Privacy protection

PERSONAL DATA PROTECTION INFORMATION NOTICE

The Personal Data Protection Information Notice (hereinafter referred to as the “Information Notice“) aims to inform a data subject on the processing of personal data provided to Dermacol, a.s., Company ID: 24766208, having the registered office at Výtvarná 1023/4, 161 00 Prague, registered in the Companies Register kept by the Municipal Court in Prague, Section B, Insert 16659, (hereinafter referred to as “Dermacol”), in connection with the use of the web site at www.dermacolmalaysia.com, conclusion of a purchase contract or for another purpose.

Dermacol processes all personal data of its customers in compliance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation”) and Act No 480/2004 Coll., on certain information society services, as amended. Dermacol has taken measures to secure personal data within the meaning of the Regulation and ensures that confidentiality obligation and other personal data processing rules are complied with.

 

A. PERSONAL DATA PROCESSING

For the purposes of the Information Notice the “Customer” shall be a natural person aged 16 years and older using Dermacol Online Store and website whose personal data are processed by Dermacol within the meaning of Article 4(2) of the Regulation. The Customer shall be the data subject within the meaning of Article 4(1) of the Regulation.

Dermacol shall be the “Controller” within the meaning of Article 4(7) of the Regulation.

 

Contact information of the Controller:       

Dermacol, Company ID: 

Purchase Contract Conclusion

When selling and buying goods via Dermacol Online Store at www.dermacolmalaysia.com, the Customer as the Buyer and Dermacol as the Seller conclude a purchase contract. In order to conclude and perform under the purchase contract Dermacol processes personal data of the Customer in compliance with Article 6(1) of the Regulation. The performance under the purchase contract shall include in particular order handling, performance of obligations under the contract including e.g. communication with the customer, hand the ordered goods over to a carrier, respective record keeping for the purposes of complaint management, accounting, etc.

Customer Registration

If the Customer registers on the website at www.dermacolmalaysia.com, such registration entails processing of its personal data for the purposes the Customer consented to upon registration. By clicking “I agree with processing of personal data for the purposes of customer registration” and confirming the “GET REGISTERED” button the Customer gives freely its consent to the processing of its personal data for the purposes of registration (i.e. for example for the creation and management of and changes to a customer account, inclusion to a bonus programme, acquisition and application of bonuses, etc.) and internal data analyses. By ticking other consent boxes in the registration form or customer account, the Customer gives freely its consent to the processing of its personal data for the purpose stated next to the individual box (e.g. sending of marketing communications). Personal data of the Customer shall be processed solely for the purposes to which it provided its consent (by ticking the respective box or selecting the respective option). Should the Customer select only some boxes or options, its personal data shall be processed only for the purposes stated next to the selected boxes in addition to the purpose of customer account registration, management and changes. If the Customer does not tick any box, its personal data shall be processed only for the purposes of registration. If the Customer ticks only some boxes, its personal data shall be processed for the purposes stated next to the ticked boxes in addition to the purpose of registration. The Customer is entitled to cancel its registration any time by an express and clear written statement addressed to Dermacol sent by mail or e-mailed to info@dermacolmalaysia.com. Upon cancelling the registration, the processing of the Customer’s personal data for all purposes the Customer consented to during registration shall be terminated. Cancelling of registration shall be free of charge.

Personal data of the Customer shall be processed based on its consent.

For the purposes of registration and for other possible purposes to which the Customer consented the following personal data shall be processed: name, surname, e-mail address, contact phone number, date of birth and sex.

The consent to the processing of personal data for the purposes of registration and possible other purposes to which the Customer consented shall be granted for the duration of the Customer’s registration; however, no later than 20 years following its granting.

In addition, Customer’s personal data may be transferred/disclosed to SarrdehTech, (Company, having its registered office at Malki, Damascus, Syria , registered in the Companies Register kept by the Municipal Court in Syria), which manages the information system of Dermacol and provides IT services to Dermacol, with which Dermacol shares a database within a holding of companies, which provides accounting services to Dermacol. In addition to the above mentioned companies, personal data of the Customer may be also transferred/disclosed to other service providers (IT, web site operators, parcel services providers, accounting, legal or tax services providers and other consultants).

Rights of the Customer as the Data Subject

At any time, the Customer is entitled to exercise its right of access to its personal data (Article 15 of the Regulation), right to data rectification (Article 16 of the Regulation) and erasure (Article 17 of the Regulation), right to restriction of processing (Article 18 of the Regulation) and data portability (Article 20 of the Regulation).

The Customer is namely entitled to withdraw its consent to personal data processing any time and free of charge. If the Customer does not want to continue receiving marketing communications, it is entitled to contact Dermacol at info@dermacolmalaysia.com and the sending shall be terminated.

The Customer is entitled to require access to its personal data, to have its personal data rectified or updated, to have incomplete personal data completed, to require data erasure or restriction of data processing, to object to the processing, termination of processing or deletion of data, to require information on its personal data processing. The Customer can exercise the above rights by sending a request to the e-mail address of Dermacol at info@dermacolmalaysia.com or a written request to the address of the registered office of Dermacol. If the Customer finds or assumes that its personal data are processed contrary to the protection of its privacy or contrary to the Regulation, it is entitled to request explanation and/or rectification of the deficiency. The Customer is also entitled to lodge a complaint to the Data Protection Authority and to initiate administrative proceedings. However, to ensure the fastest rectification it is recommended to contact Dermacol first.

 

B. USE OF COOKIES

The website of Dermacol at www.dermacolmalaysia.com saves cookies on the website users’ devices in compliance with the applicable legislation.

What are cookies?

Cookies are small data files saved by the server on a computer or mobile device upon loading a website. The files enable the website to ensure its regular operation and to remember action, settings or preferences of the user. Cookies do not pose a risk for a computer or a mobile device; however, they are important for privacy protection because they make it possible to store information about the use of a website.

Dermacol uses cookies on its website for the purposes of proper functioning of the website and customizing the website content to user preferences.

 
What types of cookies the website uses:

 

Cookies enabling general operation of the website

These cookies are essential for website operation and no consent to the use of these cookies is required. Without these cookies some website functions are not possible.

Performance cookies

These cookies collect anonymous information about visited websites. By accessing the website you consent to these cookies being stored on your device. The cookies collect information on how visitors use the website, e.g. what websites they visit most often and if they get any error messages from a website. The cookies do not collect any identification data about the user; all information is aggregated and therefore anonymous. The cookies are used only to improve the operation of the website.

Functional cookies

These cookies remember all your choices and based on that they improve the user comfort when using the website. By accessing the website you consent to these cookies being stored on your device.

By means of functional cookies the website can remember your choices or the current state of the website (e.g. last teaser shown, type of device used for accessing the website) broadening the functionalities of the website according to your needs. These cookies can also remember user’s changes of font size, font type and other parts of the website. Information collected by means of these cookies can be anonymous and do not track your activities when visiting other websites.

Cookies enabling targeting online advertising

These cookies collect information on your searching habits and target advertising accordingly to match your interests and personality.

These cookies are used in order to better target advertising to users. They are also used to reduce advertising for an individual user and to increase the efficiency of advertising campaigns. The cookies are usually placed on the website by third parties with the consent of the website operator. The cookies remember that the user visited the website and share this information with other subjects. They are often connected with a functionality of the website provided by another subject.

Third-party cookies

Dermacol allows some business partners to use cookies via the company’s website to provide selected services to the company. These include in particular analyses of website usage level, market and marketing activities. In addition, Dermacol also uses Google Analytics to track the website’s usage level and traffic.

How to disable cookies

The user can disable the storage and use of cookies in the settings of its web browser. The web browser can be usually set to always ask the user before saving a cookie whether the user wants to save the cookie or not. Cookies can also be completely blocked in the browser’s settings. However, in such a case certain parts of the website might not function properly. In the web browser it is also possible to delete the cookies already saved on the device.

For more information on how to regulate the use of the cookies visit: www.youronlinechoices.com. The above website is not operated by Dermacol and Dermacol is not therefore responsible for the content of the website.