Who is responsible for the collection and processing of data

IQ VERDE S.R.L., as author, owner, and administrator of the website www.thebodyshop.ro, respects the privacy and security of the processing of personal data of every person who visits this site for the purpose of placing orders for our products.

In accordance with the provisions of EU Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, IQ VERDE S.R.L. has the obligation to manage the personal data you provide about yourself under safe conditions and only for the purposes specified below.

IQ VERDE S.R.L. undertakes to maintain the confidentiality of the personal data provided by you through the website www.thebodyshop.ro by placing orders and purchasing products in The Body Shop stores, as provided for by EU Regulation no. 679/2016.

Types of data that can be collected/processed

Name, surname, email address, phone number, product delivery address, gender, date of birth, product purchasing preferences.

We may also request bank card details for online payments. Payment is based on a secure online transaction processing system that offers confidentiality, security, and simplicity in the purchase of products and services via the Internet. Card data processing is done exclusively through the bank; our store does not request or store any details regarding your card.

Methods of collecting personal data

Personal data will be collected through the following methods:

• via subscription and registration forms on the website www.thebodyshop.ro
• via points of sale in our own stores
  
  

Purpose of data collection, method of use, and legal basis

Why can we use personal data?	How do we use personal data for this purpose?	What is the legal basis for processing personal data in this way?
To process payments and protect you against fraudulent transactions.	We may need to process personal data to keep payment information secure and protect you against fraudulent transactions.	Processing personal information to keep payments secure is necessary to honor the contract with you.
To ensure that the content on our site is presented in an effective manner for you and for your computer.	We may sometimes use personal information (such as your IP address) to measure your use of our site and to evaluate the effectiveness of our site and improve the content.	As applicable, we will ask for your consent to use cookies before processing.
To be able to offer you goods and services, namely for the processing of online orders.	We may need to use personal information to fulfill our obligations under the contract with you (e.g., invoices, contracts, dispatch notices, payment proof documents, etc.).	Using personal information in this way is necessary to fulfill our legal and/or contractual obligations to you.
For direct marketing, with your permission.	We may need to use your contact information (email address, postal address, or phone number) to provide you with information you have requested or that we believe may interest you.	It is in our legitimate interest to process personal information to develop, improve, sell, and offer products and services to you.
To allow you to participate in promotions and competitions.	We may need to use your contact information (e.g., email address, phone number, postal address) to ensure that you receive all the benefits to which you are entitled.	Using personal information in this way is necessary to fulfill our legal and/or contractual obligations to you.
To allow you to participate in our campaigns related to values, petitions, and activities of this type.	We will need to use your contact information (e.g., email address, phone number, postal address) to register your participation in campaigns, petitions, and activities of this type.	It is in our legitimate interest to process personal information to register your participation in campaigns, petitions, and activities of this type.
To process product exchanges and returns.	We will need to use your personal information to fulfill our obligations under a contract with you (e.g., you bought a product from us and wish to receive an exchange or a return).	Using personal information in this way is necessary to fulfill our legal and/or contractual obligations to you.
To obtain feedback from you.	We may collect your personal information when we gather feedback from you about our products, site, or other activities.	It is in our legitimate interest to process personal information to develop and improve our products and services.
To respond to requests or complaints.	We will be required to use your personal information to respond to requests or complaints that we might receive from you.	Using personal information in this way is necessary to fulfill our legal and/or contractual obligations to you.
To develop products and services.	We will use your personal information in the event that adverse reactions occur.	It is in our legitimate interest to process personal information to develop our products and services.

IQ VERDE S.R.L. may provide your personal data to third parties if required by law or in cases of good faith where such actions are necessary to comply with legal provisions; to protect and defend the property rights of IQ VERDE S.R.L. and the website www.thebodyshop.ro; or to act in emergency circumstances to protect the personal safety of employees, users of products, or services. We may also disclose personal data to third-party companies that support advertising activities, financial organizations, entities that fight fraud, and technology service providers with whom we have contracts containing confidentiality clauses.

When IQ VERDE S.R.L. is requested to provide personal data or is allowed to do so, only that data strictly necessary to fulfill the object of the request will be disclosed.

We may disclose your personal information to comply with regulatory obligations, such as in the case that you have an adverse reaction to our products

Retention period

In general, we keep personal information for as long as it is necessary to maintain the relationship with the customer and to provide you with services. There are also other reasons why personal information may be retained for a longer period, such as legal or regulatory reasons. However, if you choose to receive marketing communications from us, we will retain your personal information for as long as necessary until you withdraw your consent or unsubscribe from receiving marketing materials. If you wish to withdraw your consent or unsubscribe from receiving marketing materials, please contact us in the manner indicated in the relevant communication.

At any time, you can withdraw your consent for the collection, use, or disclosure of personal data by contacting us using the details provided at the end of this communication.

IQ VERDE S.R.L. may disclose personal data to third-party companies that support marketing activities on our behalf, with whom we have contracts.

Each time we send marketing communications, we give you the option to unsubscribe by contacting us as established in the respective section.

We may also disclose personal data to non-profit entities or campaign partners for charitable purposes or petitions.

We keep personal data as accurate, complete, and current as necessary, taking into account their use and the interests of our customers.

You have the responsibility to inform us about changes that may occur and to ensure that the information is accurate and current.

Customer rights

• The right to receive information regarding data processing and a copy of the processed data;
• The right to request the rectification of inaccurate data or the completion of incomplete data;
• The right to request the deletion of personal data (“the right to be forgotten”) and, in the event that personal data has been made public, the transmission of information regarding the deletion request to other operators;
• The right to request the restriction of data processing;
• The right to data portability - you can receive, under certain conditions, the personal data you have provided to us in a machine-readable format, or you can request that the respective data be transmitted to another operator;
• The right to object to data processing with the intention of stopping the processing;
• The right to withdraw a given consent at any time in order to stop data processing based on your consent. The withdrawal will not affect the legality of processing based on the consent given before the withdrawal;
• The right to lodge a complaint with a supervisory authority if you believe that the data processing is a breach of GDPR.

Cookies policy

We may use cookies to collect information such as: browser type, operating system, etc. We use cookies to improve the use and functionality of our site and to better understand how visitors use it.

Our cookies allow the identification over time of users who have visited our site before, without compromising personal data. To provide you with the best services, we will use both “permanent” cookies and “session cookies”.

Permanent cookies serve to offer you better navigation on our site.
Disabling these cookies does not affect the possibility of using the site.

The data stored in session cookies is valid only for your current visit and offers the possibility of full use of the services available on our site.

The browser can be configured so as to reject cookies. However, disabling cookies may lead to difficulty in accessing the site's web pages or the impossibility of registering or using certain functions that require registration or information collection. Cookie settings can be changed at any time.

If you do not want cookies, you can change your browser settings (for information, consult the "Help" section in your browser's menu bar). Cookies already stored on your computer can be removed by deleting temporary browsing data.

How you can contact us

You can send questions, comments, and feedback regarding the collection of personal data by contacting us at:

Email: contact@thebodyshop.ro