PAZ B.V. (“we, us or our”)  is committed to protecting and respecting our customer’s privacy. This privacy policy identifies and documents the types of personal information we collect and how we use this information. We detail who data is shared with and your rights. This policy is in connection to our websites and apps. 

WHAT PERSONAL DATA WE USE

The data we use is based on how you use and interact with our services and websites. For example personal information is passed on to us for shopping with us online, booking a consultation service with our team, communicating with us on live chat, interacting with us on social media and when you participate in a competition with us amongst other reasons. The types of personal data may include: 

-Name, address, email address & phone number 

-Age or date of birth

-Payment Information 

-Location (geo-location, postal code, country etc) 

-Product History 

-Preferences

-Survey information, review responses, questions, images

-Information submitted via social media networks. 

1. b)     Lawful Basis 

We will use the information you provide for the above purposes if:

-We have obtained your consent; or 

-It is necessary to enter into or perform a contract with you, for example to process your payment and deliver the goods you have ordered; or

-It is necessary for compliance with a legal obligation that we are subject to.

WHY WE COLLECT YOUR PERSONAL DATA

1. a)     Purposes 

We use this information to create a better online experience of our websites. For example: 

– Sending relevant marketing communications 

-To provide the relevant services requested 

-Processing payments and delivering goods 

-Tailoring advertisements based on your interests and orders

-Tailoring skin consultations to your requests and needs

-Responding to you and answering your question on live chats and live shows 

-To post your product reviews 

-To improve our business

-To comply with applicable legal requirements and industry standards 

1. b)     Lawful Basis 

We will use the information you provide for the above purposes if:

-We have obtained your consent; or 

-It is necessary to enter into or perform a contract with you, for example to process your payment and deliver the goods you have ordered; or

-It is necessary for compliance with a legal obligation that we are subject to.

 c)      Legitimate interest pursued

We will also use the information you provide to the extent that it is in the legitimate interest of our business in conducting and managing our business to enable us to give you the best service and most secure experience and to comply with applicable laws, or for security reasons, website optimisation, performance marketing activities, or data analytics.

WITH WHOM WE SHARE YOUR PERSONAL DATA

– Third parties with your consent 

-Our partners and providers who are contracted to perform services on our behalf. For example entities who process credit card payments, distribution partners who fulfil orders and partners who provide web-hosting and marketing services. 

-Where we are required to disclose information about you by law or legal process to law enforcement or other government officials or in connection to an investigation of suspected or actual fraudulent or illegal activity. 

HOW LONG WE STORE YOUR PERSONAL DATA

We store the information you provide to us for the duration of our relationship and an appropriate period after to enable us to comply with legal requirements and applicable statue of limitation periods. If you have consented to marketing communications we will store the necessary information to continue to send you these communications. If you have a request for data removal you can submit a request to [email protected]. 

IF YOU DON’T PROVIDE US YOUR PERSONAL DATA

Where we need to collect personal information by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

YOUR RIGHTS

You have certain rights and choices in connection with the personal data we collect from you. To update your preferences, ask us to remove your information from our mailing lists or submit a request, please contact us as specified below.

Email opt-out

If you have registered for email alerts, you can at any time tell us not to send you alerts by email by clicking on the unsubscribe link within the emails you receive from us or by contacting us as indicated below. 

Withdrawing consent

You may withdraw any consent you previously provided to us at any time by contacting us as indicated below. This will not affect the lawfulness of our use of your information based on your consent before its withdrawal.

Reviewing, updating or deleting personal data or restricting or objecting to their use

Subject to applicable law, you may have the right to request access to and rectification or erasure of the personal data we maintain about you, or to request the restriction of our use of this information, as appropriate. You may object at any time to the processing of your personal data on grounds relating to your particular situation, in accordance with applicable law. These rights may be limited in some circumstances under applicable law. You may exercise these rights by contacting us as indicated below.

Other Rights

Subject to applicable law, you have the right to receive, in a structured, commonly used and machine-readable format, the personal data that you have provided to us about you, with your consent. You also have the right to have this information transmitted to another data controller, where it is technically feasible. You may exercise this right by contacting us as indicated below. You also may lodge a complaint with a data protection authority.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

The data subject has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent before withdrawal (art. 13.2.c GDPR)

In this section you should inform the data subjects whether automated decision-making processings exist. You should also include the logic involved and the envisaged consequences for the data subjects (for example: describing the logic used by artificial intelligence and what could the outcomes be for the data subject) (art. 13.2.f)

INTERNATIONAL TRANSFER OF PERSONAL DATA

Our main operations are based in the UK and your personal information is generally processed, stored and used within the UK and other countries in the European Economic Area. In some instances however we may transfer the personal data we collect about you to our affiliates and third party service providers in countries other than the country in which the information was originally collected (including the United States), where necessary to fulfil the purposes described in this Privacy Policy and your personal data will be subject to applicable foreign laws. When we transfer your information to other countries, we will protect that information and implement appropriate safeguards to ensure a level of data protection when transferring your personal data, including the conclusion of data transfer agreements incorporating the European Commission’s Standard Contractual Clauses pursuant to Article 46 of the GDPR or other applicable data transfer mechanisms. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

In this section you inform the data subjects of their right to lodge a complaint, possibly including the contacts details and name of the relevant supervisory authority (art. 13.2.d).