Shopping Cart

Contact us: info@mashala.hr

Delivered by  Delivery up to 2 kg HRK 32.00. Free delivery on orders over HRK 500.00 within Croatia.

Privacy policy

PRIVACY POLICY

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (Official Journal of the European Union L 119 , 4.5.2016, page 1, hereinafter: the General Regulation on Data Protection), which has been in full force since 25 May 2018 in the Republic of Croatia and all EU Member States, as well as the Law on Implementation General Regulations on Data Protection (Official Gazette No. 42/18, hereinafter: the Act), the Labor Act (Official Gazette nos. 93/14 and 127/17), the Occupational Safety and Health Act (Official Gazette no. 71/14, 118/14 and 154/14), ie in accordance with the legal framework for the protection of personal data in the Republic of Croatia and the European Union and the best European practice, MASHA COSMETICS jdoo for production and trade Commercial Court in Zadar, Initial capital 10 kn OIB 07128714669 entered in the court register of the Commercial Court in Zagreb (hereinafter: MASHA COSMETICS), as the head of personal data processing of users of its services and customers, drafted a Privacy Policy for personal data of service users and customers. Privacy Policy is a unilaterally binding legal act based on fundamental principles in the processing of personal data, which regulates which Customer-User data is collected, how such data is processed, for what purposes it is used. The Privacy Policy also informs service users and / or customers of their rights to collect and further process personal data, all for the purpose of protecting their privacy in a broader sense.

The privacy policy is based on the following principles of personal data processing: the principle of legality, transparency and best practice, the principle of limited processing and reduction of data, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of integrity and confidentiality. trust and fair processing, the principle of opportunity (purposes of processing), the principle of processing in unnamed (anonymised) form.

The Privacy Policy applies to all services offered by MASHA COSMETICS, with the aim of the Policy being to inform users and / or customers in a clear and transparent manner about the processing of their personal data and their rights. First of all, users and / or customers may at any time contact the Company with a request to amend or / or update the data relating to them, as well as to withdraw consent and request the cessation of further processing of personal data.

The following is responsible for the processing of personal data:

MASHA COSMETICS j.d.o.o. za proizvodnju i trgovinu | Trgovački sud u Zadru, Početni kapital 10 kn | OIB 07128714669

Martina Milin

Contact details for personal data protection:

e-mail: info@mashala.hr

WAYS AND TYPES OF PERSONAL DATA COLLECTED

Ways of collecting personal data are:

Directly by the users and / or customers themselves in a way that users and / or customers provide data to the trade as a processing manager in a certain range of data that is important for providing relevant services, sales or other links between users / customers and mashala.eu. For the purpose of providing appropriate services, the user and / or the buyer is obliged to provide the trade with the following information that is necessary for the establishment of a contractual relationship in order to provide a particular service and / or sale of certain products. The customer – user can submit data orally or in writing in the store, via e-mail sent to one of the e-mail addresses of MASHA COSMETICS, via the website MASHA COSMETICS www.mashala.hr
From other publicly available sources of data on companies and natural persons in companies on internet portals, telephone directories containing such data and other publicly available services only for the purposes for which they were initially collected.
Automatically by visiting the Mashala website, applications and Web-shop portal, which are data associated with network identifiers (Internet protocol addresses and cookie identifiers, such as Google Analytics to track user and / or customer interaction).
A cookie is a small data file that is stored on a computer or mobile device when you visit a particular website. Cookies are used to provide a better user experience to each user and / or customer, store user and / or customer preferences, in order to make the website work more efficiently, as well as to monitor and test the use and traffic of the craft website.

By disabling and / or blocking the storage of cookies, the user and / or customer can still browse the MASHA COSMETICS website. However, it is likely that certain features and / or functionalities of the website will not be available to such user and / or customer, or that the time required to access certain features of the website will be longer than usual.

The network identifiers in question may leave traces which, in combination with other identifiers and information provided by Internet service servers, may be used to identify the user and / or customer.

The amount or scope of personal data that the Company collects depends on the type of service that the Company provides to its users and / or customers, as well as on the legal basis on which it collects data. The Company constantly takes care of collecting only the necessary range of personal data that is necessary to achieve the statutory purpose for which the data is processed.

DATA ON POTENTIAL BENEFICIARIES

MASHA COSMETICS also collects data on potential users and / or customers of its services and / or products. This information includes basic information (name and surname, e-mail address) but also the interests of potential Users and / or Customers who contact the trade with the desire to inform them and / or offer them certain products and services.

The legal basis for collection in the described case is the consent of the User and / or the Buyer.

The respondent has the right to withdraw his consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. Prior to giving consent, the respondent shall be informed. Withdrawing consent must be as simple as giving it.

TYPES OF PERSONAL DATA COLLECTED

The data that the Customer – User most often provides are:

Name and surname
Address
Personal Identification Number (OIB)
Contact phone and / or mobile phone number
Contact details of e-mail (e-mail address)
Identity card data
Data on bank account and card number for the purpose of regulating the obligation to pay

Depending on the type of contract – business relationship, some of the Customers – Users provide only part of the above information.

WHERE IS PERSONAL DATA PROCESSED?

The Company processes personal data of Users – Customers in the Republic of Croatia.

WHERE IS THE COLLECTED DATA STORED?

Data are processed in such a way that all or part of the information about Customers – Users – Respondents is stored in the databases of the processing manager.

OBLIGATIONS OF PROCESSING MANAGERS IN RELATION TO PROCESSING SECURITY

TECHNICAL AND INTEGRAL DATA PROTECTION

The Processing Manager implements technical and organizational measures to ensure an appropriate level of security.

The controller also takes measures to ensure that any individual acting under the responsibility of the controller who has access to personal data does not process that data unless instructed to do so by the controller.

Taking into account the nature, scope, context and purposes of processing, as well as risks of different levels of probability and severity for risks to the rights and freedoms of individuals, the Processing Manager implements appropriate technical and organizational measures in accordance with Security Policies to ensure and demonstrate carried out in accordance with the General Regulation.

PURPOSE OF DATA COLLECTION AND FURTHER PROCESSING

The Company collects personal data in order to provide, maintain, protect and improve its services related to the purchase of certain products, to understand the ways in which users and customers use the services provided and use the MASHA COSMETICS website and to fulfill MASHA contractual obligations. COSMETICS, and provided additional benefits to customers and users. Such data MASHA COSMETICS collects data for the purpose of:

PERFORMANCE OF CONTRACTUAL OBLIGATIONS

The company collects and further processes personal data of users and / or customers for the purpose of concluding and executing contracts, purchasing or servicing equipment, delivery of ordered products, advice and assistance in using products, providing appropriate additional and / or extended product warranties, resolving complaints of users and / or customers and other actions related to the conclusion and execution of the contract in accordance with applicable regulations.

The processing of personal data of users and / or customers for the above purposes is a necessity and legal basis for concluding a contract, ie, in case the user and / or customer refuses to provide relevant data, MASHA COSMETICS will not be able to enter into a contract and / or take certain actions related to the execution of the concluded contract.

GETTING ADDITIONAL BENEFITS

The company has enabled its customers-users to earn points by purchasing, which are recorded on the MASHA COSMETICS bonus card. By collecting a certain number of points, the customer-user realizes the right to prizes.

ORGANIZATION OF PRIZE GAMES

The craft occasionally organizes prize games, so the data is used to announce the prize won.

DIRECT PROMOTION (MARKETING)

Contact details of users and / or customers can be used to send promotional information about the products and services of the Craft if the Customer – User has given consent.

VIDEOS

The Company uses surveillance cameras to protect persons and property.

TIME DURATION OF PERSONAL DATA STORAGE

Depending on the purpose and legal basis on which the personal data of users and / or customers are collected, the trade is in some cases obliged to keep personal data for a period of time (period) prescribed by relevant regulations or the termination of the purpose for which they were collected. Upon the expiration of the legal deadline that obliges the trade to keep certain personal data or the termination of the purpose, they are deleted.

In cases where the basis for data collection and processing is the consent of the user and / or customer, personal data is kept for 10 years.

Data processed with the consent of users and / or customers may be deleted before the expiration of the period specified in this Policy, in the event that such deletion is requested by the user and / or customer or when the user and / or customer objects to such processing via the Internet. e-mail addresses: info@mashala.hr.

RIGHTS OF USERS – BUYERS

RIGHT TO ACCESS PERSONAL DATA

As the head of processing, MASHALA COSMETICS undertakes, on the basis of a written request from the user and / or customer, to provide access to personal data processed about them, to inform them about the purpose of personal data processing, the type of personal data processed, recipients or categories of recipients data disclosed or to be disclosed, the estimated time period of processing or the criteria used to determine that period.

RIGHT TO CORRECT INCORRECT DATA

The Customer – The User has the right to obtain without undue delay from the Craft-Processing Manager the correction of inaccurate personal data relating to him. Taking into account the purposes of processing, the respondent has the right to supplement incomplete personal data, including by giving an additional statement or request. Request for correction of incorrect data Customer – User can submit via MASHA COSMETICS website: www.mashala.eu to mail: info@mashala.hr, in writing in the store or by mail.

RIGHT TO DELETE PERSONAL DATA

  • Customer – User – Respondent has the right to obtain from MASHA COSMETICS – Processing Manager the deletion of personal data relating to him without undue delay and the Processing Manager has the obligation to delete personal data without undue delay if one of the following conditions is met:
    personal data are no longer necessary in relation to the purposes for which they were collected
    when the Buyer – User – Respondent withdraws the consent on which the processing is based and if there is no other legal basis for processing
    the respondent objects to the processing and there are no stronger legitimate reasons for the processing
    personal data has been processed illegally
    personal data must be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which the controller is entitled
  • RIGHT TO LIMIT DATA PROCESSING MASHA COSMETICS will provide restrictions on the processing of personal data and / or the customer opposes the deletion of data and instead seeks to restrict their use, when the controller no longer needs personal data for processing purposes but the user and / or customer requests data to meet legal requirements, as well as when the user and / or customer objection to the processing of personal data based on the legitimate interest of MASHA COSMETICS.
  • RIGHT TO COMPLAIN AND AUTOMATED INDIVIDUAL DECISION MAKING Buyer – User – Respondent has the right to object to the processing of personal data relating to him at any time based on his special situation. In that case, the Head of Processing may no longer process personal data, unless the Head of Processing proves that there are compelling legitimate reasons for processing that go beyond the interests, rights and freedoms of respondents or to set, exercise or process legal claims.
  • If personal data is processed for the purposes of direct marketing, the respondent has the right to object to the processing of personal data at any time. If the respondent objects to processing for direct marketing purposes, personal data may no longer be processed for such purposes.

    Except where permitted by the General Regulation, the Customer – User – Respondent has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects relating to him or similarly significant affect him.

    Each respondent also has the right to file a complaint with the Personal Data Protection Agency.

PURPOSE OF DATA COLLECTION AND FURTHER PROCESSING

MASHA COSMETICS collects personal information in order to provide, maintain, protect and improve its services related to the purchase of certain products, to understand the ways in which users and customers use the services provided and use online (web) sites and to fulfill contractual obligations MASHA COSMETICS, and provided additional benefits to customers and users. Such trade data is collected for the purpose of:

TECHNICAL AND INTEGRAL DATA PROTECTION

The Processing Manager implements technical and organizational measures to ensure an appropriate level of security.

The controller also takes measures to ensure that any individual acting under the responsibility of the controller who has access to personal data does not process that data if this is not in accordance with the instructions of the controller.

Taking into account the nature, scope, context and purposes of processing, as well as risks of different levels of probability and severity for risks to the rights and freedoms of individuals, the Processing Manager implements appropriate technical and organizational measures in accordance with Security Policies to ensure and demonstrate carried out in accordance with the General Regulation.

MANNER OF EXERCISING RIGHTS

The user and / or the buyer can exercise his rights if he considers that there has been an irregularity in the processing of his personal data, via contact information or by e-mail info@mashala.hr. Also, the user and / or the buyer has the right to lodge a complaint with the national supervisory authority.

Under what conditions and for what reason personal data is passed on to third parties

The personal data of the Customer-User is passed on to third parties (including competent authorities) in the following cases:

  • in order to fulfill the legal obligations of the Craft when such processing is necessary to protect the key interests of Customers – Users
  • for the purpose of fulfilling the contractual obligation, performing the work for the account of the Buyer – the User for which it is necessary to hire a third party – the executor of processing
RULES OF USING MASHAL POINTS

The issuer of points is MASHA COSMETICS j.d.o.o. for production and trade Commercial Court in Zadar, Initial capital 10 kn OIB 07128714669. Points are the property of the issuer and do not constitute a means of payment. It is issued free of charge to all adults who collect them by purchasing products on the mashala.eu website and similar promotions. Points are issued at the point of sale and are active immediately.

For every 10 kuna on the amount of the invoice, the user earns 10 points, whereby 10 kuna is given for 10 points, which can be used to reduce the price when buying products on the mashala.eu website. The collected points can be exchanged by the user for current benefits in the prize program. The use of collected points is not limited in time and they are kept in the user’s account until they are used.

Changes in personal data must be requested via the address info@mashala.hr. The user is obliged to present the card at the point of sale before the start of payment and invoicing in order to realize the benefits of the prize program.

Mashala points are issued for an indefinite period of time and are valid until revoked. Mashala reserves the right to suspend the Mashala points service and the terms of the prize program without written notice, as well as the right to revoke points to the user with prior email notification.

Personal data of the Customer – User are stored in the electronic format of the Mashala information system which the Customer – User filled in when joining the Mashala bonus program by purchasing the product. All data is deleted from the system by account cancellation or upon request by the user.

PROCESSING OF PERSONAL DATA IN THE CONTEXT OF EMPLOYMENT

Personal data of employees may be collected, processed, used and delivered to third parties only if it is determined by law or if it is necessary for the exercise of rights and obligations arising from the employment relationship, or in connection with the employment relationship.

In order to exercise the rights and obligations arising from the employment relationship, the controller will collect, process, use and provide to third parties only those personal data that are necessary for this purpose, and will provide such data only at the request of courts and other state or public bodies.

PROCESSING OF PERSONAL DATA BY VIDEO SURVEILLANCE

The processing of personal data through video surveillance may be carried out only for the purpose necessary and justified for the protection of persons and property, if the interests of respondents who are in conflict with the processing of data through video surveillance do not prevail.

Recordings obtained through video surveillance may be kept for a maximum of 6 months, unless another law prescribes a longer retention period or if the evidence is in court, administrative, arbitration or other equivalent proceedings.

DIRECTOR

Martina Milin

Free delivery in Croatia

All deliveries above 500kn

Natural products

All products are of natural origin

Cruelty Free

Products not tested on animals

100% Secure payment

COD (RH) / MasterCard / Visa

Ocjena mashala.hr na Trustprofile recenzije je 9.8/10 temeljena na 330 recenzije.