Privacy Policy

I. General Information

The confidentiality of your personal data is a primary concern of SAVE YOUR SKIN SRL, with registered office in Strada Mesteacănului, No. 21a, Dumbrăvița, 300406, Romania jud.Timiș, registered with the ONRC under J35/1703/20015, CUI: 34773426, as a personal data operator.

This document called the Privacy Policy includes the necessary, relevant and conclusive explanations regarding the personal data we collect and process, how and for what purpose we use it, as well as other aspects. The Privacy Policy applies only to the website https://fathyia.ro/.

This document is intended to inform you about the processing of your personal data and about your rights in the context of using the website https://fathyia.ro/.

II. Definitions according to GDPR

Our privacy policy uses specific terms in the field of personal data protection, the definitions of which are found in the General Data Protection Regulation. Considering that we want this policy to be readable and easy to understand for all users of the website https://fathyia.ro/, we present the explanation of the terminology used. Therefore, GDPR defines in art.4 the specific terms, as follows:

  1. Personal data – means any information regarding an identified or identifiable natural person, referred to as the data subject. An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identification element, such as a name, an identification number, location data, an online identifier, or to one or more specific elements, specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
  2. Processing of personal data – means any operation or set of operations performed on personal data or on sets of personal data, with or without the use of automated means, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or making available in any other way, alignment or combination, restriction, deletion or destruction.
  3. Restriction of processing – means the marking of stored personal data in order to limit their future processing.
  4. Profiling – means any form of automated processing of personal data consisting in the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects regarding performance at the workplace, economic situation, health, personal preferences, interests, reliability, behavior, the location in which the natural person is located or his or her movements.
  1. Pseudonymization – means the processing of data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is stored separately and is subject to technical and organizational measures to ensure that personal data are not attributed to an identified or identifiable natural person.
  2. Data controller – means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  3. Person empowered by the operator – is the natural or legal person, public authority, agency or other body that processes personal data on behalf of the operator.
  4. Recipient (Beneficiary) – is the natural or legal person, public authority, agency or other body to whom/which the personal data are disclosed, whether or not it is a third party. However, public authorities to whom personal data may be communicated in the context of a specific investigation in accordance with Union law or the law of the Member State shall not be regarded as recipients. The processing of such data by those public authorities shall comply with the applicable data protection rules in accordance with the purposes of the processing.
  5. Third party – means a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorized to process personal data.

10. Consent – means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

III. Principles governing this privacy policy

  1. The principle of legality, fairness and transparency. This principle requires that personal data be processed legally, fairly and transparently in relation to data subjects.
  2. The principle of limiting the purpose, so that personal data are collected only for specified, explicit and legitimate purposes.
  3. The principle of collecting the minimum of personal data to achieve the purpose for which consent was obtained. According to this principle, personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
  4. The principle of maintaining accurate data ensures that personal data are correct and updated where necessary, and inaccurate data are deleted or rectified without delay.
  1. The principle of storing data strictly for the period for which consent was obtained. This implies that personal data are kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
  2. The principle of ensuring adequate security of personal data, so that they are complete, confidential and available.
  3. The principle of responsibility imposes on the operator the responsibility for respecting the principles listed in Article 5 paragraph (1) of the GDPR and demonstrating this compliance.

4.1 Categories of personal data

If you access the website https://fathyia.ro/, it will process your personal data, such as name, surname, telephone number, e-mail address, data regarding how you use the site, for example, behavior/preferences/habits, as well as other categories of data that you provide in the context of using the site.

When registering for our newsletter service, your data is used by SAVE YOUR SKIN SRL for promotional and marketing purposes. Use ceases as soon as you give up the newsletter service. You have the right to give up the newsletter service at any time by unsubscribing.

When registering as a user on the site, we collect the following personal data: name, surname or desired pseudonym, e-mail address, photo, if you associate an account from a social network we have access to the address of your profile on that social network. You have the prerogative to give up your account by sending an e-mail to office@fathyia.ro

In order to conclude a subscription, the following personal data are collected: name, surname, age, address, telephone number, e-mail address, fax and bank details if payment is made using a bank card.

4.2 Cookies

Our website https://fathyia.ro/ contains cookies, which are text files that are stored in a computer system via your internet browser and are intended to ensure the efficiency and security of our website. Many cookies contain a so-called cookie ID, which is a unique identifier of the cookie. It consists of a string of characters through which Internet pages and servers can be assigned to the Internet browser in which the cookie was stored. This allows visited websites and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

Cookies are used to make the website easier to use, do not cause damage to your computer and do not contain viruses. You can prevent the installation of cookies through a corresponding setting of your browser.

We use cookies to personalize content and ads, to provide social media functions and to analyze traffic. We also provide social media, advertising and analytics partners with information about how you use our site. They can combine them with other information provided by you or collected as a result of using their services.

Through cookies, the information and offers on our site can be optimized according to the user. These give us permission to recognize the users of our website and make it easier to use our website. The user of the website no longer has to enter access data each time the site is accessed, because it is taken over, and the cookie is thus stored in the user’s computer system.

Cookies especially save the settings you have chosen. The data subject may, at any time, prevent the use of cookies by our website by means of a corresponding setting of the internet browser. In addition, cookies that have already been set can be deleted at any time from the Internet browser. We inform you that, by preventing the installation of cookies, you may not be able to use all the functions of our website.

Following a visit to our website, several categories of cookies are placed, as follows:

  • cookies essential for the functioning of our website, being necessary for the authentication of users, for preventing the fraudulent use of user accounts or for offering specific functions of the site;
  • cookies for measuring traffic, which allow the recognition and counting of visitors, being necessary to improve the functioning of the site;
  • cookies for functionality, these being used to recognize you when you access the site again;
  • targeting cookies, which record your visit to our website, the pages and links you have accessed, being useful to make the site more remarkable for you.

V. Purposes and grounds for processing personal data

Our website collects and processes your personal data for the following purposes and on the basis of the following grounds:

  • for the purpose of providing services and making payments based on concluded contracts, personal data may be processed, such as identification data, contact data, bank data; this processing is based on the execution of a contract in which the data subject is a party or on a legal obligation imposed on us;
  • for the purpose of communication via e-mail, the information provided may be used to send you various communications to the e-mail address, if you have signed up for some of our newsletters; the legal basis of this processing is the consent of the data subject, which can be withdrawn at any time;
  • for advertising purposes, the information collected through cookies may be used to display advertisements relevant to your interests and preferences; the legal basis of the processing for the purpose mentioned above is our legitimate interest in maintaining free access to our website, without affecting our pecuniary activity;
  • for statistical analysis purposes, the data is used to improve certain functionalities, to modify sections or to present the most appropriate information; this processing has as its legal basis our legitimate interest in understanding how the website works, how it is read and who its visitors are;
  • for the purpose of controlling behavior, your personal data may be processed to prevent any illegal activity on our website, as well as to prevent prohibited activities on the site or that harm the activity of other visitors; the legal basis is our legitimate interest in ensuring the functioning of the site in optimal conditions and to stop any fraud;
  • for the purpose of a possible exercise of rights or claims against you, the personal data concerning you, such as identification data, contact data, address data, may be processed based on our legitimate interest in exercising our rights in the context of possible future disputes; In the event that your personal data will be collected and processed exclusively on the basis of consent, we will present you separately with a request regarding obtaining consent, in a clear, intelligible and easily accessible form, at the time you provide the personal data.

VI. Period of storage of personal data

The criteria used to determine the period of storage of personal data are defined by the purpose of the processing and the legal basis thereof. After the expiration of the period necessary to fulfill the purpose for which the respective data were collected and processed, they are deleted if they are no longer necessary for the execution or conclusion of a contract or if the data subject has not given his or her consent for the storage of these data for a longer period.

If the processing of your personal data is done exclusively on the basis of consent, these personal data will be processed only for the period for which your consent was expressed, unless you withdraw or limit your consent before the expiration of this period. In such cases, we will cease processing the respective personal data for the stated purposes, but without affecting the processing carried out on the basis of the consent expressed before its withdrawal. However, these may continue to be used for the necessity of fulfilling any legal obligation to process these personal data and/or our legitimate interest in processing these personal data for the purpose of exercising our rights (including the legitimate rights of other persons).

For more information regarding the period of storage and processing of personal data, please contact us at the e-mail address office@fathyia.ro

VII. Security of personal data

Our website https://fathyia.ro/ is protected by appropriate technical and organizational measures against access, modification or dissemination of your personal data by unauthorized persons, as well as against alteration, loss or destruction of personal data concerning you.

We recommend that you always treat your access data with confidentiality and close the browser window when you finish visiting our website.

For the transfer of personal data we use technical encryption procedures. You can identify the transmission of encrypted data by displaying a closing symbol, for example, displaying a key or padlock symbol in the status bar of your browser.

VIII. The rights you benefit from

As data subjects, you benefit from the following rights, in accordance with the provisions of the General Data Protection Regulation:

  1. The right to information, respectively the right to receive details regarding the processing activities carried out by Save Your Skin SRL, as described in this policy;
  2. The right of access to data, respectively the right to obtain confirmation from Save Your Skin SRL regarding the processing of personal data, as well as details regarding the processing activities, the way in which the data are processed, the purpose of the processing, the recipients or categories of recipients of the data, the rights of the data subject to obtain restriction, to oppose the processing, to request the rectification or deletion of the data, to lodge a complaint with the supervisory authority and details regarding the existence of an automated decision-making process, if applicable;
  3. The right to rectification, respectively the right to obtain the correction of inaccurate data concerning you, without undue delay, from Save Your Skin SRL, as well as the right to obtain the completion of incomplete personal data;
  4. The right to erasure (‘the right to be forgotten’) by Save Your Skin SRL, when one of the following reasons applies: a) the data is no longer necessary; b) consent has been withdrawn and no other legal basis applies; c) the data subject objects to the processing and there are no overriding legitimate grounds; d) the data has been processed unlawfully; e) there is a legal obligation on the controller to erase the data; f) the data was collected in connection with the provision of information society services;
  5. The right to restriction of processing, to the extent that one of the following cases applies: a) the data subject contests the accuracy of the data, for a period necessary to allow for verification; b) the processing is unlawful and the data subject opposes the erasure of the data, requesting instead the restriction; c) the controller no longer needs the data for the purpose of processing, but the data subject requests it for the establishment, exercise or defense of a right in court; d) the data subject has objected to processing, for the period during which checks are being made as to whether the legitimate rights of the controller override those of the data subject;
  6. The right to data portability, i.e. the right to receive personal data in a structured, commonly used and machine-readable format, and the right to have such data transmitted by Save Your Skin SRL to another data controller, to the extent that the conditions laid down by law are met;
  7. The right to object, which can be exercised by sending a request, for reasons relating to the particular situation of the data subject; thus, the data subject may object to processing on the grounds of public interest or on the grounds of legitimate interest, unless the controller demonstrates that it has compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or that the purpose is the establishment, exercise or defense of a right in court; The right to object may also be exercised at any time and without any justification with regard to processing for direct marketing purposes;
  8. The right not to be subject to an automated individual decision, i.e. the right not to be subject to a decision taken solely on the basis of automated processing activities, including profiling, which produces legal effects concerning the data subject or similarly significantly affects him or her;
  9. The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing or the competent courts, to the extent that you consider that your rights in the field of personal data protection have been infringed.

For further questions regarding how your personal data is processed, as well as for exercising the rights mentioned above, please send requests to the e-mail address office@fathyia.ro

IX. Disclosure and transfer of personal data

The data we collect from you will be processed within the European Union, depending on the purpose of the processing. Save Your Skin SRL takes all necessary steps to apply appropriate safeguards to protect the confidentiality and security of your personal data during data transfer. We also minimize the risk to your rights and freedoms by not collecting or storing sensitive data about you.

To the extent permitted by applicable personal data protection laws, we may disclose your personal data to clients for the purpose of engaging in business or to confirm the high quality of services offered, to auditors, supervisory authorities or external service providers in order to fulfill contractual obligations.

We may also disclose your personal data in situations where we are required to do so by law, in the event of pending or potential legal proceedings, or to establish, exercise or defend legal rights, including for the purpose of preventing fraud.

X. Changes to the privacy policy

Please note that we may update this information document from time to time by publishing a new version on our website to ensure that the policy complies with any legislative changes.

Due to the fact that the laws on personal data protection, as well as the interpretations of state bodies and the recommendations issued by supervisory authorities, change and improve over time, this privacy policy is, in turn, subject to changes and updates in accordance with new legislative requirements. Therefore, we inform you that we reserve the right to make changes to this document at any time, for any reason and without any notice. Any changes to our privacy policy will be posted on our website so that you are aware of the new version of this document.

paraben free * cruelty free * organic product *