privacy policy
This document called Privacy Policy ("Privacy Policy") is intended to help you understand the information we collect when you visit www.viorica.eu (hereinafter named the "Site"), whether you are or not you are registered, and also describe how we use such information.
Where appropriate, this privacy policy will also describe how we process the information you provide us or we collect about you when you visit the stores directly managed by us ("Stores") or during any other contacts with us. The present policy is complementary to any other information provided under other circumstances.
This Site is a site with a general audience; nevertheless, our services are for people aged 16 or over. We do not request, collect, use, or disclose personal data provided by a person under the age of 16, both online and in our Stores. If we found out that we have collected personal data from a child, we will delete such data.
If you are under 16, please do not register or proceed with your online purchase and request the assistance of an adult (one of your parents or legal guardians) to proceed with the necessary procedures.
Who are we?
Viorica Cosmetic SRL, established and functioning in accordance with Romanian law, with registered office in Berzei Street No. 20, Attic, Sector 1, Bucharest, County, Romania, Fiscal Identification Code RO36744664, registered with the Trade Register under no. J40/16619/2018.
This document gives you important information regarding the following issues:
1. PERSONAL DATA OPERATOR
2. STORAGE OF PERSONAL DATA
3. WHO HAS ACCESS TO PERSONAL DATA
4. WHAT IS THE LEGAL GROUND FOR PROCESSING
5. YOUR RIGHTS AND EXERCISE OF THE RIGHTS
6. PROCESSING OF PERSONAL DATA
7. COLLECTED PERSONAL DATA
8. HOW WE USE PERSONAL DATA
9. PERSONAL DATA SECURITY AND CONFIDENTIALITY
10. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
11. CONFIDENTIALITY POLICY UPDATE
By visiting our Site, by using its services or, interacting in any other way with us, through our sales points, newsletters and/or sites, you acknowledge to have read and understand this Privacy Policy and agree to that we may collect, use, transmit and disclose personal data that we collect through our Sites and Stores, in accordance with this Privacy Policy. If you have not already registered, we may ask you to register (for instance, by ticking a check box) if we consider it is appropriate to protect your rights or if it is required by relevant laws. If you do not agree with the terms of this Privacy Policy, please do not access this Site, do not create an account, and do not use or send personal information to this Site or do not register when this option is offered to you in accordance with relevant laws.
1. PERSONAL DATA OPERATOR
Viorica Cosmetic SRL is the operator of the personal data you provide us and is responsible for your personal data in accordance with the relevant law in terms of data protection (hereinafter referred to as collectively, "Viorica Cosmetic", "we", "us" or "ours" in this Privacy Policy).
Our contact details are:
Viorica Cosmetic SRL
Bucharest, ROMANIA
Berzei Street No. 20
J40/16619/2018., RO36744664
E-mail: contact@viorica.eu
We have appointed a Data Protection Officer to permanently ensure that we process personal data in an open, accurate and legal manner. You may contact the Data Protection Officer at the address contact@viorica.eu, mentioning DPO in the subject of the message.
2. PERSONAL DATA STORAGE
The data we collect from you is stored in the Viorica Cosmetic data centre of Romania.
3. WHO HAS ACCESS TO PERSONAL DATA
We do not transmit, sell, or cede your personal data to third parties for marketing purposes outside the Viorica Cosmetic SRL company. The data sent to third parties is used only in order to provide you our services. You will find the categories of third parties in each specific process mentioned here below.
Part of the collected data will be transferred to a third party for:
1. ORDERS DISPATCH to you - in this situation, we will transfer your contact details to the courier company PARFLEX that deliver the orders and cash in their counter value on our behalf;
2. SENDING ADVERTISEMENT - to efficiently transmit them, we use the e-mail marketing services of Klaviyo - The B2C CRM, with headquarters in Boston, Massachusetts, USA. These third parties have assumed the contractual commitment to provide appropriate security measures for your personal data, which means that they will be protected in compliance with all the legal requirements of the European Union.
4. WHAT IS THE LEGAL GROUND FOR PROCESSING
Depending on the scope for which the data are used, the basic legal grounds for processing your data may be the following:
• Your consent;
• Our legitimate interest, which could be:
a. Improving our products and our services: more precisely, our business interests to help us understand even better your needs and expectations, and thus improve our services, sites/applications/devices, products and brands in the benefit of our consumers;
b. Fraud prevention: to make sure that payment is complete and no fraud has been committed.
c. Securing our instruments: keeping your instruments safe (our sites/applications/devices) and ensuring that they work properly and that they are undergoing a continuous process of improvement.
• Fulfilment of a contract: more precisely, to carry out the services you request from us;
• Legal reasons for which data processing is required by law.
For every specific processing of the personal data we collect from you, we will inform you whether the provision of personal data is required by regulations in force or whether it is necessary to sign a contract, whether it is obligatory to provide us with your personal data and what are the possible consequences in case of your refusal.
5. YOUR RIGHTS AND EXERCISE OF RIGHTS
The right of access means that you have the right to obtain a confirmation from Viorica Cosmetic on whether we are processing your data or not, and if so, to grant you access to these data as well as to information on the processing.
The right to rectification means that you have the right to request the rectification of your personal data if these data are incorrect, including the right to fill in incomplete personal data. If you have a Viorica Cosmetic account, then you can edit your personal data from your account.
The right to delete the data means that you have the right to obtain at any time the deletion of the personal data processed by Viorica Cosmetic in any of the following cases: the data are no longer necessary for the purposes for which they were collected or processed; you withdraw your consent and there are no other legal grounds for the processing; you oppose the processing; data were processed illegally; the data must be deleted for conformity with a legal obligation or the collection has been made in respect with the provision of information society services.
Nevertheless, your data shall be retained to finalise the following situations:
• you have an unsolved request submitted to Customer Service;
• you have an open order that has not yet been shipped or partially shipped;
• you have an unpaid debt at Viorica Cosmetic, regardless of the method of payment;
• if you have made a purchase, we will keep your personal data in relation with your transaction in compliance with accounting legislation in force.
The right to restrict processing means you have the right to obtain restriction of processing in the following cases:
• if you dispute the accuracy of the data, for a period that permits Viorica Cosmetic to verify data accuracy;
• if the processing is illegal, and you are opposed to the deletion of your personal data, requesting instead the restriction of their use;
• if you have opposed your processing, for the length of time, it is being verified that Viorica Cosmetic’s legitimate rights override your rights;
• if Viorica Cosmetic no longer requires your personal data, but they are required to defend your rights in court.
The right to portability refers to the fact that you have the right to obtain your personal data in a structured format, currently used and that can be readable automatically, and you are entitled to communicate these data to another data operator.
The right to oppose means that you have the right to oppose the processing of your personal data on the grounds of the legitimate interest of Viorica Cosmetic will not continue to process personal data unless we can prove a legitimate, solid reason for this processing, a reason that prevails over your interests and rights or if the processing is done based on court procedures.
The right to refuse the automated decision-making process that you have the right not to be the subject of a decision based exclusively on automatic processing, including profile creation, unless you have explicitly expressed your consent or automatic processing is not necessary to sign or perform a contract.
Your right to oppose direct marketing:
You have the right to oppose direct marketing, including also profile analysis for direct marketing purposes.
You may unsubscribe from direct marketing by following the instructions in each marketing e-mail or in a letter sent by any of the contact methods mentioned in the present document.
How can you exercise your rights?
We gave high importance to personal data protection and, consequently, we have dedicated customer support personnel to handle all your requests for your rights mentioned above. Our dedicated staff is always available at the following address contact@viorica.eu
6. PERSONAL DATA PROCESSING
"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be identified, directly or indirectly, especially by referring to an identifier, such as a name, an identification number, location data, an online identifier, or one or several specific elements of his/her physical, physiological, genetic, psychic, economic, cultural or social identity;
"Processing" means any operation or set of operations performed on personal data or on personal data sets, carried out with or without the use of automated means such as the collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or available in any other way, alignment or combination, restriction, erasure or destruction;
"Operator" means a natural or legal person, a public authority, an agency or other authority that, on its own or with others, establishes the purposes and means of the personal data processing; where the purposes and means of processing are set out by the European Union law or by national law, the operator or the specific criteria for its designation may be established in the Union or national law;
When we use the term "personal data" within this privacy policy, we refer to any information that permits us to identify you or a third party whose personal data you provide to us, directly or indirectly, by enclosing any information that refers to the purchase of goods or services; or to the information you have chosen to transmit or share with us or with third parties while using the Website or our Stores.
We will process your personal data in compliance with Regulation (EU) 2016/679 "GDPR Regulation" and with the Romanian legislation. We reserve the right to carry out further processing within the limits of the law in a criminal investigation or other investigation or proceedings.
7. COLLECTED PERSONAL DATA
Data source
We collect personal data from you only when you voluntarily provide us with such information as:
The site viorica.eu: when you place an order through the Site, as a Customer; when you create an account or modify your account; when you create a favourite product list; when you participate in a contest, a tombola or a promotion; when you look for information on the Site; when you contact us with a comment or a question; when you sign up to receive newsletters;
Our stores: when you fill in the fidelity card form, during unofficial discussions when visiting boutiques or outlets, when you participate in a contest, a tombola or a promotion in one of our stores; when you buy merchandise; Events: when you participate in our events, market surveys and research or any other promotions, including those organised online (for instance, actions that we run on third-party social media, like Facebook);
Our customer service: when you seek assistance, special services or before and after sale services;
E-mail, text, and other type of electronic messages: when we communicate with you;
If you provide us with personal information from third parties (for example, Family members, other third parties), you must make sure that these third parties are fully informed and you are authorized to use their data, as described in this Privacy Policy.
Data categories
We may collect and use various types of personal data according to our purpose, as described below:
a. personal data such as name, surname, sex, age/date of birth, country of origin and other personal details (hair and skin type etc.) as allowed by applicable law;
b. contact details like address, e-mail address, telephone number, mobile number and other contact details, in conformity with applicable law in force;
c. payment details such as payment instrument (credit and debit card)
d. sales information like the products or services provided, the place of purchase, the product codes, the amount, the total sales, the complaints, the returns, the reimbursements and other sales related information, in conformity with applicable law in force;
e. practices and profiles, like your purchase data (purchase history, including the Store where the sale takes place, the type, the quantity and the price of the products bought), client relationship management, habits (wish list, preferred product categories, how did you find out about our brands, the comments on the quality of the purchased products, the habits or the needs you have declared), other information (job, education, hobbies information and lifestyle activities), in conformity with the applicable laws in force;
8. HOW WE USE PERSONAL DATA
Personal data can be used for the following goals, varying according to the specific circumstances in which you interact with us.
When you use our Site
When you use our Site to look for our products and services and to view the information we are providing, a number of cookies are used by us as well as by third parties in order to enable the site functioning, to collect useful information about visitors and to help you have the best user experience possible.