Privacy Policy

RightSupplier’s mission is to provide both individuals and companies worldwide with the most extensive platform for cosmetics ingredients and packaging, cosmetics end products or other cosmetics related services. Central to this mission is our commitment to be transparent about the data we collect about you, how it is used and with whom it is shared.

This Privacy Policy applies when you use our Services (described below). We offer our users choices about the data we collect, use, and share as described in this Privacy Policy, Cookie Policy, and Settings.

We consider ensuring the right to the protection of personal data as a fundamental RightSupplier commitment, therefore we will dedicate all the necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 ("General Data Protection Regulation" or "GDPR"), as well as with any other legislation applicable in your country. As one of the essential principles of this legal framework is transparency, we want to inform you about how we collect, use, transfer and protect your personal data when you interact with us in relation to our products and services, including through our website or through the apps available on your mobile phone.

Introduction

We are a platform online platform for individuals and companies. People use our Services to easily buy and sell cosmetics ingredients and packaging, cosmetics end products or other cosmetics related services. Our Privacy Policy applies to any Subscriber.

Our registered users (“Subscribers”) share their professional identities, post and view relevant content about products and services, businesses and professionals in order to grow in a network of trusted partnerships. Content and data on some of our Services is viewable to non-Subscribers (“Visitors”).

RightSupplier is the commercial name of RightSupplier S.R.L., a legal entity, with its registered office in Bucharest, Șoseaua Patriotilor no. 9, sector 3.

1.1 Services

This Privacy Policy, including our Cookie Policy applies to your use of our Services.

This Privacy Policy applies to RightSupplier.tech, RightSupplier-branded apps, and other RightSupplier-related sites, apps, communications, and services (“Services”), including off-site Services, such as our ad services and plugins, but excluding services that state that they are offered under a different privacy policy.

1.2 Data Controllers and Contracting Parties

RightSupplier, as the sole owner and representative of RightSupplier.tech will be the controller of your personal data provided to, or collected by or for, or processed in connection with our Services.

As a Visitor or Subscriber of our Services, the collection, use and sharing of your personal data is subject to this Privacy Policy and other documents referenced in this Privacy Policy, as well as updates.

1.3 Change

Changes to the Privacy Policy apply to your use of our Services after the “effective date.”

RightSupplier (“we” or “us”), as the sole owner and representative of RightSupplier, can modify this Privacy Policy, and if we make material changes to it, we will provide notice through our Services, or by other means, to provide you the opportunity to review the changes before they become effective. If you object to any changes, you may close your account.

You acknowledge that your continued use of our Services after we publish or send a notice about our changes to this Privacy Policy means that the collection, use and sharing of your personal data is subject to the updated Privacy Policy, as of its effective date.

Data We Collect

2.1 Data You Provide To Us

You provide data to create an account with us.

2.1.1 Registration

To create an account, you need to provide data including your name, email address and/or mobile number, and a password. To finish registration, you will need to provide payment (e.g., credit card) and billing information.

You create your RightSupplier profile (a complete profile helps you get the most from our Services).

2.1.2 Profile

You have choices about the information on your profile. Profile information helps you to get more from our Services. Please do not post or add personal data to your profile that you would not want to be publicly available.

2.1.3 Posting and Uploading

We collect personal data from you when you upload it to our Services, such as when you fill out a form, (e.g., with demographic data) or respond to a survey. You don’t have to upload all required personal data; though if you don’t, it may limit your ability to use our Services.

2.2 Data From Others

Others may write reviews about your products and services.

2.2.1 Content

You and others may post reviews that include information about you on our Services. We also may collect public information about you, such as business-related accomplishments, and make it available as part of our Services, including, as permitted by your settings, in notifications to others of mentions in our news/blog sections.

Customers and partners may provide data to us.

2.2.2 Partners

We receive personal data (e.g., your job title and work email address) about you when you use the services of our customers and partners, such as advertising agencies.

2.3 Service Use

We log your visits and use of our Services, including mobile apps.

We log usage data when you visit or otherwise use our Services, including our sites, app and platform technology, such as when you perform a search, view or click on some products or services, install or update one of our mobile apps. We use log-ins, cookies, device information and internet protocol (“IP”) addresses to identify you and log your use.

2.4 Cookies and Similar Technologies

We collect data through cookies and similar technologies.

As further described in our Cookie Policy, we use cookies and similar technologies to collect data (e.g., device IDs) to recognize you and your device(s) on, off and across different services and devices where you have engaged with our Services. We also allow some others to use cookies as described in our Cookie Policy. We also collect (or rely on others who collect) information about your device where you have engaged with our Services (e.g., ad ID, IP address, operating system, and browser information) so we can provide our Subscribers with relevant ads and better understand their effectiveness. You can opt out from our use of data from cookies and similar technologies that track your behavior on the sites of others for ad targeting and other ad-related purposes.

2.5 Your Device and Location

We receive data through cookies and similar technologies.

When you visit or leave our Services (including some plugins and our cookies or similar technology on the sites of others), we receive the URL of both the site you came from and the one you go to and the time of your visit. We also get information about your network and device (e.g., IP address, proxy server, operating system, web browser and add-ons, device identifier and features, cookie IDs and/or ISP, or your mobile carrier). If you use our Services from a mobile device, that device will send us data about your location based on your phone settings. We will ask you to opt-in before we use GPS or other tools to identify your precise location.

2.6 Sites and Services of Others

We get data when you visit sites that include our ads, cookies or some of our plugins.

We receive information about your visits and interaction with services provided by others related to RightSupplier or visit others’ services that include some of our plugins or our ads, cookies or similar technologies.

2.7 Other

We are improving our Services, which means we get new data and create new ways to use data.

Our Services are dynamic, and we often introduce new features, which may require the collection of new information. If we collect materially different personal data or materially change how we collect, use or share your data, we will notify you and may also modify this Privacy Policy.

How We Use Your Data

We use your data to provide, support, personalize and develop our Services.

How we use your personal data will depend on which Services you use, how you use those Services and the choices you make in your settings. We use the data that we have about you to provide and personalize our Services, including with the help of automated systems and inferences we make, so that our Services (including ads) can be more relevant and useful to you and others.

3.1 Services

Our Services provide both individuals and companies worldwide with an extensive platform for cosmetics ingredients and packaging, cosmetics end products or other cosmetics related services.

We use your data to authorize access to our Services and honor your settings.

3.1.1 Stay Informed

Our Services allow you to stay informed about news, events and ideas regarding professional and business topics you care about, and from companies of interest. We use the data we have about you (e.g., data you provide, data we collect from your engagement with our Services and inferences we make from the data we have about you), to personalize our Services for you, such as by recommending or ranking relevant products, services or events on our Services. We also use the data we have about you to suggest companies and ads that might interest you in pursuing your next business opportunity. So, if you let us know that you are interested in a business or category of products (e.g., by searching preferences), we will use this information to personalize adds or suggest related events to help you towards growing your business. We use your content, activity and other data, including your name, to provide notices to others. For example, subject to your settings, we may notify others that you have updated your products or services.

3.1.2 Productivity

Our Services allow you to collaborate with other Subscribers to search for potential better deals in purchasing products or services.

3.2 Communications

We contact our Subscribers and we offer settings to control what messages you receive and how often you receive some types of messages.

We will contact you through email, mobile phone, , and other ways through our Services, including text messages and push notifications. We will send you messages about the availability of our Services, security, or other service-related issues. We also send messages about how to use our Services, network updates, reminders, and promotional messages from us and our partners. You may change your communication preferences at any time. Please be aware that you cannot opt out of receiving service messages from us, including security and legal notices.

3.3 Advertising

We serve you tailored ads both on and off our Services. We offer you choices regarding personalized ads, but you cannot opt-out of seeing other ads.

We target (and measure the performance of) ads to Subscribers, Visitors and others both on and off our Services directly or through a variety of partners, using the following data, whether separately or combined:

  • Data from advertising technologies on and off our Services, pixels, ad tags, cookies, and device identifiers;
  • Member-provided information (e.g., profile, contact information, title and industry);
  • Data from your use of our Services (e.g., search history, clicking on an ad, etc.), including as described in Section 1.3;
  • Information from advertising partners, vendors and publishers ; and
  • Information inferred from data described above (e.g., using device data to recognize you as a Subscriber).

3.3.1 Ad Choices

We adhere to self-regulatory principles for interest-based advertising and participate in industry opt-outs from such ads. This does not opt you out of receiving advertising; you will continue to get other ads by advertisers not listed with these self-regulatory tools. You can also opt-out specifically from our uses of certain categories of data to show you more relevant ads.

3.3.2 Info to Ad Providers

We do not share your personal data with any third-party advertisers or ad networks except for: (i) hashed IDs or device identifiers (to the extent they are personal data in some countries); (ii) with your separate permission (e.g., in a lead generation form) or (iii) data already visible to any users of the Services (e.g., profile). However, if you view or click on an ad on or off our Services, the ad provider will get a signal that someone visited the page that displayed the ad, and they may, through the use of mechanisms such as cookies, determine it is you. Advertising partners can associate personal data collected by the advertiser directly from you with hashed IDs or device identifiers received from us. In such instances, we seek to contractually require such advertising partners to obtain your explicit opt-in consent before doing so.

3.4 Developing Services and Research

We develop our Services and conduct research.

How We Share Information

4.1 Our Services

Any data that you include on your profile on our Services will be seen by others, consistent with your settings.

4.1.1 Profile

Your profile is fully visible to all Connected Subscribers and customers of our Services. Your profile is partially visible to Visitors. Subject to your settings, it can also be visible to others on or off of our Services (e.g., Visitors to our Services or users of third-party search engines).

4.1.2 Reviews

Our Services allow sharing information including through Reviews.

When you share a Review publicly it can be viewed by everyone. Subscribers, Visitors, and others will be able to find and see your publicly shared content, including your name (and photo if you have provided one).

Any information you share through companies’ or other organizations’ pages on our Services will be viewable by it and others who visit those pages.

Your employer or company can see how you use Services they provided for your work (e.g. as an advertising agency) and related information.

4.1.3 Enterprise Accounts

Your employer may offer you access to our enterprise Services. Your employer can review and manage your use of such enterprise Services.

Depending on the enterprise Service, before you use such a Service, we will ask for permission to share with your employer relevant data from your profile or use of our non-enterprise Services.

4.2 Related Services

We share your data across our different Services and RightSupplier affiliated entities.

We will share your personal data with our affiliates to provide and develop our Services. We may combine information internally across the different Services covered by this Privacy Policy to help our Services be more relevant and useful to you and others. For example, we may offer recommendations based on your search history.

4.3 Service Providers

We may use others to help us with our Services.

We use others to help us provide our Services (e.g., maintenance, analysis, audit, payments, fraud detection, marketing, and development). They will have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes.

4.4 Legal Disclosures

We may need to share your data when we believe it’s required by law or to help protect the rights and safety of you, us, or others.

It is possible that we will need to disclose information about you when required by law, subpoena, or other legal process or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you; (3) investigate and defend ourselves against any third-party claims or allegations; (4) protect the security or integrity of our Services (such as by sharing with companies facing similar threats); or (5) exercise or protect the rights and safety of RightSupplier, our Subscribers, personnel or others. We attempt to notify Subscribers about legal demands for their personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.

4.5 Change in Control or Sale

We may share your data when our business is sold to others, but it must continue to be used in accordance with this Privacy Policy.

We can also share your personal data as part of a sale, merger, or change in control, or in preparation for any of these events. Any other entity which buys us, or part of our business, will have the right to continue to use your data, but only in the manner set out in this Privacy Policy unless you agree otherwise.

Your Choices & Obligations

5.1 Data Retention

We keep most of your personal data for as long as your account is open.

We generally retain your personal data as long as you keep your account open or as needed to provide you Services. This includes data you or others provided to us and data generated or inferred from your use of our Services. Even if you only use our Services every few years, we will retain your information and keep your profile open, unless you close your account. In some cases, we choose to retain certain information (e.g., insights about Services use) in a depersonalized or aggregated form.

5.2 Rights to Access and Control Your Personal Data

You can access or delete your personal data. You have many choices about how your data is collected, used, and shared.

We provide many choices about the collection, use, and sharing of your data, from deleting or correcting data you include in your profile, advertising opt-outs, and communication controls. We offer you settings to control and manage the personal data we have about you.

For personal data that we have about you, you can:

  • Delete Data: You can ask us to erase or delete all or some of your personal data (e.g., if it is no longer necessary to provide Services to you).
  • Change or Correct Data: You can edit some of your personal data through your account. You can also ask us to change, update, or fix your data in certain cases, particularly if it’s inaccurate.
  • Object to, or Limit or Restrict, Use of Data: You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).
  • Right to Access and/or Take Your Data: You can ask us for a copy of your personal data and can ask for a copy of personal data you provided in machine-readable form.

You may also contact us using the contact information provided on our website, and we will consider your request in accordance with applicable laws.

5.3 Account Closure

We keep some of your data even after you close your account.

If you choose to close your RightSupplier account, your personal data will generally stop being visible to others on our Services within 24 hours. We generally delete closed account information within 30 days of account closure, except as noted below.

We retain your personal data even after you have closed your account if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse (e.g., if we have restricted your account for breach of our RightSupplier platform Policy), enforce our User Agreement, or fulfill your request to "unsubscribe" from further messages from us. We will retain depersonalized information after your account has been closed.

Information you have shared with others (e.g., Reviews) will remain visible after you close your account or delete the information from your own profile or mailbox, and we do not control data that other Subscribers have copied out of our Services. Review content associated with closed accounts will show an unknown user as the source. Your profile may continue to be displayed in the services of others (e.g., search engine results) until they refresh their cache.

Other Important Information

6.1. Security

We monitor for and try to prevent security breaches. Please use the security features available through our Services.

We implement security safeguards designed to protect your data, such as HTTPS. We regularly monitor our systems for possible vulnerabilities and attacks. However, we cannot guarantee the security of any information that you send us. There is no guarantee that data may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.

6.2. Cross-Border Data Transfers

We store and use your data outside your country.

We process data both inside and outside of Romania and rely on legally provided mechanisms to lawfully transfer data across borders. Countries where we process data may have laws which are different from, and potentially not as protective as, the laws of your own country.

6.3 Lawful Bases for Processing

We have lawful bases to collect, use, and share data about you. You have choices about our use of your data. At any time, you can withdraw consent you have provided by going to settings or terminate your account.

We will only collect and process personal data about you where we have lawful bases. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you (e.g., to deliver the RightSupplier Services you have requested) and “legitimate interests.”

Where we rely on your consent to process personal data, you have the right to withdraw or

Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance, and we promise to make every effort to resolve any problem amicably.

6.4. Direct Marketing and Do Not Track Signals

Our statements regarding direct marketing and “do not track” signals.

We currently do not share personal data with third parties for their direct marketing purposes without your permission.

6.5. Contact Information

You can contact us or use other options to resolve any complaints.

If you have questions or complaints regarding this Policy, please first contact RightSupplier online. You can also reach us by physical mail. If contacting us does not resolve your complaint, you may have more options under your laws.