Privacy Policy

  1. Privacy Policy dated 1.06.2025
    • Protecting the personal data of Users is of key importance to us, which is why we take every effort to ensure their security while visiting the Website. This Privacy Policy (hereinafter referred to as the Policy) outlines the principles for processing and protecting Users’ personal data by the Administrator.
  2. Definitions
    • User – a natural person whose actions in the IT system are recorded and may be analyzed in the form of logs or statistical data; it may be an identified or identifiable person.
    • Personal Data – any information relating to an identified or identifiable natural person, including data saved in system logs or statistics that directly or indirectly allow identification of that person (e.g., IP address, device identifiers, session identifiers). Data are not considered identifying if processing them for this purpose would require excessive technical measures, costs, or time.
    • Data Processing – any operation performed on personal data, whether automated or manual, in particular collecting, recording, storing, analyzing, sharing, or deleting data contained in system logs or statistics.
    • Personal Data Breach – any event resulting in accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access to personal data contained in system logs or statistical summaries, regardless of the form of storage and processing.
    • Website – the website operated at www.skintra.eu.
    • Policy – this Privacy Policy.
    • Administrator – Cosibella sp. z o.o., 15A Mineralna st., Building D3, 02-274 Warsaw.
  3. Following the regulations of the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) (Official Journal of the EU L 119, p. 1) (hereinafter: GDPR), we inform that:
    1. Personal data Administrator
      The Administrator of your personal data is Cosibella sp. z o.o., based in Warsaw, entered in the National Court Registry by the District Court for the Capital City of Warsaw, XIII Commercial Department of the National Court Registry (KRS), number 832314, address: 15A Mineralna st., Building D3, 02-274 Warsaw, REGON 385746050, NIP 5223180504.
    2. Applicable legal regulations
      Users’ personal data are processed in accordance with the requirements of generally applicable law, particularly the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws 2019, item 1781 as amended) and the Regulation (EU) 2016/679 of 27 April 2016 on personal data protection and free movement of such data (GDPR, Official Journal of the EU L 119 of 04.05.2016, pp. 1-88).
      • Nature of the Website
      • The www.skintra.eu website is informational only. It does not offer account creation, order placement, cosmetology services, or newsletter subscription. Personal data is processed only if the User contacts the Administrator independently, including filing a complaint via email at contact@skintra.eu.
      • The site publishes product reviews originating from the online store operated by the Administrator at https://cosibella.pl/. These reviews are automatically imported and presented for informational purposes only. The www.skintra.eu Website does not allow product reviews to be added.
      • The Website also features an interactive "Become a wholesaler" button, which, when clicked, redirects the User to another Administrator’s site dedicated to wholesale sales at https://cosibella-wholesale.com/. This redirection is voluntary and occurs solely at the User’s action. The Administrator is responsible for data processing on https://cosibella-wholesale.com/. Users should consult the separate privacy policy applicable to this site.
      • Data recipients
      • Access to personal data is granted to the following persons: Administrator, Administrator’s employees, collaborators, and persons providing services to the Administrator who are authorized in writing. Access by these persons occurs only for the purposes and scope indicated by the Administrator.
      • The Administrator keeps a register of persons authorized to process data. Authorized persons are obliged to maintain the confidentiality of personal data and data protection methods.
      • The Administrator and authorized persons apply technical and organizational measures ensuring the protection of processed personal data.
      • Your personal data may be disclosed to:
        • state authorities and other entities authorized by law to access data within the scope and purpose prescribed by law;
        • other external entities providing supporting services to the Administrator, such as IT service providers, auditing entities, marketing services providers, entities supporting sales and marketing processes, and legal services providers.
    3. Automated processing, including profiling
      Your personal data will not be processed in an automated manner (including profiling) that could produce legal effects concerning you or similarly significantly affect your situation.
    4. Your rights regarding personal data processing
      In connection with the processing of your personal data, you have the following rights in such cases provided by law:
      • right of access to your personal data,
      • right to request restriction of your personal data processing,
      • right to data portability,
      • right to rectify your personal data,
      • right to erase your personal data,
      • right to object to the processing of your personal data,
      • right to withdraw consent to data processing where consent is the basis of processing, which does not affect the lawfulness of processing based on consent before its withdrawal,
      • right to lodge a complaint with a supervisory authority, namely the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), 2 Stawki st., 00-193 Warsaw, phone: +48 22 531 03 00.
      To exercise the above rights, please contact: contact@skintra.eu.
    5. Purpose and legal basis for processing
      Your personal data will be processed for the purpose of the legitimate interest of the administrator (Article 6(1)(f) GDPR), understood as statistical purposes, ensuring security, and improving Website operation. Data processing, such as IP addresses and logs, is used solely for statistical and security purposes. Session data, activity on the site (including visited subpages), operating system, and other technical data may be collected by analytics tools but are not used to identify specific users.
    6. Data retention period
      Data is stored for the time necessary to fulfill the purpose for which it was collected, and thereafter for the period required by law or until the statute of limitations for claims expires.
    7. Scope of data processing
      The Administrator processes the following User data: device data (including IP address, data contained in cookies or similar technologies, and session data), browser type, operating system, and activity on the site (including visited subpages).
    8. Amendments to the Privacy Policy
      The Policy may be modified periodically. Modifications aim to reflect changes in the Administrator’s personal data processing practices and strengthen data protection.
      Significant changes to the Policy will be signaled with clearly visible notices on www.skintra.eu. The top of the webpage, which displays the Policy content, will show the date of its last update.
    9. Contact
      The User may contact the Administrator at any time at contact@skintra.eu to inquire about how the Administrator uses or intends to use their personal data, as well as to submit any questions or comments regarding this Policy.
pixel