We consider that the protection of the right to protection of personal data is a key commitment of Leto Clothing and will therefore use and make every effort to process your data in full compliance with Regulation (EU) 2016/679 (the “General Regulation of The EU on data protection ‘or’ the HACP ‘) and any other applicable Bulgarian legislation. As one of the fundamental principles of this legal framework is transparency, we have prepared this document to inform you of how we collect, use, transmit and protect your personal information when you interact with us in relation to products and services, including through our website or mobile applications.
Who are we and how can you contact us?
Leto Clothing is the trade name of Symbolic Ltd, a Bulgarian legal entity with its registered office: Veliko Tarnovo, 26 L. Karavelov Str., Under the unique tax registration number BG200715743 (hereinafter referred to as “Leto Clothing” or “we”). For the purposes of data protection law, we are the controller of the processing of your personal information.
As your feedback is always important to us and we are always ready to provide you with any additional information you may need regarding the processing of your data, we encourage you to contact the Leto Clothing staff responsible for personal data protection. e-mail data to email@example.com Leto Clothing by entering the following text: To the attention of the Leto Clothing Privacy Officer.
Which categories of personal data we process
In general, we collect your personal information directly from you, so you decide what kind of information to provide to us. For example, the information we receive from you is the following:
When you place an order, you provide us with the following information: the product you want, your first and last name, shipping address, billing information, payment method, phone number, etc.
What are the purposes and reasons for data processing?
We will use your personal information for the following purposes:
Providing Leto Clothing Services for Your Benefit This general purpose may include, as appropriate, the following: order processing, including acceptance, validation, shipping and invoicing; Resolving order cancellation problems or any other problems related to orders, purchased goods or services; return of products in accordance with legal provisions; reimbursement of products in accordance with legal provisions; The processing of your data for these purposes is in most cases necessary for the conclusion and execution of a contract between Leto Clothing and you. In addition, the processing of these goals requires processing in accordance with applicable law, including tax and accounting legislation.
Improvement of our services
We would always like to offer you the best online shopping experience. To this end, we may use certain information about your buyer behavior, invite you to complete your satisfaction surveys after order completion, or conduct direct, or with the help of, partners, market research and surveys. We base these activities on our legitimate business interests, always making sure that your fundamental rights and freedoms are not affected.
We would always like to keep you informed about the best product / service offerings you are interested in. In this connection, we can send you all kinds of messages through e-mail channels (e-mail / SMS / mobile push / webpush, etc.), which contain general and thematic information, information about similar products or products supplementing the ones purchased by your products, information on offers and promotions, product information added to the Profile or Favorites sections, and that any decisions made in connection with them do not have any legal effect on you and do not substantially affect you. In most cases, we require your prior consent in order to send you marketing messages. You can change your decision and withdraw your consent at any time by: using the unsubscribe link in the messages you receive from us; or by contacting Leto Clothing using the contact information above. In certain situations, we may base our marketing activities on our legitimate interest in promoting and developing our business. In any case, when we use your information for our legitimate interests, we take care and take the necessary measures to ensure that your fundamental rights and freedoms are not affected. However, you may at any time, by using the means described above, suspend the processing of your personal data for marketing purposes and we will respond to your request.
Protection of our legitimate interests
There may be times when we use or transmit information to protect our rights and business. These may include:
– measures to protect the website and users of the Leto Clothing website against cyberattacks;
– measures to prevent and detect fraudulent attempts, including the transmission of information to competent public authorities;
-measures for managing various other risks.
The main reason for these types of processing is our legitimate interests related to the protection of our business activities, provided that we ensure that all measures taken by us ensure a balance between our interests and your fundamental rights and freedoms.
In addition, in some cases, processing by us is based on legal provisions such as the obligation to protect goods and values provided for by the applicable legislation in this regard.
How long do we keep your personal data?
As a rule, we store your personal information until you have received your order. You can always ask us to delete certain information and we will respond to that request when applicable law or legitimate interests require it.
To whom do we send your personal data?
As appropriate, we may transmit or give access to some of your personal information to the following categories of recipients:
courier service providers;
If we are required by law, or if this is necessary to protect our legitimate interests, we may also disclose certain personal information to public authorities.
We guarantee that access to your data by third parties is subject to legal provisions in the field of data protection and confidentiality of information based on contracts concluded with them.
To which countries do we transfer your personal data?
We currently store and process your personal data in Bulgaria.
We will always take steps to ensure that any international transfer of personal data is carefully managed to protect your rights and interests. Data transfers to service providers and other third parties will always be protected by contractual obligations and, where appropriate, by other safeguards, such as standard contractual terms issued by the European Commission or certification schemes, such as the Privacy Shield of personal data transmitted by the EU to the United States of America.
How do we protect the security of your personal information?
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures while complying with industry standards. We store your data on secure servers using the latest encryption algorithms and ensure that backups are maintained. Despite the measures we take to protect your personal data, we are aware that, in principle, the transmission of information over the Internet or other public networks is not completely secure, with the risk that the data may be viewed and used by unauthorized third parties. We cannot accept responsibility for those vulnerabilities of systems that are not under our control.
What are your rights?
The General Data Protection Regulation recognizes a number of rights in relation to your personal data. You may request access to your data, the correction of errors in our files, and / or raise objections to the processing of your personal data. You may also exercise your right of appeal to the competent supervisory authority or to the courts. Depending on the case, you may also have the right to request the deletion of your personal data, the right to restrict the processing of your data and the right to data portability. To exercise your rights, you can contact us using the contact details above. Please consider the following if you wish to exercise these rights:
We take the confidentiality of all records containing personal information seriously. For this reason, we ask that you send us your requests for these records using the email address on our website. Otherwise, we reserve the right to verify your identity by requesting additional verification information.
We will not charge a fee for exercising any right with respect to your personal information, unless your request for access to information is without reason, repeated or unnecessarily repeated, in which case we will charge a reasonable amount. We will keep you informed of any applicable charges before we review your request.
We plan to respond to all valid requests within one month, except when the request is particularly complex, or if you have made more requests, in which case we will respond within a maximum of two months. We’ll let you know if we need more than a month. We may ask you to tell us exactly what you want to get or what you are worried about. This will help us act faster and shorten the response time to your request.
Third party rights.
We will not need to respond if it adversely affects the rights and freedoms of other data subjects.
You can ask us:
– to confirm that we process your personal data and provide a copy of that data;
– to provide information about your personal data, such as information we have, how we use it, to whom we disclose it, whether we transmit it abroad and how we protect it, how long we keep it, what rights you have, how you can file a complaint, where we obtained your information insofar as the information was no longer provided to you by this notice.
You may ask us to correct or supplement your inaccurate or incomplete personal information. We may try to verify the inaccuracy of the data before correcting it.
You may ask us to delete your personal information, but only if:
They are no longer needed for the purposes for which they were collected; or
You have withdrawn your consent (if data processing is based on consent); or
exercise a legal right of objection; or
they have been unlawfully processed; or
there is a legal obligation in this regard.
We have no obligation to comply with your request for deletion of your personal data if processing requires:
– to fulfill a legal obligation; or
– to establish, exercise or defend a legal claim;
There are certain other circumstances in which we are under no obligation to comply with your request for deletion, although these are also the most likely circumstances in which we may deny your request.
Please note that before exercising this right, you must download and retain all documents related to the orders made by Leto Clothing, whether invoicing has been made to you or to another natural or legal person (such as invoices, certificates for warranty). Failure to do so before exercising your right of erasure will result in the loss of all such documents and Leto Clothing will not be able to provide them, as the case may be, since the erasure process with all data and documents associated with it, is an irreversible process.
Restriction of data processing
You may ask us to restrict the processing of your personal information, but only if:
their accuracy is being challenged (see data correction section) so that we can verify their accuracy; or
processing is illegal, but you do not want the data deleted; or
they are no longer necessary for the purposes for which they were collected, but we still need to establish, enforce or defend a legal claim; or
You have already exercised your right of objection and are checking whether the domination of our rights is still present.
We may continue to use your personal information as a result of a restriction request:
if we have your consent; or
to establish, exercise or defend a legal claim; or
to protect the rights of Leto Clothing or any other individual or company.
You may ask us to provide your personal data in a structured, widely used and machine-readable format, or you may request that it be “directly” transferred to another data carrier, but only if: processing is based on your consent or the conclusion on contract with you; and the processing is performed by an automatic tool.
Right to object.
You may object at any time for reasons related to your particular situation, against the processing of your personal data based on our legitimate interests, if you believe that your fundamental rights and freedoms dominate those interests. In addition, you may object to the processing of your data for direct marketing purposes (including account creation) at any time without giving any reason whatsoever, in which case processing will be terminated as soon as possible. You may ask us not to be subject to a decision based solely on automatic processing, but only when that decision: has legal effects on you; or similarly and significantly affecting you.
You have the right to complain to your local supervisory authority about the processing of your personal data.
Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance and we promise you that we will use our best endeavors to resolve your issues by mutual agreement. Manager: Anton Kalpakov, 0897004415