Privacy Policy and Cookie Policy

Privacy Policy

Privacy Policy dated 1.06.2025

Definitions

  1. User – a natural person whose actions in the IT system are recorded and may be analyzed in the form of logs or statistical data; it may be an identified or identifiable person.
  2. Personal Data – any information relating to an identified or identifiable natural person, including data saved in system logs or statistics that directly or indirectly allow identification of that person (e.g., IP address, device identifiers, session identifiers). Data are not considered identifying if processing them for this purpose would require excessive technical measures, costs, or time.
  3. Data Processing – any operation performed on personal data, whether automated or manual, in particular collecting, recording, storing, analyzing, sharing, or deleting data contained in system logs or statistics.
  4. Personal Data Breach – any event resulting in accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access to personal data contained in system logs or statistical summaries, regardless of the form of storage and processing.
  5. Website – the website operated at www.skintra.eu.
  6. Policy – this Privacy Policy.
  7. Administrator – Cosibella sp. z o.o., 15A Mineralna st., Building D3, 02-274 Warsaw.

Cookies Policy

Following the regulations of the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) (Official Journal of the EU L 119, p. 1) (hereinafter: GDPR), we inform that:

  1. Personal data Administrator

    1. The Administrator of your personal data is Cosibella sp. z o.o., based in Warsaw, entered in the National Court Registry by the District Court for the Capital City of Warsaw, XIII Commercial Department of the National Court Registry (KRS), number 832314, address: 15A Mineralna st., Building D3, 02-274 Warsaw, REGON 385746050, NIP 5223180504.
  2. Applicable legal regulations

    1. Users’ personal data are processed in accordance with the requirements of generally applicable law, particularly the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws 2019, item 1781 as amended) and the Regulation (EU) 2016/679 of 27 April 2016 on personal data protection and free movement of such data (GDPR, Official Journal of the EU L 119 of 04.05.2016, pp. 1-88).
  3. Nature of the Website

    1. The www.skintra.eu website is informational only. It does not offer account creation, order placement, cosmetology services, or newsletter subscription. Personal data is processed only if the User contacts the Administrator independently, including filing a complaint via email at contact@skintra.eu. The site publishes product reviews originating from the online store operated by the Administrator at https://cosibella.pl/. These reviews are automatically imported and presented for informational purposes only. The www.skintra.eu Website does not allow product reviews to be added. The Website also features an interactive "Become a wholesaler" button, which, when clicked, redirects the User to another Administrator’s site dedicated to wholesale sales at https://cosibella-wholesale.com/. This redirection is voluntary and occurs solely at the User’s action. The Administrator is responsible for data processing on https://cosibella-wholesale.com/. Users should consult the separate privacy policy applicable to this site.
  4. Data recipients

    1. Access to personal data is granted to the following persons: Administrator, Administrator’s employees, collaborators, and persons providing services to the Administrator who are authorized in writing. Access by these persons occurs only for the purposes and scope indicated by the Administrator. The Administrator keeps a register of persons authorized to process data. Authorized persons are obliged to maintain the confidentiality of personal data and data protection methods.
    2. The Administrator and authorized persons apply technical and organizational measures ensuring the protection of processed personal data. Your personal data may be disclosed to:
      1. state authorities and other entities authorized by law to access data within the scope and purpose prescribed by law;
      2. other external entities providing supporting services to the Administrator, such as IT service providers, auditing entities, marketing services providers, entities supporting sales and marketing processes, and legal services providers.
  5. Automated processing, including profiling

    1. Your personal data will not be processed in an automated manner (including profiling) that could produce legal effects concerning you or similarly significantly affect your situation.
  6. Your rights regarding personal data processing

    1. In connection with the processing of your personal data, you have the following rights in such cases provided by law:
      1. right of access to your personal data,
      2. right to request restriction of your personal data processing,
      3. right to data portability,
      4. right to rectify your personal data,
      5. right to erase your personal data,
      6. right to object to the processing of your personal data,
      7. right to withdraw consent to data processing where consent is the basis of processing, which does not affect the lawfulness of processing based on consent before its withdrawal,
      8. right to lodge a complaint with a supervisory authority, namely the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), 2 Stawki st., 00-193 Warsaw, phone: +48 22 531 03 00.
      To exercise the above rights, please contact: contact@skintra.eu.
  7. Purpose and legal basis for processing

    1. Your personal data will be processed for the purpose of the legitimate interest of the administrator (Article 6(1)(f) GDPR), understood as statistical purposes, ensuring security, and improving Website operation. Data processing, such as IP addresses and logs, is used solely for statistical and security purposes. Session data, activity on the site (including visited subpages), operating system, and other technical data may be collected by analytics tools but are not used to identify specific users.
  8. Data retention period

    1. Data is stored for the time necessary to fulfill the purpose for which it was collected, and thereafter for the period required by law or until the statute of limitations for claims expires.
  9. Scope of data processing

    1. The Administrator processes the following User data: device data (including IP address, data contained in cookies or similar technologies, and session data), browser type, operating system, and activity on the site (including visited subpages).
  10. Amendments to the Privacy Policy

    1. The Policy may be modified periodically. Modifications aim to reflect changes in the Administrator’s personal data processing practices and strengthen data protection.
    2. Significant changes to the Policy will be signaled with clearly visible notices on www.skintra.eu. The top of the webpage, which displays the Policy content, will show the date of its last update.
  11. Contact

    1. The User may contact the Administrator at any time at contact@skintra.eu to inquire about how the Administrator uses or intends to use their personal data, as well as to submit any questions or comments regarding this Policy.

Cookies Policy dated 1.06.2025

  1. Definitions

    1. Administrator – means Cosibella sp. z o.o., based in Warsaw (02-274), 15A Mineralna st., Building D3, NIP: 5223180504, REGON: 385746050, the Administrator of the website available at www.skintra.eu.
    2. Website – an informational and commercial service operated by the Administrator, aimed at presenting SkinTra brand products, without the possibility of direct online purchase.
    3. Cookies – IT data, especially small text files, saved and stored on devices through which the User accesses the Website.
    4. First-party cookies – cookies placed by the Administrator.
    5. Third-party cookies – cookies placed by the Administrator’s partners via the Website.
    6. Device – an electronic device through which the User accesses the Website.
    7. User – any natural person visiting the Website.
  2. General information about cookies

    1. Cookies collect data concerning, among others:
      1. user activity on the site (e.g., visited subpages, clicks),
      2. language preferences and site settings,
      3. statistical and marketing information.
    2. A detailed description of the cookies used is available in the consent management tool, accessible in the footer under “Manage cookies”.
  3. Purposes of using cookies

    1. The Administrator uses cookies for the following purposes:
      1. ensuring proper operation of the Website and its basic functionalities,
      2. optimizing the Website content and adapting it to User preferences,
      3. conducting visit statistics and analysis of Website usage (e.g., via Google Analytics),
      4. conducting marketing activities, including remarketing and ad personalization.
  4. Types of cookies used

    1. On www.skintra.eu, the following types of cookies are used:
      1. Essential – enable basic Website functions (e.g., authentication, protection against fraud).
      2. Performance (statistical) – collect data on how the Website is used (e.g., most visited pages).
      3. Functional – allow remembering individual User settings (e.g., language, font size).
      4. Marketing and advertising – used to display ads tailored to User interests and to run remarketing campaigns.
  5. Third-party cookies

    1. The site uses services of external providers, including:
      1. Cookies that consider your preferences:
        1. Google Tag Manager
        2. Hotjar
        3. IAI S.A.
        4. __IAI_AC2: 45 days, cookie
          Conversion tracking ID for tracking sources leading to orders according to the last-click attribution model.
        5. Google Maps
        6. SID: 3650 days, cookie

        Digitally signed and encrypted records of the user’s Google account identifier and last login time. These cookies help prevent various types of attacks such as attempts to steal content submitted in Google services.

      2. Cookies that provide personalized content:
        1. Google Tag Manager
        2. Meta (Facebook)
        3. fbsr_: cookie containing a signed request for Facebook App user.
        4. fbss_: 365 days, shared Facebook session cookie.
        5. fbs_: 30 minutes, Facebook session cookie.
        6. Meta Pixel: 999 days, tracking pixel
          Measures ad effectiveness by understanding user actions and ensures ads are shown to the right people.
        7. _fbp: 90 days, cookie
          Used for user profiling and precise ad targeting.
        8. fr: 90 days, cookie
          Used for user profiling and precise ad targeting.
        9. _fbc: 730 days, cookie
          Records last visit to the store.
        10. tr: cookie
          Used for user profiling and precise ad targeting.
        11. sb: 402 days, cookie
          Helps identify and apply additional security measures when unauthorized access attempts to Facebook accounts occur, such as guessing passwords. Also helps in account recovery and additional authentication. Includes cookies like “sb” and “dbln” for browser identification.
        12. usida: cookie
          Collects user browser combination and unique identifier for ad targeting.
        13. wd: 9 days, cookie
          Assists in traffic routing between servers and loading speed analysis of Meta products. Also records screen ratios and dimensions and high-contrast mode for proper display.
        14. locale: 9 days, cookie
          Contains the location of the last logged-in user in this browser.
        15. datr: 7 days, cookie
          Identifies the browser used to connect to Facebook, regardless of the logged-in user; important for Facebook’s security and integrity features.
        16. skintra.eu
        17. RSSID: 180 days, cookie
          User identifier for IdoSell RS, used to display personalized product recommendations on the site.
        18. IAIRSUSER: 60 minutes, cookie
          User identifier for IdoSell RS, used for product recommendations.
      3. Cookies providing site functionality:
        1. skintra.eu
        2. monit_token: 365 days, cookie (identifies store client)
        3. shop_monit_token: 30 minutes, cookie (identifies store client)
        4. client: 1 day, cookie (identifies logged-in client or shopping cart of anonymous client)
        5. affiliate: 90 days, cookie (stores partner ID from which user entered the store)
        6. ordersDocuments: cookie (stores document print status)
        7. __idsui: 1095 days, cookie (needed for lightweight login function)
        8. __idsual: 1095 days, cookie (needed for lightweight login function)
        9. __IAI_SRC: 90 days, cookie (stores the source from which the site was accessed)
        10. login: cookie (stores if user is logged in)
        11. CPA: 28 days, cookie (contains data for CPA/CPS programs)
        12. IAIRSABTVARIANT: 30 days, cookie (variant ID for A/B tests and IdoSell RS engine config)
        13. basket_id: 365 days, cookie (user’s shopping cart ID for the session)
        14. page_counter: 1 day, cookie (page visit counter)
        15. LANGID: 180 days, cookie (stores chosen site language)
        16. REGID: 180 days, cookie (stores user’s region)
        17. CURRID: 180 days, cookie (stores chosen currency)
        18. IAIABT: 30 days, cookie (stores A/B test IDs for store functionality testing)
        19. IAIABTSHOP: 30 days, cookie (stores store ID participating in A/B test)
        20. IAIABTVARIANT: 30 days, cookie (stores chosen variant in ongoing A/B test)
        21. toplayerwidgetcounter[]: cookie (stores number of pop-up views)
        22. samedayZipcode: 90 days, cookie (stores user’s postal code for SameDay courier service)
        23. applePayAvailability: 30 days, cookie (stores availability of ApplePay payment option)
        24. paypalMerchant: 1 day, cookie (PayPal account identifier)
        25. toplayerNextShowTime_: cookie (stores time for next pop-up display)
        26. rabateCode_clicked: 1 day, cookie (stores info on closing active discount bar)
        27. freeeshipping_clicked: 1 day, cookie (stores info on closing free shipping bar)
        28. redirection: cookie (stores info on closing suggested language pop-up)
        29. filterHidden: 365 days, cookie (stores collapsed filter info after refresh)
        30. toplayerwidgetcounterclosedX_: cookie (stores info on closing pop-up)
        31. cpa_currency: 60 minutes, cookie (contains currency info for CPA/CPS programs)
        32. basket_products_count: cookie (stores number of items in cart)
        33. wishes_products_count: cookie (stores number of items in wishlist)
        34. remembered_mfa: 365 days, cookie (stores info on remembered user for multi-factor authentication)
        35. IAI S.A.
        36. iai_accounts_toplayer: 30 days, cookie (enables pop-up for IdoAccounts login service)
        37. IdoSell
        38. platform_id: cookie (stores info whether site is shown in mobile app)
        39. paypalAvailability_: 1 day, cookie (stores info on PayPal payment availability)
        40. ck_cook: 3 days, cookie (stores if user consented to cookies)
        41. IdoAccounts
        42. accounts_terms: 365 days, cookie (stores if user accepted IdoAccounts service terms)
        43. express_checkout_login: 365 days, cookie (Express checkout login cookie)
        44. Google reCAPTCHA
        45. _GRECAPTCHA: 1095 days, cookie (set by Google reCAPTCHA to protect contact forms from spam)
        46. PayPal
        47. ts: cookie (usually provided by PayPal for payment services)
        48. ts_c: 1095 days, cookie (provided by PayPal for fraud prevention)
        49. x-pp-s: cookie (provided by PayPal for payment services)
        50. enforce_policy: 365 days, cookie (provided by PayPal for payment services)
        51. tsrce: 3 days, cookie (provided by PayPal for payment services)
        52. l7_az: 60 minutes, cookie (required for PayPal login on website)
        53. LANG: 1 day, cookie (provided by PayPal for payment services)
        54. nsid: cookie (used in transaction context on the Website; required for secure transactions)
  6. Managing Cookies

    1. The User may at any time:
      1. change cookie settings in their browser,
      2. block automatic cookie saving,
      3. delete cookies from their device.
  7. Data security

    1. The Administrator:
      1. processes technical data (IP address, device type, connection time),
      2. does not use tools allowing direct association of this data with a specific User,
      3. applies technical and organizational measures to protect data against unauthorized access, destruction, or disclosure.

      Any suspicion of a security breach should be reported to contact@skintra.eu.

  8. Amendments to the Cookies Policy

    1. The Cookies Policy may be updated periodically to reflect changes in legal regulations or the operation of the Website. The date of the last update will always be visible at the top of the Cookies Policy page.
    2. Information about SkinTra’s social media accounts
      1. Cosibella sp. z o.o. manages accounts on the following social media platforms: Facebook, Instagram, YouTube, and TikTok (hereinafter referred to as “social media”), where it publishes posts related to individual product brands. Social media administrators independently track user behaviors using cookies and similar technologies, including during any interaction with Cosibella’s accounts. The full scope and purposes of personal data processing on social media are determined by their administrators.
      2. Cosibella sp. z o.o., as the entity managing the accounts, has access to general statistics generated by social media administrators concerning the interests and demographic data (such as age, gender, and region) of users visiting Cosibella’s profiles.
      3. Cosibella sp. z o.o. is responsible for the content published on these accounts and for communication with social media users within these profiles.
      4. Facebook and Instagram are administered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
      5. YouTube is administered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, USA.
      6. TikTok is administered by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
    3. Social media plugins: Facebook, Instagram, YouTube
      1. Our Website contains plugins for Facebook and Instagram. Social media plugins are marked with their respective logos. These plugins connect you directly to our accounts on these social media platforms. Social media may then obtain information that you visited our website from your IP address. These social media platforms do not disclose information to us about the data they collect or how they use it. We do not know the purpose and scope of the data collected by them. For more information on privacy, please refer to the respective privacy policies of these social media platforms, which outline their data processing rules.
pixel