Политика конфиденциальности

Privacy Policy

Company DILYANA M DESIGN Ltd. EIK; 205803019. The company is registered in Plovdiv and operates under the trade name REPLICA (hereinafter referred to as "REPLICA" or "we"), which manages the online store www.replica-moda.com, declares that all personal data (hereinafter referred to only as "data") is considered strictly confidential and is processed in accordance with the applicable legal provisions in the field of personal data protection.

The security of your personal data is our priority. Therefore, we pay necessary attention to personal data and their protection. In this privacy policy (hereinafter referred to only as "Policy"), you will find information about what personal data we collect about you, based on what legal grounds we process it, for what purposes we use it, how long we keep it, and to whom we may disclose it. In the Policy, we also inform you about your rights regarding the processing of your personal data.

1. What personal data do we process?

If you use the services of our online store or facilities (i.e., stores or places for receiving goods), we process various personal data about you.

1.1. If you make a purchase
The data you most commonly provide to us is obtained through the order form for goods or other services on our website. These are mainly data necessary for the conclusion of the purchase contract.

This data is necessary to fulfill your order and may be divided into the following groups:

Identification data, which are name and surname, and if you are purchasing for a company – identification and tax number;
Contact data, which are email address, postal address, billing address, phone number, bank account details, payment data.
Data arising from the current contract, specifically purchased products, volume of provided services, user segment.
1.2. If you register
If you wish to take advantage of customer registration benefits, you need to register on our website first. Your customer profile is protected with a password chosen by you, to which we do not have access, and in case you lose it, we cannot send it to you or generate a new password for you upon request.

Within the customer profile, you have unlimited access to your personal data, as well as the ability to change it when necessary. In the profile, you can view the history of your orders, purchased products, as well as unfinished orders. Through the customer profile, you can also save your bank card details, manage the sending of informational newsletters, and create a so-called wishlist, where you can save your favorite products.

If you do not wish to create a customer account to make a purchase, you can shop in our online store without registration.

If you have a customer profile, we process the following data:

Identification data, which are name and surname, and if you are purchasing for a company – identification and tax number;
Contact data, which are email address, postal address, billing address, phone number, payment data;
Demographic data, arising from your settings and behavior on the website, which represent data about gender, date of birth, preferred language.
Login data, which represent your username and password. We do not have access to the actual password.
Data arising from the current contract, specifically purchased products, volume of provided services, user segment.
1.3. If you are subscribed to receive commercial messages
You can subscribe to receive commercial messages regarding favorite products you have purchased from us. You can unsubscribe from receiving messages at any time via the unsubscribe link, which you will find at the bottom of each email containing such messages. Opting out of communication for advertising purposes is free of charge.

If you are a registered customer, you can also subscribe to receive commercial messages via SMS or VIBER. You can unsubscribe from receiving messages through these channels at any time.

If you are subscribed to receive such messages, we process the following data:

Identification data, specifically first name;
Contact data, through which we can communicate with you, specifically email address, as well as phone number;
Demographic data, arising from your settings and behavior on the website, which represent data about gender and preferred language.
1.4. If you visit our website or create content on it
If you visit our website, during your visit, we collect various information from you, such as your IP address, browser settings and preferred language, visited pages, as well as the time of the visit. Additionally, we monitor your movements on the website, which links you click on, so that we can personalize the content for you as much as possible and offer you products and content that you will like.

When you visit our site, we store "cookies" in your browser and device, which we then read and have a separate chapter dedicated to in this Declaration.

In addition to "cookies," we also process data about your behavior on our website, your IP address, data provided by your browser, specifically the screen resolution, the operating system of your device and its version, and language settings.

We can also connect you to social networks, including providing automatic login to your profile on the respective social network. To accomplish this connection, regarding blog posts, our website uses so-called social plugins, i.e., share buttons, which allow you to share selected content on your profile. After connecting, personalized offers and targeted ads may be displayed to you on social networks and other websites, redirecting to our site.

To involve you even more in the world of fashion, we give you the opportunity to be active on our site and create content such as reviews for purchased products and determining their advantages or comments on blog articles. To create such content, you do not need to have registration. Your comments may include the names you enter if you fill them in the form. For the content you add and your activity on our site, you are responsible, so we urge you not to disclose personal data via this method that you do not want to be publicly available.

Our website may contain links to other sites that we consider practical and contain useful information. Therefore, we would like to warn you that these sites may be owned and maintained by other companies and organizations that process personal data in accordance with their Privacy Policy. Our company has no control over this processing and bears no responsibility for any data, materials, products, or services contained or available through these websites.

1.5. If you contact us by customer phone or through social networks
If you decide to contact our customer support by phone or email, we primarily process records of Viber messages and your phone numbers, as well as records of correspondence via email.

If you contact us regarding your request through our website or our profile on any social network, the processing of your personal data is exclusively governed by the Privacy Policy of the company that manages the respective social network.

1.6. If you visit any of our stores
In our stores and other premises, we have surveillance cameras for the protection of our legitimate interests in order to protect our and your property. If you visit our store, we process video footage on which you may appear. All areas where cameras are located are properly marked with warning signs.

1.7. If you enable a notification for availability tracking
If the product you are interested in is currently unavailable, we offer you the opportunity to send an electronic inquiry. When the product is back in stock, we will inform you with a message sent to the email address you provided, which we process for this purpose.

1.8. If you send us a phone availability inquiry
In this case, we record your names, phone number, and once we receive availability from your inquiry, we connect with you on the phone number provided.

1.9. If you participate in a consumer contest
Through our website or social media profile, we organize attractive contests in which you can participate. The full text of the rules can be found here. It is possible for the announcement of the winner to be made publicly, which means that on our website or in our profile on the given social network, we may publish some data of the winner. Any action or communication with us through social networks and the processing of your personal data is governed by the Privacy Policy of the company that manages the respective social network.

If you participate in a contest, we process the following personal data:

Identification data, which include name and surname;
Contact data, specifically your profile on social networks or email address, and when winning a prize, also address, mailing address, billing address, phone number, to be sent to you.

1.10. If you participate in a consumer test or other events organized by us
If you participate in a consumer test program offered by us, we may process the following data:

Identification data, which include name and surname;
Contact data, specifically your email address and phone number;
Video surveillance recordings, i.e., your external appearance.

We also organize various events and activities for you to participate in, where we may process the following data:

Identification data, which include name and surname, possibly identification and tax number;
Contact data, specifically your email address and phone number.
We will inform you of the specific personal data we process for each event.

2. For what purpose do we process personal data?

2.1. Purchase of goods and services
Most often, we process your personal data for the purpose of fulfilling a purchase contract, so that we can successfully process the order you have placed through our website, mobile application, or customer phone, and send you the goods. The email address and phone number are used to send order confirmation, payment receipt confirmation, sending an electronic invoice, as well as periodically informing you about the status of your order and any other individual communication related to the specific order.

2.2. Customer registration
If you are a registered customer, we process your personal data for the purpose of maintaining your customer profile.

2.3. Marketing offers
We send you commercial messages for products similar to those you have purchased from us. You can unsubscribe from receiving these messages at any time via the unsubscribe link found in each email containing such messages. If you are a registered customer, we send you commercial messages via SMS or Viber messages. This processing is governed by the Privacy Policy of the respective social network. If you unsubscribe from receiving marketing messages, we will no longer use your electronic contacts for this purpose. Refusing communication for advertising purposes is free of charge. You can unsubscribe from receiving SMS or Viber messages by contacting us by phone: 0892250325, for this purpose, you need to provide your full name and phone number. We will delete your data from our database for advertising messages.

2.4. Customization and creation of content, improving the website's performance
We want to customize the content for you and deliver the goods you are interested in. For this reason, we use the collected personal data to personalize the content and offers on our website. The marketing offers displayed to you may be selected based on other information we have collected from you over time, depending on contact data and demographic data, your favorite products, as well as other data related to your use of our website. We do not carry out entirely automated processing that would have legal consequences for you.

We process data about your behavior on our website, which allows us to obtain information to continuously improve the site so that the user experience is as pleasant as possible for you. We may also use your personal data for various statistics, such as tracking visits or measuring the effectiveness of a particular advertisement, as well as for testing new features of our website or mobile application. Data about your behavior on our website is also important for preventing any attacks against the website.

You can also create specific content on our website. If you decide to write a review of products you have purchased, we process your personal data for the purpose of processing and displaying the respective review. If you participate in discussions on articles in our blog and write a comment, we process your personal data for the purpose of processing and displaying the respective comment.

2.5. Customer support and communication
We continuously strive to improve the services provided by our customer service department, and in order to be able to respond as quickly as possible to your requests and provide such service, we need your personal data for successful processing of your requests or resolving potential issues in fulfilling the purchase contract.

The collected personal data are also used for communication with you and personalizing it. For example, we may contact you by phone, email, in the mobile application, or by other means to remind you that there are products in your cart or to help you complete your order. Additionally, to inform you of the current status of your request, order, or complaint, or possibly to obtain additional information. We may also alert you that you need to take action necessary to maintain the active status of your customer profile.

2.6. Video Surveillance Recordings
In our stores and other premises, we have surveillance cameras for the protection of our legitimate interests, aimed at protecting our and your property.

2.7. Notification of Product Availability
If you set up tracking for out-of-stock items, as soon as the product is back in stock, we will inform you about it with a message sent to the email address you provided.

2.8. Establishing Satisfaction through Rating Portals
In connection with your purchase, you may also receive an invitation to rate via a rating portal. In this case, the purpose of the processing is to establish satisfaction.

2.9. Consumer Contests
If you decide to participate in a contest organized by us, we process your personal data for the purpose of conducting the contest, and if you win a prize, for the purpose of publicly announcing the winner and contacting you.

2.10. User Tests and Event Organization
If you participate in a user test program offered by us, we process your personal data for the purpose of testing new or existing features of our systems.

If you participate in events organized by us, we process your personal data for the purpose of planning, conducting, and evaluating the organized events.

2.11. Service Improvement
We use your personal data to continuously improve our services and systems, as well as to add new features. We also process personal data to make informed decisions using aggregated analysis and business intelligence related to our legitimate interest arising from the freedom to conduct business activities and the need to improve services for success in economic competition. However, to ensure sufficient protection of your rights and interests, we use anonymized personal data to the greatest extent possible for this purpose.

2.12. Protection, Security, and Dispute Resolution
We may also store your personal data for the purpose of ensuring the protection and security of our customers and systems, asserting our rights and legal claims, detecting and preventing fraud, resolving disputes, or enforcing our agreements. Additionally, we may process personal data for potential checks by public authorities.

3. Based on what legal grounds do we process personal data?

We process personal data to varying extents and for different purposes, as described in Articles 1 and 2 above, namely:

a) Without your consent, based on the performance of a contract, compliance with a legal obligation, or our legitimate interest;

b) Based on your consent

The types of personal data processing we may perform without your consent stem from the specific purpose of the respective processing, as well as from your position relative to us - whether you are simply a visitor to our website, whether you shop from us, or whether you register. The processing of your personal data may also occur if you are the recipient of ordered goods, if you communicate with us, or if you visit our store.

3.1. Performance of a Purchase Contract
When you shop from us or place an order, a purchase contract is formed, which is concluded upon acceptance of the offer by us in the form of sending the ordered goods. To successfully fulfill this contract, or any other contract for goods and services, we require a large portion of your personal data entered through the order form. The specific data we process in this case are specified in Article 1, paragraphs 1 and 5.

If you register with us, we process your data based on the performance of the registration contract, so that we can maintain your customer profile. The contract on which the processing is based arises with the creation of your customer profile. In the event of closing the profile in accordance with the relevant commercial terms, we stop processing the data for this purpose. The specific data we process in this case are specified in Article 1, paragraph 2.

3.2. Fulfillment of Legal Obligations
Furthermore, we must comply with certain conditions imposed on us by existing legal norms. For the processing of your personal data based on the fulfillment of these obligations, it is not necessary for us to have your consent. Based on this legal basis, we process your identification and contact information, as well as data regarding your orders. The specific data we process in this case are specified in Article 1, paragraph 1.

3.3. Consent
For the purpose of sending commercial emails, we may process your data with your consent. Based on your consent, we process them if we do not process them based on legitimate interest. You can withdraw your consent and unsubscribe from receiving commercial emails at any time. The specific data we process in this case are specified in Article 1, paragraph 3.

We also require your consent if you plan to publish a review for purchased products or comment on the blog, if you set up the product availability tracking feature, or if you participate in a user test or another event. In these cases as well, you can withdraw your consent at any time. The specific data we process in this case are specified in Article 1, paragraphs 4, 7, and 10.

3.4. Legitimate Interest
We also process your personal data based on legitimate interest to improve and adapt the services offered, to determine whether you were satisfied with the execution of orders, and to advertise products and services more effectively. This concerns the data specified in Article 1, paragraphs 4 and 5.

Based on legitimate interest, which involves direct marketing, we may also send you commercial messages about products similar to those you have already purchased from us. This is possible only if you do not object to such processing. However, if you are a registered customer, we send you commercial messages based on the registration conditions. The specific data we process in this case are specified in Article 1, paragraph 3.

Our legitimate interest also includes protecting our legal rights, internal records, and ensuring the proper execution of our services. In this case, we process all categories of personal data specified in Article 1.

We express our legitimate interest in sending invitations to evaluate a purchase made through a rating portal or to evaluate contests organized by us. The specific data we process in this case are specified in Article 1, paragraphs 8 and 9.

Processing your personal data based on legitimate interest also occurs if you visit our stores, which are monitored by a video surveillance system for the purpose of protecting property. You can object to this processing at any time. The specific data we process in this case are specified in Article 1, paragraph 6.

4. To whom do we disclose personal data?

In most cases, we process your personal data for personal purposes as their administrator, which means that we determine the aforementioned purposes for collecting your personal data, establish the means of processing them, and ensure their proper execution.

We disclose your personal data to our partners only when necessary within the framework of executing a purchase contract, for example, for payment processing or delivery. We also disclose your personal data to our data processors, who, of course, comply with legal conditions for the protection of personal data. These processors process personal data according to our instructions, and this processing in no way affects your rights. With your consent, we may also disclose your personal data to social networks or marketing tool providers to display targeted advertising on other websites.

4.1. Categories of Recipients
We may disclose your personal data to the following entities:

- To companies and individuals processing data on behalf of REPLICA, i.e., employees appointed in the company DILYANA M DESIGN LTD, based on the execution of the purchase contract for the performance of internal processes and procedures.
- To companies providing payment services for processing payments for your orders, i.e., execution of the purchase contract.
- To transportation companies for the delivery of the products or services ordered by you and for handling complaints, including termination of the purchase contract.
- To suppliers of goods or service centers in connection with complaints about the goods or services ordered by you.
- To partners performing the sending of commercial messages, who are obliged to keep confidentiality and are not entitled to use your personal data for any other purposes.
- To marketing tool providers who assist us in personalizing offers and content.
- To social networks if you communicate with us through social networks or share content using social plugins.
- To providers of communication tools for customer service or external call centers.
- To partners conducting customer satisfaction evaluations.
- To providers of technology and cloud services.
- To legal or financial representatives and courts for processing tax documents, collecting receivables, or other reasons arising from the performance of our legal obligations.
- To public authorities in case we assert our rights (e.g., to the police).

If third parties use your personal data for their own legitimate interests, we are not responsible for such processing. This processing is governed solely by the Privacy Policy of the respective companies and individuals.

4.2. Data Transfer Outside the EU
When transferring your personal data to our data processors, in some cases, we may also transfer your personal data to third parties who are not part of the European Union and who do not provide the corresponding level of protection of personal data. Such transfer by us will only be made if our data processor undertakes to comply with the standard contractual clauses issued by the European Commission, which you can find here.

5. For What Period Do We Process Personal Data and How Are They Protected?

5.1. Processing Period
First and foremost, we process your personal data for the duration of our contractual relationship, i.e., the purchase contract. Personal data necessary for the fulfillment of all our obligations, whether arising solely from the conclusion of a contract between us or from generally applicable legal norms, must be processed for the period established by the relevant legal norms or in accordance with them. For example, in the accounting documents issued by us as an administrator, we are obliged to retain your data for at least 10 years from the issuance.

We process personal data for the duration of the contractual relationship, i.e., the purchase contract. Additionally, we process personal data for the period necessary to properly fulfill all our obligations arising from concluded contracts and generally applicable legal norms. For example, in the accounting documents issued by us, we are obliged to retain data for at least 10 years.

Within the scope of fulfilling your requests and providing quality customer service, we process your personal data after the conclusion of contractual relations, including up to 1 year after the expiration of the warranty for purchased goods for the resolution of any disputes.

If you communicate with us through our customer service department, we retain your personal data from the communication for 2 years.

If you give your consent for receiving commercial messages, it is valid for a period of 4 years or until withdrawal. Additionally, if you consent to be informed about the availability of monitored products, the consent is valid until the information about availability is sent, but no more than 1 year, or until withdrawal. The consent given by sending a product review is valid for a period of 6 years or until withdrawal. If you participate in creating content for articles on our blog and give consent by commenting on the articles, the consent is valid for a period of 2 years or until withdrawal. If you decide to participate in user tests or other events we organize and give your consent, we process your personal data for 1 year or until consent is withdrawn, including recordings from video surveillance or audiovisual recordings, if any.

If you participate in contests organized by us, we process your personal data for 1 year. If you visit our store or other premises of our company and the surrounding area, we process recordings from cameras for a period of 90 days from the date of recording.

In other cases, the processing period of your personal data arises from the purpose of the processing or is determined by special legal norms in the field of personal data protection. After the expiration of the specified processing periods, your personal data is automatically erased.

5.2. Protection
The personal data we have collected for you and process reach us in encrypted form, using SSL (secure socket layer) encryption. This system ensures that your personal data is secure when your browser communicates with our server. Our website and other systems we operate are protected by appropriate technical and organizational measures against loss and destruction of your personal data, unauthorized access to your personal data, and their alteration or dissemination.

We periodically improve protection by requiring our data processors to demonstrate compliance of the systems they use with GDPR.

If you register, access to your customer profile is possible only after entering your chosen password. We do not have access to your password because we store it in encrypted form, which cannot be decrypted even by us.

We urge you to be careful not to disclose your access data to third parties. After completing your activity in the customer account, we recommend logging out, especially if you share the device with other users. We are not responsible for any misuse of your password unless we directly cause such a situation.

6. How Do We Use Cookies?

We also use cookies to enable our website to function properly, to make our offers adequate, interesting, and easy to use. To use cookies, your browser must support them. Our website works without cookies, but to a very limited extent and without the ability to use some basic functions.

Cookies are a standard tool for storing information related to the use of websites.

Cookies are small text files that are automatically created when visiting any website and are stored in your browser on your computer or other device. Thanks to some cookies, we can link your activity on our website until you close the browser. When you close the browser window, these cookies are automatically deleted.

However, there are other cookies that remain in your browser or device for a predefined period of time and are activated each time you visit our website. In addition to cookies, we also use so-called tracking pixels, which are small images invisible to the ordinary user, working on a similar principle as cookies. The duration of the stay of cookies in your browser or device depends on the settings of the cookies themselves, as well as on your browser. We store data obtained from cookies for up to 1 year.

6.1. What Cookies Do We Use?
The cookies we use on our website can be divided into 2 main types:

1. Short-term, so-called "session cookies," which are deleted immediately after the end of your visit to our website.
2. Long-term, so-called "persistent cookies," which remain in your browser or device for a specified period of time or until you manually remove them.
Depending on their functions, we can categorize cookies into the following types:

- Essential cookies: These are technically and functionally necessary cookies crucial for the basic functioning of the website. Without these cookies, you cannot add items to your cart, place orders, or log into your customer account.
- Analytical cookies: These help us improve the user experience of our website by understanding how users interact with it. They also allow us to analyze the impact of different sales channels.
- Remarketing cookies: We use these to personalize the content of advertisements and target them correctly.

In practice, we use the above-mentioned cookies for purposes such as:

- Ensuring the proper functioning of the cart, so you can complete your order as easily and quickly as possible.
- Remembering your login details to avoid having to enter them repeatedly.
- Tailoring our website to your requirements as best as possible by tracking visits, your movement on the website, and the features you use.
- Obtaining information about which ads you view, so we can avoid showing ads for products that do not interest you.

Some cookies and their content may collect information that may subsequently be used by third parties and may directly support our advertising activities (so-called "third-party cookies"). For example, information about products purchased from our website may be shown by an advertising agency as part of displaying and adapting advertising banners on websites you visit. However, these cookies, in anonymized form for third parties, do not allow you to be identified based on this data.

6.2. How Can You Limit Cookies?
Cookie usage settings are part of the internet browser you use, with most browsers initially accepting cookies. It is possible, through your browser, to completely reject cookies or only restrict them to selected types. However, by doing so, you also limit the functionality of our website, and you will not be able to use the features we offer to their full extent, including logging into your customer account.

You can also use the browser's anonymous mode, which does not entirely prevent the use of cookies but anonymizes them better and does not store the history of visited websites.

Information about the cookie settings options can be found at the links provided below or in other documents of internet browsers:

- Chrome
- Firefox
- Internet Explorer
- Android
- iPhone and iPad

You can also find an effective tool for managing cookies on the website https://www.youronlinechoices.com/bg/.

7. What Are Your Rights and How Can You Exercise Them?
Just as we have rights and obligations regarding the processing of your personal data, you also have your rights that you can exercise. Among them are:

7.1. Right of Access
You have the right to request free information about the processing of your personal data – what data about you we process, for what purpose and for what period, where we obtain your data from, and to whom we disclose it. Within the right of access, you can request us to send you a structured, machine-readable format of the processed data. Once we have duly verified your identity, we will be happy to provide you with a copy via the email address of the Data Protection Officer (hereinafter referred to as "DPO") replicadresses@gmail.com.

7.2. Right to Rectification
If you find that the processed data is incorrect or incomplete, you have the right to request correction. We will gladly and promptly correct or supplement your data. You just need to send an email to the address of the Data Protection Officer replicadresses@gmail.com.

7.3. Right to Erasure
In some cases, you may use your right to erase your personal data processed by us. In such cases, we will promptly delete or anonymize your personal data. However, this does not apply to personal data that we need to fulfill our legal obligations and whose storage is required by legal norms (e.g., fulfilling an already submitted order) or for the protection of our legitimate interests. Personal data is also deleted if the respective data is no longer necessary for the intended purpose or if the storage of your personal data is impermissible for other reasons established by law. You can request the deletion of your personal data from the Data Protection Officer via email replicadresses@gmail.com.

7.4. Right to Restriction of Processing
In some cases, you may use your right to restrict the processing of your personal data processed by us. You can request that selected personal data not be subject to further processing for a limited period of time. You can request the restriction of the processing of your personal data from the Data Protection Officer via email replicadresses@gmail.com.

7.5. Right to Data Portability
You have the right to receive from us all personal data you have provided to us and that we process based on your consent. We will provide you with the personal data in a structured and machine-readable format. We will gladly generate the data in such a format; you just need to send a request to the email address of the Data Protection Officer replicadresses@gmail.com.

7.6. Right to Object to Processing
You have the right to object to the processing of your personal data carried out on the basis of our legitimate interest. If it concerns processing for marketing purposes, we will stop processing your personal data without undue delay. However, in other cases, we will do so after re-evaluating our legitimate interests and your rights and arguments. You can object to the processing by sending a request to the email address of the Data Protection Officer replicadresses@gmail.com.

7.7. Right to Lodge a Complaint
Exercising the above-mentioned rights and procedures in no way affects your right to lodge a complaint with the relevant supervisory authority. You can use this right especially if you believe that we process your personal data unlawfully or in violation of applicable legal norms. The competent authority that handles customer complaints is the Commission for Personal Data Protection, located in Sofia 1592, Blvd. "Prof. Tsvetan Lazarov" № 2.

8. Contact Us
If you have any questions, comments, or requests related to this Declaration and the processing of your personal data, you can contact the Data Protection Officer at any time by email at replicadresses@gmail.com. Your request will be processed promptly, but no later than within 30 days. In exceptional cases, especially considering the complexity of your request, we have the right to extend this period by another two months. In case of such an extension, we will inform you about it and the reasons.

Feel free to also contact us via our customer service phone number provided at the end of this Declaration.

Contact Information:
Dilyana M Design Ltd.
Plovdiv 4000
18 Vasil Aprilov Blvd.

Customer Service: 0892250325