PRIVACY POLICY
Last updated: 29 September 2026
S&B Kosmetik GmbH takes the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store and share personal data when you visit www.specialbeauty.at, place an order, contact us, subscribe to marketing communications or use our online skincare consultation service.
1. Data Controller
The controller responsible for the processing of your personal data is:
S&B Kosmetik GmbH
Lilienthalgasse 9/EG/G03A
1030 Vienna
Austria
Email: info@specialbeauty.at
Phone: +43 664 466 0 388
2. Personal Data We Process
Depending on how you use our website and services, we may process the following categories of personal data:
- name and surname;
- billing and delivery address;
- email address;
- telephone number;
- order and transaction information;
- payment-related information;
- products purchased or selected;
- communications with us;
- newsletter and marketing preferences;
- technical information relating to your use of our website;
- cookie and tracking information;
- information voluntarily provided during a skincare consultation, including photographs, videos and information about your skin and skincare concerns.
We process only personal data that is necessary for the relevant purpose or that you voluntarily provide to us.
3. Orders and Contract Fulfilment
When you place an order through our online store, we process the information required to process and fulfil your order.
This may include your name, contact details, billing and delivery address, ordered products, payment information and information relating to delivery.
The processing is necessary for the performance of the contract with you and for taking steps at your request prior to entering into a contract.
We may also process and retain information where necessary to comply with statutory accounting, tax, consumer protection and other legal obligations.
4. Payments
Depending on the payment method selected during checkout, payment information may be processed by payment service providers including:
- Shopify Payments;
- PayPal;
- Klarna;
- participating card and payment networks;
- banks and other payment service providers involved in processing your payment.
Available payment methods may include Visa, Mastercard, American Express, Maestro, UnionPay, Apple Pay, Google Pay, Shop Pay, PayPal, Klarna and bank transfer.
Payment providers process certain personal data in accordance with their own privacy policies and legal obligations.
S&B Kosmetik GmbH does not receive or store complete payment card details where payment is processed directly by an external payment provider.
5. Shopify
Our online store is operated using Shopify.
Shopify provides the technical infrastructure required to operate our online store and may process personal data on our behalf in connection with website operation, checkout, customer accounts, order management, payments, security and related functions.
Depending on the service and technical infrastructure involved, personal data may be processed outside the European Economic Area. Where required, appropriate safeguards for international data transfers are used.
6. Delivery and Fulfilment
To fulfil your order, we may provide the information necessary for delivery to our fulfilment partners, warehouses, postal operators and courier companies.
This normally includes your:
- name;
- delivery address;
- telephone number;
- email address;
- information necessary to identify and deliver your shipment.
The courier or logistics provider used may vary depending on the destination country and the delivery option selected.
Only information necessary for processing and delivering the order is shared.
7. Online Skincare Consultation
We offer personalised online skincare consultations.
When you voluntarily use this service, you may provide information about your skin, skincare routine, products currently used and skincare concerns.
You may also voluntarily provide photographs or videos for the purpose of receiving personalised skincare recommendations.
Consultations may take place through WhatsApp Business and other communication channels made available by us.
We process this information for the purpose of providing the consultation, preparing personalised skincare recommendations and providing follow-up support.
Where information provided by you reveals or may reveal information concerning your health, we process such information only where a valid legal basis under applicable data-protection law exists, including your explicit consent where required.
You are not required to provide information that is not necessary for the consultation.
8. WhatsApp Business
If you communicate with us through WhatsApp, personal data contained in your messages, including photographs, videos and other information voluntarily submitted by you, is processed through WhatsApp Business.
WhatsApp is a service provided by a company of the Meta group. The processing of information by WhatsApp is also subject to the applicable WhatsApp privacy information.
Consultation conversations are retained where necessary to provide continuing skincare support, maintain the history of recommendations and respond to subsequent questions.
Personal data is not retained longer than necessary for these purposes or applicable legal obligations.
You may contact us at info@specialbeauty.at if you wish to exercise your applicable data-protection rights in relation to information held by us.
9. Contact Forms and Google Forms
When you contact us through a form on our website or through a Google Form made available by us, we process the information you voluntarily submit for the purpose indicated in the relevant form.
Where Google Forms is used, data may also be processed by Google in accordance with Google's applicable privacy terms.
10. Email and Customer Communication
If you contact us by email or another communication channel, we process your contact details and the contents of your communication in order to respond to your request and, where relevant, administer our contractual relationship with you.
We may retain correspondence where necessary to document customer service, orders, complaints, guarantees or other business communications.
11. Newsletter and Marketing Communications
If you subscribe to our newsletter or otherwise provide valid consent to receive marketing communications, we may use your email address and related information to send you information about products, skincare, promotions and other news from S&B Kosmetik GmbH.
You may withdraw your consent and unsubscribe from marketing emails at any time by using the unsubscribe link contained in the relevant email or by contacting us.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
12. Cookies
Our website uses cookies and similar technologies.
Some cookies are necessary for the operation of the website, including functions such as shopping cart, checkout, security and language settings.
Other cookies and technologies may be used for analytics, advertising and measurement only where permitted by applicable law and, where required, after you have provided your consent through our cookie-consent system.
You can manage the available cookie settings through the cookie preferences provided on our website.
13. Meta Pixel and Meta Services
Subject to your cookie and tracking preferences, we use technologies provided by Meta Platforms, including the Meta Pixel and integrations with Facebook and Instagram.
These technologies may help us:
- measure the effectiveness of advertising;
- understand how visitors interact with our website;
- create advertising audiences;
- display relevant advertising on Meta platforms.
Where legally required, these technologies are activated only after you have provided the necessary consent.
You may withdraw or change your consent through our cookie settings.
Meta may process information independently in accordance with its own privacy policies.
14. Social Media
S&B Kosmetik GmbH maintains profiles and uses services provided by social media platforms, including Facebook and Instagram.
If you interact with us through these platforms, the respective platform provider may process personal data independently in accordance with its own privacy policy.
15. Gift Cards
When you purchase or use an electronic gift card, we process the information required to issue, administer and redeem the gift card and, where applicable, information relating to the purchaser and recipient.
16. Legal Bases for Processing
Depending on the relevant processing activity, we process personal data on one or more of the following legal bases under the GDPR:
- performance of a contract or steps taken prior to entering into a contract;
- compliance with a legal obligation;
- our legitimate interests, where those interests are not overridden by your rights and freedoms;
- your consent, where processing requires consent;
- your explicit consent where special categories of personal data are processed and such consent is required.
Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
17. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and as required by applicable legal retention obligations.
Different retention periods may apply depending on the type of information and the purpose of processing.
Order, invoice and accounting information may be retained for the periods required under applicable Austrian tax and commercial law.
Customer communications and consultation information are retained only for as long as necessary for customer service, ongoing consultation, documentation of recommendations, establishment or defence of legal claims, or other legitimate purposes.
18. Recipients of Personal Data
Where necessary, personal data may be disclosed to or processed by:
- Shopify and related service providers;
- payment service providers;
- banks;
- fulfilment and warehouse providers;
- postal and courier companies;
- IT and hosting providers;
- email and communication service providers;
- Meta;
- Google, where Google Forms or other Google services are used;
- professional advisers and authorities where required by law.
We do not sell your personal data.
19. International Data Transfers
Some of our service providers may process personal data outside Austria or the European Economic Area.
Where required by the GDPR, transfers to third countries are made on the basis of an applicable adequacy decision or other legally recognised safeguards, such as Standard Contractual Clauses.
20. Your Rights
Subject to the conditions of applicable data-protection law, you may have the right to:
- obtain information about personal data processed about you;
- obtain a copy of your personal data;
- request correction of inaccurate data;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- receive certain data in a portable format;
- withdraw consent at any time where processing is based on consent.
To exercise your rights, contact:
You also have the right to lodge a complaint with the competent data-protection supervisory authority.
For S&B Kosmetik GmbH, the competent Austrian supervisory authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
21. Changes to this Privacy Policy
We may update this Privacy Policy where necessary to reflect changes to our services, technologies or applicable legal requirements.