PRIVACY POLICY

For us, the protection of personal data and the safeguarding of our customers' personal information is of utmost importance! 

We are committed to protecting your privacy and process your personal data in accordance with Regulation (EU) 2016 / 679 (GDPR) and the current Bulgarian legislation through the Personal Data Protection Act (PDPA) and the Electronic Commerce Act (ECA).

 The current privacy policy aims to provide users with information on how “JOY VIPEL“ Ltd., as the “Controller” of personal data within the meaning of the applicable legislation, collects, processes, and protects the personal data of individuals when using the online store. www.joyfshn.com

Information regarding the company processing your data:

JOY FASHION is the trade name of “JOY VIPEL’ Ltd. – a commercial company registered in the Commercial Register at the Registry Agency with UIC BG207449932, with registered office and management address: Rousse city;

phone: 0895561559; E-mail:  [email protected] ; Website: www.joyfshn.com

Every Client/User who uses the site and the services provided through it is considered to have read and agreed to comply with this policy.

I. TYPES OF PERSONAL DATA PROCESSED

Art. 1. “JOY VAPIEL” Ltd. or hereinafter referred to as “the Administrator” may collect and process the following data:

1.1. Identification data - name, surname, username, password, email, when you register
1.2. Contact details – address, phone, email.
1.3. Delivery and Payment Data – Delivery Address, Payment Method, Billing Information
1.4. Order and User Behavior Data – Order history, reviews, preferences.
1.5. Online activity data – IP address, cookies, device data, access logs

Art. 2. The personal data collected by “JOY VIP EL” EOOD in connection with the services offered through the online store website „JOY FASHION” are always processed solely and exclusively for the specific purpose for which they were provided by the clients/users, and are not processed in a manner incompatible with these purposes.

II. BASIS FOR PROCESSING

Art. 3. The administrator processes personal data on a legal basis, because they are provided by customers in connection with the goods and services offered through this site, within the framework of a purchase and sale agreement or when necessary for the fulfillment of the terms and conditions governing the use of the platform/website of the online store „JOY FASHION”. 

Art. 4. The main reasons for processing personal data are actions for concluding and performing a purchase and sale agreement. Regulation (EU) 2016/679, Article 6, Paragraph 1, Sub-paragraph b, when customers make a purchase; when they register on the „JOY FASHION” online store website; when the customer makes a complaint about a purchased product in accordance with legal regulations and/or when they use any of our services or functions, although there are other reasons that allow the Administrator to process them, such as their interest in responding to customer inquiries or based on the explicit consent that customers give for the possibility of receiving promotional messages Regulation (EU) 2016/679, Article 6(1)(a)

III. PURPOSES OF PROCESSING

Art. 5. The administrator processes the personal data of its clients/users for the following purposes:

5.1. Fulfillment of contractual obligations – for administering client/user registration, subsequent fulfillment of the sales contract concluded between the client and the administrator through the online store, processing and delivery of orders, customer service, invoicing, etc.
5.2. Legal Obligations - Accounting, Tax Reporting, Complaints, Product Value Reimbursement according to Legal Provisions.
5.3. Marketing and personalized offers – sending news, offers, and promotions (only with explicit consent), when using re-marketing through trusted sites, including Facebook.
 5.4. Service Improvement - Analysis of User Preferences and Behavior
 5.5. Information Security – preventing misuse, fraud, and unauthorized access, as well as notifying about changes to the Terms and Conditions, Privacy Policy, or our services.

IV. HOW PERSONAL DATA IS COLLECTED

Art. 6. Clients/Users voluntarily provide their personal data when using our website www.joyfshn.com. 

6.1. For example, when an inquiry is sent for a specific item or service, or in the process of ordering goods offered by “JOY VIPEL” Ltd. through the „JOY FASHION” online store, and more specifically, when the client/user fills in their personal data, which is a condition for accessing certain functions or services of the platform. The designated fields that are indicated as mandatory to fill in are the information the administrator needs to conclude a purchase and sale agreement, to fulfill the delivery of the goods, and to realize the rights of the parties to the agreement.
6.2. By providing personal data in accordance with the preceding point, the user agrees to receive order confirmations and shipping information by courier, including payment amount and method, via email. The user's personal data will be used solely for the purpose of administering the specific order.
6.3. By agreeing to receive advertising messages, the user agrees to receive current promotions and commercial offers via email.

V. PERSONAL DATA RETENTION PERIOD

Art. 7. “JOY VIPEL” Ltd., as Administrator, takes all necessary actions for the protection and storage of personal data during the period in which personal data are stored, only to the extent and for as long as is necessary for the respective activity for which they were provided, in compliance with the requirements and deadlines for this, provided for in the applicable and current regulatory acts in the Republic of Bulgaria and the EU, but not more than the legally defined periods. After the expiry of the storage period, the client's/user's personal data shall be destroyed.

Art. 8. Data provided for marketing purposes shall be kept until the users notify us that they no longer wish to receive relevant information from us. After the data processing objectives have been achieved, the administrator shall destroy them.

VI. ACCESS TO PROVIDED PERSONAL DATA

Art. 9. “JOY VIPEL” Ltd., as a personal data administrator, undertakes not to share the provided personal data with third parties. Access to this data is granted solely and exclusively for the purposes of:

9.1. Courier companies (for delivery).
9.2. Accounting Services.
9.3. IT Support and Hosting Providers.
9.4. Payment operations.

Art. 10. All third parties process data as instructed by the Administrator and are bound by a confidentiality agreement.

Article 11. Data is not provided to third parties for marketing purposes.

“JOY VIEPIEL” EOOD transfers its clients' personal data to third parties, subcontractors, and other affiliated organizations solely for the purpose of performing actions related to the provision of services to clients/users, for which they have given their explicit consent – service providers who carry out specific activities on our behalf. These providers may be located within the European Union as well as in countries outside of it, anywhere in the world, and may offer services such as – delivery of goods, payment processing, order fulfillment, customer support, IT services, and data hosting. 

The provision of personal data to state institutions may only be carried out in cases provided for by law and to the extent that does not exceed the purposes for which they were requested.

VII. RIGHTS OF CLIENTS / CONSUMERS

Sec. 12. Customers/Users have the right at any time to request:

12.1. Access to your personal data collected in the process of providing and using the services, including: confirmation of whether we process the personal data provided to us, what categories they are, the purposes of this processing, and the recipients to whom the data are disclosed.
12.2. Correcting personal data provided by customers/users when it is inaccurate or incomplete.
12.3. Erasure of personal data when they are no longer necessary for the purposes for which they were collected or otherwise processed, and there is no other legal basis for their processing except consent, on which the processing of personal data is based, as well as when they have been processed unlawfully. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
12.4. The performance of the above actions for granting access, correction, and deletion of personal data is possible only when the user requests it through a written application addressed to the Administrator, which must contain:

1. 1. Name, address, and other identifying details of the relevant natural person;
   2. Request description;
   3. Preferred format for submitting the information:;
   4. Signature, date of application submission, correspondence address, and contact phone number;
   5. Notarized power of attorney, when submitted by an authorized person.

The application is sent to the registered office address of the Administrator by registered mail or courier.

The administrator will notify you of the decision to grant or deny your request within one month of receiving the application. Notification will be sent by mail with a return receipt or can be received in person by signature.
12.5. Right to object.

In cases provided by law, each Client/User has the right to:

 1. lodge an objection with the Administrator against the processing of personal data relating to him/her where there is a legal basis for doing so. When the objection is well-founded, the personal data of the relevant person can no longer be processed from that moment on;
2. object to the processing of personal data for direct marketing purposes;
3. be informed before their personal data are disclosed for the first time to third parties or used on your behalf for the purposes of the preceding point of this article, with the opportunity to object to such disclosure or use
4. Each user can file a complaint regarding the processing of their personal data by contacting us at tel. +359 895 561 559.
 5. In all cases where the client/user believes their data is being processed unlawfully, or the response does not satisfy the request made, the client/user may contact the competent personal data protection authority – the Commission for Personal Data Protection. The Commission for Personal Data Protection is the supervisory body exercising legal control over the personal data processing process. The client/user may contact the Commission for Personal Data Protection in the following manner:

Commission for Personal Data Protection: e-mail: [email protected];
Address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2;
Phone: 0035929153518

12.6. Any questions related to this policy can be sent to the e-mail: [email protected].

VIII. COOKIE POLICY

Article 13. Cookies are small text files with a unique number that are stored in the directory of the User's browser or mobile device. They are created when you use your browser and visit a website that uses cookies. Cookies are most often used to store information related to the User's visit or use of the Site, such as remembering provided data, visited pages, preferences for personalizing the Site, etc.

There are several types of cookies – persistent, functional or necessary, and temporary (session) cookies.

13.1. Session cookies are stored temporarily on the Client/User's device when they visit the Site but are deleted as soon as the page is closed.
13.2. Permanent (necessary) cookies are stored as a file on the Client/User's computer or mobile device for a longer period of time. These cookies are related to the proper functioning of our Website. They cannot be deactivated without this terminating your access to the online store. With the exception of cookies necessary for the functioning of the Website, we store cookies on the Client/User's device only with your consent.
13.3. We use cookies and the information collected from them for the purpose of optimization and ensuring full and quality use of the online store's functionalities, including increasing security, recognizing Customer/User preferences, data analysis, displaying personalized content, behavioral advertising, saving settings, monitoring, as well as for the purpose of satisfying the widest possible range of user needs and requirements.
13.4. By visiting the Site, Customers/Users agree that the Seller has the right to place cookies, as well as to use the information generated by these cookies, including providing it to third parties.
13.5. Clients/Users may refuse the storage and/or access of their chosen cookies by changing their browser settings. Clients/Users should be aware that by limiting allowed cookies, they may be deprived of the ability to fully utilize all functionalities of the Site and online store. Limiting cookies may affect some functionalities of the Site and online store.
13.6. By visiting the Website, Customers/Users agree that certain types of cookies are strictly necessary for the proper functioning of the Website and the online store, as well as for the functioning of the services they have activated, and they cannot refuse these cookies.

Article 14. Use of Third-Party Cookies

The Administrator is not responsible for the content and use of cookies placed on the Clients'/Users' devices by third parties, nor for changes in the type and number of these cookies.

To get more information and for questions regarding third-party cookies used, we recommend sending direct inquiries to the respective third parties and familiarizing yourself with their cookie policies.

14.1. Information collected through cookies will be used only for the purposes described in this Privacy Policy, as well as within the permissible limits according to the applicable Bulgarian legislation regarding personal data protection.

IX. CHANGES TO THE PRIVACY POLICY

Art. 15. The administrator may update this policy in case of legislative changes or changes in the way your personal data is processed. In case of changes, we will publish the updated text on our website and indicate the date of the last update. Continued use of our services after the publication of the changes means that the client/user accepts them.

For questions regarding the processing of personal data, you can contact us at the above-mentioned email, address, and phone number.