Privacy Policy

Privacy  policy and “cookies” policy and refers to the website www.one-cosmetics.pl, operated by the company ONE COSMETICS GROUP SPÓŁKA Z O.O. with its registered office in Warsaw at ul. Żelazna 51/53, 00-841 Warszawa entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under KRS number 0001130329, NIP 5273132708; REGON 529818159.

WHAT ARE COOKIES?
By „cookies” one should understand IT data, in particular text files, stored in end devices (e.g. on the hard drive of a computer, laptop or in the memory of a mobile device) of users intended for using the website. These files allow to recognize the user’s device and appropriately display the website tailored to their individual preferences. „Cookies” usually contain the name of the website from which they originate, the time  of storing them on the end device and a unique number.

WHAT DO WE USE COOKIES FOR?
„Cookies” are used to adapt the content of websites to user preferences and to optimize the use of websites. They are also used to create anonymous, aggregated statistics that help to understand how the user uses websites, which makes it possible to improve their structure and content, excluding personal identification of the user.

WHAT COOKIES DO WE USE?
Two types of “cookies” are used– „session” and „persistent”. The former are temporary files that remain on the user’s device until logging out from the website or turning off the software (web browser). „Persistent” files  remain on the user’s device for the time specified in the parameters of „cookies” or until their manual removal by the user. „Cookies” used by partners of the website operator, including in particular website users, are subject to their own privacy policy.

DO COOKIES CONTAIN PERSONAL DATA?

Personal data collected using „cookies” may be collected solely  to perform specific functions for the user. Such data are  encrypted in a way that prevents access to them by unauthorized persons.

REMOVING COOKIES
As standard, software used for browsing websites by default allows placing “cookies” on the end device. These settings may be changed in such a way as to block the automatic handling of „cookies” in the web browser settings or to inform about their every transmission to the user’s device.  Detailed information about the possibility and ways of handling „cookies” is available in the software (web browser) settings. Restricting the use of „cookies”, may affect some functionalities available on the
website.

PERSONAL DATA AND PRIVACY POLICY – excerpt from regulations

  1. The Seller is the administrator of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, made available by Customers in order to enable the Seller to maintain the Customer and execute the sales contract, hereinafter referred to as “processing necessary to perform the contract”, to establish and pursue possible claims, hereinafter referred to as “legitimate interest of the Administrator”, for statistical and technical purposes, and in the case of expressing consent – also for marketing purposes.
  2. As part of the electronic provision of Services requiring personal data, the Operator is entitled, pursuant to Art. 18 section 1 of the Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws of 2002, No. 144, item 1204, as amended), to process personal data of Customers necessary to establish, shape the content of, amend or terminate the contract concluded on the basis of these Regulations.
  3. The Seller may process, among others, the following personal data:
    a. surname and first names;
    b. correspondence address, if different from the address referred to in point c;
    c. data used to verify the User’s electronic signature;
    d. electronic addresses of the User.
    e. telephone number
  4. In order to perform the contract or perform another legal action with the Customer, the Seller may process other data necessary due to the nature of the service provided or the manner of its settlement.
  5. The Seller may also process the following data characterizing the manner of the Customer’s use of the Store (operational data):
    a. designations identifying the Customer assigned on the basis of the data referred to in section 3 of this paragraph,
    b. designations identifying the termination of the telecommunications network or teleinformation system used by the Customer;
    c. information on the start, end and scope of each use of the Store by the Customer;
    d. information on the use of the Store by the Customer.
  6. Personal Data of Customers are collected and processed by the Seller in order to perform the Contract and properly provide the Services and only to the extent justified by the above-mentioned purpose. Processing  of Personal Data allows the Seller to provide services such as: maintaining customer account data in the online store, fulfilling orders, contact related to the performance of the contract, as well as sending marketing information (including  newsletter).
  7. The Seller – Personal Data Administrator undertakes to make efforts to maintain proper security of the Customer’s personal data.
  8. Personal Data of Customers will not be transferred to a third country.
  9. Personal Data of Customers will be stored for the duration of the Contract and after its termination for the period justified by limitation periods in tax and civil proceedings., including the time regarding the limitation of claims. Personal Data of Customers to whose processing they have consented will be stored until such consent is revoked.
  10. The Customer has the right to access the content of their Personal Data and the right to request from the Administrator their rectification, erasure, restriction of processing, the right to data portability, the right to object, the right to withdraw consent to their processing at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal, however, the exercise of such rights may make it difficult or impossible to perform the Contract and cause its termination with immediate effect by the Seller. 
  11. Requests regarding the processing of personal data should be submitted by e-mail to the address of the data administrator – biuro@one-eu.sandbox24.dev.
  12. The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office when they consider that the processing of their personal data violates the provisions of the GDPR.
  13. Providing Personal Data by the Customer is voluntary, although it is a condition for concluding the Contract on the basis of the provisions of these Regulations.
  14. Personal Data of the Customer may be transferred to a payment operator and a courier company – in order to perform the Contract and properly provide the Services and only to the extent justified by the above-mentioned purpose.
  15. Personal Data of the Customer will not be processed by the Seller in an automated manner, including in the form of profiling.
  16. The Seller provides an SSL data encryption system preventing unauthorized persons from obtaining and modifying personal data sent electronically.
  17. Cookies are used to:
    a. adjust the content of website pages to user preferences and optimize the use of websites; in particular, these files allow recognizing the website user’s device and appropriately displaying the website, tailored to their individual needs,
    b. create statistics that help understand how Customers use websites, which enables improving their structure and content,
    c. maintain the Customer’s session (after logging in), thanks to which the user does not have to re-enter their login and password on each subpage of the website.
  18. Using the Services provided may require granting consent to the storage by the Seller of information, in particular small text files (so-called cookies), or access to stored files of this type, on the Customer’s device. These files do not change the configuration of their computer, are not used to install or uninstall any computer programs, viruses or trojans, do not interfere with the integrity of the system or User data, and can also be deleted at any time by the User.
  19. 19. The Seller may use the following types of cookies:
    a. “necessary” cookies, enabling the use of services available within the Store, e.g. authenticating cookies used for services requiring authentication within the Store;
    b. cookies used to ensure security, e.g. used to detect abuse regarding authentication within the Store;
    c. cookies enabling the collection of information on how the Store’s websites are used;
    “functional” cookies, enabling “remembering” settings selected by the Customer and personalizing the user interface, e.g. regarding the default sorting method, website appearance, etc.

 

In many cases, software used for browsing websites (web browser) by default allows storing cookies on the user’s end device. Customers may change settings regarding cookies at any time. These settings may be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or inform about their every placement in the device of the website user. Detailed information on the possibilities and ways of handling cookies is available in the software (web browser) settings. Failure to change cookie settings means that they will be placed on the Customer’s end device, and thus the Seller will store information on the Customer’s end device and gain access to this information. Disabling the use of cookies may cause difficulties in using some services within the Store, in particular those requiring login.