This Privacy Policy explains how KOST Cosmetics Italy (“we,” “us,” or “our”) collects, uses, and protects personal information when you interact with our website at http://kostcosmetics.be/, our products, or any related services (collectively, the “Services”). We are committed to safeguarding your information and handling it responsibly in accordance with applicable data protection laws.
Our business is located at N/A.
If you have questions about this Privacy Policy or the way we process personal information, you can contact us at contact@kostcosmetics.be or via post to the address indicated below.
Our Role in Data Processing
We act as a data controller in relation to the personal information we collect through our Services. This means we determine the purposes and means of processing your personal information, such as when we operate our website, manage accounts, provide customer support, analyze usage patterns, or communicate with users.
Table of Contents
We collect personal information that you provide directly, information generated automatically when you use our Services, and information obtained from third-party tools that support our operations. The specific personal information we collect depends on how you interact with our Services, the features you use, and the choices you make.
Personal information we receive directly from you or collect automatically includes:
Some features of our Services require specific personal information to function.
All personal information you provide must be accurate, complete, and up to date. You are responsible for notifying us if any of your information changes so we can maintain accurate records.
We collect personal information through a combination of information you provide directly, information gathered automatically when you use our Services, and information supplied by third-party providers that support our operations.
Information You Provide Directly
We collect personal information that you choose to provide when you interact with our Services. This includes information submitted when you:
This information typically includes identifiers (such as name, email, phone number), account details, and any other information you voluntarily provide as part of your use of the Services.
Information Collected Automatically
When you visit our website or use the Services, we automatically collect certain technical and usage information. This data does not usually reveal your identity but may include:
This information helps us operate, secure, and optimize the Services, and supports internal analytics, reporting, and service improvement.
Information From Your Interactions With the Services
We collect information related to your actions within the Services, including:
This data helps us personalize the experience and understand how users engage with our platform.
We only process personal information when we have a valid legal basis under applicable data protection laws. This means we process data when it is necessary to provide our Services, fulfill our contractual obligations, comply with legal requirements, protect important interests, or pursue legitimate business purposes that do not override your rights.
Legal Bases We Rely On
We may rely on the following legal bases to process personal information:
Purposes for Which We Process Personal Information
We use personal information to create, maintain, and manage user accounts or profiles.
Legal basis: with your consent
We use personal information to provide customer support, answer inquiries, and resolve issues.
Legal basis: with your consent
We use personal information to process transactions, manage billing, and fulfill orders or service requests.
Legal basis: with your consent
We may send newsletters, updates, or promotional content. Users can opt out at any time.
Legal basis: with your consent
We analyze usage data to understand how our Services are used and to improve functionality, performance, and user experience.
Legal basis: with your consent
We may process personal information to detect, prevent, or investigate fraud, abuse, or security incidents.
Legal basis: with your consent
We may process personal information as required by applicable laws, regulations, or legal processes.
Legal basis: with your consent
We process personal information in ways that are appropriate to the nature of the data and the purposes for which it is collected. This includes storing, organizing, using, transmitting, and deleting information when it is no longer required. We apply principles of data minimization, purpose limitation, and accuracy to ensure that personal information is processed only when necessary and for clearly defined purposes.
Access to personal information is limited to authorized personnel who require it to perform their job duties and who are bound by confidentiality obligations. We implement technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or misuse. These measures may include access controls, authentication procedures, logging, encryption in transit and at rest (where appropriate), monitoring, and routine security assessments.
We may combine information collected from different sources when this is necessary to operate the Services or when required to meet a lawful purpose, such as preventing fraud or maintaining the security of our platform.
We retain personal information only for as long as needed for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. For more details, see the “How Long We Retain Information” section.
Where required by applicable laws, we provide users with the ability to access, update, delete, restrict, or withdraw consent to the processing of their personal information. Additional rights may apply depending on your location; see the “Your Rights” section for more information.
We do not use automated decision-making or profiling in a way that produces legal or similarly significant effects. If this changes in the future, we will update this Policy and provide any required notices or options.
We do not share personal information with third parties, except when required by law or to protect our legal rights.
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory requirements, resolve disputes, and enforce our agreements. We do not keep personal information longer than needed, and retention periods may vary depending on the type of data and the reason it was collected.
When we no longer have a legitimate business need to process personal information, we will delete or anonymize it. If deletion is not immediately possible (for example, due to technical constraints or backup systems), we will securely store the information and isolate it from further processing until deletion is feasible.
We retain personal information for the following periods:
With regard to cookies and tracking data, we retain personal information according to the durations listed in the Cookie Policy. If no specific retention period applies, we delete or anonymize personal information once it is no longer necessary for the purpose collected.
We implement appropriate technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures are designed to provide a level of security appropriate to the risks associated with processing personal information.
Our safeguards may include:
While we take reasonable steps to safeguard personal information, no system or method of transmission over the internet is completely secure. Because of this, we cannot guarantee absolute security.
If we identify a data breach that affects your personal information, we will notify you and any applicable supervisory authorities when required by law.
Individuals have certain rights regarding their personal information. These rights vary depending on where they live, but we aim to provide clear and accessible options for all users.
Rights for Users in the European Union (EU/EEA)
If you are located in the EU/EEA, you have the following rights under the GDPR:
If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with a data protection authority. You can usually contact the authority in your country of residence, place of work, or where you believe a violation has occurred.
You can submit a request to exercise your rights by contacting us using the details provided in the “How To Contact Us” section. Users in jurisdictions requiring consent for cookies and tracking (e.g., EU/EEA) may withdraw consent at any time via the cookie banner, privacy settings page, or by contacting us. Withdrawal does not affect the lawfulness of processing performed before withdrawal. We may need to verify your identity before processing your request.
Our Services are not intended for children under 16, and we do not knowingly collect personal information from individuals under this age. If we become aware that we have collected personal information from a child under 16, we will delete it as soon as reasonably possible.
If you believe that a child has provided personal information to us, please contact us using the details in the “How To Contact Us” section.
We may update this Privacy Policy from time to time to reflect changes in our practices, operational needs, or applicable laws. When we make changes, we will update the “Last Updated” date at the top of this Policy.
We use the following method(s) to notify users of significant changes to this Privacy Policy:
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.
If you have questions, concerns, or requests related to this Privacy Policy or our handling of personal information, you may contact us using the details below:
KOST Cosmetics Italy
contact@kostcosmetics.be
