Наименование: Онлайн магазин
Номер на проект: BG16RFPR001-1.012-1077
Бенефициент: Елизиум Козметик ЕООД
Производител: Зашев ЕООД
Лиценз / сериен номер: 26702
Наименование: Онлайн магазин
Номер на проект: BG16RFPR001-1.012-1077
Бенефициент: Елизиум Козметик ЕООД
Производител: Зашев ЕООД
Лиценз / сериен номер: 26702
Last updated: 17 August 2026
This Privacy and Cookie Policy is intended to inform you in a clear and accessible manner what personal data is collected and processed when using the online store https://elysiumbeauty.eu/, for what purposes such data is used, on what legal grounds, for how long it is stored, to whom it may be disclosed, and what rights you have under the applicable data protection legislation.
This Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “General Data Protection Regulation” or “GDPR”), the Bulgarian Personal Data Protection Act and other applicable Bulgarian and European legislation.
The controller of the personal data processed through the online store is:
Elysium Cosmetic Ltd.
UIC: 206406472
Registered office and management address:
1 Vasil Petleshkov St., 7000 Ruse, Bulgaria
Website: https://elysiumbeauty.eu/
Email: info@elysiumbeauty.eu
Telephone: +359 892 239 989
For any questions regarding the processing of your personal data or the exercise of your rights, you may contact us at the email address stated above.
When processing personal data, we comply with the principles established under the GDPR, including:
Depending on how you use the online store, we may process the following categories of personal data:
Passwords for user accounts should be stored using appropriate technical protection mechanisms and are not used for purposes other than providing access to the account.
For the purpose of accepting, processing and fulfilling orders, we may process:
Where a customer requests an invoice, we may process the data required for issuing it, including name/company name, address, UIC/BULSTAT, VAT number where applicable, and other information required under applicable accounting and tax legislation.
The online store may offer payment by:
When paying by bank card, the payment is processed by an external payment service provider/bank. Elysium Cosmetic Ltd. does not store your full bank card details, such as the card number, CVV/CVC code or other protected payment data. Such data is entered and processed within the secure payment environment of the relevant payment service provider.
We may receive limited information regarding the payment transaction, such as payment status, the amount paid, transaction identifier and other information necessary to confirm and account for the payment.
When you voluntarily subscribe to our electronic newsletter, we process the email address provided by you and, where applicable, your name, for the purpose of sending news, offers, promotions, product information and other marketing communications.
Subscription to the newsletter is voluntary and may be cancelled at any time via the unsubscribe link contained in the relevant message or by sending a request to info@elysiumbeauty.eu.
When you add products to your cart but do not complete the order, the online store may technically retain the contents of your cart for a certain period of time.
Where we have your contact details and an applicable legal basis exists, you may receive a reminder about an incomplete order or abandoned cart. Where such a message constitutes direct marketing, it is sent only where the necessary legal basis exists and in compliance with the applicable rules on electronic commercial communications.
When visiting the website, certain technical data may be processed automatically, including:
We process the personal data necessary to accept and fulfil orders, deliver purchased goods, process payments, communicate in relation to orders, handle complaints, returns and other actions connected with the sales contract.
The legal basis is Article 6(1)(b) GDPR – processing is necessary for the performance of a contract or in order to take steps at the request of the customer prior to entering into a contract.
Personal data is processed for the creation, maintenance and use of a user account and for providing the functionalities associated with it.
Certain personal data may be processed and stored for the purpose of complying with applicable legal obligations, including accounting, tax and other statutory requirements.
The legal basis in such cases is Article 6(1)(c) GDPR.
Where applicable, we may process a limited amount of personal data for:
In such cases, the legal basis may be Article 6(1)(f) GDPR – the legitimate interests of the controller, provided that such interests are not overridden by your interests or fundamental rights and freedoms.
Where required by law, marketing communications and electronic newsletters are sent on the basis of your prior, voluntary consent.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal of consent.
Subject to your prior consent, we may use analytics and marketing technologies to measure website traffic, analyse the use of the website, measure the effectiveness of advertising campaigns, create audiences and display more relevant advertisements.
We do not sell or provide your personal data to third parties for their own independent marketing purposes, unless an applicable legal basis exists.
For the normal operation of the online store, certain personal data may be disclosed to the following categories of recipients:
Where an external service provider processes personal data on our behalf, we take the necessary measures to ensure that our relationship with that provider is governed in accordance with applicable data protection legislation.
For the purpose of fulfilling deliveries, the necessary personal data may be disclosed to the courier selected by the customer – Econt or Speedy.
Depending on the selected delivery method, such data may include:
Once the data has been provided to the relevant courier, that courier may also process certain data in accordance with its own legal obligations and privacy policies.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a statutory provision requires a longer retention period.
When determining the retention period, we take into account:
Personal data contained in accounting and tax documents is retained for the periods required under applicable Bulgarian legislation.
Personal data processed on the basis of consent for marketing purposes is processed until consent is withdrawn or until the purpose of processing ceases to exist, unless the law permits or requires the retention of limited information for a longer period, for example for the purpose of proving consent or its withdrawal.
Data contained in a user account may be retained while the account remains active and for an additional period where this is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
Some of the technology providers we use may be part of international groups or may process information through infrastructure located outside the European Economic Area (EEA). This may apply, for example, to certain services provided by Google and Meta.
Where personal data is transferred outside the EEA, such transfer shall be carried out using an applicable mechanism under the GDPR, such as an adequacy decision, Standard Contractual Clauses or another mechanism permitted by applicable law.
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Depending on the specific circumstances, such measures may include:
Under the GDPR, and where the conditions provided by law are met, you have the right:
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
To exercise your rights, you may contact us at: info@elysiumbeauty.eu.
In order to protect your data against unauthorised access, when receiving a request we may ask for additional information necessary to confirm the identity of the applicant.
If you believe that your personal data is being processed in violation of applicable law, you have the right to lodge a complaint with the competent supervisory authority:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Website: https://cpdp.bg/
Your right to lodge a complaint with a supervisory authority does not limit any other administrative or judicial remedies available to you.
Cookies are small files or pieces of information that are stored on your device or accessed when you visit a website.
Cookies and similar technologies may be used to provide the basic functionality of the website, save user preferences, analyse traffic and, where the necessary consent has been obtained, measure and personalise advertising.
These cookies are necessary for the online store to function and cannot be disabled through the consent management system where they are genuinely necessary to provide a service requested by the user.
They may be used, for example, for:
Functional cookies enable additional functionality and personalisation, such as remembering certain user preferences.
Where such cookies are not strictly necessary to provide the requested service, they are activated only after the necessary consent has been obtained.
Subject to your consent, we may use analytics technologies, including Google Analytics, to obtain statistical information about how visitors use the online store.
This information may include, for example:
Subject to your prior consent, technologies provided by Google Ads, Meta/Facebook and other advertising platforms may be used.
They may be used for:
The online store may use Google Analytics, an analytics service provided by Google. Google Analytics helps us understand how visitors use the website and improve its content, structure and functionality.
Where the use of Google Analytics involves storing or accessing information on the user’s device and does not fall within an applicable legal exemption, the service is activated only after consent has been obtained through the cookie consent management mechanism.
We may use Google Ads technologies for measuring advertising campaigns, tracking conversions and remarketing.
Where such technologies use non-essential cookies or other tracking mechanisms, they are activated only after the necessary consent has been obtained.
Subject to your consent, the online store may use Meta technologies, including Meta Pixel (Facebook Pixel), for measuring advertising effectiveness, analysing actions taken after interaction with an advertisement, and creating advertising audiences.
Depending on the configuration of the services, Meta may receive information about your interaction with the online store, technical identifiers and other information in accordance with Meta’s own terms and privacy policies.
The website may use Google Tag Manager as a technical tool for managing scripts and integrations. The mere use of Google Tag Manager does not necessarily mean that tracking cookies are used, but other services may be loaded through it.
Where Google Tag Manager is used to manage analytics or marketing technologies that require consent, such technologies should only be activated following the relevant user choice.
When you first visit the website, you may be shown a cookie management panel. Through this panel, you may accept or reject optional categories of cookies and, where technically available, make a separate choice for different categories.
Rejecting analytics or marketing cookies should not prevent you from using the core functionality of the online store.
You may change or withdraw your choice regarding optional cookies at any time through the consent management mechanism available on the website, where such a mechanism is provided.
You may also control and delete cookies through your browser settings. Please note that blocking strictly necessary technologies through your browser settings may cause certain functions of the online store to operate incorrectly.
Certain services integrated into the website may place or use their own cookies and similar technologies. These may include services provided by Google, Meta and other technology providers.
Where such providers act as independent controllers in relation to certain processing activities, their use of personal data is also governed by their respective privacy policies.
The online store may use technical means to retain the contents of your shopping cart so that selected products are not lost during normal use of the website.
Where the technology is strictly necessary to provide the shopping cart functionality, it may be used as a necessary technology. The use of abandoned cart data for additional marketing purposes is carried out only where an applicable legal basis exists.
Where you have provided the necessary consent, we may use your email address to send information regarding products, promotions, special offers and other commercial communications.
You may stop receiving such communications at any time by using the unsubscribe link contained in the relevant email or by contacting us at info@elysiumbeauty.eu.
Opting out of marketing communications does not affect the receipt of service-related messages necessary for the fulfilment of your order, management of your account, security, or compliance with other contractual or legal obligations.
When you create a user account, the personal data provided is used to enable the functionality of the account, facilitate future orders and provide access to information and services available through it.
The user is responsible for keeping their login credentials confidential and for not disclosing their password to third parties.
If you suspect unauthorised access to your account, we recommend that you promptly change your password and contact us.
We do not make decisions that produce legal effects concerning you or similarly significantly affect you which are based solely on automated processing of personal data, unless such processing is permitted under applicable law and the necessary safeguards are in place.
The use of analytics and advertising technologies may involve automated categorisation or the creation of advertising audiences where you have given the necessary consent, but this does not in itself mean that Elysium Cosmetic Ltd. makes decisions with significant legal effects concerning you solely by automated means.
The online store is not specifically intended to collect personal data from children. If we become aware that personal data has been provided by a person who, under applicable law, cannot independently give valid consent for a specific service where consent is the required legal basis, we will take appropriate action in accordance with the law.
The website may contain links to websites or services operated by third parties. We do not control the privacy policies or practices of such external websites.
We recommend that you review the privacy policy of the relevant external provider before submitting personal data through its service.
Elysium Cosmetic Ltd. reserves the right to update this Privacy and Cookie Policy in the event of changes to the technologies used, the online store services, applicable legislation or the manner in which personal data is processed.
The current version of the Policy is published at https://elysiumbeauty.eu/, with the date of the latest update stated at the beginning of this document.
If you have any questions regarding this Policy, the processing of your personal data, or if you wish to exercise any of your rights, you may contact us at:
Elysium Cosmetic Ltd.
UIC: 206406472
Address: 1 Vasil Petleshkov St., 7000 Ruse, Bulgaria
Email: info@elysiumbeauty.eu
Telephone: +359 892 239 989
Website: https://elysiumbeauty.eu/
