SC BEAUTY & WELLNESS SRL
Last updated: 20.08.2026
1. Introduction
This Privacy Policy describes how SC BEAUTY & WELLNESS SRL ("we", "the Controller"), with its registered office in Cugir, Ioan Budai Deleanu St. no. 5, Romania, collects, uses, and protects your personal data when you create an account and participate in our product studies through the platform accessible via private link. We are committed to complying with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
2. Data Controller and contact
Controller: SC BEAUTY & WELLNESS SRL, Cugir, Ioan Budai Deleanu St. no. 5.
Data Protection Officer (DPO): Alexandru Albu – alburadualexandru@outlook.com.
Contact for any data-related request: gdpr@bwcounter.com.
3. What data we collect
Account and authentication data: first name, last name, e-mail address, password (stored in encrypted/hashed form).
Demographic data: age, gender, city/region.
Questionnaire responses, including, if you choose to provide them, special category data (health data, ethnic origin, opinions). Providing these is strictly voluntary.
Minimal technical data: IP address, device and browser type, generated automatically for the operation and security of the platform.
4. How and why we process your data (purposes and legal bases)
Creating and managing your account and granting access to the platform — basis: performance of the requested service [Art. 6(1)(b) GDPR].
Conducting product studies — basis: your consent [Art. 6(1)(a)]; for sensitive data, your explicit consent [Art. 9(2)(a)].
Sharing with third-party clients/partners for study purposes — basis: your consent. Categories of recipients: consumer goods companies, market research agencies, IT processors.
Future marketing communications — only if you separately opt in [Art. 6(1)(a)].
Platform security and abuse prevention — basis: our legitimate interest [Art. 6(1)(f)].
5. Voluntary nature and withdrawal of consent
Participation and the provision of study data are entirely voluntary. You may withdraw your consent at any time, without affecting the lawfulness of prior processing, by writing to gdpr@bwcounter.com. Data strictly necessary to operate your account is processed for as long as you keep your account active.
6. Cookies
The platform uses exclusively strictly necessary cookies for authentication, session management, and security. These do not require consent, as they are essential to providing the requested service. We do not use analytics, advertising, or behavioral tracking cookies.
7. Data disclosure and international transfers
Your data may be accessed by our authorized staff, processors (the hosting provider Hostinger), and the third parties mentioned in section 4.
Some data may be stored/transferred outside the EEA, in the USA, through our provider Hostinger's infrastructure. Such transfers are carried out on the basis of the Standard Contractual Clauses (SCCs) approved by the European Commission, concluded with the provider.
8. How long we keep your data
We retain your data for a period of 60 months or until you withdraw your consent or delete your account, after which it is deleted or irreversibly anonymized.
9. Data security
We apply appropriate technical and organizational measures: password encryption, restricted authorization-based access, secure connections (HTTPS), and access to the platform only via private link.
10. Your rights (Art. 15–22 GDPR)
You have the right to: access; rectification; erasure ("the right to be forgotten"); restriction of processing; data portability; objection to processing; withdrawal of consent; and not to be subject to automated decision-making. You may exercise these at gdpr@bwcounter.com; we respond within 30 days at most.
11. Right to lodge a complaint
You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral Gheorghe Magheru Blvd., Bucharest, e-mail: anspdcp@dataprotection.ro, www.dataprotection.ro.
12. Changes to this policy
We reserve the right to update this policy. Any changes will be published on the platform, indicating the date of the last update.