This English text is provided for convenience. The Romanian version is the legally binding one.
This document, called a privacy policy, is intended to help you understand the information we collect when you visit the botanicformula.md site („the Site”), whether or not you are registered, and describes how we use that information.
Where relevant, this privacy policy also describes how we process the information you give us, or that we collect about you, when you visit the shops we run directly („Shops”), or in the context of any other contact you may have with us. This policy is complementary to any other information provided in other circumstances.
This Site is a site with a general audience; our services, however, are intended for people aged 16 or over. We do not request, collect, use or disclose personal data provided by anyone under the age of 16, either online or in our Shops. If we learn that we have collected personal data from a child, we delete that information.
If you are under 16, please do not register or continue with an online purchase, and ask an adult (one of your parents or your legal guardian) to carry out the necessary steps.
„Viorica-Cosmetic” S.A. is a joint-stock company, duly established and operating under the laws of the Republic of Moldova, with its registered office in Chișinău, 1 Mesager Street, registered on 22.02.1996, tax code 1002600033793.
This document gives you important information about the following:
„Viorica-Cosmetic” S.A. is the controller of the personal data you send us and is responsible for your personal data in accordance with the applicable data protection legislation (referred to collectively as Viorica-Cosmetic, „we”, „us” or „our” in this Privacy policy).
Our contact details are: „Viorica-Cosmetic” S.A., Chișinău, Republic of Moldova, 1 Mesager Street. Email: [email protected]
The data we collect from you is stored on Viorica-Cosmetic servers.
We do not pass on, sell or transfer your data to third parties for marketing purposes outside „Viorica-Cosmetic” S.A. Data passed to third parties is used only in order to provide you with our services. You will find the categories of third parties within each specific process below.
Part of the data collected is transferred to a third party for:
These third parties have undertaken contractually to provide appropriate safeguards for your personal data, which means that it is protected in accordance with the legal requirements of the European Union.
For each specific processing of personal data that we collect from you, we tell you whether providing the personal data is required by regulation or is necessary in order to conclude a contract, whether you are obliged to provide us with the personal data, and what the possible consequences are if you refuse.
The right of access means you have the right to obtain confirmation from Viorica-Cosmetic as to whether or not we are processing your data and, if we are, to be given access to that data and information about how it is processed.
The right to rectification means you have the right to ask for your personal data to be corrected if it is inaccurate, including the right to have incomplete personal data completed. If you have a Viorica-Cosmetic account, you can edit your personal data in your account.
The right to erasure means you have the right to obtain, at any time, the erasure of personal data processed by Viorica-Cosmetic, in any of the following situations: the data is no longer necessary for the purposes for which it was collected or processed; you withdraw your consent and there is no other legal basis for processing; you object to the processing; the data has been processed unlawfully; the data must be erased in order to comply with a legal obligation, or it was collected in connection with the provision of information society services.
Your data will nonetheless be retained in order to complete the following situations:
The right to restriction of processing means you have the right to obtain a restriction on processing in the following situations:
The right to portability means you have the right to receive your personal data in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller.
The right to object means you have the right to object to the processing of your personal data based on the legitimate interest of Viorica-Cosmetic. Viorica-Cosmetic will not continue to process the personal data unless we can demonstrate a legitimate ground for the processing that overrides your interests and rights, or unless the processing is carried out on the basis of legal proceedings.
The right to refuse automated decision-making means you have the right not to be subject to a decision based solely on automated processing, including profiling, unless you have given your explicit consent to it or the automated processing is necessary for concluding or performing a contract.
Your right to object to direct marketing:
We attach particular importance to the protection of personal data, and our staff are always available at [email protected].
When we use the notion of „personal data” in this privacy policy, we mean any information that allows us to identify you, or a third party whose personal data you provide to us, directly or indirectly, including any information relating to the purchase of goods or services, or the information you have chosen to communicate to us or share with us or with third parties while using the Site or our Shops.
We process personal data in accordance with Regulation (EU) 2016/679, „the GDPR”, and with the legislation of the Republic of Moldova. We reserve the right to carry out further processing as permitted by law in the context of a criminal investigation or of another investigation or proceeding.
Source of the data
We collect personal data from you only when you provide it voluntarily, such as:
If you provide us with personal information about third parties (for example family members or other third parties), you must make sure that those third parties are informed and that you are authorised in respect of the use of their data, as described in this Privacy policy.
Types of data
We may collect and use different types of personal data depending on the purpose, as described below:
Personal data may be used for the following purposes, depending on the specific circumstances in which you interact with us.
When you use our Site
When you use our Site to look for our products and services and to view the information we make available, a number of cookies are used by us and by third parties to allow the site to work, to collect useful information about visitors and to help you have the best possible user experience.
Some of the cookies we use are strictly necessary for our site to work, and we do not ask your consent to place them on your device. Besides the cookies we use, various third parties also place cookies on your device, with your consent.
When you send a request through our Site
When you send a request through our Site, depending on the information that is of interest to you, we may need the following: your first name and surname, contact telephone number, email address, postal address, sex and age.
We use this information to answer your question, including to provide the information you requested about our products and services. We may also send you further emails after you have made a request, in order to meet your interest and to make sure we have answered your question. We do so on the basis of our legitimate interest in providing accurate pre-sale information.
We do not use the information you provide to make automated decisions that could affect you.
When you buy a product from our Site
When you buy products from us online, we ask for contact information such as your first name and surname, address, contact telephone number, email address and credit card information (when the order is paid online). We also record the IP (Internet Protocol) address, which is your device's address on the Internet.
We use this information to manage your online purchases on botanicformula.md, to process your order and to dispatch your products. We send you an order confirmation by email as well as a dispatch confirmation and, where appropriate, we use your telephone number to contact you about your purchase. We also use your data to handle complaints and product warranties. We use personal data to identify you, to confirm that you are of legal age to shop online, and to confirm your address to external partners.
We ask for this information in order to process the payment, deliver your products and perform the contract concluded with you. Card details are processed by the payment processor Victoriabank, and Viorica-Cosmetic does not store any details of Customers' cards. We record your IP address in order to demonstrate that the sale was taxed correctly, an obligation we have under the law.
Your personal data passed to third parties is used only to provide you with the services mentioned above, for operations carried out by warehousing and distribution service providers in connection with the delivery of your order, and for payment processing by payment service providers.
We do not use the information you provide to make automated decisions that could affect you.
When you sign up to receive our newsletter
You can sign up for the newsletter in the following ways:
We ask your consent to use this data in order to send you by email the newsletter containing information about our products and other information we believe may be of interest to you.
You can withdraw your consent at any time by following the instructions in each newsletter, and we stop sending you these messages immediately.
In order to send the newsletters, your name and email address are transferred to a third party. To send them efficiently we use the email marketing platform Mailchimp, The Rocket Science Group LLC, based in Atlanta, Georgia, USA. Mailchimp is EU-US Privacy Shield certified, complies with the rules of EU Regulation 679/2016, and has undertaken contractually to provide appropriate safeguards for your personal data, which means that it is protected in accordance with the legal requirements of the European Union.
We do not use the information you provide to make automated decisions that could affect you.
When you create a Customer account
When you create a Customer account, we ask for the following categories of personal data: first name and surname, email address and password.
We process the following categories of personal data if you make a purchase:
We also process the following categories of personal data relating to your cookies:
We use your personal data to create and manage your Viorica-Cosmetic account and to give you a personalised and relevant experience on the botanicformula.md site.
We record and manage the benefits offered in the Customer account, and send you information about your rewards, such as discounts, tips, surprises and events.
We give you your order history and the details of your orders, and allow you to manage your account settings. We also give you simple ways to correct and update your information, such as contact details and payment information.
If you have not opted out of direct marketing, we use your personal data to send you marketing offers, information surveys and invitations by email, text message, telephone call and post.
The processing of personal data for your account is based on the consent you gave when creating the Viorica-Cosmetic account.
The processing of your personal data in order to provide you with relevant product information is based on our legitimate interest.
You have the right to close your account at any time. If you choose to do so, your account ceases to exist and you are considered inactive.
You have the right to object to the processing of your personal data based on the legitimate interest of Viorica-Cosmetic by contacting [email protected]. Your account is then deleted and we are no longer able to provide you with our services.
Direct marketing
On the basis of the consent you have given, we process the following categories of personal data:
If you have a Viorica-Cosmetic account we also process the personal data submitted in connection with it, such as name, address, order history, and how you browsed and what you clicked on the site.
We use personal data to send you marketing offers, information surveys and invitations by email, text message, telephone call and post.
To optimise your experience with Viorica-Cosmetic, we give you relevant information and product recommendations, and send you personalised offers, invitations to competitions, prize draws or promotions, and other benefits for registered customers. All these services are based on previous orders, on the items you clicked on and on the information you submitted.
Data passed to third parties is used only to provide you with the services mentioned above; data passed to media agencies and technical providers is for distributing physical and digital direct marketing.
We do not pass on, sell or transfer your data to third parties for marketing purposes.
The processing of personal data is based on your consent when you agree to direct marketing.
You have the right to withdraw your consent to the processing of personal data at any time.
When you do so, Viorica-Cosmetic stops sending you further direct marketing offers or information based on your consent.
You can unsubscribe from direct marketing by following the instructions in each marketing message.
How long we keep your personal data
We store your information for as long as the law requires. Where there is no legal requirement, we store it only for as long as necessary.
We have put in place appropriate measures to secure your personal data against accidental loss and to prevent unauthorised access, use, alteration and disclosure. For example, when you provide information about an order, we use Secure Socket Layer (SSL) technology, an encryption tool that provides security while this information travels over the Internet. We also use firewall protection, password control and other technological and procedural safeguards for the maintenance of this Site. Although we have implemented the security measures above for this Site, you should know that 100% security is not possible. Providing your personal data is therefore done at your own risk and, to the fullest extent permitted by applicable law, we bear no responsibility for the disclosure of your personal information caused by errors, omissions or unauthorised acts of third parties during or after its transmission to us. We recommend that you regularly update the software protecting data transmission over networks (for example antivirus software) and make sure your electronic communications provider has adopted appropriate means for the security of data transmission over networks (for example firewalls and spam filters); (ii) keep your username and password for accessing your account confidential and do not disclose them to anyone; (iii) change your password regularly; and (iv) do not use the same password for all your accounts.
In the unlikely event that we find the security of your personal information in our possession or control has been or could have been compromised, we notify you of this, in accordance with applicable law, using any of the methods described here (by giving us your email address, you agree to receive such a notification electronically at that address).
If you believe that Viorica-Cosmetic is processing your personal data incorrectly and you have a complaint about our use of your data, we would prefer you to contact us directly in the first instance, so that we can address the complaint.
You also have the right to lodge a complaint with a supervisory authority.
We review regularly and, where appropriate, update this privacy policy from time to time, as our services and our use of personal data evolve. If we want to use your personal data in a way we have not previously identified, we will contact you to give you information about it and, where necessary, to ask for your agreement.
We update the version number and the date of this document each time it is changed.