top of page

Privacy Policy

This Privacy Policy aims to inform you how Anna Habre processes your personal data when you visit the website www.annahabre.com, submit inquiries, request services, order and use personalized vouchers, as well as what rights you have under Regulation (EU) 2016/679 — the General Data Protection Regulation (GDPR).

1. Data Controller
The data controller is "Anna Habre - Personal Stylist" – a professional trade name under which personal style and image services are provided by a self-employed individual (sole practitioner), with its registered office and contact address at: 3 Razlaka Str., Sofia, Bulgaria, UIC (EIK) 181042314.

For any questions regarding the processing and protection of your personal data, you can contact me at the email address provided in the "Contact" section of this policy.

2. What Personal Data I Process
Depending on how you use my website and services, the following categories of personal data may be processed:

2.1. Upon submitting an inquiry via the contact form, the website's live chat functionality, or official social media channels
First and last name;
Email address;
Telephone number, where provided;
Subject and content of the message;
Additional information that you voluntarily provide in connection with your inquiry.

History and content of the chat communication.

2.2. Upon requesting and providing services
First and last name;
Contact details;
Information required to clarify and provide the requested service;
Information regarding the communication carried out, where necessary for the performance of the request or the protection of the legal rights of the parties;
Data required for the issuance and retention of documents in connection with the provision of and payment for the service, where applicable.

2.3. Upon ordering and issuing a personalized voucher
An order for a personalized voucher is placed by sending an inquiry via email.
In connection with the order, the following may be processed:
First and last name of the person placing the order;
Contact telephone number and email address;
Greetings, wishes, and other information necessary to personalize the voucher;
Information about the selected service or combination of services;
Data regarding the recipient of the voucher, where the purchaser provides such data and it is necessary for its issuance or use;
Information regarding the order, payment, issuance, validity, and use of the voucher.

Bank details for making the payment are provided to the purchaser in connection with the specific order. Payment shall be made via bank transfer.

This data is used to communicate with the purchaser, clarify the custom wishes, personalize and issue the voucher, administer its validity and use, as well as to comply with applicable legal obligations.

When you provide personal data of another individual in connection with a voucher order, please inform them accordingly. Where the personal data of the recipient is provided by the purchaser rather than directly by the recipient themselves, the controller shall provide the necessary information regarding the processing of personal data pursuant to Article 14 of the GDPR, where applicable and within the timeframes prescribed by the regulation.

2.4. Upon visiting the website
When visiting the website, the platform and the enabled technical tools may process technical information, such as device and browser data, IP address, date and time of the visit, pages visited, and interactions with the website.

The specific scope of the processed information depends on the platform features used, the enabled analytical tools, and the cookie settings.

3. Purposes of Processing Personal Data
Personal data is processed for the following purposes:

Responding to inquiries and establishing contact;
Providing information regarding the services offered;
Clarifying and arranging consultations;
Performing requested services;
Personalizing, issuing, and administering vouchers;
Communicating with the purchaser and, where necessary, with the voucher recipient;
Tracking the validity and usage of vouchers;
Fulfilling applicable accounting, tax, and other statutory obligations;
Protecting legal rights and interests in the event of disputes and legal claims;
Maintaining the security and proper functioning of the website;
Analyzing visits and improving the website, where relevant tools are utilized and the processing is lawful.

I do not use personal data for unrelated direct marketing without the requisite legal basis.

4. Legal Basis for Processing
Depending on the purpose, processing is carried out on one or more of the following grounds pursuant to Article 6(1) of the GDPR:

(a) Taking steps prior to entering into a contract and performance of a contract — point (b).
Where processing is necessary to respond to an inquiry, clarify a requested service, order, personalize, and issue a voucher, or perform contractual obligations.

(b) Compliance with a legal obligation — point (c).
Where processing is necessary for compliance with applicable accounting, tax, or other statutory requirements.

(c) Legitimate interest — point (f).
Where processing is necessary and proportionate to protect my legal rights, handle disputes, or establish, exercise, or defend legal claims, while taking into account your rights and freedoms.

(d) Consent — point (a).
Where consent is the required legal basis for a specific activity, such as the use of certain non-essential cookies or any other activity for which the law requires consent.

Where processing is based on consent, it may be withdrawn at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The controller does not engage in automated decision-making, including profiling, which produces legal effects concerning data subjects or similarly significantly affects them.

5. Is the Provision of Personal Data Obligatory
The provision of personal data is voluntary, but certain data is necessary to enable me to respond to your inquiry, organize a requested service, or issue and administer a personalized voucher.

Failure to provide the necessary data may result in the inability to fulfill the respective request.

Please provide only the information that is necessary for the specific service requested.

6. Recipients of Personal Data
Personal data is not sold.

Where necessary for the functioning of the website, the provision of services, or the fulfillment of legal obligations, data may be processed by the respective recipients, including:

Wix.com Ltd. – the provider of the platform for building, maintaining, and hosting the website, who processes personal data of visitors on behalf of the controller, to the extent necessary for the functioning of the website and the provision of services.

Google Ireland Limited – the provider of the Gmail service, used by the controller for receiving and sending electronic correspondence with clients and individuals who have submitted inquiries. Google processes the data within the framework of providing its own consumer service in accordance with its terms and privacy policy.

Providers of technical, security, and analytical services, where such are enabled;

An accountant or an accounting service provider;

Banks and other competent organizations, where necessary for making or verifying payments;

Competent state authorities, where disclosure of the data is required by law.

Data is provided only to the extent necessary and in compliance with the applicable personal data protection requirements.

7. Transfer of Data Outside the European Economic Area
Depending on the platforms and third-party providers used, personal data may be processed in or transferred to countries outside the European Economic Area.

Where such a transfer applies, it is carried out in compliance with the requirements of the GDPR and subject to the availability of an appropriate mechanism for lawful transfer, such as an adequacy decision by the European Commission regarding the level of protection or standard contractual clauses, where applicable.

8. Retention Periods
Personal data is retained only for the period necessary to achieve the purposes for which it was collected, in compliance with applicable statutory limitation periods.

Inquiries that do not lead to an order or the provision of a service: for the period necessary to process the inquiry and subsequent communication (up to 1 year), after which the data is deleted, unless there is a ground for its longer retention.

Data concerning services and vouchers: for the period necessary for the performance and administration of the respective service or voucher, as well as for the applicable limitation period for the protection of legal claims (up to 5 years from the performance of the service).

Accounting and tax documents: for the periods prescribed by the applicable legislation (from 5 to 10 years, pursuant to the Accountancy Act and the Tax and Social Insurance Procedure Code).

Technical and analytical data: for the periods determined by the respective platform and the tools used.

Upon expiry of the applicable retention period, the data is deleted or anonymized, unless there is a legal ground for its longer retention.

You may request the erasure of your personal data. Such request shall be reviewed in accordance with the GDPR, whereby erasure may be restricted where a statutory obligation for retention or another applicable legal basis exists.

9. Cookies and Analytical Tools
The website utilizes the Wix platform and may use cookies and other technical tools for its functioning, security, retention of preferences, and traffic analysis.

Depending on the features actually enabled, the following may be used:

  • Essential cookies, which support the core functioning and security of the website;

  • Analytical cookies, where tools for measuring visits and interactions are enabled;

  • Other non-essential cookies, where applicable.

Essential cookies are used for the basic functioning and security of the website.

Functional, analytical, and marketing cookies, as well as other non-essential technologies, are activated only upon the explicit consent of the user, where such consent is required under applicable law.

Upon visiting the website, the user may accept or decline the use of non-essential cookies via the buttons available in the consent banner. This choice may be amended at any time through the cookie settings on the website.

Declining non-essential cookies does not restrict access to the core features of the website.

A portion of these technologies supports the operation of the website's live chat functionality to ensure continuous and seamless communication while browsing the pages.

10. Your Rights
Under the conditions set forth in the GDPR, you have the right to:

  • Obtain information as to whether I process your personal data and to access such data;

  • Request the rectification of inaccurate or incomplete data;

  • Request the erasure of your personal data, provided that the legal conditions are met;

  • Request the restriction of processing;

  • Object to the processing, where such right is applicable;

  • Receive your personal data in a structured, commonly used, and machine-readable format, provided that the conditions for data portability are fulfilled;

  • Withdraw your consent at any time, where the processing is based on consent;

  • Lodge a complaint with the Commission for Personal Data Protection (CPDP - www.cpdp.bg).

To exercise your rights, you may contact me at the email address provided in Section 13.

Requests shall be reviewed within the timeframes prescribed by the GDPR. In certain cases, verification of your identity may be required.

Your rights shall be exercised subject to the terms and limitations provided for under applicable legislation.

11. Security of Personal Data
I implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, unlawful disclosure, alteration, or destruction.

Access to data is restricted to what is strictly necessary for the performance of the respective tasks and legal obligations.

12. Amendments to the Policy
This Privacy Policy may be updated in the event of changes to the business activities, technologies used, applicable legislation, or the manner in which personal data is processed.

13. Contact
For any questions regarding the processing and protection of your personal data, you may contact:

Anna Habre – Personal Stylist
Address: 3 Razlaka Str., Sofia, Bulgaria
Email: anna.habre.image.consultant@gmail.com

bottom of page