Privacy Policy (GDPR)

• A. Blog and Comments / Interactions
  • Scope of data: Name, email address, post/comment content, IP address.
  • Purpose: To allow users to express their opinions, engage in professional discussions, and ensure protection against spam.
  • Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR) or the legitimate interest of the Controller in ensuring Website security.
• B. Galleries and Visual Content
  • Scope of data: Photographs, videos, or visual materials presenting products, brands, or events.
  • Purpose: Presentation of aesthetic concepts, partnerships, and the portfolio of the Beauty Elevate platform.
  • Legal basis: Legitimate interest in promoting services (Art. 6(1)(f) GDPR) or explicit consent of the data subject in the case of depicting specific individuals.
• C. Circle and Exclusive Sections (B2C Clients / B2B Partners)
  • Scope of data: Name, surname, company name, email, phone number, corporate data, and communication history/preferences (including individual solutions for specialized segments, e.g., menopause care).
  • Purpose: Management of business partnerships, B2B communication, contract fulfillment, and access management for confidential sections of the platform.
  • Legal basis: Performance of a contract or pre-contractual relations (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
• D. Technical Data and Cookies
  • Scope of data: IP address, browser type, device information, website behavior data collected via cookies.
  • Purpose: Ensuring Website functionality, traffic analysis, and optimization of the user experience.
  • Legal basis: User consent via the cookie banner (Art. 6(1)(a) GDPR) for analytical and marketing cookies; legitimate interest for strictly necessary cookies. Strictly necessary cookies are stored automatically for basic Website operation (e.g., shopping cart functionality), while others are activated only after your active consent in the cookie banner.
• E. Purchases and Orders
  • Scope of data: Name, surname, email address, phone number, billing address, delivery address, payment details, order history.
  • Purpose: Order processing, delivery of goods, handling of complaints/returns, and fulfillment of contractual obligations.
  • Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations, primarily accounting regulations (Art. 6(1)(c) GDPR).

• B2C Clients, B2B Partnerships, and Circle: For the duration of the contractual relationship and subsequently during the limitation periods under applicable laws (usually 5 to 10 years).
• Blog and Comments: For the duration of the post’s existence or until consent is withdrawn.
• Marketing and Consent-based Data: Until the user withdraws their consent.
• Accounting and Tax Documents: 10 years following the year to which they relate (in accordance with Slovak laws).

• Logistics and courier companies (e.g., DPD, Packeta) for the delivery of your orders.
• Payment service providers (e.g., Stripe, PayPal, banking institutions) for the secure processing of your payments.
• Providers of technical infrastructure, hosting, and email marketing tools.
• Transfers outside the EU/EEA: In the event we use software services (e.g., cloud storage) with servers located outside the European Union (e.g., the USA), this transfer takes place exclusively on the basis of Standard Contractual Clauses (SCC) approved by the European Commission.

• Right of Access: You can request confirmation as to whether we are processing your data and gain access to it.
• Right to Rectification: You have the right to correct inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): Under certain conditions, you may request the deletion of your data.
• Right to Restriction of Processing: You can request a temporary suspension of data processing.
• Right to Data Portability: You have the right to receive your data in a structured, commonly used format.
• Right to Object: You can object to data processing based on legitimate interest at any time.
• Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.