Legal information
Privacy Policy
Version 2026-09 · effective from 17. 9. 2026
We take your privacy seriously. This document explains which personal data we process when operating the www.beautimess.top shop, why, how long we keep it and what rights you have. Processing complies with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection.
1. Controller
VitaCore s.r.o., Matúšova 8027/54, 811 04 Bratislava – mestská časť Staré Mesto, Slovakia, Company ID: 56 093 667. Contact for data-protection matters: info@beautimess.sk, +421 908 633 813. We have not appointed a data protection officer (not mandatory); requests are handled by a designated employee.
2. What we process, why and for how long
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, e-mail, phone, language | customer account, order communication, delivery | performance of a contract (Art. 6(1)(b)) | until the account is deleted (+30 days to anonymise); guests 3 years after the last order |
| Delivery and billing address | delivery, invoicing | performance of a contract | until the account is deleted; on accounting documents 10 years |
| Orders, invoices, credit notes, payments | contract performance, accounting, tax, claims | legal obligation (accounting and VAT acts) | 10 years from the end of the accounting period |
| Payment tokens (saved card) | fast payment, refill | consent | until the card is removed or the account deleted; the card number is seen only by the payment gateway |
| Beauties (loyalty points), refill, wishlist, saved bags | loyalty programme and account services | performance of a contract | until the account is deleted |
| Consents (newsletter, cookies) and preferences | proof of consent, notification settings | legal obligation / consent | 3 years after withdrawal of consent |
| Newsletter e-mail | sending news and offers | consent (Art. 6(1)(a)); withdraw at any time via the link in every e-mail or in your account | until consent is withdrawn |
| Searches and browsing in the shop | improving search and offers, personalisation | legitimate interest (Art. 6(1)(f)) – you may object | 90 days, not linked to a person |
| Support communication, claims, withdrawals | handling requests, proving compliance | performance of a contract / legal obligation | 3 years; claims 10 years (documents) |
| Personalisation: entered text, chosen motif, uploaded photo | production of personalised goods (print), proof for approval, handling claims | performance of contract | photos 90 days from production, then deleted automatically; text and motif as part of the order (10 years in accounting records) |
| Technical logs (IP address, time, device) | security, fraud prevention, protection against account misuse | legitimate interest | 90 days |
| B2B: contact persons of companies | wholesale cooperation, company approval, invoicing | performance of a contract / legitimate interest | for the duration of cooperation + 10 years (documents) |
Providing the data marked as mandatory in the order is a condition of concluding the contract – without it we cannot deliver. All other data is provided voluntarily.
3. Who we share data with
- Carriers – Packeta Slovakia s. r. o., GLS General Logistics Systems Slovakia s.r.o., Direct Parcel Distribution SK s.r.o. (DPD) – name, address, phone, e-mail;
- Payment gateway – Tatra banka, a.s. (TatraPay+) and card schemes; the card number is processed exclusively by the bank;
- IT service providers – hosting and operation of the shop (server in the EU), e-mail service (Websupport, s.r.o.), ERP (Microsoft Dynamics 365 Business Central);
- Accounting and tax advisers, legal representatives – to the extent necessary for legal obligations;
- Public authorities (SOI, tax authority, courts, police) – where required by law.
We have data-processing agreements with our processors. We do not transfer data outside the EU/EEA; should it become necessary (e.g. a cloud service with support outside the EU), we secure it with EU standard contractual clauses.
4. Cookies and analytics
We always use essential cookies (bag, sign-in, consents). Analytics and marketing cookies are enabled only with your consent, which you can change at any time in the footer (Cookie settings). Details in the Cookie Policy.
5. Your rights
- access to your data and information about processing (download a copy in your account → Privacy),
- rectification of inaccurate data (in your account or on request),
- erasure (“right to be forgotten”) – we anonymise data within 30 days; documents we must keep by law remain without a link to you,
- restriction of processing and objection to processing based on legitimate interest (e.g. personalisation) – objections to direct marketing are always upheld,
- portability of the data you provided, in a machine-readable format,
- withdrawal of consent at any time without affecting the lawfulness of prior processing,
- the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk, or with the supervisory authority of your country of residence.
Exercise your rights in your customer account (Privacy & data) or by e-mail to info@beautimess.sk. We reply within one month; for complex requests we may extend this by up to two further months and will inform you. If in doubt about the applicant's identity we may ask for additional verification.
6. Automated decision-making and profiling
We do not make decisions based solely on automated processing with legal effects. Product recommendations and assistant content are personalised only to the extent you can switch off in your account (Personalisation).
7. Security
We protect data with encrypted transport (HTTPS), access limited to authorised staff, regular backups within the EU and access logging. Sign-in is protected by a password, a sign-in link or a passkey (Face ID / Touch ID); passwords are stored only as secure hashes.
8. Changes to this policy
We may update this policy when services or legislation change; the current version is always on this page. Version 2026-09, effective from 17. 9. 2026.