Zásady používání cookies

\n\n

1. Introduction

\n

Your privacy is our top priority. We,Analytics Portals Ltd,act as data processor when providing services to brands aiming to enhance their marketing strategies by understanding consumer behaviour. We process data on behalf of our customer,i.e. the brand,who acts as data controller and is responsible for the processing of your personal data. This Privacy Policy is aimed at visitors of this website. Below,we explain how and why we process your personal data.

\n

Personal data is any type of data that could be linked to an individual,such as name,address or IP address.

\n

Analytics Portals Ltd may make changes in this policy.

\n

2. What data do we process about you and why?

\n

Purpose of processing:Marketing purposes. We use personal data in order to provide our service to the customer,which consists of session-level analytics services.

\n

Categories of personal data processed:

\n

IP Address,
Your device,
Your browser,
Date and time of the request,
Location of the user (town/city)
User behaviour patterns (such as adding products to baskets,the way you engage with the website,session duration).
Contact & delivery details* that you provide to the retailer through the use of our service. To avoid misunderstandings,such data passes through Analytics Portals’ service but is not used or viewed by us in practice.

\n

* Please note that we do not process any payment details,credit card details or similar financial information.

\n

Legal basis: Your consent,according to Article 6.1.a) of the GDPR. In cases where sensitive personal data is processed,we rely on your consent in accordance with Article 9 GDPR. Such cases may occur when you visit a website and interact with,for example,health and pharmacy products.

\n

Retention time: We delete your IP address immediately upon reception. We keep data about your device,browser,date and time of requests,your location and your user behaviour pattern as long as necessary in order to provide the service to our customer,i.e. the data controller. Should you choose to withdraw your consent we will delete your personal data immediately.

\n

3. Who can access your personal data?

\n

We process data on behalf of our customer,who is the data controller. The customer receives pseudonymised analytics data,meaning that the IP address is separated from the analytics data. Thereby,the customer cannot identify who you are.

\n

When a third party such as our IT providers processes your data on behalf of us,we have entered into a data processing agreement with them.

\n

We may also transfer your data to recipients that are not data processors,but rather data controllers. Such recipients are independently responsible for the processing of your data.

\n

4. Is your data transferred to countries outside of the UK and the EU/EEA?

\n

We will generally not transfer your personal data to a country outside the UK and the EU/EEA. In cases where your personal data is processed outside the UK and the EU/EEA,there is either a decision from the European Commission that the country in question ensures an adequate level of protection or appropriate safeguards in the form of standard contractual clauses.

\n

If you have any questions about the transfer of data to other countries,please feel free to contact us.

\n

5. How do we protect your personal data?

\n

Technical and organisational measures include:

\n

Encryption,in transit and at rest,
Secure development lifecycle and penetration testing,
Role-based access control (RBAC),and
Incident Management and Breach Notification.

\n

6. Your rights and how to use them

\n

Right to withdraw your consent (Article 7.3 GDPR)

\n

You have the right to withdraw your consent to all or part of such processing that you have previously consented to,with effect from the time of withdrawal.

\n

Right to access (Article 15 GDPR)

\n

You have the right to access the personal data we hold about you and how it is processed (a so-called record extract). You also have the right to request a copy of the personal data processed by us.

\n

Right to rectification (Article 16 GDPR)

\n

You have the right to have inaccurate data corrected without undue delay and to ask us to complete incomplete data by providing us with the correct information.

\n

Right to erasure (“the right to be forgotten”) and restriction (Article 17 and 18 GDPR)

\n

You may have the right to have your personal data erased (also known as the \

Find out more >

Unlearn

Apprenticeship Programme

Belonging at Superdrug

Create your future

Beauty Banks

Get the Health & Beautycard

Download Superdrug App

We support