Privacy Policy
This Privacy Policy sets out the rules for the processing of personal data obtained through the online store brilante.nl (hereinafter: the "Online Store").
The owner of the Online Store and at the same time the data controller is Skiera Cosmetics BV, established in The Hague (2544EM), Koperwerf 27, KVK72689331: KVK, VAT: NL859198819B01, hereinafter referred to as Skiera Cosmetics BV.
Personal data collected by Skiera Cosmetics BV via the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.
Skiera Cosmetics BV pays special attention to respecting the privacy of customers visiting the Online Store.
§ 1 Type of data processed, purposes and legal basis
Skiera Cosmetics BV collects information about natural persons performing legal actions not directly related to their business or profession, natural persons conducting business or professional activity on their own behalf, and natural persons representing legal entities or organizational units without legal personality, collectively referred to as "Customers".
Customer personal data is collected in the following cases:
- when registering an account in the Online Store, to create and manage a personal account. Legal basis: necessary for the performance of the account service agreement (Art. 6(1)(b) GDPR);
- when placing an order in the Online Store, to perform the sales agreement. Legal basis: necessary for the performance of a sales agreement (Art. 6(1)(b) GDPR);
- when subscribing to the newsletter, to perform the agreement for the provision of the newsletter service by electronic means. Legal basis: consent of the data subject (Art. 6(1)(a) GDPR);
- when using the contact form in the Online Store, to perform the agreement for the provision of the contact form service. Legal basis: necessary for the performance of the service agreement (Art. 6(1)(b) GDPR);
- when using the "Leave a review" service, to perform the agreement for the provision of the review service. Legal basis: necessary for the performance of the service agreement (Art. 6(1)(b) GDPR).
When registering an account in the Online Store, the Customer provides:
- email address;
- first and last name;
- phone number.
The Customer sets an individual password for the account during registration. The password may later be changed according to §5.
When placing an order in the Online Store, the Customer provides:
- email address;
- address details:
- postal code and city;
- country;
- street and house/apartment number;
- province/state;
- first and last name;
- phone number.
For business customers, the above scope is extended by:
company name;
VAT number.
When using the newsletter service, the Customer provides only an email address.
When using the contact form, the Customer provides:
- email address;
- first and last name;
- phone number.
When using the "Leave a review" service, the Customer provides:
- email address;
- first and last name or username (pseudonym).
While using the Online Store website, additional information may be collected, in particular: IP address, domain name, browser type, access time, operating system type.
Navigation data may also be collected, including information about links clicked or actions taken within the Online Store. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
For the purpose of establishing, pursuing or defending claims, certain personal data may be processed, including name, usage data, and other necessary information. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Providing personal data is voluntary but necessary to conclude contracts or provide services. Failure to provide data prevents account registration or order processing.
§ 2 Data recipients and storage period
Customer data is shared with service providers used by Skiera Cosmetics BV to operate the Online Store. Depending on agreements, they act as processors or independent controllers.
Processors include hosting providers, accounting services, marketing systems, and analytics tools.
Controllers include payment service providers.
Service providers are located in Poland and other EEA countries.
Data is stored:
based on consent – until withdrawn and thereafter for limitation periods (generally 6 years, or 3 years for periodic claims and business-related claims);
based on contract – for the duration of the contract and limitation periods (generally 6 years, or 3 years for periodic claims and business-related claims).
For order fulfillment, data may be transferred to POST NL BV (The Hague).
For payments via SOFORT or PayPal, data is shared with Mollie BV, Amsterdam.
Data may be used for better service, statistics, personalization, and store management.
Newsletter subscribers receive commercial information via email.
Data may be disclosed to public authorities when required by law.
§ 3 Cookies mechanism, IP address
The Online Store uses cookies stored on the user’s device.
Types of cookies:
- Session cookies – deleted after browser session ends;
- Persistent cookies – stored until expiration or deletion.
Own cookies are used for authentication and analytics.
Third-party cookies are used for advertising, analytics, and social media integration (Facebook, Google Analytics, Google Ads, Twitter, Awin, RTB House, etc.).
Cookies do not contain viruses or harmful software. Users may restrict cookies in browser settings.
IP addresses may be collected for diagnostics, statistics, security, and administration purposes.
The Online Store may contain external links and is not responsible for their privacy policies.
§ 4 Data subject rights
Users have the right to withdraw consent, object to processing, request erasure, restriction, access, rectification, and data portability under GDPR Articles 7, 15–21.
Requests are handled within one month, extendable by two months if necessary.
Complaints may be submitted to Skiera Cosmetics BV or to the Dutch Data Protection Authority.
§ 5 Security management - password
The Online Store uses SSL encryption.
If a password is lost, a new one can be generated via the "Forgot password" form. Passwords are not stored in readable form.
The company never requests login credentials via email.
§ 6 Changes to the Privacy Policy
The Privacy Policy may be updated with 7 days’ notice.
Questions may be sent to: [email protected]
Last modification date: 08.09.2021