UAB "MESODERMA"
PRIVACY POLICY
The Privacy Policy (hereinafter referred to as the Policy ) regulates the principles of collection, processing and storage of personal data of potential and existing clients of UAB "Mesoderma" (hereinafter referred to as the Company ) - natural persons, including clients - legal entities, representatives and (or) employees who visit the website www.mesoderma.eu , purchase goods supplied by the Company and (or) use the Company's e-shop, as well as applicants for vacant positions, and establishes the purposes and means of processing their personal data.
This Policy has been prepared in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the Regulation ).
This Policy informs potential and existing clients of the Company, including representatives and/or employees of clients - legal entities, as well as applicants for vacant positions in the Company about the processing of their personal data.
TERMS USED
Personal data means any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data and an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Personal data breach – a security breach that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data transmitted, stored, or otherwise processed.
Data subject – a natural person – a visitor to the Company's website and/or e-shop, a buyer of goods or services supplied by the Company and/or a user of the e-shop (a potential or existing client – a natural person, including a representative and/or employee of a client – a legal entity) or an applicant for a vacant job position, whose personal data is collected and processed by the Company.
Data subject consent means any freely given, specific and unambiguous indication of the data subject's wishes, by a statement or by a clear statement, by which he or she signifies agreement to the processing of personal data relating to him or her.
Data subject rights – the data subject’s ability to participate in and control the activities of the data controller and/or processor when their personal data are processed – to know, to be informed about the processing of their personal data in the Company, to get acquainted with their personal data processed in the Company and how they are processed, to demand correction, destruction of their personal data or to suspend, with the exception of storage, the processing of their personal data when the data is processed in violation of the provisions of legal acts, to object to the processing of their personal data, to demand the deletion of their personal data, to receive the data related to them that they have provided to the data controller, the right to demand that a decision based solely on automated data processing, including profiling, not be applied, to file a complaint with the supervisory authority (State Data Protection Inspectorate).
Data processing – any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination with other data, restriction, erasure or destruction.
Automatic data processing means data processing operations carried out wholly or partly by automated means. It includes any information and communication technology which can be used to process personal data, such as computers, communication networks, etc.
Data controller – UAB “Mesoderma”, legal entity code 302633438, address Raudondvario pl. 107B, Kaunas, tel. +370 662 06598, e-mail info@mesoderma.eu.
Data Processor – a natural or legal person, government authority, agency or other body that processes personal data on behalf of the Company.
Data recipient means a natural or legal person, public authority, agency or other body to which personal data are disclosed/provided, whether a third party or not. Data recipients do not include public authorities which, under European Union or Member State law, may receive personal data in the course of a specific investigation.
A cookie is a small text file that a website saves on your computer or mobile device when you visit it.
Direct marketing is an activity aimed at offering goods or services to individuals by mail, telephone or other direct means and/or asking for their opinion on the goods or services offered.
Other terms used in this Policy are understood as defined in the Regulation and other legal acts regulating the processing of personal data.
CHAPTER I.
PRINCIPLES OF PERSONAL DATA MANAGEMENT
1. The Company, when processing your personal data, is guided by the following principles:
1.1. The Company processes personal data only for legitimate purposes defined in this Policy and does not further process it in a manner incompatible with those purposes (purpose limitation principle) ;
1.2. personal data are processed accurately, fairly and lawfully, in accordance with the requirements of legal acts (principle of legality, fairness and transparency) ;
1.3. The Company processes personal data in such a way that personal data is accurate and is constantly updated in the event of changes (principle of accuracy) ;
1.4. The Company processes personal data only to the extent necessary to achieve the purposes of personal data processing (data minimization principle) ;
1.5. personal data are stored in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data were collected and processed (principle of storage limitation) ;
1.6. When processing personal data, the Company applies appropriate technical and organizational measures to ensure adequate security of personal data, including protection against unauthorized or unlawful processing of personal data and against accidental loss, destruction or damage (principle of integrity and confidentiality) ;
1.7. The Company is responsible for ensuring that the principles set out in this Policy are adhered to and must be able to demonstrate that they are adhered to (accountability principle).
CHAPTER II
PURPOSES AND LEGAL GROUNDS FOR PROCESSING PERSONAL DATA
2. The company processes your personal data:
2.1. for the purpose of conducting trade, including, but not limited to, administering orders for goods, concluding a purchase and sale agreement, accounting and fulfilling contractual obligations, administering payments, maintaining appropriate communication, coordinating meetings, conducting internal and external audits, and complying with legal requirements;
2.2. for the purpose of conducting e-commerce, including, but not limited to, administering orders for goods, concluding a purchase and sale agreement electronically, accounting and fulfilling contractual obligations, administering the user's account in the online store (if the purchase is made by creating an account) and payments, maintaining appropriate communication, conducting internal and external audits, and complying with legal requirements;
2.3. for the purpose of preparing and organizing training and seminars, including, but not limited to, concluding service contracts, accounting and fulfillment of contractual obligations, payment administration, maintaining appropriate communication, performing internal and external audits, and complying with legal requirements;
2.4. for the purpose of administering requests and/or complaints, including, but not limited to, examining them and preparing responses to them, and ensuring the quality of the goods supplied and services provided;
2.5. for the purpose of administering inquiries received through the Company's website and online store, by email, telephone or other means of communication, including, but not limited to, examining them and providing responses;
2.6. for the purpose of proper management and administration of the website and online store, including, but not limited to, ensuring their operation and security, and collecting statistical information;
2.7. for the purpose of carrying out direct marketing, including, but not limited to, sending newsletters and/or promotional messages and providing commercial offers;
2.8. for the purpose of personnel selection and internal administration;
2.9. for the purpose of ensuring the security of property and clarifying the circumstances of incidents that occurred.
3. For the purposes specified in paragraph 2 of this Policy, the Company collects and processes the following personal data of yours:
3.1. The Company, for the purpose of conducting trade, including, but not limited to, administering orders for goods, concluding a purchase and sale agreement, accounting and fulfilling contractual obligations, administering payments, maintaining appropriate communication, coordinating meetings, conducting internal and external audits and complying with legal requirements:
➢ on the basis of the purchase and sale agreement, legal acts and legitimate interest, processes the following personal data of you, as a customer purchasing products supplied by the Company : name, surname, personal code, address of actual residence, telephone number, e-mail address, signature, delivery address of the goods, method of payment for the goods and information on the payment made, name of the goods, quantity, price, discounts granted and other personal data that you provide and/or which the Company is obliged to process by laws or other legal acts;
➢ on the basis of legitimate interest and legal acts, processes the following personal data of you, as a client (legal entity) purchasing products supplied by the Company, representative and/or employee : name, surname, name of the legal entity, position, telephone number, e-mail address, signature and other personal data provided by you and/or your employer, as well as which the Company is obliged to process by laws or other legal acts.
3.2. The Company, for the purpose of conducting e-commerce, including, but not limited to, administering orders for goods, concluding a purchase and sale agreement electronically, accounting and fulfilling contractual obligations, administering a user account in the online store (if a purchase is made by creating an account) and payments, maintaining appropriate communication, conducting internal and external audits, and complying with legal requirements:
➢ on the basis of the purchase and sale agreement, legal acts, legitimate interest and consent (when creating an account in the online store), processes the following personal data of you, as a customer purchasing in the Company's online store : name, surname, personal identification number, address of actual residence, telephone number, email address, delivery address of the goods, method of payment for the goods and information on the payment made, product name, quantity, price, discounts granted, history of purchases made through the account (in the event that you purchase in the online store by creating your user account) and other personal data that you provide and (or) which the Company is obliged to process by law or other legal acts;
➢ on the basis of legitimate interest and legal acts, processes the following personal data of you, as a client (legal entity), a buyer in the Company's online store, a representative and/or an employee : name, surname, name of the legal entity, position, telephone number, e-mail address and other personal data provided by you and/or your employer, as well as which the Company is obliged to process by laws or other legal acts.
3.3. The Company, for the purpose of preparing and organizing training and seminars, including, but not limited to, concluding service contracts, accounting and fulfillment of contractual obligations, payment administration, maintaining appropriate communication, performing internal and external audits, and complying with legal requirements:
➢ on the basis of a service provision agreement, legitimate interest and/or legal acts, processes the following personal data of you, as a client to whom training and/or seminar preparation and organization services are provided : name, surname, personal code, actual place of residence, telephone number, e-mail address and other personal data that you provide and/or which the Company is obliged to process by laws or other legal acts;
➢ on the basis of legitimate interest and (or) legal acts, processes the following personal data of you, as a representative and (or) employee of a client (legal entity) to whom training and (or) seminar preparation and organization services are provided: name, surname, name of the legal entity, position, e-mail address, work telephone number and other personal data provided by you, the Company's client (legal entity) and (or) which the Company is obliged to process by laws or other legal acts.
3.4. The Company processes the following personal data of yours for the purpose of administering requests and (or) complaints, including, but not limited to, examining them and preparing responses to them, and ensuring the quality of the goods supplied and services provided, on the basis of legal acts, legitimate interest and (or) consent: name, surname, correspondence address, telephone number, e-mail address and other data provided in your request and (or) complaint.
3.5. The Company processes the following personal data of yours , based on your consent, for the purpose of administering inquiries received via the Company's website and online store, by e-mail, telephone or other means of communication, including, but not limited to, examining them and providing answers : name and surname, e-mail address, telephone number and other personal data provided in your inquiry.
3.6. The Company processes the following personal data of yours , based on your consent, for the purpose of proper management and administration of the website and e-shop, including, but not limited to, ensuring their operation and security, and collecting statistical information : unique randomly generated identifier, login time, network and location data.
3.7. The Company processes the following personal data of you for the purpose of direct marketing, including, but not limited to, sending newsletters and/or advertising messages and providing commercial offers, on the basis of legitimate interest (in the event that you are a client of the Company) or consent : name, surname, e-mail address, telephone number.
3.8. For the purpose of personnel selection and internal administration, on the basis of legal acts and/or consent, the Company processes the following personal data of you, as an applicant for a vacant job position : name, surname, telephone number, e-mail address, data on education and qualifications, and other personal data provided by you in your life and activity description.
3.9. For the purpose of ensuring the security of property and clarifying the circumstances of incidents that occurred, the Company processes the following Personal Data of persons entering the surveillance field of video cameras on the basis of legitimate interest: image, location and time of presence of persons entering the surveillance field of video cameras.
CHAPTER III
COLLECTION AND PROCESSING OF PERSONAL DATA
4. Personal data is collected directly from you and/or the Company's client (legal entity) (when you are its representative or employee) during the submission of an order and the conclusion of a purchase-sale or service provision agreement, when you visit the website and/or online store, when you submit a request via the website, when you contact the Company by phone, email or other means of communication.
5. The Company collects your personal data, as an applicant for vacant positions, directly from you when you send your resume (CV) or when you publish it publicly.
6. Your personal data, as a person falling within the scope of video camera surveillance, is obtained in electronic form from the Company's video surveillance and recording hardware and software. Video surveillance in the Company is regulated by the Video Surveillance and Video Data Processing Rules approved by the Company's Director.
7. When your consent is required for the processing of your personal data, it is expressed by your active actions, i.e. contacting the Company with a request, checking the consent box or clicking the consent button before providing personal data electronically, as well as by replying to the email sent to you by the Company with the consent.
8. When the Company processes your personal data on the basis of consent, you have the right to withdraw your consent to process your personal data at any time, without affecting the lawfulness of the processing of data based on consent until the withdrawal of consent. The consent may be withdrawn by contacting the Company by e-mail info@mesoderma.eu , by clicking on the link at the bottom of the e-mail in which the newsletter, advertising message or commercial offer was sent, or by entering your e-mail address in the box on the Company's website and (or) online store and clicking on the unsubscribe link next to it, or by deleting your user account in the Company's online store.
9. You may in all cases choose not to provide the Company with certain personal data, but in such a case your ability to purchase goods or services supplied by the Company may be limited.
10. Your personal data processed by the Company may be processed only by those persons who need it for the performance of their work functions and/or contractual obligations, and only when it is necessary to achieve the purposes specified in this Policy.
11. Regardless of the method by which your personal data is collected, they are stored only to the extent and for the period necessary to achieve the established purposes, but not less than the terms established in the current version of the Index of General Document Storage Terms approved by Order No. V-100 of the Chief Archivist of Lithuania of 9 March 2011 or in other legal acts regulating the Company's internal procedure and in the Company's internal documents:
11.1. Your personal data, as a client (natural person) or a client (legal entity) representative and/or employee, are stored for the entire period of execution of the purchase and sale agreement and/or provision of services and for 10 (ten) years after the termination of the agreement and/or provision of services. Depending on the document in which it is provided, the data is stored for the terms established by the Law on Documents and Archives of the Republic of Lithuania and the Index of General Document Storage Terms in the current version;
11.2. The user account you created in the Company's online store is stored until your consent is revoked, but no longer than 3 (three) years from your last login to it. The data supporting the orders fulfilled by the Company for you are not deleted together with your account, they are further stored for the period specified in subparagraph 10.1 of the Policy ;
11.3. When you contact the Company with a request or complaint, personal data is stored for 2 (two) years after the date of examination of the request or complaint and (or) submission of the response;
11.4. When you contact the Company with a request, personal data is stored until your consent is revoked, but no longer than 1 (one) year after the date of processing the request and (or) providing the response;
11.5. The retention periods for your personal data collected for the purpose of direct marketing are defined in the section "Direct Marketing" of this Policy;
11.6. The terms of storage of your personal data collected using cookies are defined in the section "Use of Cookies" of this Policy;
11.7. Your personal data as an applicant for a vacant job position are stored until the end of the selection for a vacant job position, and then, if you are unsuccessful, the selection data are destroyed. The personal data of the applicant who has won the selection are stored in his/her personal file for the period of storage of personal data of employees established by legal acts. If you are unsuccessful in the selection, with your consent, personal data may be stored for 1 (one) year after the end of the selection;
11.8. Your personal data, as a person falling within the surveillance field of video cameras, is stored for 7 (seven) calendar days.
12. Your personal data may be stored for longer than the periods specified in point 10 when:
12.1. it is necessary in order to protect the rights and legitimate interests of the Company (to defend against demands, claims or lawsuits and to exercise its rights);
12.2. there are reasonable suspicions of illegal activities that are the subject of an investigation;
12.3. personal data is necessary for the proper resolution of a dispute or complaint;
12.4. in the presence of other grounds established by legal acts.
13. Upon expiry of the retention period for your personal data or a document containing your personal data, the personal data and/or documents are destroyed in such a way that they cannot be restored and their content cannot be identified.
CHAPTER IV
PROVISION OF PERSONAL DATA AND DATA RECIPIENTS
14. Your personal data may be provided to third parties only if at least one of the conditions for lawful personal data processing provided for in Article 6(1) of the Regulation is met, after assessing the purpose of personal data processing and the scope of personal data provided.
15. Your personal data processed by the company may be provided without your separate consent to:
15.1. to state and municipal institutions, bodies and other data recipients/their registers and information systems to which the Company is obliged to provide your personal data by the laws of the Republic of Lithuania and other legal acts;
15.2. debt collection companies to which claims to your debt are assigned or to which collection actions are assigned on behalf of the Company, as well as entities providing legal services to the Company and representing its rights and interests;
15.3. To manufacturers of equipment and other products sold by the Company, to the extent necessary for the proper performance of the purchase and sale agreement concluded between the Company and you;
15.4. law enforcement authorities.
16. Your personal data processed by the Institution may also be disclosed to the Company's data processors who process your personal data on behalf of the Company.
17. Your personal data is provided to data recipients located in the Member States of the European Union and other countries of the European Economic Area under the same conditions and procedure as to data recipients located in the Republic of Lithuania.
18. Your personal data will not be transferred to a third country or international organization.
CHAPTER V
RIGHTS OF THE PERSONAL DATA SUBJECT
19. You, as a data subject, have the right to:
19.1. to know/be informed about the processing of their personal data ;
19.2. to get acquainted with your personal data and their processing . You have the right to contact the Company with a request to provide information about what and for what purpose your personal data is processed;
19.3. demand correction of your personal data . If you determine that the Company processes inaccurate or incomplete personal data, you have the right to request correction or addition of such personal data;
19.4. request the erasure of your personal data ("right to be erased") . You have the right to request the Company to erase your personal data on one of the following grounds:
➢ the personal data are no longer necessary to achieve the purposes for which they were collected or otherwise processed;
➢ you have withdrawn the consent on which the data processing was based and there is no other legal basis for processing your personal data;
➢ You do not agree to the processing of the data and there are no overriding legitimate reasons for processing it;
➢ personal data was processed unlawfully.
19.5. request restriction of the processing of your personal data . You have the right to request the Company to restrict the processing of your personal data on one of the following grounds:
➢ You contest the accuracy of the data for a period during which the Company can verify the accuracy of the personal data;
➢ the processing of personal data is unlawful and you do not agree to the deletion of the data and instead request the restriction of its use;
➢ The Company no longer needs your personal data for the purposes of the processing, but you need them to assert, exercise or defend legal claims;
➢ You have objected to the processing of the data pending verification of whether the Company's legitimate reasons override those of the data subject.
19.6. to object to the processing of personal data . You have the right to object to the processing of certain optional personal data of yours. Such objection may be expressed by not filling in certain sections of documents, as well as by later submitting a request for the termination of the processing of your optional personal data. At your request, the Company provides you with information about what data of yours is processed on an optional basis. Upon receipt of a request to terminate the processing of optional personal data, the Company shall immediately terminate such processing, unless this is contrary to the requirements of legal acts, and shall inform you thereof;
19.7. the right to data portability , i.e. you have the right to receive the personal data relating to you that you have provided to the Company in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another data controller, and the Company must not create obstacles to this;
19.8. the right to object to a decision based solely on automated processing, including profiling. You have the right to object to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
19.9. file a complaint with the supervisory authority. If you believe that the Company's processing of personal data relating to you is carried out in violation of the requirements of the Regulation, you have the right to file a complaint with the State Data Protection Inspectorate.
20. Your rights as a data subject specified in this Policy are implemented in accordance with the procedure established by the Regulation and other legal acts.
21. To exercise the rights specified in clause 18 of the Policy (except for the right to know/be informed about the processing of your personal data by the Company), submit a written request to the Company in person, through a representative, by registered mail or by electronic means. Please note that when submitting a request to the Company, you must confirm your identity.
22. Your rights as a data subject are implemented free of charge by the Company. However, if your requests are manifestly unfounded or disproportionate, in particular due to their repetitive nature, the Company may charge a reasonable fee, taking into account administrative costs.
CHAPTER VI
PERSONAL DATA SECURITY MEASURES
23. When storing your personal data, the Company implements and ensures appropriate organizational and technical measures to protect your personal data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.
24. Personal data security measures in the Company are established taking into account the Regulation and other legal acts regulating the processing of personal data, as well as the requirements of the supervisory authority.
25. The Company's employees or other persons responsible for the processing of personal data in the Company, who are granted the right to process your personal data collected by the Company and/or have access to such personal data, shall adhere to the principle of confidentiality and keep secret any information related to your personal data that they have become aware of in the course of their duties, unless such information is public under the provisions of applicable laws or other legal acts. The obligation to maintain the confidentiality of personal data shall also apply after transferring to another position, upon termination of employment and/or contractual relations.
26. The Company ensures the security of the premises where your personal data is stored, proper arrangement and maintenance of technical equipment, compliance with fire safety regulations, proper network management, maintenance of information systems, timely updating of antivirus programs and firewalls, and implementation of other technical measures necessary to ensure the protection of your personal data.
27. The Company uses only such data processors for the processing of your personal data that ensure the implementation of appropriate organizational and technical data protection measures and their compliance. The Company always signs a contract or additional agreement on personal data protection with such data processors, which defines the scope of personal data processing and clearly indicates the duties and responsibilities of the data processor.
CHAPTER VII
USE OF COOKIES
28. Information collected with the help of cookies allows the Company to improve the functioning of the website and e-store, ensuring you a convenient and efficient search for information.
29. The main cookies used on the Company's website and online store:
Cookie settings
30. Your personal data, as individuals visiting the Company's website and (or) online store, is obtained from Google Analytics, Wordpress, Woocommerce applications and specialized social network plugins.
31. Consent to save cookies is expressed by clicking the "AGREE" button on the Company's website and/or e-shop when a message appears with the text: "We inform you that in order to ensure the proper quality of your browsing, we use cookies on this website for statistical purposes. If you agree, click "AGREE". You can revoke your consent at any time by changing your internet browser settings and deleting saved cookies. For more information about the use of cookies, please read the Privacy Policy ".
32. You may withdraw your consent at any time by changing your browser settings and deleting the cookies you have saved. How to do this depends on the operating system and browser you are using.
33. After deleting the saved cookies, some functions of the Company's website and/or online store may not function as intended.
CHAPTER VIII
DIRECT MARKETING
34. For the purpose of direct marketing, newsletters, advertising messages, special commercial offers and other information related to the products and/or services provided by the Company may be sent and/or provided to you only with your prior consent.
35. You can express your consent to receive newsletters, promotional messages, special commercial offers and other information related to the products and/or services provided by the Company by signing the direct marketing consent form, checking the consent box, entering your email address in the appropriate box on the Company's website and/or e-shop and clicking on the order link next to it.
36. The consent given may be revoked at any time by contacting the Company by e-mail info@mesoderma.eu , by clicking on the link at the bottom of the e-mail in which the newsletter, advertising message or commercial offer was sent, or by entering your e-mail address in the box on the Company's website and (or) e-shop and clicking on the unsubscribe link next to it, or by deleting your user account in the Company's e-shop.
37. The exception regarding prior consent applies only if you, as an existing customer of the Company, did not express your disagreement with the sending of direct marketing messages and did not object to it when concluding a purchase and sale agreement and/or a service provision agreement with the Company. In such a case, the Company, on the basis of a legitimate interest, in order to contact you and inform you of news and other information related to the products provided by the Company, may send you newsletters, advertising messages and special commercial offers by e-mail. Each time a direct marketing message is sent, you are given the opportunity to refuse such messages by contacting the Company by e-mail info@mesoderma.eu or by clicking on the link at the bottom of the e-mail in which the newsletter, advertising message or commercial offer was sent.
38. Your personal data, as a potential or existing client (including a client – a legal entity representative), for the purpose of direct marketing, based on your consent, are stored until your consent is revoked, but no longer than 2 (two) years from the date of your consent. Your consent itself is stored for another 2 (two) years from the moment of termination of direct marketing activities.
39. Your personal data, as an existing customer, for the purpose of direct marketing, on the basis of legitimate interest, is stored for the entire period of execution of the purchase and sale agreement (or) service provision agreement and for 10 (ten) years after the termination of the agreement, but no longer than until you express your refusal to receive direct marketing messages.
40. If you decide not to provide the Company with your personal data for the purpose of direct marketing, the Company will not be able to inform you about the products and/or services supplied by the Company, related news, special commercial offers, discounts and promotions.
CHAPTER IX
SOCIAL NETWORKS
41. The information you provide to the Company via social media (including messages, use of the “Like” and “Follow” boxes and other communications) is controlled by the operator of the relevant social network.
42. The Company currently has accounts on the social networks Facebook, Instagram and LinkedIn, the privacy policies of which are published on their websites.
43. Since the Company cannot control the content of third-party websites and the cookies used, their visitors are recommended to read the privacy policies of these third parties and contact them directly if any questions arise regarding the use of their personal data.
CHAPTER X
RESPONSIBILITY
44. Having created a user account in the Company's online store, you are responsible for the confidentiality of your password and user data and for any actions (data transfer, orders placed, etc.) performed in the Company's online store after logging in using your login details.
45. You may not disclose your password to third parties. Please note that if an order for goods is placed in the Company's online store by a third party who has logged in to the Company's online store using your login details, the Company will assume that you have logged in and placed the order.
46. If you lose your login details to your user account in the Company's online store, you must immediately inform us by phone and/or email.
47. You are responsible for ensuring that the data you provide is accurate, correct and complete. Providing knowingly incorrect data is considered a violation of the Policy. If the data you provide changes, you must immediately inform the Company by email or by changing the relevant data in your online store account.
48. Under no circumstances will the Company be liable for any damage incurred by you and/or third parties due to you providing incorrect and/or incomplete personal data or failing to inform the Company of any changes to your personal data.
CHAPTER XI
PRIVACY POLICY CHANGES
49. This Policy is regularly reviewed and updated, and any changes to it are published on the website www.mesoderma.eu.
50. The Privacy Policy was last updated on September 30, 2025.
CHAPTER XII
CONTACT INFORMATION
51. If you have any questions, requests or complaints related to your personal data collected, used and stored by the Company, please contact us by e-mail at info@mesoderma.eu.