IP address that is used.
Purpose for which the data is collected: Improving the security of the service, improving the speed and localization of the interface, statistical and marketing research.
Reasons for data processing: The processing is necessary for the performance of a contract to which the data subject is a party - Art. 6, para. 1, p. (b) of the GDPR. Until the creation of a user profile, the IP address is collected on the basis of the legitimate interests of the administrator - Art. 6, para. 1, p. (f) the GDPR; Your invoice details for a natural person - If you want to be issued an invoice as a natural person, you must provide your unique civil number.
(3) YANA LTD does not collect or process personal data, which refer to the following:
Reveal racial or ethnic origin;
Disclose political, religious or philosophical beliefs, or trade union membership;
Genetic and biometric data, health data or data on sexual life or sexual orientation.
(4) The personal data have been collected by YANA LTD from the persons to whom they refer.
(5) The company shall not perform automated decision-making with personal data.
Term of storage of your personal data
Art. 4. (1) YANA LTD stores your personal data for a period not longer than the existence of your account on the website, or if there is no such - for a period of 6 years. After the expiration of this term, YANA LTD takes the
necessary care to delete and destroy all your data without unnecessary delay.
(2) YANA LTD notifies you in case the term for data storage needs to be extended in view of legitimate interests of YANA LTD or else.
(3) YANA LTD stores the personal data that it is necessary to keep by virtue of the applicable legislation for the respective intended term, which may exceed the term of existence of your registration.
Transfer your personal data for processing
Art. 5. (1) YANA LTD may, at its own discretion, transfer part or all of your personal data to personal data processors for the fulfillment of the processing purposes in compliance with the requirements of Regulation (EU) 2016/679.
(2) YANA LTD notifies you in case of intention to transfer part or all of your personal data to third countries or international organizations.
Your rights in the collection, processing and storage of your personal data
Withdrawal of consent for the processing of your personal data
Art. 6. (1) If you do not wish all or part of your personal data to continue to be processed by YANA LTD for specific or for all purposes of processing, you may at any time withdraw your consent for processing by filling in the form in Your client profile or by request in free text via email to: info@smartliving.bg
(2) YANA LTD may request you to certify your identity with the identity of the person to whom the data relates.
(3) By withdrawing the consent for processing personal data, which are mandatory for the creation and maintenance of your registration, your account will become inactive.
Right of access
Art. 7. (1) You have the right to request and receive from "YANA" LTD confirmation whether personal data related to you are processed.
(2) You have the right to access the data related to it, as well as the information related to the collection, processing and storage of your personal data.
(3) YANA LTD provides you, upon request, with a copy of the processed personal data related to you, in electronic or other appropriate form.
(4) Providing access to the data is free of charge, but YANA LTD reserves the right to impose an administrative fee in case of recurrence or excessiveness of the requests.
Right of correction or completion
Art. 8. You can correct or fill in the inaccurate or incomplete personal data related to you directly through your profile on the website or by making a request to YANA LTD.
Right to delete ("to be forgotten")
Art. 9. (1) You have the right to request from "YANA" LTD deletion of the personal data related to you, and "YANA" LTD has the obligation to delete them without undue delay, when there is any of the following reasons:
personal data are no longer needed for the purposes for which they were collected or otherwise processed;
You withdraw your consent on which the data processing is based and there is no other legal basis for the processing;
You object to the processing of personal data relating to you, including for the purposes of direct marketing, and there are no legal reasons for processing to take precedence;
Personal data have been processed illegally;
Personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to YANA LTD;
Personal data have been collected in connection with providing information society services.
(2) YANA LTD shall not be obliged to delete the personal data if it stores and processes them:
to exercise the right to freedom of expression and the right to information;
to comply with a legal obligation requiring processing provided for in EU law or the law of the Member State applicable to the Administrator or for the performance of a task in the public interest or in the exercise of official
powers conferred on him;
for reasons of public interest in the field of public health;
for archiving purposes in the public interest, for scientific or historical research or for statistical purposes;
for the establishment, exercise or defense of legal claims.
(3) In order to exercise your right to "forget", you should submit a request through the option in your profile or a written request sent to "YANA" LTD, as well as to verify your identity to the identity of the person to whom the data
relates, by presenting on side your personal ID card for identification purposes and if necessary enter your login details in the profile, in the company of an employee of "YANA" LTD.
(4) YANA LTD shall not delete the data, which has a legal obligation to store, including for protection on the occasion of court claims against it or proof of its rights.
Right of restriction
Art. 10. You have the right to request from YANA LTD to limit the processing of data related to you when:
Contest the accuracy of the personal data for a period that allows YANA LTD to verify the accuracy of the personal data;
The processing is illegal, but you do not want your personal data to be deleted, only their use to be restricted;
YANA LTD no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or protection of your legal claims;
You have objected to the processing pending verification of whether the legal reasons of YANA LTD take precedence over your interests.
Right of portability
Art. 11. (1) You can at any time download the data that are stored and processed for you in connection with the use of the services of "YANA" LTD, directly through your account or with a request by email.
(2) You can ask YANA LTD to directly transfer your personal data to an administrator specified by you, when this is technically feasible.
Right to receive information
Art. 12. You can ask YANA LTD to inform you about all recipients to whom the personal data for which correction, deletion or restriction of processing has been requested have been disclosed. YANA LTD may refuse to provide
this information if this would be impossible or would require a disproportionate effort.
Right to object
Art. 13. You can object at any time against the processing of personal data by YANA LTD, which relates to you, including if they are processed for the purposes of profiling or direct marketing.
Your rights in the event of a violation of the security of your personal data
Art. 14. (1) If YANA LTD establishes a violation of the security of your personal data, which may pose a high risk to your rights and freedom, we shall notify you without undue delay of the violation, as well as of the measures
taken or forthcoming to be taken.
(2) YANA LTD is not obliged to notify you if:
Has taken appropriate technical and organizational protection measures with regard to data affected by the security violation;
Has subsequently taken steps to ensure that the violation does not lead to a high risk to your rights;
Notification would require a disproportionate effort.
Persons to whom your personal data is provided
Art. 15. Your personal data is not provided to persons outside YANA LTD.
Other provisions
Art. 16. In the event of a violation of your rights under the above or applicable data protection legislation, you have the right to file a complaint to the Data Protection Commission as follows:
Title: Commission for Personal Data Protection
Headquarters and address of management: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
Correspondence data: Sofia 1592, Blvd. "Prof. Tsvetan Lazarov ”№ 2
Telephone: 02 915 3 518
Email: kzld@government.bg, kzld@cpdp.bg
Website: cpdp.bg
Art. 17. You can exercise all your rights regarding the protection of your personal data through the forms attached to this information. Of course, these forms are optional and you can submit your requests in any form that contains
a statement to that effect and identifies you as the data holder.
Art. 18. If the consent relates to a transfer, the Administrator shall describe the possible risk for the transfer of the data to third countries in the absence of a decision on adequate protection and appropriate means of protection.
Art. 19 (1). When you assign YANA LTD to process personal data of a third party for the purposes of using the service, YANA LTD acts as a processor of personal data.
Cookie Policy
The website of YANA LTD uses cookies, which are important for its correct operation. By visiting our site, you accept the use of cookies.
Reasons for collecting, processing and storing your personal data
Types of cookies we use:
Mandatory cookies
These cookies are necessary for the proper operation of the website. For example, with these cookies we show you the information on our website in the correct language, and the prices - according to the currency and VAT for the
respective country. Such cookies are also those for enabling caching, for remembering a previous selection as well as previously entered data for a stick and others.
Analytical cookies
Thanks to these cookies, we monitor the traffic to our site and can analyze how easily our users work with it (cookies from Google Analytics, hotjar, etc.). These cookies do not give us any information about your personal data.
They show us which pages of our site you have viewed, whether you have visited our site via a mobile or desktop device and other anonymous data. For Google Analytics, we also use IP anonymization using _anonymizelp. The
maximum period in which we store analytical data in Google Analytics is 50 months.
Functional cookies
These cookies allow you to use the full functionality of our site, watch videos on it, chat with us, as well as remember the preferred language in which to load the information on our site.
Precise targeting cookies
These cookies contain information about how you have used our site and can be triggered by our advertising partners. They do not store personal information. Thanks to them, you will not be shown information that is irrelevant to
you. These are dynamic cookies on Facebook, Google and others.
You can make the settings of cookies that you receive from our site in the browser you use.