Privacy Policy

Introduction

Welcome to Kamedis’s global website. This Privacy Policy (the “Policy”) describes the personal information we, Kamedis EU Kft. (“Kamedis”) collect on our website kamedisglobal.com and the policies and procedures we use regarding that personal information.

The website offers information about Kamedis’ global business and its skin-care products.

Data Collection

The information we collect

When you use the website, we collect information in two ways:

1. If you send us an email, we will collect your email address and the content of your email.
2. Through the use of cookies on the website.

You are not under any obligation to email us any information. You do so at your sole discretion.

Cookies

We use ‘essential’ (necessary) cookies on our website. They are strictly necessary to provide secure access to the website (fraud detection, security, stability, and core site function). You cannot refuse these cookies. Our legal basis for this processing is our legitimate interests in the secure and proper functional operation of the website.

We also use cookies that cover the following categories. These cookies are deployed on your device only if you provide your express consent through the cookie consent banner on the website. Our legal basis for this processing is your explicit consent.

• Preferences, to enable the website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
• Website statistics collection, which help us to understand how visitors interact with the website.
• Online marketing, to track you across websites. The intention is to display ads that are relevant and engaging for you, and thereby more valuable for us and other advertisers.

Processing Purposes

We use the personal information you email us, solely to send you Kamedis-related updates in response to your inquiry. Our legal basis for this processing is our legitimate interest in business development by responding to business-related inquiries.

Our processing purposes in the use of cookies are explained above.

Aggregated and anonymous information

We may use or share aggregated or anonymous information that does not personally identify you for any purpose, including statistical analysis, research, marketing, or business development.

Third-Parties Processing Your Information

We use service providers who assist us with the internal operations of the website. These companies, including cloud hosting providers, are authorized to use your personal information solely as necessary to provide these services to us and not for their own promotional purposes.

We also share personal information with our parent company in Israel, Kamedis Ltd. Our legal basis for this sharing is our legitimate interest in management of the Kamedis’ marketing activities, website operation, and business development.

Other than as stated above, we will share your information with other parties only if we are legally compelled to do so (such as through a court order) or in the event of a dispute with you, in which case we will share your information with our advisors to assist us in resolving the dispute. Our legal basis for this processing is our legitimate interest in complying with legally required disclosure orders and in the resolution of disputes that could adversely impact our business.

Data Subject Rights

If you are in the EEA or the UK, you have the following rights under the GDPR:

Right to Access

Right to access and receive a copy of your personal information processed by us.

Right to Withdraw Consent

If you consented to the use of cookies, you can reactivate the cookie consent banner on the website and withdraw your consent.

Right to Rectify

Right to rectify inaccurate personal information concerning you that we hold and to have incomplete personal information completed.

Right to Data Portability

Right to data portability, that is, to receive the personal information that you provided to us in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your personal information transmitted directly from us to the designated person or entity.

Right to Object

You have the right to object to our processing of your personal information when such processing is based on our legitimate interest. However, we may override such an objection if we demonstrate compelling legitimate grounds, or if we need to process the personal information for the establishment, exercise, or defense of legal claims.

Right to Restrict

You have the right to restrict our processing of your personal information (except for storage) under the following circumstances: (a) if you contest the accuracy of the personal information, in which case the restriction applies for a period enabling us to verify its accuracy; (b) if the processing is unlawful and you prefer to restrict the processing of the personal information rather than requiring its deletion by us; (c) if we no longer need the personal information for the purposes outlined in this Policy, but you require the personal information to establish, exercise, or defend legal claims; or (d) if you object to our processing based on our legitimate interest, in which case the restriction applies for the period enabling us to determine whether our legitimate grounds for processing override yours.

Right to be Forgotten

You have the right to be forgotten and request the erasure of your personal information under certain circumstances, such as when you object to our processing of your personal information based on our legitimate interest and there are no overriding legitimate grounds for the processing. However, notwithstanding such a request, we may still process your personal information if it is necessary to comply with our legal obligations, or for the establishment, exercise, or defense of legal claims. If you wish to exercise any of these rights, please contact us through the channels listed in this Policy.

Right to Lodge a Complaint

Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, according to Article 77 of the GDPR, you can lodge a complaint with the supervisory authority in the Member State of your residence, place of work, or place of alleged infringement of the GDPR. For a list of supervisory authorities in the EU, please refer to the European Data Protection Board members list.

If you are in the UK, you can lodge a complaint with the Information Commissioner’s Office (ICO) pursuant to the instructions provided on the ICO complaints page.

Information Security

We implement appropriate technical and organizational measures to secure your information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to, encryption of data in transit and at rest, access controls, regular security assessments, staff training, and incident response procedures. While we maintain industry-standard security practices, no system can guarantee absolute security, and we continuously work to enhance our protective measures.

The security measures we have implemented include: TLS/HTTPS in transit, Encryption at rest, and Access controls and roles.

Data Retention

We will retain your information for the duration necessary to support our ordinary business activities, to operate the website, and to interact with existing and potential customers, suppliers, and partners. Thereafter, we will retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish and defend legal claims, and enforce our agreements. We will also delete your personal information at your request, unless we are required or entitled to keep it for any of the reasons stated above. The general retention period is approximately three (3) years.

International Transfers

Storing and Processing Outside Your Jurisdiction

If you are located in the EEA or the UK, please note that we transfer your information outside your jurisdiction, to countries such as Israel and the United States. We implement the required safeguards, such as adequacy decisions or Standard Contractual Clauses approved by the European Commission (2021/914/EU) and the UK International Data Transfer Addendum, as applicable, supplemented by additional technical and organizational measures where necessary to ensure equivalent protection.

Policy Changes

This Policy may be amended from time to time. We will post any changes to this Policy on our website a reasonable time in advance of their effective date, and we will also make efforts to proactively notify you by email of such changes if we have your email address.

Last update: September 8, 2026.