Last updated: April 08, 2025

This Privacy Policy explains how BESSO Spółka z ograniczoną odpowiedzialnością (“the Company”, “We”, “Us”) collects, processes, stores, and protects your personal data in connection with your use of our cosmetics website (the “Service”). This document is drafted in compliance with EU legislation—including the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679)—and the applicable Polish Act on the Protection of Personal Data, as well as other relevant laws.

1. Introduction

This Privacy Policy informs you about:

  • The types of personal data we collect when you shop for cosmetics on our website.
  • The legal bases for processing your personal data.
  • How and why your personal data is processed.
  • Your rights regarding your personal data.
  • The measures we have in place to protect your data.
  • How international data transfers are managed.

2. Controller Information

Data Controller:
BESSO Spółka z ograniczoną odpowiedzialnością
Address: ul. Mirkowska, nr 43 C, Konstantin-Jeziorna, 05-520, Poland
NIP: PL5214014077
REGON: 524984255
KRS: 0001028930
Email: [email protected]
Phone: +48.512.510.503

For any questions or concerns regarding this policy or to exercise your rights, please contact us.

3. Scope and Definitions

  • Personal Data: Information that relates to an identified or identifiable natural person.
  • Processing: Any operation or set of operations performed on your personal data (e.g., collection, storage, use).
  • Cosmetics: The products sold via our website, which include makeup, skincare, haircare, and other personal care items.
  • Data Subject: You, as an individual whose personal data is processed.

4. Categories of Data Collected

4.1. Personal Data

When you register, order, or interact with our cosmetics website, we may collect:

  • Identification Data: Name, surname, and user ID.
  • Contact Data: Email address, phone number, and physical postal address.
  • Account Data: Login credentials, order history, and related information.

4.2. Usage and Technical Data

We automatically collect technical and usage data when you browse our site, including:

  • IP address, browser type, and operating system.
  • Pages viewed, time spent on each page, referral sources, and click-through data.
  • Device identifiers and other diagnostic details to optimize your shopping experience.

4.3. Tracking Data and Cookies

We use cookies and similar tracking technologies to enhance your cosmetics shopping experience. For details on our cookie practices, please review our Cookie Policy.

5. Legal Bases for Processing Data

We process your personal data on the following legal bases:

  • Consent: When you provide explicit consent for purposes such as receiving marketing communications (which may include promotions for our cosmetics).
  • Contract Performance: To process orders for cosmetics and manage your account.
  • Legal Obligation: To comply with applicable Polish and EU legal requirements.
  • Legitimate Interests: For purposes such as website improvement, fraud prevention, and personalized service, provided these interests do not override your rights.

6. How We Use Your Data

We use your information for several purposes, including:

  • Providing Services: Managing your cosmetics orders, account registration, and customer support.
  • Marketing: Sending updates and promotional offers related to our cosmetics products (with your consent, where required).
  • Website Improvement: Analyzing user trends to enhance functionality, design, and product offerings.
  • Legal Compliance: Meeting our legal obligations under EU and Polish laws.
  • Security: Protecting our site, including preventing fraud and unauthorized access.

7. Data Storage and Security

Your personal data is stored securely on servers located in Poland and/or the EU. We use appropriate technical and organizational measures (e.g., encryption, strict access controls, regular security audits) to protect your cosmetics-related personal data. While we strive for optimal security, no method is 100% secure on the Internet.

8. Data Transfers

Your data may be transferred outside the European Economic Area (EEA) only when legally permissible safeguards are in place (e.g., standard contractual clauses). Any such transfers are executed in full compliance with EU data protection requirements.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal and regulatory obligations. Usage data may be stored for a shorter period unless further retention is required by law for security or analytical reasons.

10. Your Rights Under GDPR and Polish Law

You have the right to:

  • Access and Rectify: Request access to or correction of your personal data.
  • Erasure (Right to be Forgotten): Request deletion of your data under conditions provided by law.
  • Restriction: Ask us to restrict processing if your data is inaccurate or used unlawfully.
  • Data Portability: Receive your data in a structured, machine-readable format.
  • Objection and Withdrawal of Consent: Object to data processing, especially for direct marketing purposes, or withdraw previously given consent.
  • Lodge a Complaint: File a complaint with the relevant supervisory authority if your rights are violated.

Please contact us via the details provided in Section 2 to exercise any of these rights.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any significant changes will be communicated by updating the “Last updated” date and, when necessary, via direct communication. We encourage you to review this policy regularly.