Call us: 091 9220606 | [email protected]

Facebook-f Instagram YouTube

Privacy Policy

www.crlab.ch Privacy Policy

This website collects certain personal data from its users.

This document includesa section dedicated to California consumers and their privacy rights.

This document includesa section dedicated to Virginia consumers and their privacy rights.

This document includesa section dedicated to Colorado consumers and their privacy rights.

This document includesa section dedicated to Connecticut consumers and their privacy rights.

This document includesa section dedicated to Utah consumers and their privacy rights.

This document includesa section dedicated to users in Switzerland and their privacy rights.

This document includesa section dedicated to users residing in Brazil and their privacy rights.

This document can be printed using the print command found in the settings of any browser.

Data Controller

Well Hair SA
Via Zurigo 38
6900 Lugano (Switzerland)

Data Controller's email address:[email protected]

Types of Data Collected

The Personal Data collected by this Website, either directly or through third parties, includes: Tracking Tools; Usage Data; Universal Unique Identifier (UUID); responses to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events; city; device information; session statistics; browser information; first name; last name; email address; username; phone number; payment information; purchase history; billing address; physical address; company name; country; state; province; ZIP code; area code; User ID; house number; various types of Data.

Full details regarding each type of Personal Data collected are provided in the relevant sections of this privacy policy or through specific notices displayed prior to the collection of such Data.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website.
Unless otherwise specified, all Data requested by this Website is required. If the User refuses to provide it, this Website may be unable to provide the Service. In cases where this Website indicates that certain Data is optional, Users are free to choose not to provide such Data, without this having any impact on the availability of the Service or its functionality.
Users who have any doubts about which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies—or other tracking tools—by this Website or by the providers of third-party services used by this Website is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

The User assumes responsibility for any Personal Data of third parties obtained, published, or shared through this Website.

Methods and Location of Data Processing

Treatment Methods

The Data Controller implements appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of Personal Data.
Data processing is carried out using computer and/or telecommunications tools, with organizational procedures and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the operation of this Website (administrative, sales, marketing, and legal staff, as well as system administrators) or external parties (such as third-party technical service providers, postal carriers, hosting providers, IT companies, and communications agencies) may have access to the Data; these parties may also be appointed, if necessary, as Data Processors by the Data Controller. An updated list of Data Processors may be requested at any time from the Data Controller.

Location

The Data is processed at the Data Controller’s operational facilities and at any other location where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. For further information on the location of processing, the User may refer to the section detailing the processing of Personal Data.

Shelf Life

Unless otherwise specified in this document, Personal Data is processed and retained for as long as necessary to fulfill the purpose for which it was collected and may be retained for a longer period due to any legal obligations or based on Users’ consent.

Purpose of Processing the Collected Data

User Data is collected to enable the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), identify any malicious or fraudulent activities, as well as for the following purposes: Advertising, Statistics, Remarketing and behavioral targeting, Display of content from external platforms, SPAM protection, Payment processing, Contacting the User, and Registration and authentication provided directly by this Website.

For detailed information on the purposes of processing and the Personal Data processed for each purpose, the User may refer to the section “Details on the Processing of Personal Data.”

Details on the Processing of Personal Data

Personal Data is collected for the following purposes and through the following services:

Information on how to turn off interest-based ads

In addition to any opt-out options provided by any of the services listed in this document, Users can learn more about how to disable interest-based ads in the relevant section of the Cookie Policy.

Additional Information on the Processing of Personal Data

Cookie Policy

This website uses tracking tools. For more information, users can refer to theCookie Policy.

Additional Information for Users

Legal Basis for Data Processing

The Data Controller processes Personal Data relating to the User if any of the following conditions apply:

In any case, you may always ask the Data Controller to clarify the specific legal basis for each processing activity and, in particular, to specify whether the processing is based on law, required by a contract, or necessary to enter into a contract.

More information on shelf life

Unless otherwise specified in this document, Personal Data is processed and retained for as long as necessary to fulfill the purpose for which it was collected and may be retained for a longer period due to any legal obligations or based on Users’ consent.

Therefore:

When processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be required to retain Personal Data for a longer period to comply with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiration of this period, the rights of access, deletion, rectification, and data portability can no longer be exercised.

User Rights Under the General Data Protection Regulation (GDPR)

Users may exercise certain rights with respect to the Data processed by the Data Controller.

In particular, within the limits established by law, the User has the right to:

Users have the right to obtain information regarding the legal basis for the transfer of Data abroad, including to any international organization governed by international law or established by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect their Data.

Details on the Right to Object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing on grounds relating to their particular situation.

Users are advised that, if their Data is processed for direct marketing purposes, they may object to such processing at any time, free of charge and without providing any reason. If Users object to processing for direct marketing purposes, their Personal Data will no longer be processed for those purposes. To determine whether the Data Controller processes Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to Exercise Your Rights

To exercise their rights, Users may submit a request to the Data Controller’s contact information provided in this document. The request is free of charge, and the Data Controller will respond as soon as possible—and in any case within one month—by providing the User with all the information required by law. Any corrections, deletions, or restrictions on processing will be communicated by the Data Controller to each of the recipients, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves a disproportionate effort. The Data Controller will inform the User of these recipients upon request.

Additional Information for Users in Switzerland

This section applies to Users in Switzerland and, for those Users, supersedes any other information in the privacy policy that may differ from or conflict with it.

Further details regarding the categories of Data processed, the purposes of processing, the categories of recipients of personal data (if any), the retention period, and other information about personal data can be found in thesection titled “Detailed Information on the Processing of Personal Data” in this document.

User Rights Under the Federal Act on the Protection of Personal Data

Users may exercise certain rights regarding their data within the limits of the law, including the following:

How to Exercise These Rights

Any requests to exercise the User’s rights may be directed to the Data Controller using the contact information provided in this document. These requests are free of charge, and the Data Controller will respond as soon as possible, providing Users with the information required by law.

Additional Information for Users in Brazil

This section of the document supplements and completes the information contained in the rest of the privacy policy and is provided by the entity that operates this Website and, where applicable, by its parent company and its subsidiaries and affiliates (collectively referred to as “we,” “our,” or “us” for the purposes of this section).
This section applies to all Users in Brazil (such Users are referred to below simply as “you,” “your,” “you all,” or “yours”), pursuant to the “Lei Geral de Proteção de Dados,” and, for such Users, takes precedence over any other information in this Privacy Policy that may be divergent or conflicting.
In this section of the document, the term “personal information” is used as defined bythe LGPD.

Legal bases on which we process your personal information

We process your personal information only if one of the legal bases for such processing applies. The legal bases are as follows:

To learn more about the legal basis, you can contact us at any time using the contact information provided in this document.

Categories of Personal Information Processed

To find out what categories of personal information are processed, please refer to the “Details on the Processing of Personal Data” section in this document.

Why We Process Your Personal Information

To find out why we process your personal information, please refer to the sections titled “Details on the Processing of Personal Data” and “Purposes of Processing the Collected Data” in this document.

Your privacy rights in Brazil, how to submit a request, and how we will handle it

Your Privacy Rights in Brazil

You have the right to:

You will never be discriminated against, nor will you be subjected to any unfavorable treatment whatsoever, as a result of exercising your rights.

How to Submit a Request

You may submit a formal request to exercise your rights free of charge at any time by using the contact information provided in this document or through your legal representative.

How and how long it will take us to process your request

We will do our best to respond to your request as soon as possible.
In any case, if we are unable to do so, we will be sure to inform you of the factual or legal reasons preventing us from immediately fulfilling or acting on your request. If your personal information is not processed by us, we will, if possible, direct you to the individual or entity to whom you should address your requests.

If you decide to submit a request foraccessor a request forconfirmation of the existence of the processingof personal information, please be sure to specify whether you prefer to receive your personal information in electronic or paper format.
You must also let us know if you would like an immediate response—in which case you will receive a simplified response—or if you require a full response.
In the latter case, we will respond within 15 days of receiving your request, providing you with all information regarding the source of your personal information, confirmation of whether or not personal information concerning you exists, all criteria used for the processing, and the purposes of such processing, while safeguarding our trade and industrial secrets.

If you decide to submit a request tocorrect, delete, anonymize, or block your personal information, we will ensure that we immediately notify the other parties with whom we have shared your personal information of your request so that they, in turn, can comply with your request—except in cases where such notification is impossible or unduly burdensome for us.

Transfer of personal information outside Brazil in cases permitted by law

We may transfer your personal information outside of Brazil in the following cases: