Privacy Policy

When you visit the website www.bd-cosmetics.com, which is operated by BD COSMETICS d.o.o., Stara cesta 105, Logatec, 1370 Logatec, Slovenia (hereinafter referred to as the "Controller"), you entrust us with part of your personal data, which we are obliged to protect.

If you only browse the site, the amount of personal information we receive from you is limited to the anonymous identity of your device (computer, phone, etc.) and is recorded with certain cookies.

However, when you decide to purchase from our online store, you also send us your name, surname, e-mail address and sometimes other personal information. In more detail about all of this below.

The security of your personal data that you entrust to us is extremely important to us, because we want your trust! All personal data collections are collected, recorded, edited, stored or deleted in accordance with the Personal Data Protection Act (ZVOP-1, Official Gazette of the Republic of Slovenia, no. of the Republic of Slovenia, no. 94/2007) and in accordance with the General Data Protection Regulation (hereinafter GDPR).

1. In this document, we explain:

• What information we collect, how we manage it and whether we share it with whom,
• what rights you have in managing, correcting and deleting the personal data you have entrusted to us,
• on how we ensure the security of personal data collections,
• in addition, the document also contains instructions on how to exercise your rights.

2. Security of personal data

What are your rights?

Your rights regarding the personal data you have provided are set out in the third chapter of the GDPR and include:

• the right to transparency: whenever you entrust us with data, we explain to you precisely and in clear language why we need the data, how we will treat it, etc. In practice, this means that before confirming the sending of your data, you get accurate information about what will happen to them;
• the right to access personal data or to access the data we hold about you, as well as to obtain information about whether we have your personal data. It is your right to know why we have them, what we do with them, whether we have passed them on to anyone, the period of retention of your data;
• right to rectification and right to be forgotten (erasure): you can request changes or correction of inaccuracies in your personal data that we have; or you can request the erasure of personal data that we have about you;
• Right to restriction of processing Processing may mean the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, adaptation or combination, restriction, erasure or destruction. You have the right to restrict one or more of the aforementioned actions, and you do not need to request the deletion of the data;
• the right to data portability: all data you have provided to us and which we hold about you, we are obliged to transmit to you at your request in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller;
• right to object: Users can request that we do not include your data in any processing and statistical analysis, which is usually not identifiable personal data. Nevertheless, you have the right to object to the use of this data;
• the right to decide on automated individual decision-making, including profiling.

3. Data collection profiles on www.bd-cosmetics.com

What information we collect, how we use it and with whom we share it

Access to the data we have collected on the website www.bd-cosmetics.com is provided exclusively to the controller. We do not share, lend or sell any personal information that you have voluntarily provided to us electronically or otherwise.

We use them exclusively to communicate with you or to fulfill the reason why we needed them (regular notification of news, promotions, etc.; processing for sweepstakes and promotions; sending purchased items). We only transfer data to third parties when this is necessary for the fulfilment of your order (for example, sending purchased items).

Unless you explicitly allow it, we may occasionally send you a message about promotions, new products, or changes to our privacy policy.

Attention: when you shop with us electronically, information (name, surname, address, telephone number, e-mail address, content of the purchase) is stored in our accounting database. As a business entity, we are obliged to keep documents such as invoices and pro forma invoices, so we cannot and should not delete this data.

4. We present the data capture profiles in detail.

Profile 1. Receiving e-newsletters

What information do you provide to receive e-news?
To receive e-news, please provide us with your first and last name (both optional) and e-mail address (mandatory).

Why do we need this information?
We need an e-mail address, because otherwise we cannot send you e-news. If you trust us with your first and last name, we use it to personalize the e-news by addressing you by name.

How long do we keep this data?
We keep this data until you unsubscribe from the e-newsletter (at the end of each copy of the e-newsletter there is an unsubscribe link). After logging out, the data is no longer used, but remains in the database.

With whom do we share this data and who has access to it?
We do not share the data or allow access to anyone who is not in a working relationship with the controller.

How do we process and use this data?
To receive your data, we use the e-newsletter registration form with mailchimp integration, and to send e-newsletters, we use the mailchimp.com application, where your data is stored. We use them to send e-news and do not process them otherwise. When we cannot deliver an e-mail to your address (if your e-mail box is full, if the e-mail box no longer exists, or if you have provided us with an incorrect e-mail address), we delete you from the database.

Profile 2. Data for online shopping

What information do you provide to order in our online store?
When making purchases in the online store, we need more of your personal data, namely first name, last name, full postal address, phone number and e-mail address. When paying with PayPal, we don't see your financial data, because you manage everything with PayPal (we only see the email address you use to log in to the PayPal site). Credit card payments are also made through the Stripe system, which does not transmit your financial data (card number) to us. It just tells us that the payment has been made.

Why do we need this information?
We need all this information in order to fulfill your wish: the purchase of a specific product. We need your first name, last name, address and phone number for delivery, and your e-mail address for confirmation and information about the transaction and further communication, if necessary.

How long do we keep this data?
We keep this data, as it is the data on officially issued invoices that we are obliged to keep.

With whom do we share this data and who has access to it?
We do not share the data or allow access to anyone who is not in a working relationship with the controller.

The shipment and delivery of purchased products for us is carried out by our business partners DHL d.o.o. and DPD d.o.o. They do not process your data for anything other than the original purpose: for the package to reach you.

List of users of personal data:

• Intuitiva d.o.o. (application development)
• Webtasy, d.o.o. (infrastructure provider)

Personal data is stored with all related sub-processors for as long as our website/store is published and active, unless the customer requests the deletion of the data. The deletion of data can be initiated by the buyer himself via the link 'My data' in the footer of this website. The deletion will anonymise all personal data of the user on the user's orders and replace them with generic text. An anonymous order will remain stored in our system.

In the event that this website ceases to operate, all data with sub-processors are deleted within three months.

How do we process and use this data?
To receive your data, we use the online store system developed by the company Intuitiva d.o.o. We also use the easy-booking.com program to issue an invoice. We use them exclusively for the purposes of online sales and do not process them in any other way.

5. Additional information about your privacy

Statistics about the website

We may occasionally share statistical information about visitors to our website with partners or advertisers. Such information does not contain any such information that personally identifies anyone who has communicated with our website in any way.

Links to other websites

The website www.bd-cosmetics.com may also occasionally post a link to another website. If you visit another website, their privacy policy applies there. We recommend that you check on each page you visit to see how they guarantee your rights regarding the protection of your personal data.

In surveys, we usually do not require special data: they are intended for anonymous research on satisfaction and possible improvements to our services and the website itself.

Security of data transfer and storage

The website www.bd-cosmetics.com has a built-in SSL security certificate issued by Let's Encrypt. This certificate encrypts messages between the website and users to ensure secure communication on the Internet. You can check for yourself if the certificate is installed. Look at the web address bar: to the left of www.bd-cosmetics.com, the green padlock sign is displayed, some browsers also say "secure". In addition, you can see that the website address starts with https://. The letter "s" means a secure connection.

Even after you have sent us your data securely online, we treat it with care. Only authorized employees of BD COSMETICS d.o.o. have access to them and only for tasks that are absolutely necessary for their work (invoicing, preparing shipments, customer service). The servers on which your personal data is stored are safe and secure.