Personal Data Policy
Last Updated: June 1st 2024
We value your privacy, and we want to make sure you feel comfortable using our services. In this privacy policy you can familiarize yourself with our practices so you know what types of personal information we collect, how we use it, when it may be transferred to third parties, and the choices you can make.
WHAT IS THE SCOPE OF THIS PRIVACY POLICY?
This Privacy Policy is provided by Cosmenor AS, located at Solbråveien 23, 1383 Asker, Norway (“Cosmenor,” “we,” “our,” or us”) and it applies to the website located at sothys.no. Benefit Cosmenor is the controller of data collected via the sothys.no website.
WHEN IS PERSONAL INFORMATION COLLECTED?
“Personal information” is information that identifies you as an individual. Personal information is any information that identifies, reasonably relates to, or could reasonably be linked to, whether directly or indirectly, a particular individual or a household.
Personal information is collected when you:
-
Create a customer account on sothys.no
-
Place an order on sothys.no
-
Join our loyalty program
-
Use our online services, such as the chat service
-
Agree to opt-in to receive marketing communications and newsletter from us by email, telephone web push notifications, SMS, or postal mail, depending on your selection
-
Answer surveys or satisfaction questionnaires based on your customer experience
-
Contact our customer service
-
Send requests for information to us
-
Take part in an event organized by Cosmenor or our partners or enter a contest or other promotion
-
Brows on the Internet using cookies or similar technology, or when you click on advertisements for our products or services
WHAT PERSONAL INFORMATION IS COLLECTED?
Some personal information is provided by you and some is received from other sources, like third party services and optional promotions or competitions in which you participate, which may be combined with other information we have about you. Below are the types of personal information we may collect about you.
A. INFORMATION YOU PROVIDE TO COSMENOR
The type of personal information that is collected depends on your interactions with Cosmenor and may include:
-
Identifiers - Identifiers such as your first and last name, your social media handle and other similar identifiers are collected. Your relationship to one of our partner salons, should you chose to connect yourself with any of our partner salons.
-
Contact Information - Your first and last name, email address, telephone number, postal address, social media handle and other similar contact information are collected when you provide it to Cosmenor.
-
Billing Information - The payment data necessary to process your purchase is collected if you make a purchase on the sothys.no website.
-
Purchase History - If you make a purchase, product and/or service information, order number, receipts, the purchase date or location, and other similar data relating to purchase transactions is collected.
-
Account Information - Your identity, contact information, purchase history, communication preferences and other similar account information are collected if you choose to create a Cosmenor account.
-
Preferences - Your product preferences and online settings such as your language preference are collected.
-
Location Information - Your geographic location, if you choose to share location information with us, is collected.
-
Health Related Data - Specific information regarding your health if you notify Cosmenor of any allergies or undesirable side-effects concerning any of Cosmenor’ products or services is collected.
-
Physical Attributes - Information you provide regarding your physical features or attributes when you use a product or service, such as if you leave a product review on the Cosmenor website, is collected.
-
Message Information - Information included in messages or inquiries you send to us, such as when you contact us through our messaging service; we also collect your message history.
B. INFORMATION COLLECTED WHEN YOU USE COSMENOR SERVICES OR WEBSITE FEATURES
Personal information is also collected in connection with certain Cosmenor services, optional competitions or promotions, website features, or your business relationship depending how you choose to interact with Cosmenor and may include:
-
Appointments - Your contact information, appointment time, the type of service, and other similar appointment information is collected when you book an appointment for Cosmenor services.
-
Cosmetic Services - The type of service you participate in and other similar information related to your service is collected, such as specific information regarding your health if you notify Cosmenor of any allergies or undesirable side-effects concerning any of Cosmenor’ products or services.
-
Customer Service - Your identity, contact information, order details, and other similar information is collected when you provide it to Cosmenor customer service.
-
Product Reviews - Information you provide relating to your identity, location, physical features and product opinions are collected if you choose to leave a product review.
-
Competitions or Promotions - Your contact information and other information you provide to Cosmenor is collected when you choose to participate in an optional sweepstakes or promotion.
Personal information which is essential to provide Cosmenor’ services is marked with an asterisk (*) on Cosmenor’ online webforms. Information not marked with an asterisk is optional and enables us to improve our communications and services with respect to you.
You may choose not to provide certain personal information to Cosmenor, however, please be aware that if you do not fill in the compulsory fields marked with an asterisk, you may be unable to access certain services or Site functionalities, and/or Cosmenor may be unable to respond to your request.
C. COOKIES
Some personal information is received from third parties, such as service providers or business affiliates of Cosmenor, when you use certain third-party services, and through technology such as cookies. Like many other websites, this website uses cookies and other similar technologies to improve the performance of the website or to provide more relevant ads. Cookies track how you use a website, enable the website to remember your preferences or settings, and help us analyze how the website is performing.
For more information about our cookies please visit our Cookie Policy.
THIRD PARTY LINKS ON THE COSMENOR SITES
The Cosmenor Sites may contain links to other third-party websites for your convenience. Cosmenor is not responsible for the privacy policies and practices of other third parties and any information that you submit to a third-party is subject to their privacy policy. Further, Cosmenor is not responsible for the content of third-party websites and does not guarantee the accuracy or completeness of information displayed on any third-party site. Once you leave the Cosmenor Site, or any other location where this Privacy Policy is posted, or are redirected to any third-party website, application, or other online service, you are encouraged to read and familiarize yourself with the privacy terms or policies applicable to that third-party.
HOW IS YOUR PERSONAL INFORMATION USED?
Personal information is collected in support Cosmenor’ business operations and is used to provide Cosmenor’ various products and services. Depending on how you interact with Cosmenor, your personal information may be used for the following purposes:
Administer Your Account
Your information is used to:
-
create a customer account on our website
-
manage your access to your customer account
Orders & Purchases
Your information is used to:
-
process and manage your online orders
-
track deliver of your online orders
-
compensate any salon partner that you have linked yourself to their share of the profit for your order
Customer Service
Your information is used to:
-
manage customer service relations regarding any requests for information or complaints you may send to us via a Cosmenor Site, customer service, or social network pages
Communicate With You
Your information is used to:
-
send you information regarding offers, news, events and other similar communications, subject to your consent and chosen channel or method of communication
-
manage our loyalty program
Personalization / Customer Experience
Your information is used to:
-
manage and optimize your customer experience by improving our knowledge of our customers
-
propose appropriate, tailored services, particularly when we enhance our products or services
Product Reviews
Your information is used to:
-
receive customer feedback on our products and/or services;
-
provide other shoppers with customer feedback to our products and/or services
Competitions, Promotions & Events
Your information is used to:
-
contact you regarding a competitions, promotion or contest you participate in through a sothys.no, social media or other applications
-
manage your participation in events to which you have signed up
Third-Party Services
Your information is used to:
-
facilitate services you request, such as to connect you to external third-party applications, such as when you create an account on an external application like Facebook, Instagram, Snapchat, YouTube or Twitter
-
assist Cosmenor with providing its services to you
Security & Fraud Prevention
Your information is used:
-
if it is necessary to prevent, detect and/or address security issues, technical issues, or fraud
-
to secure online transactions
Legal & Compliance Obligations
Your information is used to:
-
perform or enforce an agreement between yourself and Cosmenor for compliance with legal obligations
-
for compliance with fiscal obligations
-
manage payment incidents and manage debt collection (please see our Terms and Conditions for more detail)
-
track and manage any alerts you may send to us as part of our cosmetovigilance obligations
Provide or Improve Our Products and/or Services
Your information is used to:
-
conduct statistical analysis to develop management, measuring, and reporting tools to adjust and improve our sales, marketing, and product manufacturing
-
improve or develop new products or services based on the feedback you voluntarily provide
The retention period for personal information may vary based on certain circumstances or legal obligations. Cosmenor retains personal information for so long as necessary to provide the products or services you have requested, or for the period of time relevant for legal compliance or essential business purposes such as enforcing contracts, maintaining security, or dispute resolution.
HOW IS YOUR PERSONAL INFORMATION SHARED?
Cosmenor endeavors to ensure that access to personal information is restricted to authorized persons within the Cosmenor as necessary for the purposes described in this Privacy Policy. Personal information may be shared outside of the Cosmenor with vendors and third-party services providers to process on behalf of Cosmenor or pursuant to legal or compliance obligations. It may also be shared with your consent or to complete the transaction of a service you have requested or authorized. Below are categories of recipients your personal information may be shared with depending on how you interact with Cosmenor:
A. COMPLIANCE WITH LAW
We may access, preserve, use, or disclose your personal information to meet legal, regulatory or treaty obligations, to respond to requests from recognized legal authorities, or if we have a good faith belief that the law requires us to do so or that it is reasonably necessary to detect, prevent, and address security, technical issues, or fraud. We may access, preserve, use, or disclose your personal information to protect the rights of the business, its property, its employees and others, or to enforce our billing or contracts. In the event that Cosmenor is involved in a direct or indirect reorganization process, such as a merger, acquisition, sale, dissolution, bankruptcy or other change in ownership, your personal information may be among the transferred business assets.
B. THIRD-PARTY SERVICE PROVIDERS
Cosmenor uses third-party service providers to facilitate certain services on behalf of Cosmenor. Depending on your interactions with Benefit, your personal information may be shared with third-party service providers that help with the following:
-
Payment processing
-
Social media
-
Logistics
-
Anti-fraud
-
Marketing and sales
-
Customer service
-
Cosmetovigilance
-
Event organization
-
Product orders
-
Product reviews
-
Website administration
-
Analytics
-
Customer relations management
C. DATA MANAGEMNET AND STORAGE PARTNERS
-
The tecnical development and maintenance of the website is done by Mayu Technologies in Chandigarh, India
-
Hosting of the data servers is provided by Wix in Tel-Aviv, Israel. Cosmenor store your data inside the countries that are governed by the European GDPR regulations.
HOW IS YOUR PERSONAL INFORMATION PROTECTED?
We implement reasonable security measures to protect your personal information against unauthorized access, use, or disclosure which includes physical, administrative, and electronic safeguards. For example, when you place an order on sothys.no, payments are processed via a secured payment platform. Your payment details are encrypted prior to transit using SSL (Secure Socket Layer) protocol and encrypted at rest on our third-party servers. It is your responsibility to keep your passwords confidential. If you suspect your account has been compromised, please immediately notify us.
Please understand that no method of data transmission or storage is 100% secure and it is not possible to guarantee that a network or system will never be compromised. Consequently, while we utilize reasonable security measures to protect personal information, we cannot guarantee or warrant the security of any personal information you transmit to us and you understand that any personal information that you transfer to us is done at your own risk. If we learn of a security-systems breach we may attempt to notify you so that you can take appropriate protective steps. In the event that we are required by law to inform you of any unauthorized access to your potentially personally-identifying and personally-identifying information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
YOUR RIGHTS
Below are your rights as a registered user. To exercise your rights, you must contact us, see contact information above.
We will respond to your inquiry to us as soon as possible, and within 30 days at the latest. If it takes longer than 30 days, you will be notified. We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights with us. We do this to be sure that we only give access to your personal data to you - and not to someone pretending to be you.
Control over your information
You have the right to obtain information about and insight into the personal data we process about you. Through this declaration, we inform you about our processing of personal data. You can also contact us if you want more information.
In order for you to have control over your personal data, you will have access to the following tools:
Access to personal data (access) and updates
You will have access to the essentials of personal data processed about you by creating a user on the website, and you can then also update/correct the information. Information that is not available on "my page" can be accessed by contacting us and creating a customer case. Our customer service will then make available your information stored on your profile and you will receive a confirmation by e-mail when the information will be available to you.
Withdrawal of consent
If you later change your mind about our ongoing ability to collect information from sources that you have already consented to, you can simply withdraw your consent by contacting us. If you do this, certain services will naturally lose functionality. Alternatively, you can contact customer service.
Deletion of account
If for any reason you wish to delete your user account, this can be done by contacting us.
Change and deletion
You can also ask us to correct incorrect information we have about you, review or ask us to delete personal data. We will as far as possible accommodate a request to delete personal data, but we cannot do this if we still need the data.
Right to restrict or object to processing
You have the right to have the processing limited in certain cases, see GDPR article 33, such as:
a) You dispute the correctness of the personal data, for a period that enables us to check the correctness of the personal data.
b) The processing is illegal, and you object to the deletion of the personal data and instead request that the use of the personal data be restricted.
c) We no longer need the personal data for the purpose of the processing, but you need it to establish, enforce or defend legal claims.
d) You have objected to processing according to GDPR article 21 no. 1 pending the check of whether our legitimate interests take precedence over your privacy.
The right to data portability
For information which you have provided to us and which is necessary to carry out an agreement with us, and which is processed automatically (i.e. not manually by us), you can request to have the personal information about you handed over or transferred to another supplier in a structured, commonly used and machine-readable format (data portability).
Automated processing, including profiling
There will be no automated processing, including profiling, based on your personal data that has legal effects or that significantly affects those to whom the personal data applies. See GDPR article 22 no. 1 and 4.
CONTACT US
Cosmenor AS
Solbråveien 23
1383 Asker
post@comenor.no
Phone: +47 22 20 99 90