Last updated: 16 July 2026

Sabio Cosmetics respects the privacy and personal data of individuals who use our website, create an account, place orders, contact us or interact with our services and communications.

This Privacy Policy explains what personal data we process, for what purposes and on what legal grounds, to whom we may disclose it, how long we retain it and what rights data subjects have.

1. Who is the data controller and how can you contact the Data Protection Officer?

The controller of your personal data is:

SABIO COSMETICS SRL
Registered office: 180K Șos. București-Ploiești, Sector 1, Bucharest, Romania
Company registration number: RO30798770
Trade Register No.: J40/12026/2012
Email: [email protected]
Phone: +40 21 555 9398
Website: www.sabiocosmetics.ro

Sabio Cosmetics has appointed a Data Protection Officer (DPO) in accordance with Regulation (EU) 2016/679.

Data Protection Officer (DPO): Aurelia Dinu
Contact email: [email protected]

You may contact the Data Protection Officer regarding any questions concerning the processing of your personal data, the application of this Privacy Policy or the exercise of your rights under applicable data protection legislation.

2. What personal data may we process?

Depending on how you interact with Sabio Cosmetics, we may process the following categories of personal data:

2.1. Identification and contact details

These may include:

• first and last name;
• email address;
• telephone number;
• billing address;
• delivery address.

2.2. Customer account data

These may include:

• data associated with your account;
• order history;
• account preferences and settings;
• information required for authentication, in the form in which it is securely stored by our systems.

2.3. Order and transaction data

These may include:

• products ordered;
• order number and date;
• order value;
• payment method;
• payment and delivery status;
• information concerning returns, withdrawals, complaints and refunds.

Sabio Cosmetics does not ordinarily store full payment card details. Online payments are processed through the specialised payment service providers used by Sabio Cosmetics.

2.4. Data required for invoicing and compliance with legal obligations

Depending on the type of customer and applicable legal requirements, this may include your name, address, tax identification details and other information required to issue and retain financial and accounting documents.

2.5. Data provided when communicating with us

When you contact us by email, telephone, contact form or other available channels, we may process your contact details and the information you provide.

We recommend that you do not provide information that is not necessary for us to deal with your request.

2.6. Technical data and website usage information

Depending on the technologies used and your cookie choices, we may process:

• IP address;
• device and browser type;
• operating system;
• date and time of access;
• pages visited;
• source through which you accessed the website;
• online identifiers;
• information generated through cookies and similar technologies.

The use of cookies and similar technologies is described separately in our Cookie Policy.

2.7. Data used for marketing communications

If you have subscribed to our newsletter or otherwise validly opted to receive marketing communications, we may process data such as your name, email address and information concerning your interaction with the communications sent, within the limits permitted by law.

3. Why and on what legal grounds do we process your data?

3.1. Creating and managing your customer account

We process the data necessary to create, authenticate and manage your account.

Legal basis: performance of a contract or taking steps at your request prior to entering into a contract – Article 6(1)(b) GDPR.

3.2. Processing and fulfilling orders

We process the data necessary to register and confirm orders, process payments, prepare and deliver products, provide order-related communications, manage withdrawals and returns and process refunds.

Legal basis: performance of a contract – Article 6(1)(b) GDPR.

3.3. Invoicing and compliance with legal obligations

We process the data necessary to issue, transmit and retain financial and accounting documents and to comply with applicable tax and other legal obligations.

Legal basis: compliance with a legal obligation – Article 6(1)(c) GDPR.

3.4. Customer service, requests and complaints

We process the data necessary to respond to questions, requests and complaints and to resolve issues relating to our products and services.

Depending on the nature of the request, the legal basis may be the performance of a contract, compliance with a legal obligation or our legitimate interest in managing customer relationships and establishing, exercising or defending the rights and interests of Sabio Cosmetics.

3.5. Website security and fraud prevention

We may process technical data and information concerning the use of our services in order to protect the website, accounts, IT systems and transactions against unauthorised access, fraud, cyberattacks and other security incidents.

Legal basis: the legitimate interests pursued by Sabio Cosmetics in ensuring the security of its services and systems – Article 6(1)(f) GDPR.

3.6. Establishing, exercising and defending legal claims

We may retain and use certain data where necessary for the establishment, exercise or defence of legal claims in judicial, administrative or out-of-court proceedings.

Legal basis: legitimate interests – Article 6(1)(f) GDPR and, where applicable, compliance with legal obligations.

3.7. Newsletter and marketing communications

We may send marketing communications by email or other electronic means where we have a valid legal basis to do so.

Where communications are based on consent, the legal basis is Article 6(1)(a) GDPR together with applicable electronic communications legislation.

You may withdraw your consent at any time, including by using the unsubscribe link provided in marketing communications.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Where applicable law permits marketing communications to existing customers concerning similar products or services, we may use contact details subject to the conditions and safeguards required by law, while providing the opportunity to object or unsubscribe at any time.

3.8. Analytics and audience measurement

Where analytics technologies are not strictly necessary for the operation of the website, processing takes place only in accordance with the choices expressed through the cookie consent management mechanism and after obtaining consent where required by law.

Legal basis: consent – Article 6(1)(a) GDPR, where applicable.

3.9. Personalised advertising and remarketing

Subject to your relevant consent choices, certain data and online identifiers may be used to measure advertising campaigns, personalise advertising and carry out remarketing.

Such technologies are activated only where permitted by law and in accordance with the choices expressed through the consent management mechanism.

Legal basis: consent – Article 6(1)(a) GDPR, where required.

4. Cookies and similar technologies

The website uses or may use cookies and similar technologies.

Strictly necessary cookies may be used without consent where they are essential for providing a service expressly requested by the user or for the technical operation of the website.

Cookies and technologies that are not strictly necessary, including those used for analytics, advertising or personalisation, are activated only where permitted by applicable law and, where required, after consent has been obtained.

Users may reject non-essential cookies and subsequently change their choices through the cookie preference management tool.

Detailed information about the cookies actually used, their providers, purposes and retention periods is available in our Cookie Policy and through the cookie preference management tool.

5. Who may receive your data?

For the purposes described in this Policy, we may disclose personal data, to the extent necessary, to the following categories of recipients:

• hosting, maintenance and IT service providers;
• e-commerce platform and related technical service providers;
• payment processors and banking institutions;
• courier and logistics service providers;
• invoicing, accounting and archiving service providers;
• email and newsletter service providers;
• analytics and advertising providers, depending on your consent choices;
• Feedback.TRUSTED.ro, for sending review invitations and managing customer feedback under the conditions described in Section 6;
• legal, tax and accounting advisers, auditors and other professional advisers;
• public authorities and institutions where disclosure is required or permitted by law.

Service providers processing data on behalf of Sabio Cosmetics are required to comply with applicable confidentiality, security and data protection requirements.

In certain circumstances, recipients may act as independent controllers, in which case they process personal data in accordance with their own legal obligations and privacy policies.

Sabio Cosmetics does not sell customers' personal data to third parties.

6. Reviews and feedback through Feedback.TRUSTED.ro

In order to obtain authentic customer feedback regarding the shopping experience and to assess and improve the quality of the services provided, Sabio Cosmetics uses the Feedback.TRUSTED.ro service.

For this purpose, following an order, Sabio Cosmetics may disclose to the provider of the Feedback.TRUSTED.ro service certain personal data that is strictly necessary to send the review invitation and associate it with a genuine transaction.

The data disclosed may include:

• the order identifier or order ID;
• the customer's first name;
• email address;
• the county associated with the order, to the extent that this information is necessary for the operation of the service.

The purpose of the processing is to request the customer's opinion regarding their shopping experience and the services provided by Sabio Cosmetics and, where the customer chooses to submit a review, to manage that review through the service used.

The legal basis for processing and disclosing this data is the legitimate interests pursued by Sabio Cosmetics, in accordance with Article 6(1)(f) GDPR, consisting of assessing customer satisfaction, obtaining authentic feedback, identifying areas in which services may be improved and ensuring the credibility of reviews associated with genuine shopping experiences.

Participation in the review process is voluntary. Customers are under no obligation to submit a review, and failure to respond to a review invitation has no effect on their contractual relationship with Sabio Cosmetics.

The data disclosed for this purpose is not used by Sabio Cosmetics, as part of this processing activity, for sending advertising or marketing communications.

Data subjects have the right to object to the processing of their personal data for this purpose, subject to Article 21 GDPR, by submitting a request to [email protected].

Within the Feedback.TRUSTED.ro service, the provider processes personal data in accordance with its role and obligations under applicable data protection legislation and its contractual relationship with Sabio Cosmetics.

Personal data disclosed to Feedback.TRUSTED.ro for the purpose of sending a review invitation is retained for a maximum period of 67 days, in accordance with the conditions applicable to the service used, after which it is deleted or anonymised, subject to any applicable legal obligations.

Reviews that customers choose to submit may be retained and published for a different period in accordance with the terms applicable to the review service and the customer's choices. Publication of a review must not involve the unnecessary disclosure of the reviewer's personal data.

7. International data transfers

Some of our service providers or their subcontractors may process personal data in countries outside the European Economic Area.

In such cases, the transfer is carried out on the basis of a mechanism recognised under the GDPR, as applicable, such as:

• an adequacy decision adopted by the European Commission;
• Standard Contractual Clauses approved by the European Commission, together with any necessary supplementary measures, where applicable;
• another lawful transfer mechanism provided for under the GDPR.

You may request further information about the safeguards applicable to relevant transfers using the contact details provided in this Policy.

8. How long do we retain personal data?

Personal data is retained only for as long as necessary for the purposes for which it was collected and in compliance with applicable legal obligations.

In particular:

• data relating to orders and contractual relationships is retained for the period necessary to perform the contract and subsequently for the applicable statutory limitation periods;
• financial and accounting documents are retained for the periods required by applicable tax and accounting legislation;
• data relating to requests and complaints is retained for the time necessary to deal with them and subsequently, where necessary, for the applicable statutory periods;
• newsletter data processed on the basis of consent is used until consent is withdrawn or the purpose of processing otherwise ceases, subject to retaining information strictly necessary to demonstrate consent and respect the unsubscribe request;
• data used for system security is retained for a period justified by security purposes;
• data collected through cookies is retained for the periods specified in the Cookie Policy and consent management tool;
• data disclosed to Feedback.TRUSTED.ro for sending review invitations is retained as specified in Section 6.

At the end of the applicable retention periods, data is deleted, anonymised or, where continued retention is required by law, archived with restricted access.

9. Whether providing personal data is mandatory or optional

Data marked as mandatory during the ordering process is necessary for entering into and performing the contract or complying with applicable legal obligations.

If such data is not provided, we may be unable to process your order or provide the requested service.

Providing data for newsletters, personalised advertising and other consent-based activities is optional and is not a condition for purchasing products from the website.

10. Automated decision-making and profiling

Sabio Cosmetics does not use decision-making based solely on automated processing that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

Depending on the consent you have provided, technologies may be used to personalise communications or advertising based on your interactions with the website. These activities do not ordinarily produce legal effects or similarly significantly affect data subjects.

11. Your rights

Subject to the conditions provided by the GDPR, you may have the following rights:

• right of access to your personal data and information concerning its processing;
• right to rectification of inaccurate data and completion of incomplete data;
• right to erasure, in the circumstances provided by law;
• right to restriction of processing, subject to the conditions provided by the GDPR;
• right to data portability, where the applicable legal conditions are met;
• right to object to processing based on legitimate interests, subject to the conditions provided by law;
• right to object at any time to direct marketing;
• right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn;
• rights relating to automated individual decision-making, subject to Article 22 GDPR;
• right to lodge a complaint with the competent supervisory authority.

To exercise your rights, you may contact the Data Protection Officer:

DPO: Aurelia Dinu
Email: [email protected]

In order to protect personal data and prevent its disclosure to unauthorised persons, we may request reasonable additional information to verify the identity of the person making the request.

We will respond to requests within the time limits and under the conditions established by the GDPR.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or another competent supervisory authority, as provided by the GDPR.

12. Data security

Sabio Cosmetics implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the nature of the data and the risks associated with processing.

Access to personal data is limited to persons and service providers who require it in order to perform the relevant duties or services and who are subject to appropriate confidentiality and security obligations.

However, no method of electronic transmission or storage can guarantee absolute data security.

13. Children's data

The website and online store are not specifically directed at children.

We do not knowingly collect children's personal data for activities for which they cannot validly provide consent under applicable law.

If we become aware that a child's personal data has been collected or processed improperly, we will take appropriate steps to delete the data or ensure that there is a valid legal basis for its processing.

14. Third-party websites and services

The website may contain links to websites or services operated by third parties.

Sabio Cosmetics does not control the data processing practices of such third parties. When accessing an external service, we recommend reviewing the applicable privacy policy.

15. Changes to this Privacy Policy

We may update this Policy periodically to reflect changes in applicable law, technology or our data processing activities.

The updated version will be published on the website together with the date of the latest update.

Where changes are material, we will provide additional notice through appropriate means where required by applicable law.

16. Contact

For questions regarding this Policy or the processing of your personal data, please contact:

SABIO COSMETICS SRL
180K Șos. București-Ploiești, Sector 1, Bucharest, Romania
Email: [email protected]
Phone: +40 21 555 9398

For matters specifically relating to personal data protection:

Data Protection Officer (DPO): Aurelia Dinu
Email: [email protected]

 

COOKIE AND SIMILAR TECHNOLOGIES POLICY

Last updated: 16 July 2026

This Cookie Policy explains how SABIO COSMETICS SRL uses cookies and similar technologies when you visit and use www.sabiocosmetics.ro.

This Cookie Policy should be read together with the Privacy and Personal Data Protection Policy available on the website.

1. Who operates the website?

The website www.sabiocosmetics.ro is operated by:

SABIO COSMETICS SRL
Registered office: 180K Șos. București-Ploiești, Sector 1, Bucharest, Romania
Company registration number: RO30798770
Trade Register No.: J40/12026/2012
Email: [email protected]
Phone: +40 21 555 9398

For questions concerning the use of cookies or personal data protection, you may contact our Data Protection Officer:

DPO: Aurelia Dinu
Email: [email protected]

2. What are cookies?

Cookies are small files or pieces of information stored on a user's device when they access a website.

Depending on their purpose, cookies may allow the website to recognise a user's device, remember certain preferences, provide specific functionality, measure website usage or, with the user's consent, contribute to the personalisation of content and advertising.

Cookies may contain or generate online identifiers and, in certain circumstances, information collected through cookies may constitute personal data.

Technologies similar to cookies may include, depending on the tools used on the website, pixels, tags, local identifiers, SDKs or other technologies used to store or access information on a user's device.

In this Policy, the term “cookies” also refers, where appropriate, to such similar technologies.

3. How we use cookies

Cookies used by the website may fall into the following categories:

3.1. Strictly necessary cookies

These cookies are necessary for the operation of the website or for providing a service expressly requested by the user.

They may be used, for example, for:

• operating the shopping cart;
• completing the steps necessary to place an order;
• user authentication and maintaining a user session;
• website security;
• fraud prevention;
• technical traffic distribution;
• remembering cookie consent choices;
• operating essential technical website functions.

These cookies are not used for advertising or for tracking user behaviour for marketing purposes.

Strictly necessary cookies may be used without consent where they are essential for providing the service requested by the user.

They cannot be disabled through the consent management tool where disabling them would prevent necessary technical functionality. Users may block them through their browser settings, although certain website functions may then become unavailable.

3.2. Preference and functionality cookies

These cookies allow the website to remember certain user choices and preferences and provide enhanced functionality.

Depending on the website configuration, these cookies may be used to remember:

• selected language;
• display preferences;
• certain account or interface settings;
• other choices made by the user.

Where these cookies are not strictly necessary for providing a service requested by the user, they are activated only on the basis of consent where required by applicable law.

3.3. Analytics and audience measurement cookies

These cookies help us understand how visitors use the website, for example:

• which pages are visited;
• the approximate duration of visits;
• how users navigate the website;
• how users arrived at the website;
• technical errors;
• general website performance.

The information obtained may help us analyse and improve the operation, structure and content of the website.

Where these technologies involve storing or accessing information on a user's device and are not strictly necessary, they are activated only after the user's consent has been obtained.

The website may use third-party analytics services, including services within the Google ecosystem, to the extent that such services are actually implemented and activated in accordance with the user's choices.

3.4. Advertising and marketing cookies

These cookies and similar technologies may be used for:

• measuring advertising campaign performance;
• limiting how often an advertisement is displayed;
• understanding users' interactions with advertisements;
• creating audiences for advertising campaigns;
• remarketing;
• displaying advertisements adapted to users' estimated interests.

Depending on the services actually used by Sabio Cosmetics, this category may include technologies provided by platforms such as Google and Meta.

These technologies are activated only after the user's consent has been obtained where consent is required under applicable law.

Rejecting marketing cookies does not prevent use of the website and does not affect the ability to place an order.

Users may continue to see online advertising, but it will not be personalised on the basis of marketing cookies placed by Sabio Cosmetics without their consent.

4. First-party and third-party cookies

Depending on the entity that places or manages the cookie, cookies may be:

First-party cookies

These are placed or managed directly by www.sabiocosmetics.ro and are generally used for technical operation, security, the shopping cart, authentication or remembering certain preferences.

Third-party cookies

These are placed or accessed through services provided by other entities, for example analytics, advertising, embedded content or other technical service providers.

Where third parties determine their own purposes and means for processing data collected through their technologies, they may act as independent controllers or, where applicable, jointly with Sabio Cosmetics, in accordance with applicable law.

Processing by these providers is also subject to their own applicable privacy policies and terms.

5. Session and persistent cookies

Depending on their duration, cookies may be:

Session cookies

These are stored temporarily and are generally deleted when the browsing session or browser is closed.

Persistent cookies

These remain stored for a specified period or until deleted by the user, depending on the lifespan assigned to the relevant cookie.

Retention periods vary according to the purpose of each cookie.

The current list of cookies actually used on the website, including their name, provider, purpose and duration, is available through the cookie preference management tool available on the website.

6. Cookie consent

When first visiting the website, users are presented with a mechanism for managing their cookie choices.

Cookies that are not strictly necessary are not activated before the user has provided valid consent where such consent is required under applicable law.

Users must be able to:

• accept non-essential cookies;
• reject non-essential cookies;
• select the categories they wish to accept;
• subsequently change their choices.

Inaction, merely continuing to browse the website or the use of pre-selected options for non-essential cookies does not constitute valid consent.

Consent is requested separately for relevant cookie categories where necessary to provide users with a genuine and informed choice.

7. How to change or withdraw your consent

You may change or withdraw your consent to non-essential cookies at any time by using the “Cookie Settings” or “Cookie Preferences” option permanently available on the website.

Withdrawing consent must be as easy as giving it.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

After consent is withdrawn, non-essential cookies will no longer be placed or accessed for future use through the website in accordance with your updated choices.

Cookies already stored on your device may, in certain circumstances, need to be manually deleted through your browser, depending on the relevant technology and provider.

8. Managing cookies through your browser

Most browsers allow users to manage cookies directly through their settings.

Depending on the browser, users may:

• view stored cookies;
• delete specific cookies or all cookies;
• block cookies;
• limit third-party cookies;
• configure automatic cookie deletion.

Blocking all cookies through your browser may affect the operation of certain essential website services, including functionality required for authentication or placing orders.

Browser settings operate independently of the consent management mechanism available on the website.

9. Third-party services and technologies

Depending on the website's active technical configuration and the choices expressed by the user, Sabio Cosmetics may use third-party services for analytics, advertising and campaign performance measurement.

These may include, where actually implemented:

• Google services for analytics and audience measurement;
• Google services for advertising and conversion measurement;
• Meta technologies for advertising, measurement and remarketing;
• other providers listed in the cookie preference management tool.

The list of active providers must at all times reflect the website's actual technical configuration.

Information regarding each active provider and each cookie or technology is available through the cookie preference management tool.

10. International data transfers

Some technology and service providers used on the website may process data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, the transfer is carried out in accordance with applicable data protection law and on the basis of an appropriate legal mechanism, such as:

• an adequacy decision adopted by the European Commission;
• Standard Contractual Clauses;
• other safeguards or transfer mechanisms provided for under the GDPR.

Further information concerning international data transfers is available in our Privacy Policy.

11. Personal data collected through cookies

Depending on the types of cookies accepted and the services used, personal data processed may include:

• IP address;
• online identifiers;
• device and browser information;
• information concerning interaction with the website;
• pages visited;
• events and actions performed on the website;
• source of access;
• information concerning interactions with advertisements and campaigns;
• other technical information generated by the relevant technologies.

For further information on how Sabio Cosmetics processes personal data and the rights of data subjects, please consult our Privacy Policy.

12. Updating the cookie list

Cookies and technologies used by a website may change when services and functionality are added, removed or updated.

Sabio Cosmetics aims to ensure that the information provided to users reflects the technologies actually used.

The detailed list displayed through the cookie preference management tool must be updated whenever the website's technical configuration changes.

13. Changes to this Policy

Sabio Cosmetics may periodically update this Cookie Policy to reflect changes in applicable law, technology or the services used on the website.

The updated version will be published on the website together with the date of the latest update.

Where changes materially affect users' choices or the purposes for which consent is required, consent will be requested again where required by applicable law.

14. Contact

For questions concerning the use of cookies or the processing of personal data, please contact:

SABIO COSMETICS SRL
180K Șos. București-Ploiești, Sector 1, Bucharest, Romania
Email: [email protected]
Phone: +40 21 555 9398

For personal data protection matters:

Data Protection Officer (DPO): Aurelia Dinu
Email: [email protected]