Privacy Policy

1. Introduction and Data Controller

• Company Name: КОЗМЕТИК ПЛЮС ЕООД (COSMETIC PLUS Ltd.)
• Registered Address: Europe Trade Center, Building 7, Iskarsko Shosse Blvd. 7, Sofia – 1528, Bulgaria
• Email: office@cosmeticplus.bg

2. Personal Data We Collect and Why We Collect It

Because this website functions solely as a corporate B2B showcase and presentation platform, we do not require user account registration, and we do not process online sales or payments. We only collect and process personal data in the following limited scenarios:

• Contact and Enquiry Form Submissions:
  When you use the form on our “Contact Us” page to send a business inquiry, you input your Full Name, Company/Employer Name, Email, Telephone Number, and your message. Please note that data entered into this form is not stored in an internal website database. Instead, your input is automatically compiled and securely transmitted as an encrypted email directly to our corporate inbox (office@cosmeticplus.bg).

  • Purpose: We process this data exclusively to evaluate your professional profile, manage your request, and communicate back with you regarding potential B2B partnerships or product distribution.

• Job Applications and Employment Inquiries (hr@cosmeticplus.bg):
  When you apply for one of our listed career positions or submit a spontaneous application by sending an email to our human resources address, we collect and process your Full Name, Email Address, Contact Information, Curriculum Vitae (CV), professional experience record, qualifications, and your Motivation Letter.

  • Purpose: This processing is strictly limited to evaluating your suitability for employment, managing our candidate recruitment pipeline, scheduling job interviews, and establishing communication during the hiring process.

• Direct General Inquiries via Email and Telephone:
  If you choose to bypass the form and reach out directly via our public telephone lines or corporate email (office@cosmeticplus.bg), we process your name, contact details, and message contents.

  • Purpose: To accurately answer your general business or service questions.

• Server Log Files (Technical Data):
  Our web hosting servers automatically collect information that your browser sends whenever you visit our website. This includes your IP address, browser type and version, operating system, the pages you visit, the time and date of your visit, and time spent on those pages.

  • Purpose: To ensure website security, stability, technical maintenance, and protection against cyberattacks.

• Cookies and Tracking Technologies:
  Our website does not utilize tracking cookies, marketing pixels, or third-party web analytics services (such as Google Analytics). We only deploy strictly necessary technical cookies required for core site functionality (such as remembering your language preferences). Because we do not use tracking or marketing cookies, no cookie consent banner is displayed or required on this platform.

3. Legal Basis for Processing Your Data

We process your personal data strictly in accordance with the lawful parameters established under Article 6 of the General Data Protection Regulation (GDPR):

• Performance of Contractual or Pre-Contractual Measures (Article 6(1)(b) GDPR): Processing is legally justified when you submit an enquiry through our Contact Form or send your application files to hr@cosmeticplus.bg. This processing is necessary to evaluate your request or candidate profile prior to potentially entering into a business contract or employment agreement with us.
• Legitimate Interests (Article 6(1)(f) GDPR): Processing server log files is necessary for our legitimate interest in maintaining a technically stable and secure website against cyber threats. We also rely on legitimate interests to deploy technically essential operational cookies, such as those used to remember your preferred language selection (English or Bulgarian).

4. Data Retention Period

We store your personal data only for as long as necessary to fulfill the specific purposes for which it was collected, or to comply with applicable statutory timelines:

• Contact Form and General Enquiries: Because your contact form data is transmitted directly via email rather than saved on our web server, we do not maintain persistent digital records of your submission on this website. The resulting email correspondence is stored within our corporate mail system for the duration of our professional relationship or up to a maximum of five (5) years following our last communication, unless a longer archival period is required by Bulgarian commercial, tax, or litigation legislation.
• Job Applications and CVs (hr@cosmeticplus.bg): Application documents, CVs, and motivation letters submitted for open positions or via spontaneous inquiry are safely retained for the duration of the recruitment process. All unsuccessful applicant profiles are permanently deleted or securely destroyed within six (6) months following the conclusion of the specific selection procedure, unless the candidate gives explicit written consent for us to retain their profile longer for future openings.
• Server Log Files: Technical data automatically collected to maintain website stability is overwritten or deleted after a standard automated technical cycle (typically 30 to 90 days), unless a targeted cyberattack or security incident necessitates a longer preservation period for administrative investigation.

5. Data Sharing and Third-Party Disclosures

• Web Hosting and Technical Infrastructure Providers: Your data (including server log files, incoming contact form entries, and career applications) passes through and is stored on servers operated by our professional web hosting and email service providers to keep the website functional and secure.
• Human Resources Applications: If you submit an application to hr@cosmeticplus.bg, your CV and motivation letter are processed strictly within our internal HR administrative systems and are never shared with external recruiting agencies or unauthorized third parties without your explicit permission.
• Legal and Regulatory Authorities: We may disclose personal data to public regulators, law enforcement, or legislative bodies (such as the Bulgarian Commission for Personal Data Protection or national courts) only if we are strictly compelled to do so by a binding statutory mandate, court order, or applicable European Union and Bulgarian laws.

6. International Data Transfers

7. Your Rights Under the GDPR

As a European Union data subject, you hold comprehensive, enforceable rights regarding how your personal information is processed. You can exercise these rights at any time by contacting us directly at office@cosmeticplus.bg:

• Right of Access (Art. 15 GDPR): You have the right to request official confirmation as to whether your data is being processed, along with a free copy of the personal records we hold about you.
• Right to Rectification (Art. 16 GDPR): You can request that we immediately correct any inaccurate or incomplete personal or professional details.
• Right to Erasure / “Right to be Forgotten” (Art. 17 GDPR): You can ask us to permanently delete your data (such as removing a submitted CV from our HR archives) if the data is no longer necessary for its original purpose or if the legal retention period has ended.
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to limit how we use your data under specific conditions (e.g., while the accuracy of your data is being verified).
• Right to Data Portability (Art. 20 GDPR): You can request that we transfer your submitted details to another organization or directly to you in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): You have the right to object at any time to the processing of your data based on our legitimate interests or server analytics configurations.
• Right to Withdraw Consent (Art. 7(3) GDPR): Where processing is based on your explicit consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

We will evaluate and respond to your privacy requests within thirty (30) days of receipt, entirely free of charge.

8. Right to Lodge a Complaint

If you believe that our processing of your personal data violates the GDPR or Bulgarian data protection laws, you have the right to lodge an official complaint with the national supervisory authority:

• Commission for Personal Data Protection (КЗЛД)
• Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
• Website: www.cpdp.bg
• Email: kzld@cpdp.bg

9. Changes to this Privacy Policy

We reserve the right to update or change our Privacy Policy at any time to reflect updates to our website or changes in legal regulations. Any modifications will be posted directly on this page with an updated “Last Modified” date.