PRIVACY POLICY​

​

1. ADMINISTRATOR

​

The administrator of personal data is the company:

PN Corporation s.r.o., operating the brand The FACE CONCEPT, 

Registered office: Tržiště 10, Malá Strana, 118 00 Praha 1, IČ: 26720329, company registered at the Municipal court in Prague, Section C, insert  89470

(hereinafter referred to as "PN Corporation")

Contact details of the business data administrator: Pavlína Němcová

Telephone Number: +420 601601804

Email: info@face-concept.com

​

We take the issue of personal data protection and their confidentiality very seriously and adhere to the relevant Czech and European legislation on personal data protection. We explain the most important aspects of our processing of your personal data below. We process and use your personal data only with your express consent, or on the basis of another legal title if this is given and strictly in accordance with applicable law.

 

Any natural person who gives us consent to the processing of personal data (also as "subject") is obliged to read the document "Privacy Policy" (also as "policy") carefully and if he does not understand anything, contact our above contact details provided for explanation. Please read the policy carefully before consenting to specific processing or before taking any action that allows PN Corporation to process your personal information.

​

2. PROCESSING OF PERSONAL DATA

​

Personal information is personally identifiable information, such as your name, email, or mailing address. Personal data is also data on the basis of which it is possible to identify you in connection with other available data - for example, a mobile phone. PN Corporation does not collect your personal information unless you voluntarily provide such information (eg, when registering for e-mail newsletters, participating in a survey or contest, making a reservation, ordering merchandise or online training, or requesting information). You most often consent to the processing of personal data by checking the appropriate box with information about the processing. By expressing your consent, you give the administrator consent to the processing of your personal data to the extent given by the specific case in accordance with these principles and conditions stated here. If you are requesting a specific service or the legal title of the processing is given by law (for example, tax regulations), we will inform you about the method of processing for specific purposes by this policy. We never require a wider range of data than is necessary for a particular purpose. If we no longer need any information for this purpose, we will dispose of it safely immediately.

​

The purpose of processing personal data is the purpose stated in the given specific case. This may include answering your questions, meeting your requirements, or informing you about the results of a contest, offering products and services, providing information and materials about products or advertising campaigns, and inviting invitations to events, contests, informing about news, and all this by post, in person and by electronic means of communication. The said consent may also include the sending of commercial communications by electronic means in the sense of Act No. 480/2004 Coll.

 

If the legal title of the processing is your consent, then you are not obliged to grant it. Consent is always completely voluntary. If consent is given, you have the rights under the relevant legislation, see Articles 8 and 9 below.

 

PN Corporation warrants that it will not sell or rent your personal information to any third party. However, we may be forced to provide your information to a third party in cases where we are required to do so by law, or in response to enforceable requests from government agencies. PN Corporation will not use the personal information you provide to make decisions that are based on automated processing and have legal effects for you or otherwise significantly affect you. For individual purposes, the processing conditions are as follows:

​

A) NEWSLETTER

The newsletter contains information about news, offers and other information about our online store www.face-concept.com and about other brands cooperating with PN Corporation. In the newsletter, we will send you personalized advertising for products and services or offers to participate in campaigns, such as consumer competitions or product testing. Commercial communications will be sent by electronic means and may also include the offer of products and services of third parties in the field of cosmetics and body care. The scope of the data processed in this way is mainly e-mail, and if you communicate or pass on the information to us, then also your name, surname, gender, telephone number and address.

​

By subscribing to the newsletter, you declare that you agree to evaluate your behavior on our website in order to compile personalized offers so that we can compile content for you that meets your requirements and interests and include you in the marketing database for direct marketing.

​

Personal data for this purpose is processed indefinitely, but not longer than you withdraw your consent. The legal title of the processing is consent. Processing does not exceed the duration of the purpose. If you no longer wish to receive the newsletter, you can unsubscribe at any time. A unsubscribe link is provided in each newsletter. You will then be taken through the unsubscribe process or send us a revocation of your consent to receive the newsletter (notice of removal from the database) by e-mail.

​

B) CONTACT FORM

The scope for this purpose is only your name, surname, gender and e-mail, the subject of the inquiry and a specific message, or an attached attachment. If necessary for your inquiry, you can also enter a telephone number, address, additional address details and date of birth. We will only use this information to process your query. We will use the personal data obtained in this way exclusively for the time strictly necessary to process your inquiry, or in related communication.

 

Your personal data will be handled in a similar way if you contact us via e-mail or telephone line. Personal data for this purpose are processed for the duration of the inquiry and 14 days thereafter due to a possible follow-up inquiry. The legal title of the processing is your request for processing the query. Some of your complaints or the exercise of rights may be kept longer due to possible control by the supervisory authority, if we do so, we always try to minimize the scope with regard to the fulfilment of a specific legal obligation.

​

C) CONSUMER COMPETITIONS

If you participate in any of the marketing events we organize, including consumer competitions, you consent to us using the information you provide as follows. We will use the personal data provided by you, which may be your name and surname (or other data, the provision of which results from the rules of the relevant competition and the registration form by which you enter this competition) for the purpose of the marketing event according to its rules. includes mainly the following processing operations: implementation and evaluation of the competition, or handing overprizes, market research, offering products and services, including sending information about events, products and other activities, as well as sending business messages by electronic means according to Act No. 480/2004 Coll., inclusion in the database for direct marketing, sending personalized content according to the identified user preferences, including related profiling. The data obtained in this way will be stored and processed for the time strictly necessary for the above purpose of processing, which is set for individual operations as follows: management and evaluation of the competition for the duration of the competition and 90 days thereafter and for other operations indefinitely, until further notice consent. The legal title is registration for the competition, resp. agreement with the competition rules and these principles.

​

​

3. METHOD OF PROCESSING

​

Processing takes place automatically and partly manually. The storage is conducted electronically and on paper, if it is appropriate with regard to the purpose, or means of processing. In principle, PN Corporation collects only the personal data that it actually needs for the specified purposes. PN Corporation does its utmost to continuously evaluate the processing, both in terms of proper security, minimization of personal data, and in terms of transparency, correctness and legality. PN Corporation adheres to the principles of liability, integrity, confidentiality, accuracy and restrictions on storage.

​

​

4. LIMITED DATA TRANSMISSION

 

In order to process your request, PN Corporation may need to pass on your personal information to other companies; The list of companies is given below. It may also be necessary to pass on personal data to processors, ie external service providers for further processing. By consenting to the processing of personal data, as set out above, you consent to the transfer of data to third parties providing services in the form of processors. For example, service providers may be entrusted with the sending of product samples, the distribution of promotional materials, the conduct of competitions, the dispatch of goods, the distribution of advertising materials or other activities. PN Corporation requires these entities to undertake to process personal data in accordance with our instructions and in accordance with the terms of personal data processing.

Processors include the following categories of companies:

Transport companies

Marketing companies

Accounting companies

Audit companies

Companies providing legal services

Companies dealing with human resources and education

Companies providing IT services

Internet marketing companies

Companies engaged in the development and implementation of enterprise systems

Web and mobile application development companies

Software companies licensed for online communication

 

Any transfer of your personal data other than the above requires your express consent in advance. PN Corporation requires all external service providers to retain your personal information solely in accordance with our specifications and in accordance with this Privacy Policy, as well as legal data processing requirements.

​

5. INFORMATION STORED AUTOMATICALLY WHEN VISITING OUR COOKIES WEBSITES

We use cookies to obtain data on the use of the website, or to obtain information on the demagraphic data of users. A cookie is small textual information that can be stored in your browser. The cookie uses, among other things, Google Analytics. We also use cookies for text and graphic advertising in the network of third-party suppliers. Users can opt out of receiving third-party vendor cookies on the Network Advertising Initiative (NAI) logout page.

 

​

6. PLUG-IN MODULES OF SOCIAL NETWORKS / INTEGRATION THROUGH SHARIFF

 

We use social network plug-ins ("plug-ins") on our website, in particular the "Share" or "Share with friends" buttons of the "Facebook" provider, whose facebook.com website is operated by Facebook Inc., 1601 S California Ave, Palo Alto, CA 94304, USA. Plug-ins are usually marked with the Facebook logo. In addition to Facebook, we use "Google+" plug-ins (Provider: Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA), "Twitter" (Provider: Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103), "Pinterest" (Provider: Pinterest Inc., 808 Brannan Street San Francisco, CA 94103, USA) and "Instagram" (Provider: Instagram, Inc., 181 South Park Street, Suite 2, San Francisco, CA 94107, USA).

​

For privacy reasons, we have decided not to use direct social network plug-ins on our website. Instead, we use the "Shariff" solution. With the help of the Shariff solution, we are able to determine for ourselves whether and when the data should be transferred to the operator of the relevant social network. For this reason, when you visit a website, there is virtually no automatic transfer of data to social networks such as Facebook, Google+, Twitter or Pinterest. Only if you actively click on the appropriate button (eg "Forward", "Share" or "Share with friends") your web browser will establish a connection with the servers of the relevant social network, ie by clicking on the button you agree that your internet browser establishes a connection with the servers of the relevant social network and transmits data on your use to the operator of the relevant social network.

We have no influence on the nature and extent of the data that is subsequently collected by social networks. For more detailed information on the purpose and scope of data collection and further processing and use by the relevant social networks and on your rights and setting options to protect your private space in this regard, please read the privacy rules of the relevant social networks - for Facebook at http: // www .facebook.com/about/privacy/ and http://www.facebook.com/help/?faq=186325668085084. For more information on using data on "Google+" or "Twitter", visit http://www.google.de/intl/de/policies/privacy/ or http://twitter.com/privacy for Pinterest on http://about.pinterest.com/privacy/ and for Instagram at https://help.instagram.com/155833707900388).

​

7. LOGIN THROUGH SOCIAL NETWORKS

 

WHEN REGISTERING OR LOGING IN TO A CUSTOMER ACCOUNT The Face Concept YOU ALSO HAVE THE OPPORTUNITY TO AUTHENTICATE AND THEREFORE REGISTER OR LOG IN USING ONE OF THE FOLLOWING SOCIAL WEB SITES USING YOUR EXISTING PROFILE: FACEBOOK, Instagram NEBO GOOGLE+.

​

For this purpose, you will find on the registration or login page the relevant symbols of the individual social network providers supported by our website. Before connecting to the provider, you must explicitly confirm that you agree to the processing and transfer of the following data: name, surname, e-mail address and profile data.

 

Process description:

After clicking on the appropriate symbol, a new window (application) will open, in which you must enter your login details for the given social network. After a successful login, the social network informs you which data (name and e-mail address) will be passed to us for authentication purposes as part of the registration or login process. If you confirm your consent to the transfer of this data, then the data required for registration will be transferred to the appropriate fields. The information we require to register or login is (i) your name and (ii) your email address.

 

Only after you confirm your explicit consent to the use of the necessary transferred data will we store your data and start using them for the purposes mentioned in point 2. As part of the authentication process, no connection is established between the created customer account The FACE CONCEPT and your account in the relevant social networks.

 

In order to perform the authentication or registration process, your IP address is passed on to the relevant social network provider. We have no influence on the purpose and scope of data collection and further use by the operator of the relevant social network. You can find more detailed information related to this issue in the personal data protection rules of the respective provider.

​

​

8. INSTRUCTIONS ON RIGHTS UNDER THE PERSONAL DATA PROTECTION ACT, VALID UNTIL 24 MAY 2018

 

You acknowledge that in connection with the processing of your personal data you have the rights specified in the provisions of § 11, 12 and 21 of Act No. 101/2000 Coll., On the processing of personal data, as amended, and you are aware of the fact when and when the provision of personal data for the given purposes is not necessary. Consent to the processing of personal data for the purpose of personalized offers of products, services and the provision of marketing information to PN Corporation and third parties is, on the other hand, voluntary and may be revoked at any time in writing. You have the option of refusing to send offers, which are, according to the law, a commercial message, at the latest when sending each individual message. You also have the right to ask PN Corporation for information on the processing of your personal data, ie you have the right to so-called access to data, their destruction, etc. In case of doubts about compliance with the rights, you can contact the Administrator.

​

9. INSTRUCTIONS ON RIGHTS UNDER THE GENERAL REGULATION ON THE PROTECTION OF PERSONAL DATA, EFFECTIVE FROM 25. 5. 2018

 

1. RIGHT OF REPAIR

You have the right to have the administrator correct inaccurate personal data or fill in the missing ones without undue delay.

 

2. RIGHT TO DELETION ("RIGHT TO BE FORGOTTEN")

You have the right to have the administrator delete personal data concerning you without undue delay. If you wish to exercise this right, please contact us at the above contacts.

 

3. RIGHT TO RESTRICTION OF PROCESSING

You have the right to have the administrator restrict the processing of your personal data. If you wish to exercise this right, please contact us at the above contacts.

 

4. RIGHT TO DATA TRANSFERABILITY

You have the right to obtain personal data concerning you, which you have provided to the controller and which are processed automatically with your consent, in a structured, commonly used and machine-readable format and you have the right to pass this data on to another controller. You have the right to have personal data passed directly to the other controller, if technically feasible. If you wish to exercise this right, please contact us at the above contacts.

 

5. RIGHT TO OBJECT

You have the right at any time to object to the processing of personal data concerning you. The controller does not further process personal data unless it demonstrates serious legitimate reasons for the processing which outweigh your interests or rights and freedoms, or for the determination, exercise or defence of legal claims. If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such purpose, which includes profiling. If you object to such processing, your personal data will no longer be processed for this purpose. If you wish to exercise this right, please contact us at the above contacts.

​

6. AUTOMATED INDIVIDUAL DECISION-MAKING, INCLUDING PROFILING

You have the right not to be the subject of any decision based solely on automated processing, including profiling, which has legal effects for you or significantly affects you in a similar way. The controller does not base any of its decisions exclusively on automated processing. The profiling performed by the administrator has no legal effect on you, nor does it significantly affect you.

 

7. CONTACT, REQUEST FOR INFORMATION, WITHDRAWAL OF CONSENT, BLOCKING, DELETION

At any time, you can request, free of charge, the partial or complete deletion or blocking of your personal data, or request information about your personal data stored with us and request the correction of this data. It is not necessary to use any specific form for this purpose, just contact us at the above contacts. We will process all your requests without undue delay, in justified cases within a maximum of 30 days. Withdrawal of consent to the sending of commercial communications will be handled immediately, no later than within 7 calendar days. You can also request the termination of the sending of business messages at any time in each individual business message.

​

8. DATA SECURITY

We have taken technical and organizational measures to protect your data from loss, alteration or disclosure by any third party. The security procedures we use are regularly improved with regard to technological developments.

 

9. UPDATES AND SUPPLEMENTS

We may supplement or update portions of this Privacy Policy without prior notice to you. Before using our website, always read the privacy policy to get information about the latest status after any additions or updates. PN Corporation is entitled to change the policy if necessary, but this does not affect the processing conditions of the already agreed, resp. initiated under another legal title.