Skip to main content

Privacy Policy

 

Our Data Protection Policy is an integral part of the GENERAL TERMS AND CONDITIONS of the website www.scarab-cosmetics.com (the Website) and it will be applied to the browsing of our website as well as to the purchase process. 

The Website is administered by SBK Trade Ltd. (the Company). When carrying out our activities the Company acts in the capacity of a personal data controller and performs activities on the collecting, processing and keeping personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR) and the applicable national and European legislation.

What information is collected through the Website?

In order to use the services on this Website including to get access to the platform for online orders of goods and the related services, our information system needs certain information about you through which you can be identified directly or indirectly.

1.The information which the User provides voluntarily:

In the cases where this is needed for a certain service on the Website, we can request that you provide us with the following personal data:

  • full name;
  • valid e-mail address;
  • telephone number;
  • physical address of delivery;
  • possible preferences or comments;
  • additional data (user content and/or query).

It is possible that the indicated categories of personal data be requested also for an eventual query to us in relation to exercising your rights as described below.

2.The information which the Website collects from the User:

In order to perform certain functionalities of our Website and the Services, our information system collects information from your electronic device when carrying out standard activities for the normal function of web operations. Thus, the following additional categories of personal data can also be collected:

  • IP address;
  • used browser;
  • language preference settings;
  • type of device used to open the Website;
  • information on the operating system of your device;
  • data on user behaviour and user characteristics.

We collect information on the source from which you have accessed the Website. In any case, we do not collect your publicly accessible information, including if the redirection to our Website comes from a social network.

When you visit the Website, our social networks profiles and/or when you use the functionalities and services available on the Website, including to create a user profile and to shop, certain personal data of yours can be collected and processed by installing small text files on your device, the so-called Cookies.

Your data can be used by us for traffic analysis, advertisement purposes, market research and profiling of user groups, system reports on the Website functioning and for recovering consumption information, to improve the functionality of the Website and its analysis, including, but without limiting to:

actions intended at creating and administering user profiles;

  • actions intended at identifying and establishing the age stipulated by law for online shopping;
  • direct marketing of products and services;
  • evaluation of the advertisement efficiency;
  • managing and administering activities for online shopping;
  • analysis of the purchases history, preferences and behaviour;
  • preventing fraud in relation to payments;
  • managing queries.

Cookies can be created, accessed, read and manipulated by third parties (our advertisement partners, social networks, analysis partners). For more information on the conditions according to which these third parties use cookies as well as on the data which they collect, for what period, with what purposes do they collect it and how can you prevent or confirm that you can visit their relevant cookies policies.

You can learn more on the Cookies we use and on the General Terms and Conditions .

3.Personal data of children. How do we treat this data?

The Services on the Website are not intended for persons under the age of 18 years. The Company does not aim or wish to collect personal data of children in relation to the Services provided through the Website.

If, however, the Company receives information on a minor person in relation to the Website Services, we will not process it and will erase it, except if we are obliged to process this data in another method, specifically established by a legal norm.

Main principles of data processing and protection

When carrying our activity, we apply the following main principles:

  • the data is processed in a legally compliant way, in good faith and in full transparency;
  • the data is collected only for express, specifically indicated and legitimate purposes;
  • the processed data is limited to the necessary minimum in relation to the set goals;
  • the data is maintained up to date and not for a longer period than needed;
  • the processing is carried out in a way which guarantees an appropriate level of security, protection against unauthorized or illegal processing, loss, destruction or damage;
  • the access of third persons to the data is provided only for the purposes which are essential for performing the requested service;
  • maximum cooperation is provided for exercising the data subject rights.

From whom and how do we collect the information?

In relation to the purposes indicated below, the Website collects information from its visitors, including end-users in their capacity as data subjects.

The personal information which is processed through the Website can be collected in the following ways, jointly and separately:

  1. Provided personally and willingly by the user;
  2. By using Cookies and other solutions intended at optimizing the Website performance, analyzing and sending commercial messages.

Why is the data processed, on what legal basis and what is the period of processing?

We may treat the described above personal data according to art. 1, para 1 of the GDPR for the following purposes:

  • Provide you with the information you request about our products.
  • Register you as a user of our website.
  • Guarantee the correct processing of your order, in case you purchase any of our products.

SCARAB uses its social networks to advertise its products. In doing so, by sharing your data on our social networks, you expressly consent and authorize us to reproduce and publicly communicate on these networks for the purposes stated above.

You may revoke this consent at any time, by sending an email to the following address: [email protected]

If you are not interested in the processing of your data through SCARAB’s social networks in the terms expressed above, please refrain from sharing any images.

In the event that we need to process your data for purposes other than those mentioned above, we will request your consent, which may be revoked by you unilaterally at anytime.

What measures have we undertaken to protect your data?

In accordance with the applicable legislation, we maintain adequate, necessary and proportional technical and organizational measures to protect the data of the users, including to prevent unauthorized access and/or incorrect use.

The protection of your personal data and information security are among our main priorities. We introduce and apply adequate technical and organizational measures to guarantee the security of your personal data. Each work process is carried out while guaranteeing the security, reliability, privacy and availability of information. Our employees are familiar with the legislation in force and observe the highest standards of ethics and privacy. We carry out verification and evaluation process of the technical and organizational measures implemented, in order to guarantee the security of personal data at all times.

How long do we keep your data?

Your personal data will be kept for as long as necessary to fulfill the purposes for which they were collected. After that time, SCARAB will proceed to remove them from its systems, without excluding the possibility of keeping them, limiting their treatment to the exercise and defense of claims, in the terms provided by the applicable legislation.

With whom do we share your information?

In accordance with the legislation applicable your personal information may be shared with third parties only in the following cases pursue art. 6, para 1 of the GDPR:

  • Contractors – financial institutions, couriers, insurers, accountants, lawyers, information security consultants, marketing agencies and others – if necessary for: the performance of legal or contractual obligations; cooperation for the purposes of managing work processes; observing legitimate interests.
  • Public authorities – tax administration, supervisory and controlling authorities, local authorities and others – in order to perform legal obligations.
  • Google Analytics, Google Tag Manager or other partners that provide the relevant technical communication platform – for optimization and management of commercial and marketing processes.
  • Judicial authorities, courts of arbitration, lawyers, notaries, state and private bailiffs, mediators, collection agencies and other intermediaries dealing with collecting receivables – for the purposes of pursuing legitimate interests including when exercising or protecting legal claims, collecting receivables, submission/response to complaints, signals, claims and other to the competent state and judicial authorities.
  • Specific authority – administrative, judicial and/or executive – In case it is necessary and mandatory to disclose a trade secret; in relation to the settlement of legal disputes in front of a competent court and/or arbitration; sharing information with law enforcing authorities and financial institutions when this is imposed by law or is absolutely necessary in order to prevent, detect or persecute criminal activities or fraud.
  • Accounting and control – in order to perform obligations under an accounting act or established international accounting standards.

What are your rights?

  • You can always check with us your rights, sending email to [email protected].
  • You can also access your personal data, request the rectification of those that are inaccurate or, if applicable, request the data deletion when, among other causes, they are no longer necessary for the purposes for which they were collected.
  • In certain circumstances, oppose the processing of your data.
  • Request the portability of your data.
  • Revoke the consent that, in your case, you have granted for the treatment of your data by SCARAB.
  • File a claim with the Bulgarian Commission for Personal Data Protection. 

If you want to learn more on the rights provided to you, on the way to exercise them and the relevant procedures, you can visit the information website of European Data Protection Supervisor, the Commission for Personal Data Protection or the relevant authority in your country.

Version 05.09.2023