Privacy Policy

GENERAL INFORMATION

At BOTANICAL SRL we believe in simplifying things for our customers, so we have written our Privacy Policy in a clear, simple and easy to read way.

In this Privacy Policy (hereinafter "Notice") you can find out how we use your personal information when you use the https://www.imarskin.ro/ website (hereinafter "Site") and the services offered through it.

This notification is organized by chapter, so if you want, you can easily select the chapter you want to read.

Next, we'll tell you:

why we need your personal data;

for what purposes we process the data;

for how long we process the data;

if we disclose the data;

if we transfer data to other countries outside the European Union;

whether we're making automated decisions or profiling.

CONTACT DETAILS OF THE OPERATOR

BOTANICAL SRL is the Controller of the personal data processed through the website, except where we state otherwise.

Contact dates:

BOTANICAL SRL

Str. Rudului, nr. 51A, Ploiești, Romania, postal code 100024.

e-mail: hello@imarskin.com

Call center: 0219928

(Monday - Friday, 09:00 - 18:00)

HOW WE OBTAIN PERSONAL DATA

Most of the personal information that we process is provided to us directly by you, namely when:

you have created an account on the website;

you bought through the website;

you made a request for information;

you made a complaint;

want to attend an event;

subscribe to our e-newsletter;

represent your company in your dealings with us.

If you log in through your Facebook account, we use your name, profile picture and e-mail address. However, the information collected may differ depending on the privacy policies or settings for those accounts. To verify what information you will be sharing with us, before you sign in using your Facebook account, we recommend that you click on "Continue with Facebook" -> "Edit the info you provide", edit the information and only then click "Continue as your Facebook account name".

Where we process your personal data from sources other than those listed above or referred to in this notice, we will contact you to let you know that we are processing your data, unless this is disproportionate or harmful.

WHAT PERSONAL DATA WE PROCESS

USE OF THE WEBSITE
ACTIVITIES	SCOPE	DATA TYPES/CATEGORIES	LEGAL BASIS
Account creation	We use your data to create your account on the website and to send you an e-mail with which you need to confirm your identity.	name e-mail	Contract performance - Art. 6 para. (1) letter b) of Regulation (EU) No 679/2016
Sign in with Facebook	This allows you to log in to the site via your Facebook account.	name e-mail profile picture	Consent to the collection of Facebook account information - Art. 6 para. (1)(a) of Regulation (EU) No 679/2016 Contract execution in order to create the account on BOTANICAL SRL - Art. 6 para. (1) letter b) of Regulation (EU) No 679/2016
Order history	In order to provide you with technical support and to process any returns we need to save this information so that we can execute the contract. Order history also helps us find out which products are of interest to you and other users.	History of products ordered	Contract performance - Art. 6 para. (1) letter b) of Regulation (EU) No 679/2016 Legitimate interest - Art. 6 para. (1)(f) of Regulation (EU) No 679/2016
Collecting additional information	We use your identification data to store information showing that you have accepted the terms of the contract and that you have been informed about the processing of your personal data.	name e-mail information on the acceptance of the Contract (Terms and Conditions of the website) and of the notification	Legitimate interest - Art. 6 para. (1)(f) of Regulation (EU) No 679/2016
Communicating with you	We use your contact details to communicate with you in relation to requests sent to us and for the purpose of contract performance (e.g. to let you know the status of your order).	e-mail phone no. physical address	Contract performance - Art. 6 para. (1) letter b) of Regulation (EU) No 679/2016
Marketing (e.g. newsletter)	We use your data when you want to keep up to date with offers, promotions, inspirational articles and news about current campaigns of BOTANICAL SRL.	e-mail phone no.	Consent - Art. 6 para. (1)(a) of Regulation (EU) No 679/2016
Direct marketing	We use your data to send you personalized offers based on your previous choices.	e-mail phone no.	Legitimate interest - Art. 6 para. (1)(f) of Regulation (EU) No 679/2016
Settling requests or complaints	We use your data to respond to requests or complaints you send us.	The categories of data processed in the context of our relationship with you are your identification data (name, surname, e-mail, telephone number, address), as well as other personal data that you may provide us directly, as necessary, in order to be able to respond to your request.	Legitimate interest - Art. 6 para. (1)(f) of Regulation (EU) No 679/2016
BUYING PRODUCTS
Ordering products	We need your data to be able to take the order you have placed through the website and to carry out the rest of the related operations (issuing the invoice, delivery of products by courier)	name e-mail phone no. physical address	Contract performance - Art. 6 para. (1) letter b) of Regulation (EU) No 679/2016
Payment processing	We need this information in order to allocate the amounts of money for which we have issued invoices in your name.	name bank card reference expiry date first and last 4 digits	Contract performance - Art. 6 para. (1) letter b) of Regulation (EU) No 679/2016
Issuing invoices	Your data is used by us in order to comply with the legal provisions obliging us to keep accounting records and issue supporting documents (invoices) for product sales.	name physical address	Legal obligation - Art. 6 para. (1) lit. c) of Regulation (EU) No 679/2016
Money back	In case you wish to return a product, according to the Terms and Conditions of the imarskin.ro/en/en/info/terms-and-conditions website we need your data in order to refund the amount of money and to cancel the invoice already issued.	IBAN account (only when the refund is made by bank transfer) name physical address	Legal obligation - Art. 6 para. (1) lit. c) of Regulation (EU) No 679/2016
Product delivery	We use your data in order to be able to deliver your ordered products by courier. This data is disclosed to the courier company.	name physical address phone no.	Contract performance - Art. 6 para. (1) letter b) of Regulation (EU) No 679/2016
EXERCISING YOUR RIGHTS UNDER REGULATION (EU) NO 679/2016
Management of applications submitted by individuals	We use your data to respond to your requests in relation to the rights set out in Chapter 7 - "Your rights".	The categories of data processed in the context of our relationship with you are your identification data (name, surname, e-mail, telephone number, address), as well as other personal data that you may provide us directly, as necessary, in order to be able to respond to your request.	Legal obligation - Art. 6 para. (1) lit. c) of Regulation (EU) No 679/2016

TO WHOM WE TRANSFER PERSONAL DATA

We share your personal information with companies that provide services on our behalf, such as data hosting services, digital marketing agencies, market research providers and other vendors. We always ensure that these companies provide the same level of security for your data that we provide to you. If your information will be sent outside of Europe, we ensure that it will be subject to standards of protection and security that are at least equal to those used by BOTANICAL SRL.

Examples of categories of companies to which we may disclose BOTANICAL SRL:

Account setup and activation

Online advertising and social media

Delivery services (couriers)

Market studies

Payment providers

Companies providing web hosting, content providers, etc.

Audit firms

Companies providing IT services and support, data storage, data cleansing

HOW LONG WE STORE YOUR DATA

We process and store your personal data:

for the period required by law (e.g. accounting documents such as invoices issued by us are archived according to the law for 10 years);

We reserve the right to delete accounts that have not been used for more than 12 months;

until you agree to unsubscribe from receiving newsletters (by clicking the "unsubscribe" button at the bottom of the email).

Where we do not provide you with an exact time period for the processing and storage of your personal data, we rely on the following principles:

We only store information for as long as we need it for the activities mentioned;

Our services are designed in such a way that we do not store your data for a longer period;

We always respect legal deadlines;

We assess security risks in relation to the use and storage of your data.

YOUR RIGHTS

In accordance with the legal provisions on data protection, you have the rights listed and described below, which you can exercise by using the contact details in the "Contact details" section. Please note that not all rights are absolute and may differ depending on the reason for data processing.

We will respond to your requests about your rights within one month of receiving your request, but never later than 3 months. If we need more time, we will inform you within the one month period.

If you do not receive a reply within this time limit, please get back to us, possibly using another means of contact, before taking any further steps with the competent authorities.

You have the right to know whether we use or store your personal data. This right can be exercised by requesting a copy of the data, commonly known as making a 'data access request'.

If we find that the requests for access are unfounded or repetitive, we will refuse access (with reasons) or charge an administrative fee in order to exercise this right.

You have the right to ask us to rectify or complete your personal data that is inaccurate or incomplete. This right always applies.

To this end, we will request the following information:

Let us know which data are inaccurate or incomplete;

Explain how we should correct the data;

If possible, please provide us with proof of inaccuracy.

In some situations, when using the website, you have the possibility to rectify your data via the "My Account" section.

In certain circumstances you can ask us to delete your personal data. This right is not absolute and is applicable in the following situations:

The data is no longer necessary for the purpose for which it was processed;

You have withdrawn your consent (withdrawal of consent does not affect the lawfulness of the processing until the time of withdrawal);

You object to the processing of your data in a certain way, and following the balancing test, your interests are outweighed;

We have a legal obligation to delete data.

As regards the account through which you log in to the site, you can delete it from the "My Account" section. This will delete the data that is associated with it, with the exception of the data that we are required to store based on our legal obligation (e.g. supporting documents - Contracts, invoices, orders, etc).

By exercising this right, you can ask us not to use your data in any way and only to store it until further notice to you, namely:

you have requested rectification;

you have objected to the erasure of data in case of unlawful processing;

you asked us to provide you with certain data in defense of a right.

Your right to object to processing

You have the right to object to the use of your personal data in certain circumstances. If, after considering your request and carrying out a balancing test, we are unable to comply with your request for legitimate reasons, we will inform you of our decision, giving reasons.

This right is an absolute right when exercised against direct marketing - specifically, when you receive e-mails with offers about similar products and services that you have previously received from BOTANICAL SRL.

If the objection is absolute or over our interests, we will stop processing personal data for the use to which you have objected.

You have the right to obtain from us, in a format accessible and readable by computers, such as in a ".csv" format, personal data, where the data is stored in electronic format and you have provided it to us.

Such a request, and thus data portability, can take place when (cumulative conditions):

processing is based on your consent or on a contract;

processing is carried out by automated means.

If you have not received a reply or you are not satisfied with the answer you have received, please note that you can lodge a complaint with the National Supervisory Authority for Personal Data Processing. You can also complain to the courts.

BOTANICAL SRL does not make any decisions about you as a result of automated processing, nor does it engage in profiling that is likely to produce legal effects for you or affect you to a significant extent.

UPDATE PRIVACY POLICY

We may update this notice from time to time, so please check this notice periodically. If we make changes that could significantly affect you, we will provide you with a pop-up notification when you access the site so that you know about the changes before they occur.

OUR POLICY ON CHILDREN'S INFORMATION

We do not provide services directly to children and do not proactively collect their personal information. However, we are sometimes provided with information about the age segment (14-18) by parents or legal guardians. The information in this notice applies to both children and adults.

By using the Website, the User certifies that he/she is 18 years of age or, in the case of minors between 14-18 years of age, that he/she has obtained parental consent for this purpose.

We advise parents to instruct their minor children not to transmit their data over the internet.

However, persons over 14 years of age may order products displayed on the site, but only with parental consent. Thus, parents are responsible for the transmission of personal data of minors to BOTANICAL SRL. They are also responsible for the transmission of data related to the bank card allocated to make a payment on the site.