PRIVACY AND PERSONAL DATA PROTECTION POLICY
1. General Provisions
1.1. Key Definitions:
- Personal Data – any information or set of information about an individual by which they are identified or can be identified as a User;
- Website – a web page on the Internet at:
1.2. The personal data controller is UNICO COSMETICS Limited Liability Company, USREOU 45966817, acting on the basis of state registration (hereinafter – "Personal Data Controller" or "Controller").
1.3. The Personal Data Controller treats the private (personal) information of all persons without exception who use the Website with great respect, and therefore adheres to the provisions defined by the Law of Ukraine "On Personal Data Protection". This creates and ensures the most comfortable conditions for every User who provides personal data (Personal Data Subject).
1.4. This Policy is part of the Public Offer (User Agreement) and contains the terms of personal data processing when using the Website. In particular, it defines:
● what personal data the Personal Data Controller processes;
● what are the purposes of such processing;
● what rights the User has regarding such data;
● whether data is transferred to third parties;
● what measures the Personal Data Controller takes to protect personal data;
● other details of personal data processing.
1.5. Other terms in this Privacy and Personal Data Protection Policy (hereinafter – "Policy") are used in the meaning given to them in the relevant Public Offer (User Agreement).
2. Processing and Purpose of Personal Data Use
2.1. Users' personal data is used to ensure the provision of website access services and the purchase and sale of goods.
2.2. When the User uses the Website, the Personal Data Controller processes personal data, namely:
- data provided by the User, necessary for placing an order and its delivery, namely: first and last name, contact phone number, delivery address, email address (for sending order confirmation letters, shipping status, etc.);
- information necessary for communication, including for making and confirming purchases, receiving and sending messages, posting reviews, comments, if such functionality is provided by the Website.
- The Personal Data Controller may also collect data about purchase history.
3. Grounds for Data Processing
3.1. The Personal Data Controller processes personal data to provide access to the product assortment for their subsequent sale based on an agreement with the personal data subject (including the Public Offer).
3.2. The User grants the right to process their personal data, including placing personal data in databases (without additional notification), storing data, accumulating, updating, changing (if necessary), and/or transferring data to third parties, including for their processing.
4. Personal Data Security
4.1. The Personal Data Controller undertakes to ensure data protection from unauthorized access by third parties, not to disseminate or transfer data to any third party (except in cases provided for by this Policy and law).
4.2. The processing and storage of provided personal data is carried out by the Website owner, where the equipment ensuring the functioning of the Website services is located, in accordance with its privacy policy.
4.3. The Personal Data Controller takes security issues seriously, especially concerning minors. In this regard, it appeals to parents to explain to their children the issues of Internet safety and the need to use the service, as parents will be responsible for the actions of children in accordance with the legislation of Ukraine.
4.4. The Personal Data Controller cannot guarantee absolute protection against any threats arising outside its influence and regulation; however, it ensures the application of all relevant obligations regarding privacy compliance, as well as technical and organizational security measures to prevent unauthorized or illegal disclosure, or processing of such information and data, their accidental loss, destruction, or damage.
5. Personal Data Storage Period
5.1. Personal data is stored for the period necessary to achieve the purpose for which it was collected. As a general rule, all collected data is stored for the duration of legal obligations between the Controller and the Personal Data Subject.
5.2. The Personal Data Subject may delete and change this data, as well as delete the account.
5.3. After the personal data subject ceases to be a Website User by deleting their account, their personal data may be used to identify the person for the purpose of resolving legal relations between the parties.
6. Data Transfer to Third Parties
6.1. The Personal Data Controller does not transfer personal data to third parties, except when such transfer is necessary to comply with legal requirements, to fulfill obligations between the data controller and the personal data subject, at the request of the personal data subject, or in other cases outlined in this Policy.
6.2. To ensure the fulfillment of obligations, the Personal Data Controller may engage third parties who may gain access to the Subject's personal data. Third parties who may gain access to personal data include:
- independent contractors, including individual entrepreneurs, whom the Personal Data Controller engages in cooperation, particularly to maintain functionality and provide technical support;
- third parties – postal operators, logistics partners, payment system operators, and other persons involved in the delivery of goods, payment for goods and services.
6.3. Part of the Users' data is transferred strictly to the extent necessary to fulfill orders (purchases).
7. Rights of the Personal Data Subject
7.1. Users as personal data subjects have the following rights:
- to know the sources of collection, location of their personal data, the purpose of their processing, the location or place of residence (stay) of the personal data controller or processor, or to give appropriate instructions for obtaining this information to authorized persons, except in cases established by law;
- to receive information about the conditions for granting access to personal data, in particular, information about third parties to whom personal data is transferred;
- to access their personal data;
- to receive a response as to whether personal data is being processed, as well as to receive the content of such personal data within 30 days from the moment we receive such a request;
- to make a reasoned demand with an objection to the processing of their personal data;
- to make a reasoned demand for the change or destruction of their personal data if these data are processed illegally or are inaccurate;
- to protect their personal data from unlawful processing and accidental loss, destruction, damage due to intentional concealment, non-provision or untimely provision, as well as to protect against the provision of information that is inaccurate or disgraces honor, dignity, and business reputation;
- to file complaints about the processing of their personal data to the Ukrainian Parliament Commissioner for Human Rights or to the court;
- to apply legal remedies in case of violation of legislation on personal data protection;
- to make reservations regarding the restriction of the right to process their personal data when giving consent;
- to withdraw consent to the processing of personal data;
- to know the mechanism of automatic processing of personal data;
- to protection from an automated decision that has legal consequences.
7.2. For updating, obtaining access, making changes, blocking or deleting your personal data, withdrawing consent to personal data processing that the Personal Data Controller received from the User on the basis of this Policy, or in case of any comments, wishes, or claims regarding your personal data being processed, requests are accepted at the details specified in the Public Offer.
8. Policy Changes
8.1. This Policy may be amended and supplemented periodically and without prior notice to the User, including when legislative requirements change.
8.2. It is recommended to periodically review the Policy to be familiar with the latest changes and additions.