Privacy Policy

PRIVACY POLICY

Dear clients,
To avoid any misunderstanding, please read the Privacy Policy terms below.

We would like to inform you that personal data protection is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

CONFIDENTIALITY

In the Al-Amar store in Sofia and the electronic stores www.al-amar.bg and www.al-amar.eu, personal data of visitors and registered users are processed for the purpose of advertising, sale, and delivery of perfume oils, natural cosmetic products, and related ingredients from around the world. Our online websites also provide information about products, their use, origin, and other relevant details.

DATA ADMINISTRATOR (DATA CONTROLLER)

Data Administrator (the “Administrator”):
ASM GROUP EOOD
UIC (BULSTAT): 203293350
Address: Sofia 1700, ul. “Frederic Chopin” 7, Bulgaria
Phone: +359 882 068 613
Email: [email protected]

The Administrator processes personal data through the e-shops www.al-amar.bg and www.al-amar.eu.

THE TYPES OF PERSONAL DATA WE PROCESS

I. Data processed on contractual basis (Art. 6(1)(b) GDPR)

1. Details of your e-commerce account created after acceptance of the Terms of Service:

• First and last name
• Email address
• Password

2. Data for online ordering:

• First and last name of recipient
• Delivery address (country, city, postcode, address)
• Contact phone
• Invoice data
• Delivery method
• Payment method
• Order number
• Payment amount
• Payment status
• Delivery status

II. Data processed based on your consent (Art. 6(1)(a) GDPR)

Provided voluntarily through forms, communication, or optional fields:

• Names
• Email address
• Phone number
• Address
• Company details (optional)
• Website (optional)
• Message or comment content
• Order history

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

III. Data processed according to legal obligations (Art. 6(1)(c) GDPR)

We process certain data to comply with accounting, tax, and legal requirements, as well as orders from authorities and courts.

IV. Data processed based on legitimate interest (Art. 6(1)(f) GDPR)

• Fraud prevention
• Security of orders and payments
• Customer service
• Protection of business interests
• Statistical analysis (where possible anonymized)

PURPOSES OF PROCESSING PERSONAL DATA

Personal data is processed for:

• Delivery of ordered products
• Customer communication and support
• Account authentication and security
• Processing payments
• Complaint handling
• Preventing abuse and fraud
• Compliance with legal obligations
• Marketing communications (only with explicit consent)

VIDEO SURVEILLANCE

Video surveillance is carried out in the physical store for security purposes, prevention of incidents, and protection of property and persons.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Video recordings are stored for a period not exceeding 30 days unless required for investigation by authorities.

THIRD PERSONS WITH ACCESS TO PERSONAL DATA

Personal data may be provided to:

• Courier company: Speedy AD
• State authorities and institutions when required by law
• Accounting or legal service providers where applicable

All third parties are required to apply appropriate technical and organizational measures to protect personal data.

DATA RETENTION PERIOD

Personal data is stored only for the period necessary:

• Orders and accounting documents: up to 10 years (legal obligation)
• Customer accounts: until deletion request
• Marketing data: until consent withdrawal
• Communication data: up to 5 years
• Video surveillance recordings: up to 30 days

DATA SUBJECT RIGHTS

You have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure / right to be forgotten (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

Requests may be sent to: [email protected]

SUPERVISORY AUTHORITY

Commission for Personal Data Protection (CPDP) – Bulgaria
Website: https://www.cpdp.bg

COOKIES

Our websites use cookies to ensure proper functionality, improve user experience, analyze traffic, and provide marketing content. Users can manage cookies through browser settings or consent tools on the website.

ADDRESS SHOWROOM/STORES

If you want to experience the magic of Eastern fragrances, visit our showroom/stores in Sofia:

Sofia 1700, “Frederic Chopin” 7 str., Bulgaria

Opening hours:
Monday to Friday: 10:00 – 18:00
Saturday - Sunday – Closed

You can find our store locations at the following link:

www.al-amar.bg/shops

If you have any questions, do not hesitate to contact us:

Phone: +359 882 068 613
Email: [email protected]

SECURITY

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

POLICY UPDATES

This Privacy Policy may be updated periodically. The latest version will always be available on our website.