Bioglow Cosmetics S.R.L., a Romanian legal entity with its registered office in Bucharest, Sector 2, str. Tuzla no. 9-27, room 1, block C, floor 2, ap. C21, registered with the Trade Register under no. J40/9228/2024, VAT ID 50039910, is the personal data controller.

Definitions

• Personal Data: Any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

• Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, restriction, erasure, or destruction.

• Restriction of processing: The marking of stored personal data with the aim of limiting their processing in the future.

• Controller: The legal entity that determines the purposes and means of processing personal data. Bioglow Cosmetics S.R.L. is the entity that controls the domain name www.(_).ro and processes your personal data.

• Consent of the Data Subject: Any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of personal data.

• Supervisory Authority: The National Authority for the Supervision of Personal Data Processing (ANSPDCP).

• Website/Platform: The internet pages developed under the domain owned by Bioglow Cosmetics S.R.L. — www.(_).ro.

• Cookies: Text files stored on your device (computer, tablet, or mobile phone) while browsing the internet, including the www.(_).ro website.

Data Processing Purposes

Bioglow Cosmetics S.R.L. processes your personal data in the context of using the website, fulfilling product sales contracts, arranging deliveries and returns, conducting marketing campaigns, and collecting product reviews.

Your data will be processed until the legal retention period ends or until you request deletion, as permitted by law.

What Personal Data We Process

• Identification and Contact Data: Name, surname, mailing address, email address, phone number.

• Preferences: Such as your favorite products.

• Transactional Data: Product selection, delivery/billing addresses, payment details (including card number, expiry date, CVV, and cardholder name — in the case of online payments, this information is processed by the payment service provider).

Product Reviews

If you leave a review, we may also process:

• Your username or alias

• The content of your review (including any self-disclosed information such as age, gender, city, skin type, or uploaded photos)

Automatically Collected Data

We may automatically process:

• Connection data (device used, browser type, IP-derived location, access times, pages visited, and referral links).

Data About Other Individuals

If you place an order for someone else, we may process that person’s personal data solely to fulfill your order. We do not use this data for marketing purposes.

Your Rights Under GDPR (Regulation 2016/679)

You have the following rights at any time:

a) Right of Access – To know if your data is being processed and request a free copy.
b) Right to Rectification – To correct inaccurate or outdated data.
c) Right to Restrict Processing – When:

• You believe the data is inaccurate;

• Processing is unlawful but you object to deletion;

• The data is no longer needed by us but required by you for legal claims.

d) Right to Erasure (“Right to be Forgotten”) – If:

• Data is no longer needed for its original purpose;

• You withdraw consent and no other legal basis applies;

• You object to processing and there are no overriding legitimate grounds.

e) Right to Withdraw Consent – At any time, without affecting processing done before withdrawal.

f) Right to Object – To processing based on a legitimate interest.

g) Right to Object to Direct Marketing – Including profiling.

h) Right not to be Subject to Automated Decisions – That produce legal effects or significantly affect you.

i) Right to Data Portability – To receive your data in a structured, machine-readable format and transmit it to another controller, when processing is based on consent or contract and performed by automated means.

j) Right to Lodge a Complaint – With the National Supervisory Authority for Personal Data Processing, located in Bucharest, Sector 1, B-dul G-ral. Gheorghe Magheru 28-30, postal code 010336, email: anspdcp@dataprotection.ro, phone: +40.318.059.211 or +40.318.059.212.

This Privacy Policy identifies the personal data processing activities conducted by Bioglow Cosmetics S.R.L. in the course of its commercial operations. While we aim to provide full transparency, not all data processing scenarios may be covered here. For any clarification or further information, please contact our Data Protection Officer at: ()@().ro

We will respond to any personal data-related requests within 15 days.
If there are reasonable doubts about the identity of the requester, Bioglow Cosmetics S.R.L. may take steps to verify the requestor’s identity.