Privacy Policy

Effective Date: May 18, 2026

Boll & Boll Produkte GbR ("Boll & Boll") with this Privacy Policy regulates the data collection activities as well as data usage when using the matinataskincare.com website, which is the ownership of Boll & Boll Produkte GbR. Boll & Boll acts as the data controller in terms of the General Data Protection Regulation ("Data Controller") and determines the purpose and means of the processing of personal data. The purpose of this Privacy Policy is to provide users of matinataskincare.com website with information about the procedure of collecting and processing personal data when using the website matinataskincare.com, define the Data Controller, define data recipients (persons to whom data are transferred following the contract and legal provisions), define personal data that we process, for what purposes and for how long we store this information, including information about cookies.

For this Privacy Policy, the name "user" is a common name for users of the website and customers in the online store, which are defined in the General Terms of Use of matinataskincare.com webshop.

Data Collection

Personal data is any data related to a person whose identity is known or can be identified. Personal data is considered to be the user's identification data, i.e. data that the Data Controller collects and processes during the use of the website. Personal data is collected exclusively based on the voluntary provision of such information by users of the website/webshop, such as filling out a form when ordering products or when subscribing to the newsletter. Additionally, non-personal information and data may be automatically collected through online cookies.

For business purposes, the Data Controller collects the following data:

• Name and surname

• Address of residence

• E-mail address

• Contact phone number

• Delivery address (if different from the address of residence)

The Data Controller is obliged to respect the anonymity and privacy of the e-commerce services users and will use and process the data exclusively for the purpose determined by this Privacy Policy.

If the user is under the age of 16, he or she must notify a parent or guardian about this Privacy Policy for the Data Controller to obtain consent to the use of the user’s personal information.

Data Processing

Order Processing and Fulfilment of Contractual Obligations

The Data Controller collects data during product ordering within the webshop. The following data is collected: identity data, contact information, shipment information, information about payment type, and other data necessary for transaction processing. The website does not record the user's credit card number or store transaction data and uses third-party services to encrypt credit card information to protect user data.

Website Improvement

The Data Controller’s web server automatically records technical user data for the proper display of the website, for security purposes, and to analyze website performance. When accessing the website, the Data Controller’s web server temporarily stores the domain name or IP address of the accessing computer, access date, file requests by website visitors, browser type, HTTP or HTTPS return code, and file size transferred during the visit.

Fulfilment of Legal Obligations

The Data Controller processes user data to fulfil tax, accounting, and other legal obligations. Personal data may also be processed in cases prescribed by law or where required by a court or other binding authority.

With the Consent of the User

In certain situations, the Data Controller may request the user’s consent for data processing (for example, for newsletter subscriptions or the use of certain cookies). Users may withdraw consent at any time.

Your data will not be used for purposes other than those listed above without notifying you and requesting consent where required.

Protecting the Privacy of Personal Data

The Data Controller is obliged to protect the privacy of all users’ personal data on the website and undertakes to treat such data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

The Data Controller may not use users’ personal data without authorization or make them available to third parties, except where permitted by law or necessary for fulfilling contractual obligations.

Statement on Personal Data Collection

By purchasing products in the online store, I give my consent that Boll & Boll Produkte GbR, as the Data Controller under the General Data Protection Regulation, and its business partners acting as Data Processors, collect, process, and exchange the following data:

• Order information (name and surname, address, postal code, city, country, telephone number, e-mail address, and delivery information)

• Newsletter subscription information (e-mail address)

I give this consent for the purpose of payment processing and delivery of the ordered product.

I understand that I may withdraw this consent at any time, after which processing of my data will cease except where legally required.

Providing Personal Data to Third Parties

Users’ personal data is protected under applicable data protection laws, and the Data Controller will not make it available to third parties except for the purposes stated above.

The Data Controller forwards necessary personal data exclusively to business partners involved in the delivery and payment process.

The Data Controller guarantees that the e-mail address and other user data will not be made available