Heading
Heading
Heading
Privacy Policy
Below we inform you about the processing (including the collection and storage) of personal data when you use our website or online offer at www.skinminimalism.co. Personal data is all data that relates to an identified or identifiable natural person, e.g. name and surname, correspondence address, e-mail address.
1. Basic Information
1.1. Admin
The controller in the field of data protection law is in accordance with Article 4 (7) of the EU Data Protection Regulation (GDPR), Skin Minimalism Sp z.o.o with its registered office in Warsaw, at UL. ADAM BRANICKIEGO 12/76, 02-972 WARSAW.
1.2. Data security
We protect our website and other systems by technical and organizational measures against loss, destruction, access, modification or unauthorized dissemination of personal data. Access to customer accounts and other personal services is possible only after entering a user ID and a personal password. You should always keep your access data confidential and close your browser window when you have finished communicating with us, especially if your computer is shared with other people. When transferring personal data via this website, the so-called SSL (Secure Socket Layer) security procedure is generally used in conjunction with 256-bit encryption.
1.3. Rules for the storage and deletion of personal data
Personal data will only be processed for the period necessary to achieve a given processing purpose or if required by applicable law, e.g. accounting regulations. In the event that the purpose of the processing ceases to exist or if the statutory retention period expires, the personal data concerned are routinely deleted in accordance with the law or their processing is restricted, e.g. restricted processing for the purpose of fulfilling legal obligations under accounting regulations. The processing of personal data on the basis of a legal obligation, namely compliance with the legal storage obligation, is based on Art. 6 (1) sentence 1 lit. c) GDPR. If the personal data referred to in Article 6 (1) sentence 1 (f) of the GDPR are processed for the purpose of securing evidence, this processing ceases after the statutory limitation period has expired.
2. Visiting our website
If you use our website for informational purposes only, i.e. if you do not register, make a reservation on our website or otherwise provide us with personal data, we may collect personal data that your browser transmits to our server on the basis of Article 6 (1) (f) GDPR, where our legitimate interest as a data controller is to ensure the smooth functioning of the website. For web analysis and internet marketing purposes, we also use tracking technologies to the extent described below.
2.1. Technical provision of the website
During your visit to our website, we collect the following data, which is technically necessary to display our website and to ensure the stability and security of our website: IP address; Date and time of the request; Time zone difference from Universal Time (GMT); Content of the request (specific page); Access status/HTTP status code; Amount of data transmitted in a given case; Website from which the request originates; Browser; Operating system and its interface; Language and version browser software. The legal basis for the collection and processing of data is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to ensure the proper functioning of our website and the security of the system. In addition, we use this data in a non-personal form for statistical purposes and to improve our online offer.
2.2. Cookies
Our website uses cookies. Cookies are small text files that are stored on your computer system by your web browser. Many websites and servers use cookies. Cookies often contain a so-called cookie ID. This identifier is a unique identifier for a cookie and consists of a string of characters that can be used to assign websites and servers to the specific web browser in which the cookie was stored. These cookies make it possible to distinguish individual browsers from other web browsers that contain other cookies. This allows a specific web browser to be recognized and identified using a unique cookie identifier. By using cookies, we can provide you with more user-friendly services that cannot or can only be achieved to a limited extent without cookies. Cookies allow us to recognize users of our website again. The purpose of this re-recognition is to make it easier for users of our online offer to use it. An example is the shopping cart function on a website, where a cookie is used to “remember” the items saved in the shopping cart so that the user can keep this combination of items on the next visit, if the reservation has not yet been completed. These cookies, whose operation is limited to 10 days, are used on the basis of Article 173 (1) and (2) of the Telecommunications Law Act in Article 6 (1) sentence 1 letter f) GDPR. Our legitimate interest lies in providing and optimising a functional and convenient online offer. You can change your cookie settings at any time by setting your internet browser accordingly and thus permanently object to the use of certain cookies. In addition, cookies that have already been set can be deleted using a web browser or other software. However, please note that deactivating cookies in your web browser may prevent you from using certain features of our services and other online services.Due to the use of certain cookies, please pay special attention to the information on web analysis and the use of so-called third-party cookies below.
2.3. Web analysis and online marketing
2.3.1. Pseudonymized user profiles
The administrators create pseudonymised user profiles based on your use of our website for advertising purposes, market research and in order to tailor the online offer in line with demand. These data are, in particular, characteristics used to identify the user, information about the beginning and end, as well as the scope of the respective use of the website and information about the multimedia that you use as a user. The basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. The design of a user-friendly and attractive offer of the website constitutes the basis of our legitimate interest as a data controller. User profiles are not combined with the data of the bearer of the nickname. However, if you do not agree to the creation of a pseudonymised user profile, you can object to this at any time. You can object to the use of your data for marketing purposes by contacting us via e-mail: collab@skinminimalism.co.
2.3.2Web analytics services
We use various web analytics services to make our online offer more user-friendly and attractive. The processing of personal data within the framework of web analysis services is carried out on the basis of Article 6 (1) sentence 1 letter f) of the GDPR, whereby the design of a user-friendly and attractive offer of the website is taken as the basis for our legitimate interests. If cookies are used for the aforementioned purposes, we also implement the concept of consent (Article 6 (1) sentence 1 (a) of the GDPR in conjunction with Article 173 (1) of the Telecommunications Law Act) through a “cookie banner”.
2.3.3 Google AdsConversion Tracking
In our online offer, we use the services of Google “Google Ads”, including the so-called “Google Conversion Tracking” of Google Inc.,1600 Amphitheatre Parkway Mountain View, CA 94043, USA, (“Google”) .This means that when an advertisement is displayed in your web browser or when you interact with an advertisement (interaction is understood as clicking or viewing a video ad), which is served by your Google Ads account, Google Ads saves a cookie with information about the display or interaction Then installed on this website The web conversion tracking tag reads this cookie and then sends it back to Google Ads with conversion information. This information is used to generate user statistics.If you do not wish to participate in Google Conversion Tracking, you have the option objecting subject. For this purpose, you can simply deactivate the respective Google Conversion Tracking cookie via your web browser. Additional information about Google's privacy policy can be found at: http://www.google.de/policies/privacy/
2.3.4Google Ads Remarketing
This website uses the remarketing function of Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, (“Google”). A user visiting our website receives a cookie, which is installed on his computer by means of a web browser. Thanks to this, it is possible to create remarketing lists of these users and adapt the relevant advertising messages to them, which are then displayed on the Google advertising network (including the search network), as well as on Google partner sites. If you do not want to use Google Remarketing, you can always disable it by entering the appropriate settings: http://www.google.com/settings/ads.
2.3.5Facebook Advertising
On our websites we use the so-called “Visitor Activity Pixel” of the social network Facebook Germany GmbH, Caffamacherreihe 7, 20355 Hamburg (Facebook). With the “Visitor Activity Pixel” we can track users' actions after viewing an ad or after interacting with an ad on Facebook (interaction is understood as clicking or watching a video ad). This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising activities. Facebook stores and processes data about impressions and interactions in such a way that it can be linked to the respective user profile and so that Facebook can use this data for its own advertising purposes, in accordance with Facebook's data use guidelines (https://www.facebook.com/about/privacy/). If you do not wish to do so, you can prevent the processing of data by setting so-called opt-out cookies. To do this, please click on the following link: facebook opt out.
2.3.6 Bing Ads Universal Event Tracking
We use Universal Event Tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 6399, USA. Microsoft Bing Ads sets a cookie on your computer if you accessed our website through a Microsoft Bing ad. This allows us to see that someone has clicked on an ad, has been redirected to our website and has reached a previously defined landing page (conversion page). In particular, we learn how many users visited a particular page or section of our website, how long users stayed on our website and how many pages on our website were visited by individual users.If you do not wish to participate in the tracking process, you can change your cookie settings — for example, by setting your browser, which essentially disables the automatic setting of cookies. For more information about privacy and the cookies used in Microsoft Bing, please visit the Microsoft website http://choice.microsoft.com/optout.
2.3.7 Adform
On our website we use the Adform tool. This tool uses cookies to display personalized ads, improve reports on the effectiveness of advertising campaigns or avoid the user seeing the same ads repeatedly. Based on the cookie ID, Adform records which ads in which browser are enabled and, if Frequency Capping is activated, they can prevent them from being displayed repeatedly. According to Adform, the cookies of this tool do not contain any personal data. By using this tool, the browser automatically establishes a direct connection to the server of a third-party provider. We have no influence on the scope and further use of the data that is collected in connection with the use of Adform, therefore, to the best of our knowledge, we inform you that: By including this tool, the third-party provider receives information that we have called up certain content on the website or clicked on an advertise.We use Adform in accordance with Art. 6 (1) lit. f GDPR to display personalized advertising and for general research purposes by the markets. More information about the tool mentioned in this paragraph can be found at https://site.adform.com/policies/policies-and-guidelines/. You can opt out of Adform services in different ways: by entering the appropriate settings in the browser software, in particular by opting out of third-party cookies in order not to receive advertising from third-party providers; by deactivating cookies for Conversion Tracking, which is possible by setting in the browser to block cookies from the domain https://site.adform.comby permanently deactivating in Firefox, Internet Explorer or Google Chrome on the page http://www.google.com/settings/ads/plugin. Please note, however, that in this case it may not be possible to use all functions of this website.
2.4. Social Media
In order to be in constant contact with our customers, to communicate with interested parties, we are present in the following social media. The data of visitors to social networks are regularly processed by these portals for the purposes of market research and marketing. Called content can be used to create user profiles, which in turn can be used for ads inside and outside social media. This is usually possible thanks to cookies stored on the user's computer.The data of users of social networks may also be stored by the provider in another way, especially if they are registered and logged in to the social network.The processing of personal data on the basis of a legal obligation, namely compliance with a legal storage obligation, is based on Art. 6 (1) sentence 1 lit. c) GDPR. If the personal data referred to in Article 6 (1) sentence 1 lit. f) of the GDPR are processed for the purpose of securing evidence, this processing ceases after the statutory limitation period.For more information on the processing of personal data in the relevant social media and the possibility of objecting to the processing of personal data (opt-out), please use the following links, which refer to the information of the operators of the relevant social networks.Requests for information and requests concerning the exercise of user rights should be directed directly to the operators of social networks, since only they have access to all user data and can provide the requested information or take appropriate action.
2.5. Transfer of data to third countries.
When you visit the relevant social media pages, as well as through the use of the tools indicated in point B3 c-f of this Privacy Policy, our partners may process your data outside the European Union. European data protection law does not apply in these countries and the enforcement of your rights may be difficult.
3. Use of our services
3.1 Personal data
3.1.1 Data processing
Personal data are collected and processed, e.g. if they are provided when ordering services or registering on the website, when ordering a newsletter by phone or email, when participating in competitions or if you evaluate a product on our website.
3.1.2 Transfer of personal data to third parties for the execution of orders
The recipients of your personal data may be subcontractors of the controllers, entities providing elements of IT infrastructure and other entities providing services to the clients of the administrators or directly to the administrators, including companies providing call center services and entities providing legal, marketing and payment services responsible for the implementation of online payments.
3.1.3 Retention and deletion of data
Your personal data will be stored for the duration of the contract between you and the Administrator, and after the end of the contract they will be stored for the period necessary to comply with the requirements arising from specific legal provisions and for the period necessary for you to assert your claims.Data processed for marketing purposes will be stored until you object to their processing or until you withdraw your consent, if the processing of personal data for marketing purposes is based on your consent.
3.1.4 Voluntary provision of data
Providing personal data may be necessary in some situations to conclude and perform services provided by the Administrator. The provision of data for the purpose of direct marketing is always voluntary.
3.2. Marketing and market research
We also use address and order data for our own marketing purposes, such as personalized direct marketing and market research. In this regard, you can, for example, receive information by post about special offers and discount campaigns. Data processing is carried out in accordance with Art. 6 (1) sentence 1 lit. f) GDPR on the basis of a legitimate interest in optimizing the range of products and services of the controllers and in enabling individual advertising queries. In situations where this is required by the law in force in Poland, in particular the Act on the Provision of Electronic Services or the Telecommunications Law, we base our marketing activities on your voluntary consent (Article 6 (1) (a) GDPR) .If personal data are processed for the purposes of direct marketing on the basis of the legitimate interest of the controller, you have the right at any time oppose the processing of your personal data for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing. In a situation where the processing of personal data for marketing purposes is based on your voluntary consent, such consent may be withdrawn at any time, but the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal. In order to object or withdraw consent, please contact us using the following address: collab@skinminimalism.co.
3.3. Newsletter/Blog
On our website you can order a free newsletter. The newsletter informs about current offers, new products, special offers and exclusive savings benefits in relation to goods and services from the Skin Minimalism range. As part of this service, we collect and process additional information (collectively “usage data”) about whether you open the newsletter, what links you click on and what topics you are interested in, where you access the newsletter (for example, to determine the nearest market based on your IP address), from which terminal device, operating system, browser and, where applicable, from what other device settings do you use, whether and to what extent do you recommend the content of the newsletter in social networks or via e-mail and which of our websites you visit after clicking on the links in the newsletter. Data processing for the purpose of implementing and optimizing the newsletter service is carried out in accordance with Art. 6 (1) sentence 1 lit. b) GDPR and — insofar as the processing of personal data is not necessary for the provision of the newsletter service — on the basis of Art. 6 (1) lit. f GDPR, where our legitimate interest as a data controller is to optimize the newsletter service in accordance with the needs of our customers.To register, it is only necessary to provide an address E-mail.After sending the registration form, you will receive a confirmation email (double opt-in). The subscription to the newsletter takes effect only after clicking on the link in the confirmation email. If you do not click on the link in the confirmation email, the registration will not be completed. In the absence of confirmation of registration within 30 days, the information provided during registration will be automatically deleted. In addition, we note that we store your IP addresses and the time of registration and confirmation. The purpose of such action is to prove registration and, if necessary, to clarify possible misuse of personal data. The legal basis for data processing for this purpose is Art. 6 para. 1 sentence 1 lit. f GDPR. You can unsubscribe from receiving the newsletter at any time. To do this, you can use the unsubscribe link at the end of each newsletter or contact us using the email address registered in the newsletter at: collab@skinminimalism.co. Your e-mail address will be removed from the newsletter distribution list. The unsubscription does not affect the legality of the data processing carried out until the termination of the data processing.
3.4. Surveys and satisfaction surveys
If you participate in one of our customer satisfaction surveys, the data you provide will be processed by us in order to optimise our offer and for our own market research and marketing purposes. Satisfaction surveys are conducted by administrators through the call center. The legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to verify customer satisfaction with our services and strive to improve their quality.
4. Contact
On our website we offer a variety of ways for you to contact us and send us messages. In particular, you can contact us by phone or by e-mail. In case of appropriate contact, the data provided by you (e-mail address, surname and telephone number) and the inquiry will be stored and processed by us in order to answer your questions. The legal basis for this is Article 6 (1) (b) and (f) GDPR. Our legitimate interest is the efficient and structured collection and processing of customer inquiries, as well as quality assurance, in particular by responding to contact initiated by our customers. We delete the collected data after its storage is no longer necessary for the aforementioned purposes, e.g. after the customer's request has been fully processed, or we restrict its processing if statutory retention obligations apply.
5. Rights of data subjects
Below we inform you about your rights under the GDPR as a “data subject”. According to the Regulation, you have the following rights with regard to your personal data: Right of access (Article 15 (1), 2 GDPR) Right to rectification (Article 16 GDPR) or deletion (Article 17 GDPR) Right to restriction of processing (Article 18 GDPR) Right to data portability (Article 19 GDPR) Right to object to processing (Article 21 GDPR) Right to withdraw consent (Article 7 (3) GDPR) Right to lodge a complaint Complaints to the supervisory authority (Article 77 GDPR) In addition, we summarize key points of data subjects' rights, under the GDPR, as follows, while this presentation does not claim the right to completeness, but only refers to the basic characteristics of the rights of data subjects within the scope of the GDPR: Right of access (including the right of confirmation and the rights of access to data): The data subject has the right to ask the controller to confirm whether personal data concerning him or her are being processed. The data subject has the right of access to the personal data concerning him or her and to the following information: the purposes of the processing; the categories of personal data processed; the recipients or categories of recipients to whom the personal data have been or are still disclosed, in particular recipients in third countries or international organisations; as far as possible, the planned period of storage of the personal data or, if this is not possible, the criteria for determining that period; the existence of the right to rectification or erasure of personal data concerning you, or to limit the processing of data by the controller or to object to such processing; the existence of a right of appeal to a supervisory authority; if the personal data have not been obtained from the data subject, all available information on the origin of the data; the existence of an automated decision-making process, including profiling in accordance with Article 22 (1) and (4) of the GDPR and, at least in these cases, relevant information on the logic, scope and intended results of such processing for the data subject; in the event that personal data are transferred to a third country or international organisation, obtaining information about the relevant guarantees in accordance with Article 46 of the GDPR in connection with the transfer. Right to rectification of data: The data subject has the right to request the controller to rectify any inaccurate personal data concerning him or her without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary report. Right to restriction of processing: The data subject has the right to require the controller to restrict processing if one of the following conditions is fulfilled:the data subject disputes the accuracy of the personal data for a period that allows the controller to verify the correctness of the personal data, the processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data; the controller no longer needs the personal data for the purposes of processing, but the person, the data subject needs them for the purpose of asserting, exercising or defending legal claims, or the data subject has objected to the processing in accordance with Article 21 (1) of the GDPR, until it is not yet clear whether the legitimate reasons of the controller outweigh the legitimate reasons of the data subject. Right to erasure: The data subject has the right, in principle and subject to certain legal requirements concerning data processing (see exception of Article 17 (3) of the GDPR), to request the controller to delete the personal data concerning him or her without delay, if one of the following reasons:The personal data are no longer needed for the purposes for which they were collected or otherwise processed.The data subject withdraws his the consent on the basis of which the processing took place in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and does not exist no other legal basis for processing. The data subject objects to the processing in accordance with Article 21 (1) of the GDPR and there are no overriding legitimate grounds for the processing or the data subject objects to the processing in accordance with Article 21 (2) GDPR. Personal data have been processed unlawfully.Deletion of personal data is necessary in order to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject. Personal data have been collected in connection with the services provided by the information society in accordance with Article 8 (1) GDPR. Right to data portability: The data subject has the right to retain personal data concerning him/her which he/she has provided to the controller in a structured, common and machine-readable format and the right to transfer these data to another controller without hindrance from the controller to whom the personal data have been transferred, provided that the processing takes place on the basis of consent or contract in accordance with Article 6 (1) (b) GDPR and that the processing is carried out using automated procedures. In exercising their right to the possibility of transferring personal data, the data subject has the right to have the personal data transferred directly by the controller to another controller, if this is technically feasible. Right to withdraw consent: The data subject has the right to revoke the consent given at any time. The withdrawal of consent does not affect the legality of the processing carried out on its basis until the withdrawal of consent. Right to lodge a complaint with a supervisory authority: Any data subject shall have the right of appeal to the supervisory authority competent for the protection of personal data, in particular in the Member State of residence, place of work or place of the suspected infringement, where the data subject considers that the processing of personal data concerning him or her is contrary to this Regulation. Separate information on the right to object in accordance with Article 21 (1) and (2) of the GDPR. You have the right to file at any time opposition — for reasons related to your particular situation — to the processing of your personal data based on Article 6 (1) (e) or (f), including profiling under those provisions. If you object, your personal data will no longer be processed unless it is demonstrated by Skin Minimalism that there are compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject or grounds for establishing, asserting or defending claims. If the personal data are processed for the purposes of direct marketing, the data subject has the right at any time to file opposition to processing of your personal data for the purposes of such marketing, including profiling, to the extent that the processing is related to such direct marketing. If you exercise your right to object to the processing of personal data for direct marketing purposes, we regularly enforce compliance with your objection by appropriately recording it in our databases.
If you wish to exercise your rights as a data subject or have general questions about data protection, you can contact us at any time at: collab@skinminimalism.co.