This Privacy Policy aims at providing You, also referred to as the “Visitor” or “Data Subject,” with detailed information on the processing of Your personal data by Us, also referred to as “SOIN” or “Data Processor.”

We will describe:

• what type of Your personal data We process and

• what We do to process Your personal data.

We will define:

• what purposes We process Your personal data for and

• what legal grounds We rely upon to process Your personal data.

We will explain:

• what rights as a Data Subject You have and

• what You have to do to enforce Your rights.

SOIN encourages You to read this Privacy Policy carefully to familiarise Yourself with the way We process Your personal data when You visit Our website, register Your individual online account with Us, subscribe to Our newsletter, communicate with Us using designated communication tools and channels, or make a purchase in Our online store at www.soincosmetics.com, also referred to as the “Website.”

This Privacy Policy is a reader-friendly explanation of Our data processing activities divided into various sections depending on the topic to make it easy for You to navigate through:

INTRODUCTION

SOIN values Your privacy and the confidentiality of Your personal data. This is why We process Your personal data in strict compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also referred to as the “GDPR.” Our Privacy Policy is supplemented by the Cookies Policy, which specifically addresses processing of Your personal data by using automated means, such as cookies, web beacons, and social plugins. This Privacy Policy also refers to Our Website Terms and Conditions, which describe the terms of services We provide through Our Website.

We regularly review and update Our Privacy Policy to make sure that it follows the most recent trends and highest standards in personal data protection, as well as reflects any and all changes in the applicable laws and regulations on data protection, consumer rights, and e-commerce. We have indicated the date of the current version of the Privacy Policy at the top of this page for Your information. Whenever the Privacy Policy is updated, We will bring it to Your attention by displaying a corresponding notice on the Website and emailing it to You, if You allow Us to use Your e-mail address for this purpose.

PROCESSING YOUR ACCESS DATA

If You visit Our Website, the web server will automatically save a server log file, which contains Your internet protocol (IP) address, unique device identifier (UDI), hypertext transfer protocol (HTTP) response status code, operating system (OS) of Your device, date and time of Your request, name, location, and size of the requested files, also referred to as the “Access Data.” We process Your Access Data exclusively for the purpose of securing trouble-free operation of Our Website and ensuring a flawless user experience of its main features. We process Access Data to safeguard Our legitimate interest in ensuring a high-quality online presentation of Our brand, content, and merchandise. If You give Your consent for Us to process Your Access Data for other purposes, please read the Cookies Policy, which specifically addresses processing of Your personal data by using automated means, such as cookies, web beacons, and social plugins.

Our Website is hosted by Shopify Inc. (151 O’Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada), also referred to as “Shopify,” which provides Us with e-commerce platform solutions. Shopify ensures the smooth operation, security, and performance of Our online store, including data processing related to order fulfillment, payment transactions, and customer account management. Shopify processes Your Access Data on Our behalf in the same way and for the same purposes as We do when You visit Our Website. Given that Shopify operates a global infrastructure, Your Access Data may be processed on servers located in different regions, including outside the European Union (EU) or European Economic Area (EEA). In cases where Your personal data is processed outside the EU or EEA, We ensure GDPR-compliant processing by relying on Shopify’s data protection measures, including standard contractual clauses approved by the European Commission.

PROCESSING YOUR PERSONAL DATA TO REGISTER AN ACCOUNT

If You register an online account with Us through Our Website, We will process Your name, surname, e-mail address, phone number (optional), and address details (optional). The registration of the online account is completely voluntary. You are not required to have an online account with Us to make a purchase in Our online store. We will process Your personal data provided as part of the registration to maintain Your online account, to ensure secure access to Your online account, and to offer You additional useful features available to online account holders, such as writing reviews, viewing purchase history, maintaining Your wish list, receiving a discount for inviting friends over to join Our community, etc. We will process Your personal data provided as part of the registration based on Your explicit consent. You can revoke Your consent and delete Your online account at any time – to request the deletion of your account, please contact us by writing an e-mail to info@soincosmetics.com