Personal Data Protection (GDPR) / Your Rights
1. Who we are (Data Controller)
SC BEAUTY & WELLNESS SRL, with its registered office in Cugir, Ioan Budai Deleanu 5, Romania, is the controller of your personal data.
Data Protection Officer (DPO), where applicable: Alexandru Albu – alburadualexandru@outlook.com.
Contact for any data-related request: gdpr@bwcounter.com.
2. What data we collect
Identification and contact data: first name, last name, e-mail address.
Demographic data: age, gender, city/region.
Your questionnaire responses, including, if you choose to provide them, special category data (e.g. data concerning health, ethnic origin, opinions). Providing such data is strictly voluntary.
3. Why we process your data (purposes and legal bases)
Conducting product studies — based on your consent [Art. 6(1)(a) GDPR], and for sensitive data based on your explicit consent [Art. 9(2)(a) GDPR].
Sharing with third-party clients/partners for study purposes — based on your consent. Categories of recipients: consumer goods companies, market research agencies, IT processors. Upon request, we can provide you with the list of recipients.
Future marketing communications — only if you separately give your consent, based on your consent [Art. 6(1)(a) GDPR].
4. Voluntary nature and withdrawal of consent
Completing the questionnaire and providing your data are entirely voluntary. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal, by writing to gdpr@bwcounter.com.
5. Who we disclose data to
Your data may be accessed by: our authorized staff, processors, and the third parties mentioned in section 3.
Some data may be transferred outside the EEA, to the USA. Such transfers are carried out on the basis of the contractual clauses in place with our provider Hostinger (server hosting services).
6. How long we keep your data
We retain your data for a period of 60 months or until you withdraw your consent, after which it is deleted or irreversibly anonymized.
7. Your rights (Art. 15–22 GDPR)
You have the right to: access your data; rectification; erasure ("the right to be forgotten"); restriction of processing; data portability; objection to processing; withdrawal of consent; and not to be subject to automated decision-making. You may exercise these rights at gdpr@bwcounter.com; we respond within 30 days at most.
8. Right to lodge a complaint
If you are dissatisfied, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral Gheorghe Magheru Blvd., Bucharest, e-mail: anspdcp@dataprotection.ro, www.dataprotection.ro.
9. Data security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.