V. Purposes and Legal Grounds for the Processing of Personal Data

Our website collects and processes your personal data for the following purposes and based on the corresponding legal grounds:

For the provision of services and payment processing under concluded contracts, personal data such as identification details, contact information, and banking data may be processed. This processing is based on the execution of a contract to which the data subject is a party or on a legal obligation imposed on us.
For communication via email, the information you provide may be used to send various messages to your email address if you have subscribed to one of our newsletters. The legal basis for this processing is the consent of the data subject, which can be withdrawn at any time.
For advertising purposes, the information collected through cookies may be used to display advertisements relevant to your interests and preferences. The legal basis for this processing is our legitimate interest in maintaining free access to our website without compromising our financial activity.
For statistical analysis, data is used to improve certain functionalities, modify sections, or display the most relevant information. The legal basis for this processing is our legitimate interest in understanding how the website operates, how it is read, and who its visitors are.
For behavioral control purposes, your personal data may be processed to prevent any illegal activity on our website, as well as to stop actions that are prohibited on the site or that could harm other visitors. The legal basis for this processing is our legitimate interest in ensuring the optimal functioning of the website and preventing fraud.
For the exercise of rights or claims, your personal data such as identification details, contact information, and address may be processed based on our legitimate interest in defending our rights in potential future disputes.

If your personal data is collected and processed exclusively based on consent, we will present a separate consent request in a clear, intelligible, and easily accessible form at the time you provide your personal data.

VI. Personal Data Retention Period

The criteria used to determine the retention period of personal data depend on the purpose and legal basis of the processing. After the period necessary to achieve the purpose for which the data was collected and processed has expired, the data will be deleted unless it is still required for the performance or conclusion of a contract or if the data subject has not consented to its retention for a longer period.

If the processing of your personal data is based solely on consent, the data will only be processed for as long as your consent remains valid, unless you withdraw or limit it earlier. In such cases, we will stop processing the data for the stated purposes, without affecting processing carried out before the withdrawal. However, the data may still be used when necessary to fulfill any legal obligation or for our legitimate interest in exercising our rights (including the legitimate rights of other individuals).

For more information regarding the storage and processing period of your personal data, please contact us at [office@fathyia.ro]

VII. Security of Personal Data

Our website [https://en.fathyia.ro/] is protected by appropriate technical and organizational measures against unauthorized access, alteration, or disclosure of your personal data, as well as against their alteration, loss, or destruction.

We recommend that you always keep your access data confidential and close your browser window once you finish visiting our website.

We use technical encryption procedures for the transfer of personal data. You can identify an encrypted data transmission by the display of a lock or key symbol in your browser’s status bar.

VIII. Your Rights as a Data Subject

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR):

Right to information – the right to receive details about the processing activities carried out by Save Your Skin SRL, as described in this policy;
Right of access – the right to obtain confirmation from Save Your Skin SRL regarding the processing of your personal data, as well as details about the processing methods, purposes, recipients, and your rights to restriction, objection, rectification, or deletion;
Right to rectification – the right to have inaccurate personal data corrected without undue delay and to have incomplete data completed;
Right to erasure (“right to be forgotten”) – the right to request deletion of your personal data by Save Your Skin SRL when one of the following applies:
a) the data is no longer necessary;
b) consent has been withdrawn and no other legal ground applies;
c) the data subject objects and there are no overriding legitimate reasons;
d) the data has been unlawfully processed;
e) there is a legal obligation to erase the data;
f) the data was collected in connection with the provision of information society services.
Right to restriction of processing – where one of the following applies:
a) the accuracy of the data is contested;
b) processing is unlawful, but erasure is opposed;
c) the operator no longer needs the data but the subject requires it for legal claims;
d) the subject has objected to processing pending verification of legitimate grounds.
Right to data portability – the right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller where legally applicable;
Right to object – the right to object to processing based on public interest or legitimate interest, except where the controller demonstrates compelling legitimate grounds that override your interests or for the establishment, exercise, or defense of legal claims. You can also object at any time to processing for direct marketing purposes;

Right not to be subject to automated decision-making, including profiling, that produces legal effects or significantly affects you;
Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing or with the competent courts if you believe your rights have been violated.

For additional questions about how your personal data is processed or to exercise your rights, please contact us at [office@en.fathyia.ro]

IX. Disclosure and Transfer of Personal Data

The data we collect from you will be processed within the European Union, depending on the purpose of processing. Save Your Skin SRL takes all necessary measures to apply appropriate safeguards to protect the confidentiality and security of your personal data during transfer. We minimize risks by not collecting or storing sensitive data.

Where permitted by applicable data protection laws, we may disclose your personal data to clients for business engagement or service quality confirmation, to auditors, supervisory authorities, or external service providers for contractual obligations.

We may also disclose your personal data when required by law, in pending or potential legal proceedings, or to establish, exercise, or defend legal claims, including for fraud prevention purposes.

X. Changes to the Privacy Policy

Please note that we may update this privacy notice from time to time by publishing a new version on our website to ensure compliance with legislative changes.

Since data protection laws, governmental interpretations, and supervisory authority recommendations evolve over time, this Privacy Policy may be updated accordingly. Therefore, we reserve the right to make changes to this document at any time, for any reason, without prior notice. Any modification to our Privacy Policy will be posted on our website so that you are informed of the latest version.