Privacy and Cookie Policy
Last updated: 28 October 2026
1. Who is responsible for your data
The controller of personal data processed on purlesworld.com is Proconcept Labs Sp. z o.o., Polna 24, 05-816 Michałowice, Poland, NIP: 5342485718, REGON: 146063214 (Purlés). You can contact us by post at the address above or by e-mail at sklep@purles.pl. You can also contact our Data Protection Officer at rodo@purles.eu.
2. About this website
purlesworld.com contains digital leaflets for Purlés cosmetics. You usually reach it by scanning the QR code on the product packaging. The website has no user accounts, no forms and no online shop. We do not ask for your name, e-mail address or any other contact details.
3. What data we process and why
a) Opening a page (hosting and security). When you open a page, your browser sends technical data such as your IP address, browser and device type, the address of the page and the time of the request. We need this data to display the page and to protect the website against attacks. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). The website is hosted by Tilda (Tilda Platform Cloud Services Co. LLC, Dubai, UAE) on our behalf. Tilda processes this data on our behalf under a data processing agreement, only for as long as needed to display the pages and keep the website secure, and no longer than our contract with Tilda lasts.
b) Basic visit statistics without cookies. Tilda counts page views, sessions and visitors (mobile or desktop) in a simplified mode that does not use cookies. We only see aggregated numbers. Legal basis: our legitimate interest in knowing how often the leaflets are used (Art. 6(1)(f) GDPR).
c) Google Analytics (only with your consent). If you click "Accept all" in the cookie banner, we use Google Analytics 4 to understand how the leaflets are used: which products, languages and QR codes bring visitors, which pages are viewed and which recommended products are opened. Google Analytics uses cookies and processes a random identifier, pages viewed, approximate location (country and city derived from your IP address, which Google Analytics does not store), device and browser data, the referring page and campaign parameters (UTM) contained in the QR code link. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law). The provider is Google Ireland Limited; data may be transferred to Google LLC in the USA under the EU-U.S. Data Privacy Framework. We keep Google Analytics data for 14 months. If you click "Reject all" or ignore the banner, Google Analytics is not loaded.
d) QR codes and short links. The QR codes on our packaging first open a short link and are then redirected to purlesworld.com. Our short link services are qr.purles.pl (our own service, hosted by nazwa.pl in Poland) and qr.purlesworld.com (Rebrandly, RadiateCapital Limited, Ireland). When you scan a code, the service records the time, your IP address and the country derived from it, your browser data and the referring page. We use this only to count scans per product. The target address contains campaign parameters (UTM) that identify the product and the code, not you. Legal basis: our legitimate interest in measuring how the QR codes are used (Art. 6(1)(f) GDPR). We keep scan records for as long as the QR codes on our packaging are in use.
e) Google Search Console. Google provides us with aggregated reports on how purlesworld.com appears in Google Search (search queries, clicks, countries, devices). These reports do not identify individual users. Google processes search data as an independent controller under its own privacy policy.
f) Fonts and videos. Product videos are loaded from the servers of our online shop (IdoSell platform, IAI S.A.) and from b2b.purles.pl (hosted by nazwa.pl), both in Poland. Fonts are loaded from Google Fonts (Google Ireland Limited). Your browser connects to these servers, which receive your IP address. None of them sets cookies.
4. Cookies and similar technologies
We use only the cookies and browser storage listed below. Google Analytics cookies are set only after you click "Accept all" or allow analytics cookies in the settings. You can change your decision at any time by clicking Cookie settings at the bottom of each page, or by deleting cookies for purlesworld.com in your browser settings.
5. Who receives the data
We use service providers who process data on our behalf: Tilda (hosting of purlesworld.com), nazwa.pl (hosting of qr.purles.pl and b2b.purles.pl), Rebrandly (qr.purlesworld.com), IAI S.A. (video files), Google (Google Analytics, Google Fonts). Google Search Console data is provided by Google as an independent controller. We do not sell your data.
6. Transfers outside the European Economic Area
Some providers process data outside the EEA: Tilda (United Arab Emirates; backups in the USA), Google (USA) and Rebrandly (servers in the USA). Such transfers are based on the European Commission's standard contractual clauses or, for Google, the EU-U.S. Data Privacy Framework.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to processing based on our legitimate interest, and to withdraw your consent at any time (this does not affect processing before the withdrawal). Because we do not ask for your name or contact details, we may not be able to link a request to the data we hold (Art. 11 GDPR); if you can provide additional information, we will try. To exercise your rights, contact us using the details in section 1.
You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, uodo.gov.pl.
8. Changes to this policy
We may update this policy when we change the website or the tools we use. The current version is always available on this page, with the date of the last update.
1. Who is responsible for your data
The controller of personal data processed on purlesworld.com is Proconcept Labs Sp. z o.o., Polna 24, 05-816 Michałowice, Poland, NIP: 5342485718, REGON: 146063214 (Purlés). You can contact us by post at the address above or by e-mail at sklep@purles.pl. You can also contact our Data Protection Officer at rodo@purles.eu.
2. About this website
purlesworld.com contains digital leaflets for Purlés cosmetics. You usually reach it by scanning the QR code on the product packaging. The website has no user accounts, no forms and no online shop. We do not ask for your name, e-mail address or any other contact details.
3. What data we process and why
a) Opening a page (hosting and security). When you open a page, your browser sends technical data such as your IP address, browser and device type, the address of the page and the time of the request. We need this data to display the page and to protect the website against attacks. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). The website is hosted by Tilda (Tilda Platform Cloud Services Co. LLC, Dubai, UAE) on our behalf. Tilda processes this data on our behalf under a data processing agreement, only for as long as needed to display the pages and keep the website secure, and no longer than our contract with Tilda lasts.
b) Basic visit statistics without cookies. Tilda counts page views, sessions and visitors (mobile or desktop) in a simplified mode that does not use cookies. We only see aggregated numbers. Legal basis: our legitimate interest in knowing how often the leaflets are used (Art. 6(1)(f) GDPR).
c) Google Analytics (only with your consent). If you click "Accept all" in the cookie banner, we use Google Analytics 4 to understand how the leaflets are used: which products, languages and QR codes bring visitors, which pages are viewed and which recommended products are opened. Google Analytics uses cookies and processes a random identifier, pages viewed, approximate location (country and city derived from your IP address, which Google Analytics does not store), device and browser data, the referring page and campaign parameters (UTM) contained in the QR code link. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law). The provider is Google Ireland Limited; data may be transferred to Google LLC in the USA under the EU-U.S. Data Privacy Framework. We keep Google Analytics data for 14 months. If you click "Reject all" or ignore the banner, Google Analytics is not loaded.
d) QR codes and short links. The QR codes on our packaging first open a short link and are then redirected to purlesworld.com. Our short link services are qr.purles.pl (our own service, hosted by nazwa.pl in Poland) and qr.purlesworld.com (Rebrandly, RadiateCapital Limited, Ireland). When you scan a code, the service records the time, your IP address and the country derived from it, your browser data and the referring page. We use this only to count scans per product. The target address contains campaign parameters (UTM) that identify the product and the code, not you. Legal basis: our legitimate interest in measuring how the QR codes are used (Art. 6(1)(f) GDPR). We keep scan records for as long as the QR codes on our packaging are in use.
e) Google Search Console. Google provides us with aggregated reports on how purlesworld.com appears in Google Search (search queries, clicks, countries, devices). These reports do not identify individual users. Google processes search data as an independent controller under its own privacy policy.
f) Fonts and videos. Product videos are loaded from the servers of our online shop (IdoSell platform, IAI S.A.) and from b2b.purles.pl (hosted by nazwa.pl), both in Poland. Fonts are loaded from Google Fonts (Google Ireland Limited). Your browser connects to these servers, which receive your IP address. None of them sets cookies.
4. Cookies and similar technologies
We use only the cookies and browser storage listed below. Google Analytics cookies are set only after you click "Accept all" or allow analytics cookies in the settings. You can change your decision at any time by clicking Cookie settings at the bottom of each page, or by deleting cookies for purlesworld.com in your browser settings.
- t_cookiesConsentGiven, t_cookiesCategories, t_cookiesRejectAll (Tilda, cookie banner): remember your cookie choice. Storage period: 1 year. Necessary.
- __ddg*, _ddgid, __ddgmark (Tilda, only if set): protection against attacks (DDoS). Storage period: short-term. Necessary.
- visited (Tilda, session storage): page animation on your first visit; deleted when you close the tab. Storage period: session. Necessary.
- _ga (Google Analytics): distinguishes visitors. Storage period: 2 years. Analytics, only with your consent.
- _ga_B8D5VGW271 (Google Analytics): keeps the session state. Storage period: 2 years. Analytics, only with your consent.
5. Who receives the data
We use service providers who process data on our behalf: Tilda (hosting of purlesworld.com), nazwa.pl (hosting of qr.purles.pl and b2b.purles.pl), Rebrandly (qr.purlesworld.com), IAI S.A. (video files), Google (Google Analytics, Google Fonts). Google Search Console data is provided by Google as an independent controller. We do not sell your data.
6. Transfers outside the European Economic Area
Some providers process data outside the EEA: Tilda (United Arab Emirates; backups in the USA), Google (USA) and Rebrandly (servers in the USA). Such transfers are based on the European Commission's standard contractual clauses or, for Google, the EU-U.S. Data Privacy Framework.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to processing based on our legitimate interest, and to withdraw your consent at any time (this does not affect processing before the withdrawal). Because we do not ask for your name or contact details, we may not be able to link a request to the data we hold (Art. 11 GDPR); if you can provide additional information, we will try. To exercise your rights, contact us using the details in section 1.
You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, uodo.gov.pl.
8. Changes to this policy
We may update this policy when we change the website or the tools we use. The current version is always available on this page, with the date of the last update.