Privacy policy

PRIVACY POLICY 

This document contains the Personal Data Security Policy ( "Policy" ) and is related to the General Terms and Conditions , but is not an integral part of them , as it does not regulate rights and obligations, but aims to explain to users what personal data we process , how , for what purpose and what are the applicable security measures . Also , it provides information about rights , that you , our clients and our users ,have in relation to the processing of personal data by " INA Australia " Ltd. (www.inaessentials.au). If the Policy changes , the changes will be published here .
Date updated : 02/17/2021 d .

Your privacy is extremely important to us . This security policy discloses what personal data we collect from you through our joint relationships and how we use that data .
PERSONAL DATA ADMINISTRATOR
" INA Australia " Ltd , UIC 207199254 ,with headquarters and registered office : Bulgaria, city Plovdiv, 4000, Maritza Gardens block 11 office 1,  , email : australia@inaessentials.com ( hereinafter referred to - hereinafter referred to as "Ina Essentials", "We" , "online store" , "Website" , "Website" , " administrator " ) is the administrator of data , including personal , in terms of information , collected or provided in examining the site www.inaessentials.au or when making a purchase through the same , as well as when viewing or purchasing a product or service through our Facebook page ( collectively referred to as "Site" , "Website" ). The policy applies in cases , where such individuals ( to as "Entities" ) voluntarily provide to us electronically ( via email ), by phone or through other means , including on-site at our outlet or office personal data . Ina Essentials processes personal data and requests , made by you to us , and for marketing and promotional purposes , profiling , participate in games , promotions and sweepstakes , organized by us for any other purposes prohibited by law . The processing of personal data Ina Essentials comply with all applicable to its activities legislation on protection of personal data , including , but not limited to Regulation ( EU ) 2016/679 ( "Regulation" ) and the Law on Personal Data Protection , because for us security The personal data of our customers is of paramount importance . Therefore , this Policy applies in this case as well . RELEVANCE OF POLICY This policy applies to all our customers - individuals , using our services by order of the Site or interested in the same by sending queries ( hereinafter referred to - as "data subjects" , "users" ). Partners and others , who work with or for Ina Essentials, and who have or may have access to personal data , will be expected to know , understand and comply with this policy . No third party can have access to personal data , stored by Ina Essentials, without first company to have an arrangement for data confidentiality , which requires the third party obligations , no - less onerous than those , which Ina Essentials has taken , and which entitles Ina Essentials to verify compliance with the obligations imposed by the agreement . This policy applies to all employees / workers ( and stakeholders ) of Ina Essentials, as well as external suppliers of products and services , which Ina Essentials contracted . Any violation of the General Regulation will be considered as a violation of labor discipline , resp . as non-performance of contracts with partners , and in case there is a suspicion of a crime , the issue will be submitted for consideration as soon as possible to the relevant state authorities . For visitors to the site , not out orders and send inquiries ,




and only browse our website , the cookie policy adopted and published on the Site applies .
DEFINITIONS
"Regulation" - General Regulation on data protection 2016/679 of 27 april 2016 godina , called GDPR. The aim of this European legislation is to protect the " rights and freedoms " of individuals and ensure , that personal data will not be processed without their knowledge , and, where possible , to be treated with their consent .
"Personal data " - any information , relating to an identified natural person or legal entity , which can be identified ( 'data subject '); individual , which can be identified , a person , which can be identified, directly or indirectly , by - especially by an identifier such as name , identification number , location data , online identifier or to one or more signs , specific physical , physiological , the genetic , mental , intellectual , economic , cultural or social identity of that individual .
"Special categories of personal data" - personal data , revealing racial or ethnic origin , political opinions , religious or philosophical beliefs , or trade union membership and the processing of genetic data , biometric data to uniquely identify an individual , data concerning health or data on the sexual life of an individual or sexual orientation .
"Processing " - any operation or set of operations , applied to personal data or sets of personal data by automatic or other means, such as collection , recording , organization , structuring , storage , adaptation or alteration , retrieval , consultation , use , disclosure by transmission , distributing or otherwise , as data become available , alignment or combination , restriction , erasure or destruction ;
"Administrator " - any natural or legal person , public authority , agency or other entity , which alone or jointly with others determines the purposes and means of the processing of personal data ; where the purposes and means of such processing are determined by EU law or the law of a Member State , the controller or the specific criteria for determining it may be laid down in Union law or in the law of a Member State ;
"Data subject" - every living individual , which is the subject of personal data stored by the Administrator .
"Consent of the data subject " - any freely given , specific , informed and unambiguous indication of the will of the data subject , through a statement or a clear affirmative action , expressing his agreement related personal data to be processed ;
"Child" - total Regulation defines a child as anyone under the age of 16 godini . The processing of personal data of a child is legally only , if a parent or guardian has given consent . The administrator shall make reasonable efforts , to check in such cases , the holder of parental responsibility for the child given or authorized to consent .
"profiling " - any form of automated processing of personal data , expressed in the use of personal data to evaluate certain personal aspects , related to the individual , and - specifically for analyzing and forecasting aspects , relating to the discharge of professional duties of that individual , its economic situation , health , personal preferences , interests , reliability , behavior , location or movement ;
"Breach of security of personal data " - breach of security , leading to the accidental or unlawful destruction , loss , alteration , unauthorized disclosure or access to personal data , transmitted , stored or otherwise processed ;
"Recipient " - natural or legal person , public authority , agency or other entity , to which personal data are disclosed , whether a third party or not . At the same time public authorities , which may receive personal data in the context of a specific investigation in accordance with Union law or the law of a Member State , are not considered "recipients " processing of these data by those public bodies comply with the applicable rules to protect data according to the purpose ;
"Third party" - any natural or legal person , public authority , agency or any other body , other than the data subject , controller , data processor and the persons , who under the direct authority of the controller or data processor have the right to process personal data ;

PRINCIPLES
When collecting and processing personal data , we are guided by the following principles : legality , good faith , transparency ; limitation of purposes ; minimization of data ; accuracy ; limitation of storage ; integrity and confidentiality ; accountability .
ENTITIES , whose data processed
in connection with its activities InaEssentials conclude and implement agreements to purchase - sale of distances , consider job applications and offers , forms for exercising the rights of consumers buyers , as well as requests of data subjects , responding to requests , issue and receive invoices , process statistics , manage user panel on the site , performs advertising activities through advertising campaigns ( promotions , games, etc. ). In the course of these activities, Ina Essentials processes information on the following Data Subjects :
( a ) individuals , users of the site without registration , without leaving any data ( in this case we process data , but not personal ) and individuals , users of the site without registering , which provided limited personal data voluntarily ( example telephone number or email address );
( B ) individuals , users of the site with registration as registered users - in this case handle user data , which it is introduced at registration - email address , shipping address , name , billing information , details of contracts , other data , entered by the user .
( In ) individuals , making inquiries ( incl . By call ) requests , initiatives , signals , complaints or other correspondence to us , including via the website , telephone , email or otherwise ;
( D ) individuals , information that is contained in inquiries ( incl . By call ) requests , initiatives , signals , complaints or other correspondence , addressed to us ;
( E ) natural persons , with whom we sign agreements ( civil , in t . H . Trade or employment , most - longer distance contracts ) electronically ( via website or social networks , and via e-mail ) or in person at our office or commercial establishment ;
( A ) individuals , whose data we have received through their provision by third parties ( for example, in order , intended as a gift ).

PERSONAL DATA , which process
Depending on the cause , imposed processing of personal data , the type of the data may differ . The functionalities provided on the Site are not intended for storage and processing of special categories of data within the meaning of Art . 9 and Art . 10 of the Regulation . ( NB ! Read Art. 9 and Art . 10 - of the Regulation here ). We require only such personal data , which we need to provide business / service / product , requested by us . In the course of using the site by individuals , can process and other data , which do not contain personal information , but relate to the subject , such as its IP address , details of its activity on the site and others . similar .
Data , provided at the time of order
to fulfill concluded between you and Ina Essentials distance contract ( order ), we require certain information from you . You can decide whether and how to use opportunities to contract for distance selling , available via the website or Facebook page . In the forms , through which enter personal information , clearly indicating the compulsory or voluntary nature of providing data . The data , completion of which is compulsory , are such , without which it is impossible to conclude the contract . These are : names , email address , delivery address , contact phone number , your payment information ( eg bank card ), billing information , including PIN , if you want an invoice for an individual . If you provide information to third parties , who will receive the contract ( for instance in procurement in order to gift or other donation ) You are responsible for providing the data to those third parties .
Data , provided at the time of registration on the Site
If you choose to store information about you on the Site through the account sign the same , then we store the above data , as well as order history , made by each registered account on the Site . The required data coincide with those , required when ordering . Along with them, we also process IP address , activity data ( time and date of registration , acceptance of Security Policy and General Terms and Conditions , login to an account, etc. );
Data , provided at the conclusion of other agreements
in cases , where Ina Essentials conclude other contracts with individuals , other than distance selling , require full name , ID number , address , email address .
Data provided by , through and on other websites and applications , called third parties
in certain cases You can share information with social networks or use their sites , to create your profile or contact your our website with the social network . In this case, the social network can provide automatic access to some of their personal information , which are brought to you ( eg . You're viewing content , your desired content and information about the ads , which are displayed or clicked, etc. . n .). By connecting your social network profile with your account on our website you authorize us to access your personal data , processed by the social network , as well as to collect , use and maintain this information in accordance with this Security Policy . This binding profile of social network registered in our website is done , if you click a link , provided for the establishment of Registration to our website by including social media , thus you voluntarily connecting with the appropriate social site media . If you choose to register on our website via a social network , we can process your data such as name , phone , email , gender , marital status , age , photograph , education , residence and other data , which are available on the these platforms that are visible to us , if the log with them on our site .
In the event that you provide your personal data to Ina Essentials via Viber, Skype, Facebook or another platform / social network , we inform you that these platforms / websites / social networks have their own privacy policies and that we do not accept any responsibility or liability for these rules , as far as their processing can not be controlled by Ina Essentials. In this regard, we recommend that you check these rules before sending us your personal data through these websites / applications .
Data , available upon posting a comment , review , publication
If you leave a post or comment on this website , IP address will be preserved , along with your name , you will see that information . This is for the safety of the website operator . If your text violates the law , it would like to be able to trace your identity . Apart from this , Ina Essentials has an obligation to keep such data ( called "traffic" ) to certain terms and with certain objectives , specified - below . Due to the fact , that sending comments , inquiries and other communications to the site , Facebook page / group or administrators them , constitutes sending an electronic statement , according to the Law on Electronic Document and Electronic Certification Services administrator is obliged to keep logs the fact of sending the statement for a period of 1 year . The log contains the date of the statement , name and email address of the sender .
Employee data and data , collected in the processing of job applications
processed data at the conclusion of employment contracts and in evaluating and processing an application for a job . When concluding employment contracts, we require three names , PIN , address , age , gender , education data , work experience , bank data , and subsequently we process health data . When processing resumes , process names , address , email address , age , sex , education , service , image , data , provided voluntarily by the applicant during the interview or resume .
Data , provided on the occasion of correspondence , complaints and
the purpose of resolving complaints , signals , disputes , inquiries , requests or other questions , made in communication to Ina Essentials, received through electronic forms on the Website , through calls to Ina Essentials, by sending by regular or e-mail , Ina Essentials stores and processes this information , as well as the result of this processing . These can be names , email address , phone , address .
Besides the fact , that sending comments , inquiries and other communications to the site , Facebook page or administrators them , constitutes sending an electronic statement , according to the Law on Electronic Document and Electronic Certification Services ( "ZEDEUU" ) have an obligation to maintain a log of fact of sending the statement ( without its content ) for a period of 1 / one / year . The log contains the date of the statement , the name and email address of the sender , and the identification of the sender .
If you provide us with personal information about someone else , you should only do so with that person's authorization . You must inform them how we collect , use , disclose and store personal information in accordance with this Privacy Policy for individuals .
Technical data , collected during the use of the Site
In addition , we collect information from your computer , phone , tablet or other device , you use . This information may include the following :
● device ID , you are using , the type of the device and the unique character of this device , " data log " or " log data " , including information , which your browser automatically sends us when visiting the website ; these data diary include the address of the Internet protocol , address and activity of visited websites , searches , type and browser settings , date and time of your request , how you use the site , data on " cookies " and data devices ; if you want to get more details about the information , which we collect - contact us via the contact form .
● location information , transmitted from the device , a co have set the same display location data - note , that mobile devices allow you to control or disable location services from any application on your mobile device in the settings menu of the device ;
● computer and connection information , such as pageview statistics , IP address , site browsing history , language , date, and time settings ;
● logs to facilitate your searches - Quick Links to repeat previous searches allow you to repeat your search , instead of entering them every time . The functionality can be used with or without registration . When using the Site, a browser with a randomly generated number is stored in your browser , allowing the Site to show you quick links to repeat previous searches . The site stores and displays the last 10 searches , associated with this browser , such as entering in your account you can keep it and use it . In case you use the Registration Service ( currently inactive function ), the last 10 searches are stored in your account ;
● logs , related to security , technical support , development, etc .,
- To secure the safe operation of services and establishment of technical problems ;
- To ensure the security of services and the detection of malicious actions ;
- For development and improvement of the services on the site ;
- To measure the traffic and usability of the site ;
- Logs in cases , where this is required by law ( such as logs of electronic wills );
- Log for logging in to a user profile ( account ) - this log allows to establish and automatically block unregulated attempts to access accounts ; той се поддържа за период до 1 / една / година , като съдържа дата и час на влизането в акаунта , статус , дали влизането е през мобилна версия , приложение или десктоп браузър , IP адрес ;
- сървърни логове , логове на устройства за защита на сигурността (Web Application Firewalls) и др . устройства , попадащи в тази категория . Тези логове са необходими за установяване на технически проблеми , откриване на злонамерени действия и др . от посочените по - горе цели ; те се съхраняват за период до 1 / една / година . Логовете могат да съдържат следната информация : дата и час , IP адрес , URL, информация за браузър и устройство . В допълнение някои от устройствата е възможно да използват технология за сигурност ,cookie based ;
- cookies - for the operation of the Site it is necessary to use cookies . In connection with this, a Cookie Use Policy has been adopted ; Meet policy for more details on : the type of cookies , we use , the time limit for their storage and use, etc. ,.

We may prefer to reduce the volume of data , which store and process , according to the purpose of processing .
We do not require and will collect and process personal data , which reveal : racial or ethnic origin ; political , religious or philosophical beliefs ; membership in trade unions ; genetic and biometric data ; health data , as well as data on sexuality or sexual orientation . If the subject alone , on its own initiative and willingness to provide such data categories , then Ina Essentials is not responsible for the provision , but only undertakes to provide to them the same safeguards , as provided for sophisticated personal data . We do not transfer data to third countries . Also , we do not make automated decisions regarding personal data and do not process data of persons under 16 years of age . In case , you are under the age of 16 godini , you should not provide us with personal information about yourself .
For what purposes processed YOUR DATA
main objective , why we process your personal data , linked most - generally the provision of services through the website and social networks , namely a contract for distance selling and delivery of your ordered goods services , as well as revenue accounting . We also use your personal information to provide and improve our Services , to provide you with a personalized experience on our site , to contact you about your account and our Services , to provide you with a customer service , to provide you with personalized advertising and marketing according to your interests , to perform raffles and games organized by us , and in certain cases to detect and investigate fraudulent or illegal activities .
Ina Essentials collects , uses and processes the information , described - above , for the purpose , set out in this Policy , which can be associated with :
• the conclusion of a purchase contract - the sale of goods / services of distance between you and Ina Essentials via the website or social networks - we require your identification , contact and payment details in order to enter into a contract with you , respectively , to send you the order ;
• contracting consumer credit , when you ordered the purchase of goods or services from the Site by credit ;
• processing payments and prevent fraudulent transactions ( can transmit your data to a third party , to perform these functions );
• the conclusion of employment contracts and processing and evaluation of submitted CVs ;
• protection and enforcement of the legitimate interests of other users of the Service , third parties and Site - legitimate interest in pursuing goals , related to the legitimate interests of Ina Essentials and / or third parties . These objectives include :
- detecting and resolving technical or functional issues , developing and improving the purpose of the Site ;
- to communicate with you , including electronically , on important issues , related to our services and performance of contracts ;
- targeting our marketing , updating services and offering you promotional offers based on your preferences .
- reception and processing of received signals , complaints , requests and other correspondence ;
- exercising and protecting the rights and legitimate interests of the Site , including in court , and providing assistance in exercising and protecting the rights and legitimate interests of other users of the Site and / or affected third parties ;
- administering the website and application and keeping them safe and secure ;
- analyze and improve the use of our website , application, and retail trade ( incl . Use information about it , how to navigate in our website , App and / or shops ;
- measuring and analyzing our advertising and targeting your proposals and recommendations based on the information , you share with us ;
- communicate with you about your account , troubleshooting your account . When we contact you by phone , to ensure efficiency , we can use automated or prerecorded calls and text communications ;
- informing you about products and services , for which you wish to send you information by email , mail , mobile phone and / or by other digital means ( depending on your stated preferences ), including social media platforms - only when we have received your explicit consent to this ;
• your registration on the website ( in which case we will use your personal information to keep and update your account ( such as a change of address or a change in your marketing preferences );
• administration of all competitions / raffles / games on a lottery basis , conducted by Ina Essentials;
• to provide you with services , location-based ( such as advertising , search results and other customized content );
• fulfillment of legal obligations Ina Essentials, which includes :
- the discharge of their statutory obligations to preserve or provide information for tax purposes, our obligations to the state ( for example under the Law on accounting and others . Tax laws - VATA , PITA , CITA , TSSPC, etc. );
- fulfill the legal obligations under the Labor Code , the Commercial Register and the Register of Legal Entities profit organizations and others . normative acts ;
- execution of an order received by us from competent state or judicial bodies ( for example on the basis of the Ministry of Interior , the Criminal Procedure Code , the Energy Act );
- implementing the obligations set out in the Regulation on the protection of personal data , related to inform you about different circumstances , related to your rights , by providing services or the protection of your data and more . similar ;
- the performance of duties , provided in the Law on consumer protection as ensuring the right of withdrawal , the right to legal guarantee ;
 protection of Ina Essentials in court ;
Your data may be processed based on your consent , such as processing in this case is particular and to the extent and scope , provided for in the relevant agreement . Usually such consent ask that you , when you want to process your personal data , without any legal obligation or legitimate interest in Ina Essentials. Most - often require such consent , when we want to offer information about new promotions , products and more .
Shelf life of your personal data
in data storage , we apply the general principle of data storage in a minimum volume and for no - longer than necessary for the provision of services and performance of contracts , ensuring their security and reliability requirements of the law . Z e h a Te p Jim personally a t a B and info op m a tion h a n ep and o e , n eo b xo smoke e a Budd a m of tracks e our w e ref e, exposure o g e our n ac t o yasht a m a "Π o litiĸ a h a h a shield a n a lichnit e g a nni" , oc in e n a ĸ o n o h a ĸ o n or on the basis of the legitimate interest us n e ce Easy c ĸv a e a January h a Te p Jim h a n o- long n ep and o e . C n ope e form a e a nni and w e ref e, h a ĸ o mu o ca c ab pa us , eo n pe g e k e n cpo ĸ h a c er xpa n e us e, c leakage a n e m o n a ĸ o yt o info op m a tion a ce ref p ic a o ĸ o NS a t e PF o.


Data type
Storage period
Reason for processing

Explanations

Registration data ( name , surname , e-mail address , telephone , a jersey )
and
information on registration and compliance with the Terms
( date , time , IP address )

Storage
period For the entire maintenance period on the account on the Site and up to 5 / five / years from the termination of the registration
Reason
Execution of contractual legal relations ; fulfillment of legal obligations ; protection of a legitimate interest ;


The data identifies you as a registered user of the Site . In order to solve possible disputes , arisen or become known after termination of the agreement for use of the Site in connection with ZEDEUU ( see - below ), these data are stored for up to 5 / five / years after the termination of the account .
Important ! On the basis ZEDEUU ( see - below ) of such data required ( activity , IP address ) should be stored by the controller for up to 1 / one / year of termination of the account . The extension of the storage period is due to the protection of the legitimate interests of the administrator .



Personal data from orders and from invoices , payment documents ( orders , statements ), reports and other accounting , reporting and payment documents issued or received by the administrator .



Personal data from employment records of employees .

Storage period
For the period , in which there are rights and obligations of the parties to the relationship , in which it is issued accounting , reporting or payment document , to 5 years from the termination of his service ;
Certain data is stored and on - longer legally defined within the above - mentioned , as are accounting information - data from transactions , billing - between 5 and 50 godini

Reason
Implementation of legal obligations and protect the legitimate interests of the controller .

Your data is identified as a party to the distance selling contract and is stored in order to ensure your rights , resp . fulfillment of our legal obligations as taxable persons . Storage is also necessary in order to ensure the rights of buyers ( individuals ), when they are provided for a period ( eg 2- year warranty ). Legal obligations also require determining the retention period as described .

According to Art . 38 of the Tax - Insurance Procedure Code ( TSSPC ) accounting and commercial information , and all other information and documents relevant to taxation and mandatory contributions are kept by the debtor in order , established by the Law on the National Archives , in the following terms : payroll - 50 years ; accounting registers and financial statements - 10 years ; Tax documents - Security monitoring - 5 years after the expiry of the limitation period for repayment of public debt , which are connected ; all other carriers - 5 years . According to Art . 38, para . 2 of TSSPC after the expiration of the term for their storage the information carriers under para . 1 ( paper or technical ), which are not subject to transfer to the National Archive Fund , may be destroyed .


Personal data of correspondence , complaints and reports , requests , initiatives

period storing
data correspondence , complaints , signals , demands , initiatives , be stored for up to 5 / five / years under the Law on Obligations and Contracts ( limitation periods for bringing claims );

Reason
Protecting the legitimate interests of the controller

In order to resolve complaints , signals , disputes , inquiries , requests or other questions , made in communication to us , received through electronic forms on the Website , by sending in regular or electronic mail , we store and process this information as well as the result of this processing . Given the statute of limitations under Bulgarian law in order to resolve disputes , this information is stored for up to 5 / five / years .



Log , stating sending a comment , request , order or other statement ( containing sender , recipient , date and time of the statement )
Period of storage
for a period of one / one / to 5 godini .

Grounds
Fulfillment of legal obligations and protection of the legitimate interests of the administrator

Due to the fact that sending a comment , response , inquiry , other statement is sending an electronic statement by you to us according to ZEDEUU , the company is obliged to keep a log of the fact of sending the statement. period of 1 / one / year .

The legitimate interest of the administrator allows in certain cases to extend the storage period of this data up to 5 years from the execution of the statement .




Quick searches
do not contain personal data

Storage period
Until you delete them ; in termination of your registration or 6 / six / months , if you use this functionality without registration
Reason
Consent of the subject and protect the legitimate interests of the administrator





This option allows you to repeat your search , instead of entering them every time . The functionality can be used with or without registration . Quick links are stored to repeat the last 10 searches . You can change the setting on your browser , you are using .




Settings and System logs
do not contain personal data , they may contain information such as : date and time , IP address , URL, browser and device version information
Storage period
Until you delete them or terminate your registration . In case they are stored in the biscuit - between 6 / six / and 12 / twelve / months from the last use
Reason
Consent of the subject . Fulfillment of legal obligations and protect the legitimate interests of the controller

fall into this category settings such as language selection and others . similar .
The control over the settings is yours and you can change them through your browser .
Server logs , logs of devices for security protection (Web Application Firewalls) and others . devices , falling into this category . These logs are needed to identify technical problems and / or detect malicious activity .

Information , stored in a mobile application
for the period of its use ( to uninstall it )
information , necessary for technical provision of services ( such as settings, etc. ).

Cookies
Storage period
between 6 and 12 mesetsa - the type of cookie settings on your browser
reason
consent of the subject and protect the legitimate interests of GMS
for a description of the biscuits see "Policy on the use of cookies"

Exception to the storage periods
Please note , you will not delete or anonymizing your personal data , if they are necessary for pending court , administrative , arbitration , enforcement, or litigation proceedings before us . Delete will be performed after dropping the need for data , it is not excluded that be after the deadlines , mentioned - above .
You can always ask us to delete certain information or to close your account and we will respond to this request as keep certain information , even after closing the account , when applicable law or legitimate interests so require . If we are legally obligated, or if it is reasonably necessary to comply with regulatory requirements , resolve disputes , prevent fraud and abuse, or enforce our terms , we may retain some of your personal information for a limited period of time , even after you have deleted it. your account .

In order to ensure the reliability of the services and prevent data loss for technical reasons , the Site applies a data reservation policy . The maximum period for updating ( deleting data ) from all backups is 30 days .


DO WE SHARE YOUR PERSONAL DATA TO THIRD PARTIES
Ina Essentials, respectively the Site , does not provide your personal data to third parties , unless there is a legal basis for this - an obligation under law or contract , a legitimate or vital interest , your consent . We try to minimize data , which reveal , as it always is directly related and necessary to achieve the intended purpose . We do not sell , rent or otherwise disclose your personal information to third parties for their marketing and advertising purposes without your consent . We guarantee , that access to your data from private parties - third parties is carried out in accordance with legal provisions on data protection and confidentiality of information , based on contracts , concluded with them .
We may disclose your personal information , when we are under a legal obligation . In certain cases, Ina Essentials is obliged to disclose your data to public authorities such as the police , prosecutors , courts , in connection with the prevention or detection of crime . This includes exchanging information with other companies and organizations to protect against fraud and reduce credit risk . You should be aware , that if we ask the police or other regulatory or government authority , which is investigating alleged illegal activities , provide your personal information or other information , we receive about you , have the right to do it , after having checked the merits of the request of the state authorities . Когато получаваме приходи от продажби , може да бъдем задължени от органите на приходите да предоставим данни от продажби , съдържащи данни от Вашите поръчки , в това число лични такива . В тази връзка предоставяме данните Ви на счетоводните дружества , с които работим . Законово задължение на Сайта и на Ina Essentials е да опазва сигурността на мрежите и на данните , обработвани от дружеството . В тази връзка прилагаме редица мерки , изпълнението на които могат да наложат обработката на данните Ви от ИТ дружества , грижещи се за сигурността в компанията ни .
Договорно задължение за предоставяне на Вашите данни бихме могли да имаме при сключен с Вас договор за продажба от разстояние, by virtue of which we are obliged to provide by courier the goods or services requested by you . It is also available , if you choose to buy , salaries product or service from our Website through payment , credit and banking services , whose providers share personal data or assign it to us . If you have chosen to insure a product / service during the purchase through the Site , then through the order your data is shared with the insurance companies . If you install the product purchased by a subcontractor , we can provide your data the same , to perform the service / warranty service .
Our legitimate interest justifies in certain cases the provision of personal data to third parties . Such would be the situation with initiated proceedings before the Commission for Personal Data Protection , the Commission for Consumer Protection and other state authorities . There is a legitimate interest in Ina Essentials when we engage other companies and individuals to perform certain tasks on our behalf , complementing our services , under data processing contracts . We would like to be always informed about the - best offers for products / services , to which you are interested . In this regard , we can provide specific personal details - only with your express consent , providers of marketing / telemarketing services and other companies , with which we can develop joint programs for sale on the market our goods and services .
Our website may also contain links to and from third party websites . If you follow a link to any of these websites , keep in mind , that these websites have their own privacy policies and we do not accept any responsibility or liability for these policies . Please , check these rules , before sending the information on these websites . Our site uses YouTube LLC, represented by Google Inc. to integrate videos . Usually , when you visit embedded video page , your IP address will be sent to YouTube and " cookies " will be installed on your device . However , our videos on YouTube, are integrated in privacy-enhanced mode ( in this case, YouTube is still in contact with service DoubleClick by Google, but personal data in accordance with the privacy policy of Google is not used ). As a result, YouTube does not store any information about visitors , unless you watch the video itself . If you click on the video , your IP address will be sent to YouTube and YouTube will understand , that you were watching the video . If you are logged into YouTube in your profile , this information will be linked to your profile ( you can prevent it , you leave YouTube, before you click on the video to watch it ). We have no information about the possible collection and use of your data from YouTube. For more information, see the YouTube Privacy Statement at www.google.com/intl/en/policies/privacy/.
TO WHICH COUNTRIES DO WE TRANSMIT YOUR PERSONAL DATA We
currently store and process your personal data in Bulgaria .

However , it is possible that some of your personal data to be transmitted to entities , located in the EU or outside it , including in countries , for which the European Commission has not recognized an adequate level of data protection .
We will always take steps , to ensure , that all international transfers of personal data is carefully managed in order to protect your rights and interests . Transmissions of data to service providers and other third parties will always be protected by contractual obligations and , where appropriate , other guarantees , such as the standard contractual clauses , issued by the European Commission or certification schemes , such as Dashboard for privacy protection data , transferred from the EU to the United States .

You can contact us at any time using the contact details , listed at the end of the policy , to find out which are the countries , to which transmit your data and what protective measures , applied by us in connection with these submissions .
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
According to the General Data Protection Regulation, you have the following rights :
Right to be informed
This Policy aims to inform you in detail about the processing of your personal data in connection with the processing of your personal data . When there is a risk of a breach of the security of your personal data , the controller is obliged to inform you of the nature of the breach and what measures have been taken to eliminate it , as well as whether the supervisory authority has been notified of the breach . Also , the data subject may request information on all recipients , to whom the personal data , for which a request rectification , erasure or restriction of processing , have been revealed .
Right of access
You have the right to receive confirmation whether your personal data is being processed , access to them and information on how they are processed and your rights in this regard . As a data subject, you have the right to request confirmation of whether your personal data is being processed and, if so , to have access to your data and the following information : for what purpose the data are being processed , what personal data , data recipients , processing time . Requests for access must be made in writing / electronically and addressed to the administrator . In this case , we provide a copy of the processed personal data in electronic or other appropriate form .
Right of correction
You have the right to correct and complement your personal data , if they are incomplete or inaccurate . For registered users, this option is also valid in the user panel on the Site . Unregistered users can obtain this information by requesting the administrator . As data subjects have the right to request a correction or amendment of personal data , which are inaccurate / outdated or incomplete . You must submit a separate request for this purpose . Your request will be answered by the administrator in writing to the e-mail address provided by you .
Right to be deleted (" right to be forgotten" ) and account closure
As a personal data subject, you have the right to "be forgotten" , ie . is . to request that your personal data be deleted without undue delay . is . administrator to erase your personal data from all systems and records , where they are stored , including to notify all third parties / processing personal data , which provided the data .
If you wish , you have the opportunity to close your account on the site at any time . This option is also valid in the user panel on the Site . After closing the account, all or part of the data is deleted . In connection with our duties , responsibilities and requirements of the law ( eg WEU or ZEDEUU ) it is possible to store certain data for a certain period ( see . Section - above ).
In order to ensure the reliability of the services and prevent data loss for technical reasons , the Site applies a data reservation policy . The maximum period for updating ( deleting data ) from all backups is 30 days .

Request for deletion may be filed on the grounds , provided for in the Regulation , incl . in the presence of any of the following grounds :

- personal data are no longer needed for the purpose , for which they were collected ;
- when you have withdrawn your consent ;
- when you objected to the processing of personal data and has no legal grounds for processing , which have the advantage ;
- when the processing is illegal ;
- when data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State , which applies to the administrator ;
- where personal data have been collected in connection with the provision of information society services .

Keep in mind , that we can abandon deletion of part or all personal data in cases , where their processing is a substantial basis and / or legal obligation . You will be informed about this in a timely manner . The controller may refuse to delete personal data on the grounds set out in the Regulation - when the processing of specific data is for the purpose of :

- exercising the right to freedom of expression and the right to information ;
- to comply with a legal obligation , which requires processing , provided for in EU law or the law of the Member State , which apply to administrators or to accomplish a task in the public interest or in the exercise of official authority , granted to him ;
- for reasons of public interest in the field of public health ;
- for archiving purposes in the public interest , for scientific or historical research or for statistical purposes ;
- for the establishment , exercise or defense of legal claims ;

The right to limitation with respect to the processing of data
General Regulation on data protection provides for the possibility to limit the processing of your personal data , if there are grounds for it , provided for therein . The restriction is permitted in the following cases :
- when you consider , that your personal data are inaccurate , in which case the limit is for a period , required the administrator to verify the accuracy ;
- when the processing of your personal data is illegal , but you do not want them to be deleted , but you only want their use to be restricted ;
- when the controller no longer needs your personal data for the purposes of processing , but you , as the data subject , require them for the establishment , exercise or protection of legal claims ;
- when you have objected to the processing pending verification that the legal grounds of the administrator take precedence over your interests .

Right to notify third parties
Where applicable , you are entitled to ask the administrator of your personal data to notify third parties , when it provided your data , in terms of correcting , deleting or restricting the processing of your personal data .
Right to data portability
You have to get the data , which concern you and that you have provided , in a structured , widely used and adapted machine-readable format and has the right to transfer the data to another administrator without obstruction from our side , in case that the processing is based on consent or a contractual obligation or the processing is carried out in an automated manner .
Important : The responsibility for the storage of data exported from the Site , as well as for all consequences of their provision to other administrators is entirely yours .
Right not to be subjected to a decision , based solely on automated processing
You have the right not to be subject to such automated processing , including profiling , which produces legal consequences for you or similarly affect you significantly , unless the conditions required the applicable legislation on personal data protection grounds for this and provide appropriate guarantees for the protection of your rights , freedoms and legitimate interests .
Right of withdrawal of consent
You have the right , at any time , to withdraw your consent , you gave in relation to the processing of personal data on the grounds previously your consent . Such withdrawal shall not affect the lawfulness of the processing on the basis of the consent given until the moment of its withdrawal . For services such as the subscription for e-mail announcements , the subscription for which is based on your wish ( consent ), there is a possibility to terminate the subscription at any time ( withdrawal of the consent ). In case of withdrawal of consent , we may ask the applicant's identity to be verified in order to establish the identity of the person , to whom the data relate .
Right of objection
You have the right to object to data , processed on the basis of a legitimate interest . In the event of such an objection , We will consider your request and, if justified , will comply with it . If you believe , that there are compelling legal grounds for processing or that it is necessary for the establishment , exercise or defense of legal claims , we will inform you about it .
Right of appeal to the Supervisor
You have the right to file a complaint against our company ( the data controller ) to the supervisory authority , if you consider , that the processing of personal data , concerning you , violate the applicable legislation on personal data protection . Authority in the Republic of Bulgaria's Commission for Protection of Personal Data address : g . Sofia 1592, bul . "Prof. . Tsvetan Lazarov ”№ 2, e-mail kzld@cpdp.bg, website : www.cpdp.bg, phone : 02 915 3 518.
HOW CAN YOU EXERCISE YOUR RIGHTS . Deadlines for
you can exercise those rights free of charge at any time , by email or by request , sent to the address , specified in the contact form at the website or at the end of this Security Policy , you can address their requests as to the administrator , and directly to the Data Protection Officer . Requests shall be made in a way , which allows to identify the identity of the applicant . For some rights , technical possibilities for exercising them may be applicable , such as a Unsubscribe button . In any case , the administrator should respond to the request or rule on the exercise of the right to the address provided in the request , including electronic within one month of receipt .
If exercise those rights manifestly unreasonable or excessive , in - especially because of its repeatability , we reserve the right to impose a reasonable fee , as we consider the administrative cost of providing the information or communication or taking the requested action , or to refuse to take action the request . We will inform you of our fees , if applicable , before ruling on your request .
ACCURACY OF INFORMATION
We are not responsible for the accuracy of data provided by you , do not perform inspections and in this sense and do not guarantee the actual identity of individuals , provided data . In all cases of suspicion on your part , of established fraud and / or abuse , please notify us immediately . You undertake not to infringe the rights of others in connection with the protection of their personal data or other rights when providing any information on the Site .
GENERAL INFORMATION ABOUT THE POLICY
This Privacy Policy may be amended or supplemented due to a change in the applicable Bulgarian or European legislation , at the initiative of Ina Essentials or a competent authority .
Ina Essentials will notify users of changes or additions to this Privacy Policy , through the publication of the updated Privacy Policy on our website .
Users are advised to periodically check the most - the current version of this Privacy Policy on the website of Ina Essentials.
HOW protect your rights
SECURITY MEASURES

In order to ensure the best possible data protection of the company and our customers / users / co-contractors / visitors to the Site, WE apply all necessary organizational and technical measures provided for in the General Regulation on Data Protection and the Personal Data Protection Act, as well as best practices from international standards. We apply the appropriate and necessary level of protection and to this end we have developed efficient physical, electronic and administrative procedures to protect the data we collect from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to transmitted, stored or otherwise processed personal data. We store your data on secure servers using the latest encryption algorithms and ensure the storage of backups. The company has adopted the necessary rules and procedures related to the lawful processing of your personal data, incl. Action plan in case of data security breach, has established structures for prevention of abuses and security breaches, and has appointed a Data Protection Officer who supports the processes of lawful processing, protection and security of your data.

Your personal data is only allowed to those employees, service providers or related persons on the principle of the need for information for business purposes or who need it to perform their official duties. All employees are required to be trained and to accept the relevant contractual clauses / declarations / rules for compliance with organizational and technical access measures before they are granted access to information of any kind. The principle in our structure is that all employees are responsible for ensuring the security of the storage of the data for which they are responsible and which we process, and that the data is stored securely and is not disclosed in any circumstances to third parties, unless we have provided such rights of this third party as we have entered into a contract / confidentiality clause. In this regard, all personal data are available only to those who need them, and access can be granted only in accordance with the established rules for access control. All personal data is treated with the utmost security and stored: ● in a separate room with controlled access; and / or ● in a locked cabinet to which authorized persons have access; and / or ● a computer system, password protected in accordance with the internal requirements specified in the organizational and technical measures for controlling access to; and / or ● computer media that are protected in accordance with the organizational and technical measures to control access to information; Personal data are deleted or destroyed only in accordance with internal procedures for storage and destruction of data.For maximum security during processing, transmission and storage of your data, we may use additional protection mechanisms such as encryption, pseudonymization, back up backup technology. We use a payment service to process payments. All payment information is encrypted using SSL technology. When you post to forums, chat rooms or social networking services, the personal information you share is visible to other users and may be read, collected or used by them. In these cases, you are responsible for the personal information you choose to provide. Despite the measures we take to protect your personal data, we are aware that, in principle, the transmission of information over the Internet or other public networks is not completely secure, such as there is a risk that the data may be viewed and used by unauthorized third parties. We cannot be held responsible for these vulnerabilities in systems that are not under our control. In the event of a leak of data containing personal data, we guarantee that we will comply with all applicable notification rules in such cases.

COOKIE POLICY

As an integral part of this Privacy Policy for individuals, Ina Essentials has also adopted a Policy for the use of cookies, published and available both on the Site and on our Facebook page.

CONTACT US OF DATA

Questions and requests related to the exercise of the rights to protection of your personal data can be addressed to Ina Essentials, through the contact form available on the Site or through any of the following contact forms:

"INA TRADE" Ltd., UIC 204670256, Panagyurishte, 13 Raina Knyaginya Str. RESPONSIBLE PERSON FOR DATA PROTECTION Responsible person for data protection is Violeta Guberova.