Privacy Policy and GDPR Clause


PRIVACY POLICY

  1. General information

  1. The operator of the sklep.science4beauty.net website (hereinafter referred to as the "Website") is Science4Beauty sp. z o. o.
  2. The website performs the functions of obtaining information about users and their behavior in the following way:
     – Through information voluntarily entered in forms.
    – By saving cookies on end devices (so-called "cookies").
     – By collecting web server logs by the hosting operator Bluehost, operating at https://www.bluehost.com/.

  1. Information in forms

  1. Service collects information provided voluntarily by the user.
  2. The website may also save information about connection parameters (time stamp, IP address).
  3. The data in the form is not made available to third parties other than with the user's consent.
  4. The data provided in the form may constitute a set of potential customers, registered by the Website Operator in the register kept by the Inspector General for Personal Data Protection.
  5. The data provided in the form is processed for the purpose resulting from the function of a specific form, e.g. to process a service request or contact.
  6. The data provided in the forms may be transferred to entities technically providing certain services - in particular, this applies to the transfer of information about the holder of a registered domain to entities that are operators of Internet domains, payment processing services or other entities with which the Website Operator cooperates in this respect.

  1. Information about cookies

  1. The website uses cookies.
  2. Cookies (so-called "cookies") are IT data, in particular text files, which are stored on the Website User's end device and are intended for using the Website's websites. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.
  3. The entity that places cookies on the Website User's end device and obtains access to them is the Website operator.
  4. Cookies are used for the following purposes:
    – creating statistics that help understand how Website Users use websites, which allows improving their structure and content;
     – maintaining the Website User's session (after logging in), thanks to which the User does not have to re-enter the login and password on each subpage of the Website;
     – defining the user's profile in order to display tailored materials in advertising networks, in particular the Google network.
  5. The Website uses two basic types of cookies: "session cookies" and "persistent cookies". "Session" cookies are temporary files that are stored on the User's end device until logging out, leaving the website or turning off the software (web browser). "Permanent" cookies are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.
  6. Software for browsing websites (web browser) usually allows cookies to be stored on the User's end device by default. Website users may change the settings in this regard. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help or documentation of your web browser.
  7. Restrictions on the use of cookies may affect some of the functionalities available on the Website.
  8. Cookies placed on the Website User's end device may also be used by advertisers and partners cooperating with the Website operator.
  9. We recommend reading the privacy policies of these companies to learn how they use cookies used in statistics: Google Analytics Privacy Policy
  10. Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way the user uses the Website. For this purpose, they may retain information about the user's navigation path or the time spent on a given page.
  11. In terms of information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/

  1. Server logs

  1. Information about some user behavior is logged in the server layer. This data is used solely for the purpose of administering the website and to ensure the most efficient operation of the hosting services provided.
  2. Browsed resources are identified by URL addresses. In addition, the following may be recorded:
     – query arrival time,
     – time of sending the response,
     – name of the client station – identification carried out via the HTTP protocol,
    – information about errors that occurred during the HTTP transaction,
     – URL address of the page previously visited by the user (referrer link) – if the Website was accessed via a link,
     – information about the user's browser,
     – IP address information
  3. The above data is not associated with specific people viewing the websites.
  4. The above data is used only for server administration purposes.

  1. Sharing data

  1. The data may be made available to external entities only within the limits permitted by law.
  2. Data enabling the identification of a natural person are made available only with the consent of that person.
  3. The Operator may be obliged to provide information collected by the Website to authorized bodies on the basis of lawful requests to the extent resulting from the request.

  1. Managing cookies – how to express and withdraw consent in practice?

  1. If you do not want to receive cookies, you can change your browser settings. We reserve that disabling the use of cookies necessary for authentication processes, security, and maintaining user preferences may make it difficult, and in extreme cases, impossible to use the Website's websites.
     

INFORMATION CLAUSE GDPR

  1. The Personal Data Administrator is Science4Beauty with its registered office in Warsaw at ul. Ząbkowska 30/6, 03-735 Warszawa (hereinafter referred to as the " Administrator ").

  1. If you have any questions, please contact us at our registered office address or directly with the Personal Data Protection Inspector by e-mail [iod@science4beauty.net].

  2. Personal data is processed for the purpose of:
  3. Implementation of the contract and actions taken to conclude it at the request of the data subject.
  4. Implementation of the legally justified interests of the Administrator, in which the legal basis is Art. 6 section 1 letter f GDPR, and these are the following activities:

- marketing of own products and services (direct marketing),

- analytical activities (selection of services to your needs, optimization of our products based on your comments and interests, optimization of service processes, etc.),

- for archival (evidential) purposes, which are the implementation of our legitimate interest in securing information in the event of the need to demonstrate proper operation,

- possible determination, investigation or defense against claims,

- surveying your satisfaction and improving the quality and satisfaction with the services we provide and the sale of products,

- contact in organizational and training matters.

  1. In other cases, personal data will be processed only on the basis of previously granted consent, to the extent and for the purpose specified therein.

  2. Providing data is voluntary, but is necessary to conclude and implement the contract.
  3. You have the right to object to the processing of your data at any time on the basis of legitimate interest, which we indicate in section 3 letter b) described above. The Administrator will stop processing personal data for these purposes, unless there are legally justified grounds that prevent the cessation of processing or are necessary to establish, pursue or defend claims.
  4. You have the right to object to the processing of your data for direct marketing purposes at any time.

  5. Your data will be processed for the period in which claims related to the contract may arise, for the limitation period for claims established pursuant to specific provisions and for periods specified in relevant provisions, and in the case of the data subject's consent, until its withdrawal.
  6. Data processed for the purposes of direct marketing of its own products and services may be processed by the Administrator until an objection is raised against their processing for this purpose or until the Administrator determines that they are outdated.
  7. Your personal data may be disclosed to: business partners, i.e. companies with which the Administrator cooperates by offering products or services, couriers and postal operators; public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and purposes arising from legal provisions; our subcontractors (processing entities), e.g. people performing parachute jumps, entities providing accounting, accounting, IT, legal, consulting services, marketing agencies, etc.

  8. Pursuant to the GDPR, you are entitled to:
  1. the right to access your data and receive a copy thereof;
  2. the right to rectify (correct) your data;
  3. the right to delete data, limit data processing;
  4. the right to object to data processing;
  5. the right to transfer data;
  6. the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office)
  7. The administrator does not transfer personal data outside the European Economic Area. However, if such a situation occurs in the future, processing will be carried out using standard contractual clauses approved by the European Commission in order to ensure an adequate level of data protection required by law.

  8. Your personal data is not subject to automated decision-making, including profiling.