Personal Data Protection
General Information
Yambol Commerce Ltd. processes the personal data of its customers in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Bulgarian Personal Data Protection Act, and the other applicable legislation of the Republic of Bulgaria.
The protection of personal data is one of the company’s main priorities. We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access, disclosure, or any other form of unlawful processing.
Access to personal data is granted only to employees and persons who need this information for the performance of their duties.
All persons who process personal data on behalf of Yambol Commerce Ltd. are bound by confidentiality obligations and process the data only in accordance with our instructions and the applicable legislation.
We use appropriate technical measures to protect our information systems, including access control, encryption, secure communications, backups, and other measures appropriate to the nature of the personal data processed and the level of risk.
What Personal Data We Collect and Why We Process It
When the customer chooses the payment method “instalments / on credit” through any of the integrated credit institutions (TBI Bank, DSK Bank, IuteCredit, UniCredit or another), Yambol Komers Ltd. additionally collects the customer’s Personal Identification Number (EGN / PIN).
The Personal Identification Number is processed solely for the following purposes:
submission of a credit/leasing application to the selected credit institution;
performance of the instalment purchase agreement.
Legal basis: Article 6(1)(b) of Regulation (EU) 2016/679 (necessity for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract).
The Personal Identification Number is disclosed only to the respective credit institution and is not used for any other purposes. The data is stored for the period necessary for processing the application and for fulfilling the applicable legal obligations.
Yambol Commerce Ltd. processes only the personal data that is necessary to provide its products and services, fulfill its legal obligations, and protect its legitimate interests.
Depending on the services you use, we may process the following categories of personal data:
full name;
telephone number;
e-mail address;
delivery address and billing address;
invoice details;
information relating to orders, deliveries, complaints, warranty, and after-sales service;
IP address, device information, and technical data related to the use of our website;
information voluntarily provided through contact forms or during communication with our staff.
EGN / Personal Identification Number (only when choosing the “instalments / on credit” payment method).
Your personal data is processed for the following purposes:
processing and fulfilling your orders;
delivering purchased products;
issuing invoices and other accounting documents;
processing payments;
handling complaints, warranty claims, and after-sales service;
communicating with customers regarding their orders;
improving the security and functionality of our website;
complying with legal obligations;
protecting the legitimate interests of Yambol Commerce Ltd. in the event of legal disputes.
Personal data is not processed for purposes that are incompatible with those for which it was originally collected.
Legal Basis for Processing Personal Data
Yambol Commerce Ltd. processes personal data only where at least one of the legal bases set out in Article 6(1) of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) applies.
Personal data is processed on one or more of the following legal bases:
performance of a contract or taking steps at the request of the data subject prior to entering into a contract;
compliance with a legal obligation to which Yambol Commerce Ltd. is subject;
the explicit consent of the data subject, where such consent is required;
the legitimate interests of Yambol Commerce Ltd., provided that such interests do not override the fundamental rights and freedoms of the data subject.
Where the processing of personal data is based on consent, the data subject has the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or for the period required by the applicable legislation. After the applicable retention period has expired, the data will be deleted or anonymized unless further retention is required by law.
Disclosure of Personal Data to Third Parties
Yambol Commerce Ltd. does not sell, rent, or disclose customers' personal data to third parties for marketing purposes.
Personal data may be disclosed only where necessary for the performance of a contract or where required by applicable law, including to:
courier and transportation companies for the delivery of purchased products;
payment service providers and financial institutions for payment processing;
accounting and auditing service providers where required for compliance with legal obligations;
hosting providers, IT service providers, and technical support providers acting on behalf of Yambol Commerce Ltd.;
public authorities, courts, and other competent governmental bodies where disclosure is required by law.
All third parties processing personal data on behalf of Yambol Commerce Ltd. are contractually required to implement appropriate technical and organisational measures to protect personal data and to process it only in accordance with applicable legislation and our instructions.
Where personal data is transferred outside the European Union (EU) or the European Economic Area (EEA), such transfers are carried out only where an appropriate legal basis exists and an adequate level of protection is ensured in accordance with Regulation (EU) 2016/679 (GDPR).
Your Rights as a Data Subject
Under Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), every individual has the following rights regarding their personal data:
the right to be informed about the processing of their personal data;
the right to access their personal data;
the right to request the rectification of inaccurate or incomplete personal data;
the right to request the erasure of personal data ("right to be forgotten"), where the legal conditions are met;
the right to request the restriction of processing in the cases provided by law;
the right to data portability where the processing is carried out by automated means and is based on consent or a contract;
the right to object to the processing of personal data where the processing is based on legitimate interests;
the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal;
the right not to be subject to a decision based solely on automated processing, including profiling, where such processing produces legal effects concerning the individual, except where permitted by law.
To exercise any of the rights listed above, you may contact Yambol Commerce Ltd. at:
E-mail: admin@mebelinovdom.com
Where necessary to verify the identity of the requester, Yambol Commerce Ltd. may request additional information in order to prevent unauthorized access to personal data.
If you believe that the processing of your personal data violates the applicable legislation, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) in Bulgaria or with the competent court.
Data Retention Periods
Yambol Commerce Ltd. retains personal data only for as long as necessary to fulfill the purposes for which it was collected or for the periods required by the applicable legislation.
The retention period depends on the type of processing and the applicable legal requirements. For example:
personal data related to contracts and customer orders is retained for the period necessary to perform the contract and to protect the legitimate interests of the company;
accounting records and the personal data contained therein are retained for the periods required under the Bulgarian Accountancy Act and the Tax and Social Security Procedure Code;
personal data processed on the basis of consent is retained until the consent is withdrawn, unless a longer retention period is required by law;
personal data related to complaints, warranty claims, and after-sales service is retained for the period necessary to protect the rights and legitimate interests of both parties.
After the applicable retention period has expired, personal data is securely deleted, anonymized, or otherwise processed in a manner that no longer allows the identification of the individual, unless further retention is required by applicable law.
Cookies
The website of Yambol Commerce Ltd. uses cookies and similar technologies to ensure the proper functioning of the website, improve its security, enhance performance, and provide a better user experience.
Cookies are small text files that are stored on the user's device when visiting the website.
Depending on their purpose, the following categories of cookies may be used:
Strictly Necessary Cookies – required for the proper operation of the website and cannot be disabled.
Functional Cookies – enable the website to remember user preferences and improve functionality.
Analytics Cookies – used to analyze website traffic and user behavior in order to improve the website's content and performance.
Marketing Cookies – used only with the user's consent to provide personalized content and advertisements.
Users may change their cookie preferences at any time through their web browser settings or through the website's cookie consent settings, where available.
Restricting or disabling certain categories of cookies may affect the availability and functionality of some features of the website.
Contact Information and Changes to the Privacy Policy
The data controller responsible for the processing of personal data is:
Yambol Commerce Ltd.
NOV DOM Furniture Factory
Address:
1 Industrialna Str.
8600 Yambol
Bulgaria
E-mail: admin@mebelinovdom.com
If you have any questions regarding the processing of your personal data or wish to exercise your rights under Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), you may contact us using the e-mail address above.
Yambol Commerce Ltd. reserves the right to amend or update this Privacy Policy in the event of changes to the applicable legislation, changes to the manner in which personal data is processed, or the introduction of new products, services, or technologies.
The latest version of this Privacy Policy is always available on our website and becomes effective from the date of its publication.
We encourage users to review this Privacy Policy periodically to stay informed about how Yambol Commerce Ltd. collects, uses, stores, and protects personal data.