Privacy Policy

The Privacy Policy reflects the requirements of Regulation 2016/679 EU on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (&quot General Data Protection Regulation’ or GDPR), in relation to the processing of personal data and the Personal Data Protection Act.

This privacy policy applies to the processing of personal data of individuals who have placed an order on the Website: www.ogivas.com (“the Website”).

Information about us

The personal data of the persons who have registered on the Website are processed by OGIVAS EOOD, UIC 207670699, registered in the Commercial Register at the Registry Agency, with headquarters and address of management in the village of Zhilentsi, P.O. Box 2573, 4 Mahala Cherkovna Blvd. (“We/Us”).

What is personal data?

“Personal data” means any information relating to an identified natural person or an identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by an identifier such as a name, identification number, location data, online identifier or by one or more attributes, specific to the physical, physiological, genetic, mental, mental, economic, cultural or social identity of that natural person.

Collection, processing of personal data and the purposes for which we process it:

“Processing” of personal data means any operation or set of operations carried out with personal data or a set of personal data by automatic or other means such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making the data accessible, arrangement or combination, restriction, deletion or destruction;

What necessary information do we collect and why?

We process personal data about you when you use the Website and when you first place an order. In most cases, we require your personal data for the purpose of fulfilling an order, to comply with a legal obligation or to protect our legitimate interest. Without this data, we would not be able to provide the relevant services. If we do not receive data for your identification, we could not deliver the relevant order to you, respectively. we could not inform you about our upcoming events and campaigns. Depending on the services you use, we may collect and process the following information about you:

  • Names;
  • Personal identification number when issuing an invoice;
  • e-mail address and delivery address;
  • Phone number;
  • Transaction and payment details;
  • Shopping history;
  • Ip address
  • Data from social profiles, when choosing the option to register with a social profile through Facebook, Instagram, google or sharing data from such profiles with us;
  • Photos and videos, when sharing opinions with us about the products used, respectively. Uploading photos to social profiles with a hashtag on our products;
  • Other information you have shared about yourself with us in connection with your enquiry (which may include well-being and health).

When we process your data for direct marketing purposes for our products and services, we will need your explicit consent, except in cases where the advertising messages are related to the same or similar products that you have already ordered on the Website. In the latter case, we can rely on our legitimate interest in sending you advertising messages, and at any time you have the opportunity to request the suspension of their receipt.

Customer Account Registration Data

You can register on our Website and create a customer profile. When you log in to your customer profile, you have unlimited access to your personal data, as well as the ability to change it when necessary. In your customer profile, you can view the history of your orders, purchased products, as well as incomplete orders. Through the customer profile, you can also save your bank card details, manage the sending of information letters and create the Wishlist list, where you can save your favorite products.

When placing an order through the Website, we process the following personal data:

  • Identification data, such as name and surname, and if you want to issue an invoice – billing address and personal identification number;
  • Contact and delivery details, such as email address, postal address, phone number;
  • Financial data upon payment;
  • Login data, as well as data from social profiles, when logging in through a social profile.

Newsletter Subscription Data

You can subscribe to receive commercial communications about products offered by us. You can opt out of receiving communications at any time via the unsubscribe link found at the bottom of any email containing such messages. If you have a customer profile, you can opt out by ticking the appropriate box in your customer profile.

Customer Feedback Data

After receiving products purchased from us, you may receive an invitation to rate them and express your satisfaction through a selected evaluation portal. We value any feedback, and providing it depends on your choice. You can write a comment, send photos or videos in which you indicate the results of the Products used. You can share your feedback and results, both on Our Website and on social networks, where you can tag our products or the company itself. If you send a review or upload a photo/video, we process the following data:

  • Contact details, in particular email address – when sending an invitation for evaluation;
  • Photos and videos – when you share them;
  • Social media data – when tagging the Products or company in your posts.

The purpose of processing your data

In most cases, personal data is required in order to provide our services or comply with a legal obligation.

The personal data we collect is most often processed for the following purposes:

  • To contact you to finalize your order when you have saved products in a cart or put products in a cart without completing the unsubscribe process;
  • To process and track your order, including delivering the product to the address you have provided;
  • To manage the payment of your order. Please note that payment information (credit card/bank account number) is not collected by Us, but directly by payment service providers;
  • To manage any contact with us regarding your order;
  • Creating your profile on our Website;
  • Sending personalized messages about our services or products;
  • Issuance of an invoice upon your request;
  • Providing access to the details and history of your orders;
  • Fulfillment of regulatory obligations;
  • Sending marketing messages;
  • Responding to your inquiries, complaints, etc.;
  • Resolution of disputes related to purchase;
  • For statistical purposes;
  • Maintain a ban list if you have stated that you do not wish to receive any further marketing communications from Us.

Most often, we process your personal data for the purpose of fulfilling a contract for the sale and delivery of goods, so that we can successfully process the order you have placed through our website and send you the Products. Your e-mail address and telephone number are used to send an order confirmation, acknowledgment of receipt of payment, sending an electronic invoice, as well as to periodically inform you about the status of your order and possibly other individual communication related to the specific order.

On what basis do we process your data?

Data processing on the basis of a contract

  • When you order products through the Website, the data is processed by virtue of a concluded contract for the sale and delivery of goods

Processing of data on the basis of your consent or on the basis of legitimate interest

  • When we process your data for direct marketing purposes for our products and services, we will need your explicit consent in cases where the advertising messages are not related to the same or similar products that you have already ordered on the Website.
  • Where advertising products are related to the same or similar products that you have already ordered, we can rely on our legitimate interest to send advertising messages to the same or similar products.
  • When you share photos or videos of results from the services you use and put a hashtag on our products or brand, we have a legitimate interest in sharing them on our corporate Website or in the relevant corporate profile on the relevant social network in which they are shared.

Who can we share your data with?

The provision of personal data in some cases is mandatory in order to comply with our legal requirements. We may share your data with the following categories of recipients:

  • State bodies/institutions, persons with public functions, regulators and supervisory authorities (including the National Revenue Agency, the State Agency for National Security, the Court, the Prosecutor’s Office and the Investigation, the CPC, the CPDP, etc.), if we have sufficient grounds to believe that their access, use, preservation or disclosure is necessary for: the implementation of an applicable law or other normative act of a mandatory nature; in response to an inquiry made by a supervisory authority, regulator or other state institution in connection with or in connection with the performance of its statutory functions or initiated inspection, complaint, audit, etc.; detection, prevention or other actions in connection with fraud, money laundering, terrorist financing, technical or security problems.

We use third parties to support certain contractual activities or in the fulfillment of a legal obligation. We do not provide your personal data to third parties until we have made sure that all technical and organizational measures have been taken to protect this data, and we strive to exercise strict control over the fulfillment of this purpose. Some of these recipients of personal data may be:

  • Courier companies and food delivery companies when ordering through the Website;
  • Providers of services for sending marketing messages, management and maintenance of the activity and quality of services, incl. those related to information technology with which we have a contract (e.g. IT suppliers, software suppliers, computer support providers, etc.);
  • Banks, payment institutions and payment service providers, for the purpose of receiving payment or chargebacks, in certain cases;
  • External consultants and specialists, law firms, banks, persons who maintain equipment, software and hardware used for the processing of personal data by Us, hosting companies, etc.

How do we receive your personal data?

  • by visiting and using the services of the Website;
  • by registering;
  • when updating data at your request

How long do we store and process your data before destroying it?

Your personal data will be stored in accordance with the statutory deadlines. We do not store your data indefinitely. We keep your personal information for no longer than is necessary to fulfill the purposes described in this Privacy Policy, and depending on the basis on which your personal data is processed, the period of storage of personal data is different.

In the case of processing of other data that is based on consent (e.g. marketing), personal data will be processed until the withdrawal of consent.

Transfers of data outside the EU/EEA

Your data is not shared or transferred outside the EU/EEA unless you have placed an order in the UK, for which country there is an EC adequacy decision.

What are your rights and how can you exercise them?

Your rights

You have the right to information, access and receive a copy of your personal data that is processed by us. If you believe that the information we have about you is inaccurate or incomplete, you can request the redaction of your personal data.

You have the right to correct or update the personal data provided by you, as well as to withdraw consent.

In addition, you have the right to:

  • request deletion/deletion of your personal data when the legal basis for their processing has ceased to exist;
  • request restrictions on the processing of your personal data; and/or
  • withdraw your consent where we process your personal data on the basis of consent (without such withdrawal affecting the lawfulness of processing carried out prior to the withdrawal);
  • of a complaint to the supervisory authority – CPDP (Sofia 1592, blvd. “Prof. Tsvetan Lazarov” No2 or www.cpdp.bg).

We will comply with requests, withdrawals or objections as required by the applicable data protection rules, but these rules are not absolute: they are not always applicable and there may be exceptions. In response to a request, you need to verify your identity and/or provide additional information to help better understand your request.

Where you have re-exercised the right of access to information or a copy of the data in a machine- readable format, we may charge a reasonable fee based on the administrative costs necessary to provide it.

How to exercise them?

Any of the rights provided for by law can be exercised by submitting a request for the exercise of the respective right.

A request for exercising the rights of personal data subjects can be submitted as follows:

  • Electronically to the following email address: info@ogivas.com
  • At the head office of “OGIVAS” EOOD, UIC 207670699, registered in the Commercial Register at the Registry Agency, with seat and address of management in the village of Zhilentsi, p.o. box 2573, bul./ul. Mahala Cherkovna No 4.

The request for the exercise of personal data rights should contain the following information:

  • Identification of the person – names and personal identification number;
  • Contacts for feedback – address, phone, e-mail;
  • Request – description of the request.

We provide information on the actions taken in connection with a request to exercise your rights within one month of receipt of the request.

If necessary, this period may be extended by a further two months, taking into account the complexity and number of requests from a particular person. We will inform the person of any such extension within one month of receipt of the request, including the reasons for the delay. The information provided to the subject and any communication and actions to exercise the rights of the data subject shall be provided free of charge (except in case of abuse of the rights granted).

We may request the provision of additional information necessary to verify your identity when there are doubts as to the identity of the individual submitting the request. We are not obliged to respond to a request in case it is not able to identify the data subject.

Where the request is submitted by electronic means, if possible, the information shall be provided by electronic means, unless you have requested otherwise explicitly.

Updating the Privacy Policy

This Policy may be subject to amendment and was last updated on ………….2024. Any future changes or additions to this policy will be duly noted.