Privacy Policy

This document called Privacy Policy (“Privacy Policy”) is intended to help you understand the information we collect when you visit (hereinafter named the “Site”), whether you are or not you are registered, and also describe how we use such information.

Where appropriate, this privacy policy will also describe how we process the information you provide us or we collect about you when you visit the stores directly managed by us (“Stores”) or during any other contacts with us. The present policy is complementary to any other information provided under other circumstances.

This Site is a site with a general audience; nevertheless, our services are for people aged 16 or over. We do not request, collect, use, or disclose personal data provided by a person under the age of 16, both online and in our Stores. If we found out that we have collected personal data from a child, we will delete such data.

If you are under 16, please do not register or proceed with your online purchase and request the assistance of an adult (one of your parents or legal guardians) to proceed with the necessary procedures.

Who are we?

FARMEC S.A. is a joint-stock company, duly established and functioning in accordance with Romanian law, with registered office in Cluj-Napoca, no. 16 Henri Barbusse Street, registered with the Trade Registry under no. J12/14/1991, Unique Registration Code 199150, with a share capital of 6,246,485 RON.

This document gives you important information regarding the following issues:

By visiting our Site, by using its services or, interacting in any other way with us, through our sales points, newsletters and/or sites, you acknowledge to have read and understand this Privacy Policy and agree to that we may collect, use, transmit and disclose personal data that we collect through our Sites and Stores, in accordance with this Privacy Policy. If you have not already registered, we may ask you to register (for instance, by ticking a check box) if we consider it is appropriate to protect your rights or if it is required by relevant laws. If you do not agree with the terms of this Privacy Policy, please do not access this Site, do not create an account, and do not use or send personal information to this Site or do not register when this option is offered to you in accordance with relevant laws.

FARMEC S.A. is the operator of the personal data you provide us and is responsible for your personal data in accordance with the relevant law in terms of data protection (hereinafter referred to as collectively, “FARMEC”, “we”, “us” or “ours” in this Privacy Policy).

Our contact details are:
Cluj-Napoca, ROMANIA
No. 16 Henri Barbusse Street
J12 /14/1991, RO 199150
Share capital: 6,246,485 RON
E-mail: [email protected]

We have appointed a Data Protection Officer to permanently ensure that we process personal data in an open, accurate and legal manner. You may contact the Data Protection Officer at the address [email protected], mentioning DPO in the subject of the message.

The data we collect from you is stored in the Farmec data centre of Romania.

We do not transmit, sell, or cede your personal data to third parties for marketing purposes outside the FARMEC company. The data sent to third parties is used only in order to provide you our services. You will find the categories of third parties in each specific process mentioned here below.

Part of the collected data will be transferred to a third party for:

1. SENDING ADVERTISEMENT – to efficiently transmit them, we use the e-mail marketing services of Mailchimp – The Rocket Science Group LLC, with headquarters in Atlanta, Georgia, USA. Mailchimp is EU-US Privacy Shield certified and complies with the norms of the EU Regulation 679/2016.
These third parties have assumed the contractual commitment to provide appropriate security measures for your personal data, which means that they will be protected in compliance with all the legal requirements of the European Union.

Depending on the scope for which the data are used, the basic legal grounds for processing your data may be the following:
– Your consent;
– Our legitimate interest, which could be:
a. Improving our products and our services: more precisely, our business interests to help us understand even better your needs and expectations, and thus improve our services, sites/applications/devices, products and brands in the benefit of our consumers;
b. Securing our instruments: keeping your instruments safe (our sites/applications/devices) and ensuring that they work properly and that they are undergoing a continuous process of improvement.
– Fulfilment of a contract: more precisely, to carry out the services you request from us;
– Legal reasons for which data processing is required by law.
For every specific processing of the personal data we collect from you, we will inform you whether the provision of personal data is required by regulations in force or whether it is necessary to sign a contract, whether it is obligatory to provide us with your personal data and what are the possible consequences in case of your refusal.

The right of access means that you have the right to obtain a confirmation from FARMEC on whether we are processing your data or not, and if so, to grant you access to these data as well as to information on the processing.

The right to rectification means that you have the right to request the rectification of your personal data if these data are incorrect, including the right to fill in incomplete personal data. If you have a FARMEC account, then you can edit your personal data from your account.

The right to delete the data means that you have the right to obtain at any time the deletion of the personal data processed by FARMEC in any of the following cases: the data are no longer necessary for the purposes for which they were collected or processed; you withdraw your consent and there are no other legal grounds for the processing; you oppose the processing; data were processed illegally; the data must be deleted for conformity with a legal obligation or the collection has been made in respect with the provision of information society services.
Nevertheless, your data shall be retained to finalise the following situations:
* you have an unsolved request submitted to Customer Service;

The right to restrict processing means you have the right to obtain restriction of processing in the following cases:
* if you dispute the accuracy of the data, for a period that permits FARMEC to verify data accuracy;
* if the processing is illegal, and you are opposed to the deletion of your personal data, requesting instead the restriction of their use;
* if you have opposed your processing, for the length of time, it is being verified that FARMEC’s legitimate rights override your rights;
* if FARMEC no longer requires your personal data, but they are required to defend your rights in court.

The right to portability refers to the fact that you have the right to obtain your personal data in a structured format, currently used and that can be readable automatically, and you are entitled to communicate these data to another data operator.

The right to oppose means that you have the right to oppose the processing of your personal data on the grounds of the legitimate interest of FARMEC. FARMEC will not continue to process personal data unless we can prove a legitimate, solid reason for this processing, a reason that prevails over your interests and rights or if the processing is done based on court procedures.

The right to refuse the automated decision-making process that you have the right not to be the subject of a decision based exclusively on automatic processing, including profile creation, unless you have explicitly expressed your consent or automatic processing is not necessary to sign or perform a contract.

Your right to oppose direct marketing:
You have the right to oppose direct marketing, including also profile analysis for direct marketing purposes.

You may unsubscribe from direct marketing by following the instructions in each marketing e-mail or in a letter sent by any of the contact methods mentioned in the present document.

How can you exercise your rights?
We gave high importance to personal data protection and, consequently, we have dedicated customer support personnel to handle all your requests for your rights mentioned above. Our dedicated staff is always available at the following address [email protected]

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, especially by referring to an identifier, such as a name, an identification number, location data, an online identifier, or one or several specific elements of his/her physical, physiological, genetic, psychic, economic, cultural or social identity;

“Processing” means any operation or set of operations performed on personal data or on personal data sets, carried out with or without the use of automated means such as the collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or available in any other way, alignment or combination, restriction, erasure or destruction;

“Operator” means a natural or legal person, a public authority, an agency or other authority that, on its own or with others, establishes the purposes and means of the personal data processing; where the purposes and means of processing are set out by the European Union law or by national law, the operator or the specific criteria for its designation may be established in the Union or national law;
When we use the term “personal data” within this privacy policy, we refer to any information that permits us to identify you or a third party whose personal data you provide to us, directly or indirectly, by enclosing any information that refers to the purchase of goods or services; or to the information you have chosen to transmit or share with us or with third parties while using the Website or our Stores.

We will process your personal data in compliance with Regulation (EU) 2016/679 “GDPR Regulation” and with the Romanian legislation. We reserve the right to carry out further processing within the limits of the law in a criminal investigation or other investigation or proceedings.

Data source
We collect personal data from you only when you voluntarily provide us with such information as:
The site when you look for information on the Site; when you contact us with a comment or a question; when you sign up to receive newsletters;

Our stores: when you fill in the fidelity card form, during unofficial discussions when visiting boutiques or outlets, when you participate in a contest, a tombola or a promotion in one of our stores; when you buy merchandise; Events: when you participate in our events, market surveys and research or any other promotions, including those organised online (for instance, actions that we run on third-party social media, like Facebook);

Our customer service: when you seek assistance, special services or before and after sale services;

E-mail, text, and other type of electronic messages: when we communicate with you;

If you provide us with personal information from third parties (for example, Family members, other third parties), you must make sure that these third parties are fully informed and you are authorized to use their data, as described in this Privacy Policy.

Data categories
We may collect and use various types of personal data according to our purpose, as described below:
a. personal data such as name, surname, sex, age/date of birth, country of origin and other personal details (hair and skin type etc.) as allowed by applicable law;
b. contact details like address, e-mail address, telephone number, mobile number and other contact details, in conformity with applicable law in force;
c. payment details such as payment instrument (credit and debit card)
d. sales information like the products or services provided, the place of purchase, the product codes, the amount, the total sales, the complaints, the returns, the reimbursements and other sales related information, in conformity with applicable law in force;
e. practices and profiles, like your purchase data (purchase history, including the Store where the sale takes place, the type, the quantity and the price of the products bought), client relationship management, habits (wish list, preferred product categories, how did you find out about our brands, the comments on the quality of the purchased products, the habits or the needs you have declared), other information (job, education, hobbies information and lifestyle activities), in conformity with the applicable laws in force;

Personal data can be used for the following goals, varying according to the specific circumstances in which you interact with us.

When you use our Site
When you use our Site to look for our products and services and to view the information we are providing, a number of cookies are used by us as well as by third parties in order to enable the site functioning, to collect useful information about visitors and to help you have the best user experience possible.

Some of the cookies we use are strictly necessary for our site to function and we do not ask for your consent to store them on your device. These cookies are listed below:

Cookie name ScopeĀ 
ARRAffinity To aid people who need to stay with a certain instance of web app or web site
Gerovital-cookies-accepted The user’s accept for the use of cookies

Besides the cookies we use, third parties also store other cookies on the device with your consent. These are listed below:

Third party name Description linkĀ 

When you send a request using our Site
When you submit a request through our Site, according to the information that is of interest to you, we may need the following information: your first and last name, your phone number contact details, e-mail address, postal address, gender and age.

We use this information to answer your request, included to provide the information requested about our products and services. Also, we may also send you more e-mails once you have submitted a request to satisfy your interest and to make sure that we have answered your request. We will do so on the grounds of our legitimate interest to provide accurate information before the sale.

Your request is stored and processed as an e-mail hosted by Microsoft within the European Economic Area (EEA).
We do not use the information you provide to make automated decisions that may in any way affect you.

When you request a fidelity card in one of our Stores
When you visit the FARMEC Stores, you can request the issuance of a fidelity card (hereinafter named “Fidelity card”). To this end, we ask you for contact information such as name, surname, date of birth, phone number, e-mail address, home address, and credit card information.
We use this information to manage your purchases in order to offer the benefits granted through the Loyalty card. The advantages offered to the Fidelity card holders are presented in the FARMEC Official Fidelity Program, available
in FARMEC Stores.
Additionally, on the basis of your consent given in the Loyalty card form, we may use your information to offer you promotions, discounts and other personalized services and to send you a newsletter, as well as other marketing and commercial communications regarding products, services and invitations to events of our brands, studies and research, analysis, invitations to competitions, tombola or promotions and other benefits for registered clients (“marketing”).

When you sign up to receive our newsletters:
You can subscribe to newsletters by using one of the following methods:
– From the main page of the Site, filling in the e-mail address in the form specially designed;
– When you sign up for a new account by checking the option of the newsletter sign-up;
– On the check out page at the end of the order, checking the options for subscribing to related newsletters
– In the suggestion forms, opinions, advice from the Site specialist, selecting the newsletter sign-up option;
– From the Farmec Facebook page, by filling in the e-mail address in the form provided.

When you sign up to receive our newsletters, we can ask you for: your first and last name, e-mail address, gender, hair type, skin type, age and postal address.

We will ask for your consent to use these data to e-mail the newsletter that contains information on our products and other information that we might consider to be of interest to you.

You can withdraw your consent at any moment, by simply following the instructions in each newsletter and we will immediately stop to send you the newsletter.

For sending newsletters, your name and e-mail address will be transferred to a third party. Therefore, in order to efficiently communicate them, we use the e-mail marketing services Mailchimp – The Rocket Science Group LLC, based in Atlanta, Georgia, USA. Mailchimp is EU-US Privacy Shield certified and complies with the norms of the EU Regulation 679/2016 and has undertaken a contractual commitment to provide suitable security measures regarding your personal data, meaning that they will be protected in compliance with the legal requirements of the European Union.

We do not use the information you offer us to make automated decisions that may affect you in any way.

When you send a review on one of the Farmec products
When submitting a Farmec product review, we will register your name and first name, e-mail address, sex, age, skin type and IP address, which is the address of your device on the Internet.

We use this information to offer our potential clients with independent, verified opinions on our products. The name, age, skin type, and review content (but not your e-mail address or IP address) may be publicly displayed on our Site. We will do so on the basis of our legitimate interest in terms of marketing our products and services.
We do not use the information you offer us to make automated decisions that may affect you in any way.

You may ask us to remove your review at any moment.

When you participate in our feedback polls
When you participate in our feedback polls, we may ask for your name, e-mail address, organization name, information about your profession, and answers to the questions we ask regarding your opinion on our products and their use.

We use this information to develop and improve our products and services as well as client relationships. Information regarding your profession, organization, and some or all of your comments may be publicly displayed on our Site under the testimonial section. We will do so on the basis of our legitimate interest in terms of marketing our products and services.

Your details may be shared with a third-party survey system located in the European Economic Area (EEA).

We do not use the information you offer us to make automated decisions that may affect you in any way.

You may ask us to remove at any moment a testimonial that relies on your feedback from the content of our Site.

Direct marketing
On the basis of your consent, we will process the following categories of personal data:
*contact information such as name, e-mail address, telephone number and postcode;
* sex (if you opt to transmit this information);
* products and offers you have viewed.

If you have a FARMEC account, we will also process your personal data communicated in regard to your account, data such as: name; address; age; order history; how you navigated and what you clicked on the site.

We use personal data to send you marketing offers, polls and invitations via e-mail, text messaging, phone calls and mail.

For optimizing your FARMEC experience, we will provide you relevant information, product recommendations and we will send you customized offers, invitations to competitions, tombola or promotions and other advantages for registered clients. All these excellent services are based on previous orders, the items you have clicked, and the information you have sent.

Data send to third-party is used solely to provide you with the services mentioned above, and those sent to media agencies and to technical suppliers aim at distributing direct physical and digital marketing.
We do not transmit, sell, or disclose your data to third parties for marketing purposes.

The processing of your personal data is done on the basis of your consent when you agree to direct marketing.

You have the right to withdraw your consent to the processing of personal data at any moment.
When you do so, FARMEC will stop sending you other direct marketing offers or information on the basis of your consent.

You may unsubscribe from direct marketing by following the instructions included in each marketing message.

Retention time of your personal data

We will store your information as long as required by the law in force. Unless there is a legal requirement, we will only store them for as long as necessary.

We have implemented suitable measures to secure your personal data from accidental loss as well as to prevent unauthorized access, use, modification and disclosure. For instance, when you offer order information, we use the Secure Socket Layer (SSL) technology, an encryption tool to provide security while transmitting this information over the Internet. In addition, we use firewall protection, password control and other technological and procedural safeguards for the maintenance of this Site. Even if we have implemented the security measures mentioned above for this Site, you must be aware of the fact that 100% security is not possible. Consequently, your personal data is provided on our own responsibility and to the fullest extent allowed by applicable law in force, so we will not have any responsibility as a result of the disclosure of your personal information as a result of unauthorized errors, omissions or acts to third parties during or after their communication to us. We recommend that you update your software to protect data transmission over networks on a regular base (for instance, antivirus software) and you ensure that the electronic communications service supplier has adopted appropriate means to secure data transmission over networks (for instance, firewall spam filters and spam filters); (ii) keep your privacy and do not disclose to any person the username and password to access your account; (iii) change your password regularly, and (iv) not use the same password for all of your accounts.

In the unlikely event that we discover that the security of your personal information in our possession or control has been or may be compromised, we will notify you of this situation, under the terms of the applicable law, using any of the methods described therein (by providing us with your e-mail, you agree to receive such electronic notification through this e-mail address).

If you think that FARMEC is processing your personal data in an incorrect manner and you have a complaint on the use of your data by us, we would prefer to contact us directly in the first instance, so that we can address the complaint.

Also, you have the right to file a complaint with a supervisory authority.

We regularly review and, where appropriate, update this privacy policy and when our services and the use of personal data evolve. If we wish to use your personal information in a way we have not previously identified, we will contact you to provide you with more information about it and, when and if necessary, to ask for your consent.

We will update the version number and date of this document every time this document is modified.

Applicable starting with 25.05.2018