Privacy Policy for Cosminex
Effective Date: 22. 03. 2025
Cosminex values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR). By using our website, you agree to the terms of this Privacy Policy.
Data Controller
The data controller for the processing of your personal data is:
Ing. Stanislav Doros
What Personal Data We Collect
We collect different types of personal data to provide and improve our services. These include:
Personal Data: Information you provide when creating an account, such as your email address, and preferences.
Sensitive Data: We may collect voluntarily provided skincare preferences to personalize recommendations. Users can update or delete this information at any time through their account settings."
Usage Data: We collect information about how you use our website, such as browser type, pages visited, and duration of visits. Our analytics providers (e.g., Google Analytics) also collect full IP addresses unless anonymization is enabled.
Cookies and Tracking Technologies: We use cookies to enhance your experience, analyze usage, and personalize services. For more details, please refer to our Cookies Policy.
Legal Basis for Processing
We process your data on the following lawful grounds under GDPR:
Consent: We obtain your explicit consent for processing sensitive data (e.g., skin conditions, allergies) and for cookies used for analytics and marketing purposes.
Contract Necessity: Processing is necessary to deliver the personalized product recommendations you request.
Legitimate Interest: We process anonymized data to improve our website and services.
You can withdraw your consent at any time by contacting us at [email protected].
How We Use Your Data
We use your personal data for the following purposes:
To provide personalized skincare product recommendations.
To improve the functionality of our website through usage analytics.
To communicate updates about our services or changes to this policy.
To comply with legal obligations and ensure the security of your data.
Cookies and Similar Technologies
Our website uses cookies to improve your browsing experience. You can manage your cookie preferences at any time through the cookie consent banner, which allows you to choose specific types of cookies:
Strictly Necessary Cookies: Required for website functionality.
Performance Cookies: Used for website performance analytics (e.g., Google Analytics).
Targeting/Advertising Cookies: Used for personalized advertising via Google AdSense, which collects user data (including IP addresses and browsing history) to serve relevant ads. You can manage ad settings at Google Ads Settings.
For more information, refer to our Cookies Policy.
Data Retention
We retain your personal data only for as long as necessary:
Account Data: Stored for the duration of your account’s activity. If your account remains inactive for 365 days, we may delete your personal data unless required by law. You can reactivate your account anytime before deletion.
Anonymized Data: May be retained indefinitely for analytics and improvement purposes.
You can request the deletion of your account and personal data by contacting [email protected].
Third-Party Data Sharing
We currently use Google Analytics for traffic analysis. No personally identifiable data is shared without your consent.
In the future, we may collaborate with third-party services (e.g., advertising, communication, payment processors), but we will ensure GDPR-compliant data protection agreements are in place.
Data Subject Rights
As a data subject under GDPR, you have the following rights:
Right to Access: You can request a copy of your personal data.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure: You have the right to request that we delete your personal data (“Right to be Forgotten”).
Right to Restrict Processing: You can request a temporary halt on processing under certain conditions.
Right to Data Portability: You can request that your data be provided in a structured, machine-readable format.
Right to Object: You may object to processing, especially in the case of automated decision-making or profiling.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request in compliance with GDPR requirements.
Data Security
We implement industry-standard security measures to protect your data, including encryption and secure storage.
Automated Decision-Making and Profiling
We use automated systems to provide personalized recommendations based on the data you provide (e.g., skin conditions and preferences). This profiling is necessary to offer tailored product suggestions. You may review or adjust your profile at any time by logging into your account.
International Data Transfers
Your personal data is stored on servers located within the European Union. Some of our analytics and advertising providers (e.g., Google AdSense, Google Analytics) may transfer data outside the European Economic Area (EEA), including to the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission. You can review Google's SCC compliance here: Google SCC Information.
Children's Privacy
Our website is not intended for individuals under the age of 16. We do not knowingly collect data from children. If you believe we have collected personal data from a child under 16, please contact us at [email protected]. We will review the request and delete the data in accordance with legal requirements.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. Any significant updates will be communicated to you via email or a prominent notice on our website. Please check this page regularly for updates.
Contact Us
For any questions or concerns about this Privacy Policy or our data protection practices, please contact:Email: [email protected]Address: Smetanova 761/26, Veveří, 602 00 Brno, Czech Republic