We are pleased to welcome you to our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.
Responsible Party for Data Processing
The party responsible for data processing on this website under the General Data Protection Regulation (GDPR) is Naturals Cosmetics Cosmos Benelux B.V., Email: info@n-cos.com.
1. Access Data and Hosting
You can visit our website without providing any personal information. Each time you access a webpage, the web server automatically saves a so-called server log file, which may include the name of the requested file, your IP address, date and time of access, data volume transferred, and the requesting provider (access data) to document the access.
These access data are evaluated solely for the purpose of ensuring the smooth operation of the site and improving our offer. This is in accordance with Art. 6 (1) sentence 1 lit. f GDPR, in order to protect our legitimate interests in a correct presentation of our offer. All access data will be deleted no later than seven days after your website visit.
Hosting Services by a Third-Party Provider
As part of processing on our behalf, a third-party provider performs the services for hosting and displaying the website. This serves to protect our legitimate interests in a proper presentation of our offer as part of a balance of interests. All data collected in connection with the use of this website or in forms provided for this purpose are processed on its servers. Processing on other servers only takes place as explained here. This service provider is located within a country of the European Union or the European Economic Area.
2. Data Collection and Use for Contract Processing and When Opening a Customer Account
We collect personal data if you provide it voluntarily as part of your order, when contacting us (e.g., via a contact form or email), or when opening a customer account. Required fields are marked as such, as we need this data to process the contract, respond to your contact, or open the customer account, and without this information, you cannot complete the order, account opening, or contact request. The specific data collected is evident from the input forms. We use the data you provide in accordance with Art. 6 (1) sentence 1 lit. b GDPR for contract processing and handling your inquiries. After the contract is fully processed or your customer account is deleted, your data will be restricted for further processing and deleted after the statutory retention periods unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration. You can delete your customer account at any time by contacting us via the described contact options or via a designated function in the customer account.
3. Data Sharing
For Contract Fulfillment
According to Art. 6 (1) sentence 1 lit. b GDPR, we share your data with the shipping company responsible for delivery to the extent necessary to deliver the ordered goods.
Data Transfer to Shipping Service Providers
If you have given your express consent during or after your order, we will share your email address and phone number with the selected shipping service provider under Art. 6 (1) sentence 1 lit. a GDPR so that they can contact you before delivery for delivery notification or coordination purposes.
Consent can be revoked at any time by sending a message to our contact address. After revocation, we will delete your provided data unless you have expressly consented to further use of your data or if we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.
4. Cookies and Web Analytics
To make our website attractive, enable certain functions, display suitable products, or for market research, we use cookies on various pages. This serves to protect our legitimate interests in an optimized presentation of our offer in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Cookies are small text files automatically stored on your device. Some cookies are deleted at the end of the browser session (session cookies), while others remain on your device and allow us to recognize your browser upon your next visit (persistent cookies). You can view the storage duration in your browser’s cookie settings. You can configure your browser to inform you about cookie settings and decide on acceptance individually or exclude the acceptance of cookies for certain cases or generally.
If cookies are not accepted, the functionality of our website may be limited.
Use of Google (Universal) Analytics for Web Analysis
With your consent under Art. 6 (1) sentence 1 lit. a GDPR, this website uses Google (Universal) Analytics, a web analytics service by Google LLC. Google Analytics uses methods like cookies to analyze your website usage. The automatically collected information is typically transferred to and stored on a Google server in the USA. The IP anonymization activated on this website shortens your IP address before transmission within EU member states or in other states of the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there.
You can withdraw your consent at any time by downloading and installing the browser plugin available at this link: http://tools.google.com/dlpage/gaoptout?hl=en.
5. Contact Options and Your Rights
As a data subject, you have the following rights:
- Right of Access (Art. 15 GDPR): Obtain information about your personal data processed by us.
- Right to Rectification (Art. 16 GDPR): Request the correction of inaccurate or incomplete personal data.
- Right to Erasure (Art. 17 GDPR): Request the deletion of your personal data unless further processing is required:
- To exercise freedom of expression and information,
- To comply with a legal obligation,
- For reasons of public interest, or
- For the establishment, exercise, or defense of legal claims.
- Right to Restriction of Processing (Art. 18 GDPR): Request to restrict the processing of your personal data if:
- You contest the accuracy of the data,
- The processing is unlawful, but you oppose erasure,
- We no longer need the data, but you need it to assert, exercise, or defend legal claims, or
- You have objected to the processing under Art. 21 GDPR.
- Right to Data Portability (Art. 20 GDPR): Receive your provided personal data in a structured, commonly used, machine-readable format or request the transfer to another controller.
- Right to Lodge a Complaint (Art. 77 GDPR): You can contact a supervisory authority, typically at your usual place of residence, workplace, or our company headquarters.
For questions regarding data collection, processing, or use, access, rectification, blocking, or deletion of data, or the revocation of consent or objection to a specific data use, please contact us directly using the contact details in our legal notice.
Right to Object
If we process personal data to protect our legitimate interests as explained above, you can object to this processing with effect for the future. For direct marketing purposes, you can exercise this right at any time as described above.
After exercising your right to object, we will not continue processing your personal data for these purposes unless we demonstrate compelling legitimate grounds that outweigh your interests, rights, and freedoms or if the processing serves the assertion, exercise, or defense of legal claims.
This does not apply to direct marketing purposes, where we will not process your personal data further.