Privacy Policy

1. OVERVIEW & CONSENT

This Privacy Policy describes how our community information platform collects, uses, and protects information when you visit our website. We are committed to protecting your privacy and maintaining minimal data collection practices in accordance with GDPR and EU data protection laws.

1.1 Your Consent

By using this website, you consent to the collection and use of information as described in this Privacy Policy. You have the right to withdraw your consent at any time by ceasing to use our website or contacting us.

1.2 Data Controller Information

• Company Name: SkinBet Agency
• Contact Email: info@skinbetagency.com
• Data Protection Officer: Available upon request

2. INFORMATION WE COLLECT

2.1 Automatically Collected Information

We may automatically collect limited technical information including:

• IP addresses (for security and analytics)
• Browser type and version
• Device information
• Pages visited and time spent
• Referring websites

2.2 Information We DO NOT Collect

We explicitly do not collect:

• Personal identification information
• Email addresses (unless voluntarily provided)
• Payment information
• Account registration data
• Social media profiles
• Location data beyond general geographic region

3. HOW WE USE INFORMATION

3.1 Permitted Uses

Any information collected is used solely for:

• Website security and fraud prevention
• Basic analytics to improve user experience
• Technical maintenance and troubleshooting
• Legal compliance when required by law

3.2 What We Don't Do

We do not:

• Sell or rent personal information
• Use data for marketing purposes
• Create user profiles or tracking
• Share information with third parties for commercial purposes
• Store unnecessary personal data

4. THIRD-PARTY SERVICES

4.1 External Links

Our website contains links to external platforms and services. We have no control over and assume no responsibility for the privacy practices of these third-party sites.

4.2 Third-Party Analytics

We may use basic web analytics services (such as Google Analytics) with anonymized data collection. These services operate under their own privacy policies.

5. DATA STORAGE AND SECURITY

5.1 Minimal Data Storage

We store only essential technical data required for website functionality and security.

5.2 Security Measures

We implement reasonable security measures to protect against unauthorized access, alteration, disclosure, or destruction of data.

5.3 Data Retention

We retain technical data only as long as necessary for the purposes outlined in this policy, typically no longer than 12 months.

6. COOKIES AND TRACKING

6.1 Essential Cookies Only

We use only essential cookies required for website functionality. We do not use tracking cookies or advertising cookies.

6.2 Cookie Control

Users can disable cookies through their browser settings, though this may affect website functionality.

7. YOUR RIGHTS UNDER GDPR

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR):

7.1 Right to Access (Article 15)

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. Contact us at info@skinbetagency.com.

7.2 Right to Rectification (Article 16)

You have the right to request correction of inaccurate personal data and to have incomplete data completed.

7.3 Right to Erasure / Right to be Forgotten (Article 17)

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required to comply with a legal obligation

7.4 Right to Restriction of Processing (Article 18)

You have the right to request restriction of processing where accuracy is contested, processing is unlawful, or you object to processing.

7.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

7.6 Right to Object (Article 21)

You have the right to object to processing of your personal data for direct marketing purposes or based on legitimate interests.

7.7 Right to Withdraw Consent (Article 7)

Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

7.8 Right to Lodge a Complaint (Article 77)

You have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or place of alleged infringement.

• EU: Find your local data protection authority at: https://edpb.europa.eu/about-edpb/board/members_en

7.9 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: info@skinbetagency.com
• Response Time: Within 30 days as required by GDPR (Article 12)
• Verification: We may request identity verification to prevent unauthorized access
• No Fee: We will not charge a fee unless requests are manifestly unfounded or excessive

8. CHILDREN'S PRIVACY

Our website is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

9. INTERNATIONAL DATA TRANSFERS

9.1 Transfers Outside EU/EEA

If we transfer your personal data outside the European Union (EU) or European Economic Area (EEA), we ensure appropriate safeguards are in place as required by GDPR Article 46:

• Standard Contractual Clauses (SCCs): We use European Commission approved SCCs
• Adequacy Decisions: We transfer to countries recognized by the EU Commission as providing adequate protection
• Binding Corporate Rules: We may use BCRs for intra-group transfers
• Explicit Consent: We obtain your explicit consent where required

9.2 Third-Party Service Providers

When using third-party services that may process data outside the EU/EEA:

• We ensure they provide adequate data protection guarantees
• We enter into data processing agreements as required by GDPR Article 28
• We regularly review their compliance with data protection standards

9.3 GDPR Compliance

For European Union users, we fully comply with GDPR requirements regarding data processing, user rights, data security, and international transfers.

10. CHANGES TO PRIVACY POLICY

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated revision date.

11. NO COMMERCIAL DATA USE

We explicitly state that we do not:

• Use visitor data for commercial purposes
• Build marketing profiles
• Engage in data brokerage
• Target advertising based on user behavior

12. CONTACT INFORMATION

For privacy-related questions or requests, contact us at:

• Email: info@skinbetagency.com
• Response time: Within 7 business days

13. LEGAL DISCLOSURES

13.1 Law Enforcement

We may disclose information if required by law or in response to valid legal requests from law enforcement agencies.

13.2 No Liability

We are not responsible for the privacy practices of external websites, platforms, or services linked from our site.

14. DATA MINIMIZATION PRINCIPLE

We operate under a strict data minimization principle, collecting only the absolute minimum information necessary for website operation and security.

15. LEGAL BASIS FOR PROCESSING

Under GDPR Article 6, we process your personal data based on the following legal grounds:

• Consent (Article 6(1)(a)): You have given explicit consent for specific processing activities
• Contract Performance (Article 6(1)(b)): Processing is necessary to fulfill a contract with you
• Legal Obligation (Article 6(1)(c)): Processing is required to comply with legal obligations
• Legitimate Interests (Article 6(1)(f)): Processing is necessary for our legitimate interests, provided your rights are not overridden

16. DATA BREACH NOTIFICATION

In accordance with GDPR Article 33 and 34, in the event of a personal data breach that poses a risk to your rights and freedoms:

• We will notify the relevant supervisory authority within 72 hours of becoming aware of the breach
• We will notify affected individuals without undue delay if the breach poses a high risk
• Notifications will include the nature of the breach, likely consequences, and measures taken or proposed

17. AUTOMATED DECISION-MAKING & PROFILING

We do not engage in automated decision-making or profiling as defined by GDPR Article 22. We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.