🔒 Privacy Policy

Effective from: 21.06.2025.

This Privacy Policy is intended to inform you how Eva Art 21 Ltd. (hereinafter referred to as „the Company“, „we“, „us“), UIC: 204275632, with its registered office and registered address in the Republic of Bulgaria, town of. Smolyan, as a personal data controller, collects, processes and protects your personal data in connection with the use of the website www.evasbff.com.

I. Categories of personal data we collect

We collect and process the following categories of personal data:

  • Identification data: first name, last name
  • Contact details: telephone, email address, delivery address
  • Payment details: payment method information (we do not store bank card numbers)
  • IP address and cookies: used to analyse and improve the website (see [Cookie Policy])

II. Purposes of processing

Your personal data is used for the following purposes:

  • Processing and delivery of orders;
  • Communication by email and phone for clarifications, confirmations or complaints;
  • Issuing invoices and fulfilling legal obligations;
  • Marketing campaigns - only with your explicit consent;
  • Improve user experience by analyzing site behavior (anonymous data via Google Analytics).

III. Legal basis

The processing is carried out on the basis of:

  • Execution of contract - when ordering products;
  • Legislative obligations - invoicing and accounting;
  • Legitimate interest - site improvement and fraud protection;
  • Consent - when sending newsletters, marketing and collecting analytical data.

IV. Storage period

  • Order and invoice data - 5 years under accounting legislation;
  • Profile data and marketing purposes - up to withdrawal of consent;
  • Cookies - within the time limits specified in the [Cookie Policy].

V. Who we share your data with

Your personal data shall not be sold or assigned to third parties, except in the following cases:

  • Courier companies - for delivery of orders;
  • Accounting services - in connection with legal obligations;
  • Payment providers - to make payments;
  • State authorities - under legal requirement.

VI. Your rights

As a data subject, you have the following rights:

  • Right to Access to your personal data;
  • Right to Correction of inaccurate data;
  • Right to delete („the right to be forgotten“);
  • Right to restriction of processing;
  • Right to data portability;
  • Right to objection against processing;
  • Right to withdraw your consent at any time;
  • Right to lodge a complaint with Commission for Personal Data Protection (CPDP).

VII. Contacts

If you have any questions or wish to exercise any of the above rights, you may contact us:

📧 Email: muse@evasbff.com
📍 Address of management: gr. Smolyan, Bulgaria
📞 We can also provide a phone number upon specific request.

VIII. Data security

We implement technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. We use secure servers, SSL certificates and encrypted connections.

IX. Policy changes

This Policy may be updated from time to time. We encourage you to review it regularly. Last updated: 21.06.2025 г.