Privacy notice

Controller and programme responsibility

The programme is organised by the European Beauty Federation (EUBF), a Swiss-registered association identified by UID CHE-334.396.128, Rue Adhémar-FABRI 2, 1201 Genève, Switzerland.

EUBF determines the purposes and essential means of processing for the programme. Administrative access is limited to authorised programme personnel, appointed reviewers and service providers who require the information for a defined task.

Information we receive

We receive account and contact details, entrant identity, professional and organisational information, entry statements, evidence files, correspondence, verification records, security data and the information approved for the public register.

• Information supplied directly through forms and secure access
• Material supplied by an authorised entrant or representative
• Public sources cited in an entry or used to verify a material statement
• Technical records needed to protect the service and diagnose errors

Purposes and legal bases

Data is used to administer entries, assess submitted work, communicate about a dossier, prevent misuse, maintain decisions and certificates, publish authorised award records and respond to rights or correction requests. Processing is based, as applicable, on steps requested by the entrant, performance of programme terms, legitimate interests in operating an accountable awards programme, compliance with legal duties, and consent where a separate optional use requires it.

Promotional communication is not inferred from an entry. Newsletter subscription and other optional communications require a separate choice.

Review, recipients and transfers

Relevant dossier material may be made available to assigned reviewers and authorised quality-control personnel. Infrastructure, hosting, security and form protection providers process limited data under their respective service terms. Personal data is not sold.

Where a provider or reviewer is located outside the country of the individual, appropriate contractual, organisational or legal safeguards are applied according to the data and destination involved.

Retention and public records

Unsuccessful or withdrawn working files are retained only for the period needed to complete administration, resolve a dispute, meet legal duties and maintain an auditable decision record, then deleted or de-identified. Account and security records follow their operational retention rules.

Award records approved for publication form part of the public register. A correction, restriction or revocation is recorded without silently rewriting the decision history. Evidence files are never published merely because an award record is public.

Your choices and rights

Subject to applicable law, a person may request access, correction, deletion, restriction, portability or objection, and may withdraw a consent-based choice. Identity or authority may be checked before a request is completed.

• Use the contact page and select Privacy or Data Rights
• Identify the record, entry or correspondence concerned
• Do not send identity documents unless the programme office specifically requests them through a secure route
• A complaint may also be made to the competent data-protection authority

Security and language recommendation

Access controls, secure transport, restricted evidence storage, anti-abuse checks and audit records are used in proportion to the service. No internet service can guarantee absolute security.

On the English site, an approximate country code supplied by Cloudflare may be used with browser language to suggest an available local-language edition. The site does not automatically change language and does not store the visitor’s IP address in the application for this purpose.