PRIVACY POLICY

We take privacy very seriously. The personal data we process depends on how you use our services. We use personal data to provide your online services in accordance with your preferences, manage requests, communicate with you about products and services that may be of interest to you. All personal data is processed in accordance with applicable data protection laws. We disclose personal data to third parties solely to help us provide our services to you and, if you explicitly authorize us, we will disclose it to affiliated companies for customer relationship management, analytics and marketing. With your consent, we use cookie modules for statistical, performance and marketing purposes.

If you would like more information about how we process your personal data and the cookies we use, you can read the full version of our Privacy Policy below. Our privacy principles We treat privacy with a very high responsibility: 1 We will ensure that your personal data is used in accordance with applicable data protection laws. 2 We will be transparent about how we use personal data. 3 We will give you simple options to say "STOP" if you are no longer satisfied with our marketing communications. 4 We will take all reasonable steps to protect your personal data and ensure that it is not accessed by unauthorized persons. 5 We will respond to inquiries about the processing of your personal data without undue delay. Our Privacy Policy Last Updated: 2021 We do our best to protect your privacy rights and ensure that your personal data is protected. The Privacy Statement explains the types of personal data we collect and how we process and protect that data in connection with the services we provide. This includes information collected offline in our stores or through customer service, as well as in online through our sites, applications (including mobile applications) and third-party platforms ("Sites"). This Privacy Policy also applies to our specific content, including online offers and advertisements for products and services, that you may see on third-party sites, platforms and applications based on your online activity. These Third Party Sites may have their own Privacy Policies and Terms and Conditions. We recommend that you read them before using these third party sites. 1 WHO IS RESPONSIBLE FOR WHAT HAPPENS WITH YOUR DATA? A is responsible for the processing of your personal data on our sites.

2 HOW CAN I CONTACT THE DATA PROTECTION OFFICER? If you have questions about how we process personal data, please contact us by email Sales @ 3 WHAT IS PERSONAL DATA? Personal Data means information that can directly or indirectly identify you ("Personal Data"). This generally includes information such as your name, address, email address, and phone number, but may also include other information such as your IP address, purchasing habits, health information, and other information. Beauty, information about your lifestyle or preferences, such as hobbies and interests. Health Information is called "Special Categories of Personal Data", which require special protection due to its confidentiality.

4 WHAT HAPPENS WHEN YOU PROVIDE US WITH YOUR PERSONAL DATA? We collect your Personal Data directly in various ways, such as when you provide us with customer registration information on the Site, when you subscribe to our newsletter, when you make a comment or submit a request, or when you contact our Support Services. to the client. When you provide us with personal data, we will process it in accordance with this Privacy Policy. If you do not wish to process our personal data in this way, please do not provide us with your personal data. We process your personal data to provide our services as explained below. In certain situations, we process your personal information only if you give us your consent for that purpose, for example, in most cases where we process your personal data for marketing purposes, when we use cookies or location data, or when we process your personal information. Sensitive Personal Information. In other cases, we may have other legal reasons to process your personal data, such as performance of the contract with you or legitimate interests such as fraud prevention. If you become a member of one of our loyalty programs, we can clearly assumethat you want us to process your personal data for marketing purposes. You can unsubscribe from marketing communications at any time without prejudice to your loyalty benefits. when we process We process your personal data on the basis of your consent, we will ask for your explicit consent and only for a specific purpose. We will also ask you to provide your additional consent if we need to use your personal data for purposes not covered by this Privacy Policy. Please see the table in Section 6 for details on the different types of personal data we may collect, the relevant purposes and the legal basis for processing.

5 WHAT HAPPENS IF OUR CLIENT IS A CHILD? Our site is for adults, but there may be situations where some customers under the age of 16 view or purchase products on our sites. Unless we know that a customer is under the age of 16, we will not use their personal data for marketing purposes unless we have parental consent. To provide a paternity agreement for marketing purposes, please ask your parent or guardian to call or write to us using the contact details specified in Section 1. In some cases, we will assume, based on your actions, who obtained the agreement. of paternity. In this situation, we reserve the right to decide whether you will receive marketing communications from us when you reach the age of eligibility. Please note, however, that access to certain portions of our sites and/or eligibility to receive prizes, samples or other rewards may be limited to users of a certain age. We may use your personal data to perform age checks and to enforce such age restrictions. 6 FOR WHAT PURPOSE DO WE TREAT YOUR PERSONAL DATA?

6.1 We process the following categories of personal data for the following purposes: Browse our sites Buy/Accept a service Customer service Recommend products and services that may interest you Contests and games Online shopping Loyalty program · Fraud prevention and other administrative services, such as registration 6.2 Cookies and similar technologies We use cookies and similar technologies ("Cookies") to improve our products and experience on our sites by collecting information about how you use the sites. Some of the cookies we use are necessary to enable basic functionality of the website, for example to provide secure authentication or to remember where you came from with an order, but we also use cookies that allow us to analyze your use of the website. Site (so we can measure and improve performance), as well as ad cookies, which are used by advertisers to deliver ads relevant to your interests. We may customize our websites and products to your interests and needs by collecting information about your device. And correlating it with your personal data to ensure that our sites provide the best web experience. You can see more information about the cookies we use and adjust your preferences with the help of the cookie consent tool or on our sites. Please note, however, that without Cookies, you may not be able to use the full functionality of our websites or online services.

7 WITH WHOM DO WE SHARE YOUR PERSONAL DATA? 7.1 Our service providers share your personal data with the following data processors (for example, service providers that help us carry out the above activities): relevant trusted companies attributed to us that directly support promotional activities, management website of products and loyalty program, especially for IT Management (Hosting, Maintenance and Testing). · Trusted Third Parties to help us process and analyze your personal data on our behalf to help us make recommendations for products and services that may be of interest to you, in accordance with Section 6.1 above. · Trusted third party, if you request a product or service from us, to allow payment and delivery of the requested products and services. Unless you have given your consent, these trusted third parties are not authorized by us to use your personal data in any other way and we will require them to implement appropriate technical and organizational measures to protect your personal data. · These processors are required by us to comply with strict requirements, as set out in the applicable Data Protection Law, to manage your personal data only for us and to comply with the highest IT security standards. 7.2 Other recipients We share yourpersonal data with the following third parties who process your data for their own purposes (for example, these third parties are not processors; they use your personal data because they have their own interest or because you have expressed it): Interested third parties who will send you communications of marketing, but only if you have consented to receive such communications. · Law enforcement or other agencies, if required by law or order J Summons or judgment on the disclosure of your personal data. Please note that we never share your personal data with social media platforms. If we start to build an audience or find compatible clients with social media platforms like Facebook or Google, your personal data will always be anonymised before the transfer. If there are subsequent changes and we need to share your personal data with a social media platform, we will ask for your consent. 7.3 By sharing your site usage information with your agreement, we will share site usage information with trusted third parties (for example, advertisers, advertisers, ad networks, data exchanges, etc.) to provide personalized content in which may be interested. Your past activity on our site. These third parties may set and access their own cookies, web beacons, and similar tracking technologies on your device to help us deliver personalized content and advertising when you visit our relevant sites. See Section 6.2. For additional information about cookies and how to disable them. Please note that even if you disable this option, you may still receive advertisements from us that are not personalized based on your use of the site.

8 TO WHICH COUNTRIES DO WE TRANSFER YOUR PERSONAL DATA? Many of our trusted third parties and many of our group companies are located in countries that provide an adequate level of data protection, such as the European Economic Area (EEA). When we transfer your personal data to a trusted third party or a group company located in a country where data protection laws are not considered to provide the same level of protection, we ensure adequate data protection measures based on other legitimate means, like the privacy shield. Certification. and/or standard contract terms. Further details on the transfer mechanism can be obtained from the Data Protection Officer (see contact details in section 2).

9 HOW LONG DO WE PROCESS YOUR PERSONAL DATA? We will only store your personal data until the above purposes for which we collected or received your personal data are fulfilled and after the expiration of legal obligations related to record keeping, as described in Section 6.1

10 WHAT ARE YOUR RIGHTS? If certain requirements are met, you have the right to: Obtain confirmation from us as to whether or not we process your personal data and, if applicable, whether we access your personal data; · To Correct Inaccurate Personal Data; · Oppose the Processing of Personal Data; · Restrict the Processing of Personal Data; And transport of personal data: You receive the personal data you provide to us in a structured, frequently used and machine-readable format, and may transmit it to another data controller. You can find more details about these rights here: http://www.dataprotection.ro/ To exercise your rights, please contact your data protection officer (see Section 2 for details of the agreement) or contact us with our helpdesk. attendance. Please note that you do not need to contact your data protection officer to exercise your right to opt out of receiving marketing communications from us. You can choose not to receive this communication by accessing the Privacy Preferences in the "My Account" Section, if you have an account with us, directly from the communications we send you or by contacting our Customer Service team at +90 543 176 01 46 or by Email

11 CAN YOU WITHDRAW YOUR CONSENT FOR THE PROCESSING OF PERSONAL DATA? If your consent is the legal basis for processing your personal data, you can withdraw your consent for: Marketing communications: by logging into your account under Privacy Preferences or using the link to unsubscribe from our marketing communications. · Use of cookies: with the help of our cookie consent tool at the bottom of our sites. · Other purposes: send an email to [email protected] or contact our customer service specified in the section Withdrawal of consent Will not affect the legality of the processingprior to withdrawal.

12 CAN YOU COMPLAIN TO THE DATA PROTECTION AUTHORITIES? If you consider that the processing of your personal data by us violates the Data Protection Laws, you can file a claim with the competent control authority, especially in the Member State in which you have your habitual residence, place of work or place of residence. worked. . Worked. The GDPR.

13. HOW DO WE PROTECT YOUR PERSONAL DATA? We maintain appropriate technical and organizational measures to protect the personal data you provide to us from accidental or unlawful destruction, loss, alteration or disclosure. tion or unauthorized access.

14 CAN WE CHANGE OUR PRIVACY STATEMENT? We may change this Privacy Policy from time to time by posting the updated version in this document. We encourage you to visit this section frequently for information.