Privacy Policy
Privacy Policy
BOTANICAL S.R.L.
- GENERAL INFORMATION
- OPERATOR CONTACT DATA
- HOW WE OBTAIN PERSONAL DATA
- WHAT PERSONAL DATA WE USE
- TO WHOM DO WE TRANSFER PERSONAL DATA
- HOW MUCH TIME WE KEEP YOUR PERSONAL DATA
- YOUR RIGHTS
- YOUR RIGHT OF ACCESS
- YOUR RIGHT OF EDITING
- YOUR RIGHT OF DELETION
- YOUR RIGHT OF RESTRICTION OF USE
- YOUR RIGHT OF DATA PORTABILITY
- YOUR RIGHT TO FILE A COMPLAINT TO AN AUTHORITY
- AUTOMATED DECISION PROCESS
- UPDATING THE PRIVACY POLICY
- OUR POLICY REGARDING CHILD DATA
Here at Beuatyceutic we believe in simplifying things for our clients, so we wrote our privacy policy in a clear, easy to read way.
In this privacy policy (from now on referred to as “notice”) you can find the way we use your personal data when you use our website (from now on referred to as just “the website”) and the services offered by it.
This notice is structured in chapters, so that, if you wish, you can select with ease the chapter you wish to read.
From now on we will explain:
- Why we need your personal data;
- For what purpose we process it;
- For how long we process it;
- If we release it;
- If we transfer it to any country outside the European Union;
- If we make automated decisions of do profiling.
Botanical S.R.L. is the operator of the personal data processed through the website, with the exception of situations where it is noted otherwise.
Contact Data:
Botanical S.R.L.
str. Rudului, nr. 51A, Ploiești, județ Prahova, cod poștal 100024, România.
E-mail: [email protected]
Phone: +40745630112
Most of the personal data we process are provided to us directly by you when:
- You create a new account on the website;
- You make a purchase through the website;
- You use the “Customize your perfume” option;
- You make an information request;
- You make a complaint;
- You wish to participate in an event;
- You subscribe to our newsletter;
- You represent your company in relationship with us.
If you connect through a Facebook account, we use the name, profile picture and e-mail address, although the collected data can differ with the privacy policy or settings of said accounts. To verify what data you will be sharing with us, before registering using your Facebook account, we recommend you click “Continue with Facebook” -> “Edit the data you provide”, edit said data and only then click “Continue as ”.
In the situation in which we process your personal data from other sources other than the ones previously listed or mentioned in the present notice, we will contact you to announce you of the data processing, is this action is not disproportional of injurious.
4.What personal data do we use
Application Use |
|||
Activity |
Purpose |
Types/Categories of data |
Legal Basis |
Account Creation |
We use your data to create the account on the website and to send you an e-mail through which you need you to confirm your identity |
|
Performance of the contract – Art. 6 para. (1) point b) from the EU regulation nr. 679/2016 |
Log in with Facebook |
Thus, you have the possibility to log in on the website through your Facebook account |
|
Consent for the acquisition of data related to the Facebook account – Art. 6 para. (1) point a) from the EU regulation nr. 679/2016 Performance of the contract regarding the creation of the Maisonolfactif account – Art. 6 para. (1) point b) from the EU regulation nr. 679/2016
|
Order History |
To offer you technical support and process eventual returns we must save this data to perform the contract. Also, the order history helps us find out what products you and other users are interested in. |
|
Performance of the contract – Art. 6 para. (1) point b) from the EU regulation nr. 679/2016
Legitimate interest – Art. 6 para. (1) point f) from the EU regulation nr. 679/2016 |
Collection of additional information |
We use your identifying data to store information which shows that you have accepted the contract conditions and that you have been informed regarding your personal data processing. |
|
Legitimate interest – Art. 6 para. (1) point f) from the EU regulation nr. 679/2016 |
Communication with you |
We use your contact information to communicate with you regarding your sent requests and for the performance of the contract (ex. to inform you of the order status) |
|
Performance of the contract – Art. 6 para. (1) point b) from the EU regulation nr. 679/2016 |
Marketing (ex. newsletter) |
We use your personal data when you wish to be informed of our latest offers, promotions and articles. |
|
Consent – Art. 6 para. (1) point a) from the EU regulation nr. 679/2016 |
Direct marketing |
We use your data to send personalized offers, according to your previous choices |
|
Legitimate interest – Art. 6 para. (1) point f) from the EU regulation nr. 679/2016 |
Request and complaint solutions |
We use your data to respond to the requests and complaints that send us. |
The processed data category within our relationship with you are your identifying data (first name, surname, e-mail, phone nr., address), as well as other personal data that you can provide us with directly, according to necessity, to go through with your request. |
Legitimate interest – Art. 6 para. (1) point f) from the EU regulation nr. 679/2016 |
Product Purchasing |
|||
Product order |
We need your data to take over the order you place through the website and to perform the other connected operations (issuing the bill, sending the package through a courier) |
|
Performance of the contract – Art. 6 para. (1) point b) from the EU regulation nr. 679/2016 |
Payment processing |
The data is necessary to us to allocate the sum for which the bill is issued to your name |
|
Performance of the contract – Art. 6 para. (1) point b) from the EU regulation nr. 679/2016 |
Issuing the bill |
Your data is used by us to respect the legal provisions that oblige us to perform accounting registrations and to issue justifying documents (the bill) for the selling of the products |
|
Legal obligation – Art. 6 para. (1) point c) from the EU regulation nr. 679/2016 |
Refunding |
In the situation that you want to return a product, according to the Terms and Conditions of the website (hyperlink) we need your data to refund you and write off the issued bill. |
|
Legal obligation – Art. 6 para. (1) point c) from the EU regulation nr. 679/2016 |
Product delivery |
We use your data to deliver the ordered products through a courier. This data being released to the courier firm. |
|
Performance of the contract – Art. 6 para. (1) point b) from the EU regulation nr. 679/2016 |
“Take a photo of your complexion” Option |
Taking a photo of your complexion |
We recommend that the photo should not lead to your identity, but take the picture with as much fidelity as possible, in such a manner that your complexion is as clear as possible (without make-up) |
- if you uploaded a portrait type photo, we will process it
|
Performance of the contract – Art. 6 para. (1) point b) from the EU regulation nr. 679/2016 |
Filling out the survey |
We use the data provided through filling out the survey to recommend you a series of cosmetic products, according to the answers you offered. |
|
Consent – Art. 6 para. (1) point a) from the EU regulation nr. 679/2016 |
Memento (reminder) |
We use your contact information to send you e-mails (in stages) with your routine, which will comprise the recommended products as a result of using the “Take a photo of your complexion” option. |
|
Legitimate interest – Art. 6 para. (1) point f) from the EU regulation nr. 679/2016 |
Exercising the rights provisioned in the EU regulation NR. 679/2016 |
|||
Management of the requests sent by private persons |
We use your data to respond to the requests you send us regarding your rights provisioned in Chapter 7 – “Your rights”. |
The processed data category within our relationship with you are your identifying data (first name, surname, e-mail, phone nr., address), as well as other personal data that you can provide us with directly, according to necessity, to go through with your request. |
Legal obligation – Art. 6 para. (1) point c) from the EU regulation nr. 679/2016 |
5.To whom do we transfer your personal data
We share your personal data with companies that provide services on our behalf, like data hosts, digital marketing agents, market research providers and other providers. We always make sure that these companies assure the same level of data security that we offer. If your data will be sent outside Europe, we make sure that it will be under protection and security standards at least equal to the ones used by Botanical.
Examples of company categories to which we can divulge Botanical data:
- Account setup and activation
- Online and social media advertisement
- Delivery services (couriers)
- Market research
- Payment processors
- Web hosting companies, content providers etc.
- Audit companies
- Companies that provide IT and support services, data storage, data cleansing
6.How long do we keep your personal data
We process and store your personal data:
- Data related to the account, order history, delivery addresses, survey results acquired through the usage of the “Take a photo of your complexion” option and other data introduced by you, are all stored during the entire period that you have an account on the website, plus a maximum period of 3 years from the deletion of the account;
- For the period imposed by law (ex. accounting documents, such as the issued bills, are archives according to law for 10 years);
- We reserve our right to delete accounts that have not been used for a period longer that 12 months;
- Until the moment in which you decide to unsubscribe from the newsletter (pressing the “unsubscribe button from at the bottom of the e-mail).
For situations in which we do not offer you an exact period regarding your personal data processing and storage, we base ourselves on the following principles:
- We store date only as long as we need them for the aforementioned activities;
- Our services are designed so that we do not store your data for a long period of time;
- We always respect the deadlines imposed by the legal provisions;
- We evaluate the security risks reporting to the usage and storage of your data.
According to legal provisions regarding data protection, you have below listed rights, which you can exercise through the use of out contact data from chapter 1 of the notice. We clarify that not all of the rights are absolute and can differ according to the motive of the data processing.
We will answer all your requests regarding your rights within one month from receiving the request, however never later than 3 months. If we need more time, we will inform you about this aspect withing a month
In the situation that you do not receive a response within this term, we would have to ask you to come back, eventually using an alternative mode of contact, before approaching the relevant authorities.
You have the right to know if we use or store your personal data. This right can be exercised through a request of a copy of the data, usually known as making a “data access request”.
In the case in which we will conclude the requests are unfounded or repetitive, we will refuse access (with reason) or we will perceive an administrative tax regarding the exercising of this right.
You have the right to request the editing or completion of your personal data which are inaccurate or incomplete. This right is always applied.
In this case we will request the following information:
- To specify which data is inaccurate or incomplete;
- To explain to us how to correct the data;
- If available, to prove the inaccuracy of the data.
In some situations, when using the website, you have the possibility to rectify data through the “My Account” section.
In some circumstances you can request us to delete your personal data. This right is not an absolute one and is applicable in the following situations:
- The data is no longer necessary for the purpose for which they were being processed;
- You withdrew your consent (withdrawal of consent does not affect the legality of data processing until the moment of withdrawal);
- You are opposed to the way the data is being processed and, as a result of the balancing test, your interests are superior;
- We have a legal obligation to delete the data.
Regarding the account through which log in to the website, you have the possibility to delete it from the “My Account” section. With this occasion the data associated with it will be deleted, with the exception of the data we have to store under the basis of legal obligation (ex. legal documents – contracts, bills, orders etc.).
7.4. Your right of restriction of use
Through exercising this right you have the possibility to solicitate us not to use your data in any way and only store them until there is no further solicitation from you, meaning:
- If you solicitate data editing;
- You oppose data deletion in the case of illegal processing;
- You asked us to offer you certain data for the protection of a right.
Your right to oppose processing
You have the right to oppose the use of personal data in certain circumstances. If following the analysis of the request and the performance of a balance test, for legitimate reasons, we cannot continue with the solicitation, we will send you our reasoned decision.
This right is an absolute one so that when it exercised against direct marketing – specifically, when you receive e-mails with offers regarding similar products and services you previously benefited for from Botanical.
If the objection is absolute or above all out interests, we will cease the data processing for the purpose you oppose.
7.5. Your right of data portability
You have the right to get from us, in an accessible, easily read by computers format, for example a “.csv” format, the personal data, when data is stored in an electronic format and you provided them to us.
Such a request and, implicitly, the data portability, can take place when (cumulative conditions):
- The data processing is based on your consent or on a contract;
- The data processing is made through automated means.
7.6. Your right to file a complaint to an authority
If you did not receive an answer or are not pleased by the received answer, we inform you that you can file a complaint to the National Supervisory Authority for Personal Data Processing (ANSPDCP). You can also file a complaint to a court of justice.
7.7. Automated decision process
Botanical will not take any decision regarding the result of an automated process and neither does it profile in a manner that would produce legal effects for you or to affect you in a significative way.
With the occasion of using the “Take a photo of your complexion” option, the processing of the data you obtain is automated and the data is used to evaluate your type of complexion so that we can recommend you the appropriate Botanical products. This mode of processing, although it is in compliance with the definition exposed in art. 4 point 4 from the EU regulation 679/2016 (“creation of profiles”), is not in a manner to produce legal effect for you or to affect significantly.
It is possible we might update this notice from time to time, so we recommend you to check it periodically. If we make any changes that might affect you significantly, we will offer you a “pop-up” notification when you access the website, so that you would know about changes before they take place.
We do not provide services directly to children and do not proactively collect their personal information. The information contained in this notification as well as on the Maison Olfactif website applies and addresses adults.
By using the website, the user certifies that he/she is at least 18 years old.
We recommend that parents instruct their minor children not to transmit their data on the Internet and not to access sites with services that do not address their age group. Thus, parents / legal guardians, etc. are responsible for the access by minors of the Maison Olfactif website, the transmission of personal data of minors to BOTANICAL SRL. They are also responsible for transmitting the data related to the bank card allocated to make a payment on the website.