Personal Data Protection
These Personal Data Protection and Security Policies have been developed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EU. They specify how your personal data, which you provide in connection with the use of the website https://www.gvscosmetics.cz (hereinafter referred to as the Website), as well as when purchasing goods and services from us, is used and protected, whether through the website or any other way, through your interaction with us (for example, through customer lines or web chat) and in the future after your participation in the loyalty program. This primarily means that when processing personal data, the principles of legality, fairness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity and confidentiality are respected by GVSgroup s.r.o
The controller of personal data is GVSgroup s.r.o, located at Nemocniční 484/45, 70200, Ostrava Czech Republic, ID No: 19608772, declares that all personal data (also referred to as "data") are considered strictly confidential and processed in accordance with the current legal provisions in the field of personal data protection.
The processing of personal data may be entrusted to a processor by GVSgroup s.r.o. For any information regarding the processing of personal data, including a list of data processors of GVSgroup s.r.o, please contact gvscosmetics.cz@gmail.com
The security of your personal data is our priority. We, therefore, pay due attention to personal data and their protection. In these Security and Personal Data Protection Policies ("Policies"), we would like to inform you about what personal data we collect about you and how we further use it.
1. Personal data and their processing
1.1. Categories of personal data
We collect various data depending on the services you use.
If you shop with us, we collect:
• Name and contact details. First and last name, email address, postal address, phone number.
• Demographic data. Information about gender, date of birth, country and preferred language.
• Data generated based on the duration of the contract - purchased products, customer segment, volume of services provided.
• Login data. Usernames. We do not have access to the actual password.
If you subscribe to our marketing messages, we collect:
• Name and contact details. First and last name, email address, postal address, phone number.
• Demographic data - country, gender information.
We also process these personal data:
• Data related to communication between GVSgroup s.r.o - in the person of private entrepreneur Olesia Hirka and the customer.
• Records of behavior on the websites managed by GVSgroup s.r.o.
1.2. Purposes of personal data processing:
Providing services and their improvement. In order to provide the offered services and improve them to your satisfaction, we process your personal data. Specifically, this includes:
• Processing the order of goods or services, ordered through our website. The legal reason here is the necessity to fulfill the purchase contract and, for selected data, to fulfill legal obligations (e.g., accounting documents).
• Notification about product availability. In the event you request to watch for product availability, we process your personal data based on your consent.
• Customer support. To provide customer service and address potential problems in fulfilling the purchase contract, we process your personal data necessary to fulfill these contracts.
• Communication. We use the collected data for the purpose of communication with you and its individual adaptation. For example, we might contact you by email or in another way, to remind you that you have goods in the online basket, to help you complete your order, to inform you of the current status of your request, order or claim or to obtain additional information from you or to alert you that you need to perform an action necessary to maintain the active status of your account. If you shop with us as an unauthorized user, we process this data because of the legitimate interest of GVSgroup s.r.o, as described above. On improving services. We use data to constantly improve our services and systems including adding new features and at the same time to make informed decisions using aggregate analyses and business intelligence, all based on our legitimate interest stemming from freedom of enterprise and consisting of the necessity to improve the services provided for the success in economic competition. To ensure sufficient protection of your rights and interests, for the purpose of improvement we use personal data, which are as much as possible anonymized.
• Protection, security, and dispute resolution. We may process data out of a legitimate interest, which consists of ensuring the protection and security of our systems and our customers, detecting and preventing fraud, resolving disputes and enforcing our agreements based on a legitimate interest.
• Marketing offers.
• We send you commercial notifications about similar products that you have bought.
• You can always refuse these commercial notifications via the unsubscribe link, which you will find in every email.
• In case you unsubscribe from receiving commercial messages, we will no longer use your electronic contacts for these purposes. We will start using them again if you register them or explicitly request them.
• The marketing offers displayed to you may be selected based on other information we have obtained about you over time according to contact data, demographic data, preferred items, and data about the use of our products and
We further process these personal data:
• Data related to communication between GVSgroup s.r.o - represented by private entrepreneur Olesia Hirka and the customer
• Records of behavior on websites managed by GVSgroup s.r.o - represented by private entrepreneur Olesia Hirka
1.2. The purposes of personal data processing:
Providing services and their improvement. To provide and improve the offered services to your satisfaction, we process your personal data. Specifically, these include:
• Processing orders for goods or services ordered through our website. The legal reason here is the necessity to fulfill the purchase contract and for selected data to comply with legal obligations (e.g., accounting documents).
• Notification of product availability. If you request product availability tracking, we process your personal data based on your consent.
• Customer support. To ensure customer service and resolve potential problems when fulfilling the purchase contract, we process your personal data necessary for these contracts' fulfillment.
• Communication. We use collected data for communication with you and its individual adaptation. For instance, we may contact you by email or other means to remind you that you have goods in the online basket, assist you with completing your order, inform you about your request's current status, order or complaint, or get more information from you or notify you that you need to perform an action necessary to maintain your account's active status. If you shop with us as an unauthorized user, we process this data due to a legitimate interest inGVSgroup s.r.o.
• About improving services. We use data for continuous improvement of our services and systems, including adding new features and making informed decisions using aggregate analysis and business intelligence, all based on our legitimate interest derived from the freedom of business and the need to improve services for success in economic competition. We ensure sufficient protection of your rights and interests; for improvement purposes, we use personal data that is as anonymized as possible.
• Protection, security, and dispute resolution. We may process data from a legitimate interest in ensuring the protection and security of our systems and our customers, detecting and preventing fraud, resolving disputes, and enforcing our agreements based on legitimate interest.
• Marketing offers.
• We send you commercial announcements about similar products that you have purchased.
• You can always reject these commercial announcements through the unsubscribe link found in every email.
• If you unsubscribe from receiving commercial messages, we will no longer use your electronic contacts for these purposes. We will start using them again if you register them or explicitly request them.
• The marketing offers displayed to you may be selected based on other information that we have obtained about you over time according to contact data, demographic data, favorite items, and usage data from our products and
• websites (cookies, IP address, data provided by your browser, click-through data, viewed commercial messages, visited products). We do not perform fully automated processing that would have legal effects for you.
• If you are not our customer, we process based on your consent.
• You have the right to object to these processing at any time for free.
• Processing cookies from websites operated by GVSgroup s.r.o .
• If you have cookies enabled in your web browser, we process behavior records from cookies placed on websites operated by GVSgroup s.r.o, to ensure better operation of GVScosmetics websites and for the purposes of GVScosmetics internet advertising. More information can be found in a separate chapter of this document.
1.3. Transfer of personal data to third parties
Your personal data will only be passed on to third parties or otherwise mediated if it is necessary within the fulfillment of the purchase contract, based on a legitimate interest, or if you have previously expressed consent:
(a) to sister companies and processors for the execution of internal processes and procedures
(b) to credit card companies, payment service providers for processing payments, and banks based on your order, fulfillment of the purchase contract
(c) to logistics companies for the purpose of delivering the products or services you have ordered and resolving complaints including withdrawal from the contract
(d) to our partners in loyalty schemes you participate in
(e) to other service providers, third parties involved in data processing
(f) to third parties; legal or financial representatives
(g) to public bodies (e.g., police)
(h) to third parties conducting customer surveys
Customer account and purchase without registration
(a) When creating a personal account, we set up a customer account for you, which is password-protected. As part of the customer account, you get direct access to your data, including editing them, and you can view your completed and incomplete orders. Through the customer account, you can also manage your personal data and newsletter subscription.
(b) If you do not want to set up a customer account to make a purchase, you can also shop in our e-shop without registration.
c) You have the right to terminate the contract in accordance with the relevant terms of business.
3. Personal Data Security and Retention Period
3.1. Personal Data Security
(a) Your personal data is transmitted to us in an encrypted form. We use the HTTPS encryption system (HyperText Transfer Protocol Secure). We protect our websites and other systems by technical and organizational measures against loss and destruction of your data, against unauthorized access to your data, their modification, or dissemination.
(b) We require our processes to be in compliance with the GDPR.
(c) Access to your customer account is possible only after entering your personal password. In this context, we would like to remind you that it is necessary not to share your access data with third parties and always close the window of your web browser after ending your activity in the customer account, especially when you are using the computer with other users. GVScosmetics - in the person of private entrepreneur Olesia Hirka, does not assume responsibility for the misuse of passwords, unless this situation was directly caused by GVScosmetics - in the person of private entrepreneur Olesia Hirka.
3.2. Processing Period
We process and store personal data:
for the period necessary to ensure all rights and obligations arising from the purchase contract
for 1 year after the end of the warranty period to resolve potential disputes
for the period during which GVSgroup s.r.o, as the controller is required to keep according to generally binding legal regulations. Accounting documents, e.g., invoices issued by GVSgroup s.r.o, are archived in accordance with the law for 10 years from their issuance
consent to notify about product availability remains valid until the information about availability is sent, but no longer than for 1 year or until its withdrawal
consent to marketing offers is valid for 4 years or until withdrawal
In other cases, the processing period results from the purpose of processing or is given by legal regulations in the field of personal data protection.
Rights of Data Subjects
a) If we process your personal data, you can request free information about the processing of your personal data at any time.
b) If you believe that we process personal data in violation of your personal data protection and legal conditions of personal data protection, you can ask for an explanation, require that we remove such a situation, in particular, you can request correction, supplementation, deletion of personal data, or blocking of personal data.
c) To exercise your rights, contact the data protection officer at the email address gvscosmetics.cz@gmail.com. You can also contact the Office for Personal Data Protection https://www.uoou.cz
d) You can revoke your consent to the processing of personal data at any time. If you revoke your consent to the processing of personal data, your personal data will be deleted; however, this does not apply to personal data that GVSgroup s.r.o, needs to fulfill legal obligations (e.g., processing of an already placed order) or to protect its legitimate interests. The deletion of personal data will also occur if the personal data are no longer needed for the specified purpose or if the storage of your data is impermissible for other legally stipulated reasons.
Websites
5.1. Cookies
Our websites use so-called cookies to make our offer relevant, interesting, and user-friendly for you. Cookies are small text files that are stored on your computer, smartphone, or other device and used in your browser. We use cookies, for example, to:
ensure the correct functioning of the cart so that you can complete your order as easily as possible
remember your login details, so you don't have to re-enter them repeatedly
customize our website to your requirements by tracking visits, your movement on the website, and used functions
find out information about viewing advertisements so that we do not display advertising for goods in which you are not interested
5.2. Use of Cookies
Cookies used on our websites can be divided into two basic types. Temporary, i.e., "session cookies", are deleted immediately after you end your visit to our website. Long-term, i.e., "persistent cookies", remain stored on your device much longer or until you manually delete them (the time of keeping cookies on your device depends on the settings of the cookie itself and your browser settings).
Cookies can also be divided according to their functionality into:
analytical, which help us improve the user comfort of our website by understanding how users use it
conversion, which allow us to analyze the performance of various sales channels
tracking, which, in combination with conversion, help to analyze the performance of various sales channels
remarketing, which we use to personalize the content of ads and their correct targeting
essential, which are important for the basic functionality of the website
5.3. Rejection of Cookies
The setting of cookie use is part of your web browser. Most browsers automatically accept cookies in their default settings. Cookies can be rejected or restricted to the types you choose using your web browser. Information about browsers and how to set preferences for cookies can be found on the following websites or in other internet browser documentation:
Chrome
Firefox
Internet Explorer
Android
5.4. Links
Our website contains links to other websites that are useful and contain information. Please note that these websites may be owned and operated by other companies and organizations and have different security and personal data protection policies. Our company has no control and bears no responsibility for any information, material, products, or services located on or accessible through these websites.
Contact Us
In case of any queries, comments, and requests relating to these Policies, do not hesitate to contact us at the email address.
Responsible person: gvscosmetics.cz@gmail.com
Contact: GVSgroup s.r.o
ID: 19608772
Registered address: Nemocniční 484/45, 70200, Ostrava, Czech Republic
Customer Service: gvscosmetics.cz@gmail.com
These policies are effective from December 14, 2021.