CHARTER FOR THE PROTECTION OF PERSONAL DATA
In accordance with European Regulation 2016/679 of 27 April 2016
(known as the “General Data Protection Regulation” or GDPR)
This personal data protection charter (hereinafter: the "Charter") describes the commitment of Lab Estetik Srl hereinafter referred to as The Company - 13 rue Champ Lionne 7600 Péruwelz - VAT: BE0725490219 edited by Leone Laetitia as data controller with regard to the respect of privacy and the protection of the personal data of its users. This Charter has been written to allow you to become aware of the practices and conditions under which the Company collects, uses and stores your personal data (hereinafter: the "Data").
You will find a description of the various Data that we may collect and process or that you may transmit to us when you access and/or use the browlash-store.com site (the "Site") on which our products are sold. The term "Site" refers only to the browlash-store.com site.
Given the constant evolution of laws and regulations on technology and personal data protection, it is likely that this Charter will be updated.
If any of the clauses of this Charter were to be declared null and void or contrary to the regulations, it will be deemed unwritten but will not result in the nullity of the other clauses of this Charter.
This Charter applies to the Data collected:
- Via simple navigation on the Site
- Via emails exchanged between the Company and you or any other email tool
- When you create a user account on the Site
- When you place an order on the Site
- When you subscribe to the Site Newsletter (the “Newsletter”)
It does not apply to information collected by any third parties or through sites managed by them, including through applications or content (including advertisements) redirecting the user to the Site. We thank you for carefully reading the Charter concerning the processing of your Data and we inform you that browsing our Site necessarily entails the acceptance of this Charter. If the latter does not obtain your membership, we invite you to leave our Site. It is your responsibility to check that the Data communicated to the Company are compliant. If necessary, you have the option to correct and update them from your "My Account" space
1. WHAT DATA DOES THE COMPANY COLLECT?
Depending on the nature and purpose of your interaction with the Company (creation of a user account, subscription to the Newsletter, information from contact forms, as well as during any telephone exchanges) we may collect the following Data:
- Your email address will necessarily be requested if you wish to create a user account, communicate with us via the contact forms and/or receive our Newsletter
- Data relating to your identity such as your surname, first names, email address, postal addresses and telephone numbers may be requested from you
- Navigation Data: this is Data relating to the way you use the Site including: IP address, browser used, browsing time, search history, operating system used, language and pages viewed
- Data about your visits to the Site, including traffic data, log files and other communication data or resources that you use when accessing the Site
- Data relating to orders: your postal address is necessary for the preparation of invoices. Likewise, your bank details, PayPal, or other financial partner will have to be filled in to proceed with the payment of your order
- Data relating to the use of social networks when you use their features.
2. HOW IS YOUR DATA COLLECTED?
Data may be collected in different ways on the Site.
The Data may be collected directly when you transfer it to us through the contact and user account creation forms, subscription to the Newsletter available on the Site and/or communicated when you contact us by phone. When you contact us using these different means, a copy of your exchanges with The Company, including email addresses, may be made and archived.
The Company also indirectly collects certain data by means of cookies/tracers. We invite you to read our Cookie Policy, intended to help you better understand these technologies and the use we make of them on the Site and as part of our services, applications and tools.
3. WHY IS YOUR DATA COLLECTED?
If you are a simple user, we collect your Data to:
- Send you our newsletter and/or personalized commercial offers if you have consented
- Manage orders and execute the contract
- Ensure the security and traceability of site purchases
- Send you information about your account (including purchase invoices, order history)
- Manage your requests sent via the contact page
- Allow you to leave a review of the products and/or the Site
- Notify you of changes to the Site or our offer of products and services
- Respect our rights and obligations stipulated in the contracts concluded with the users as well as for any other legal purpose.
We may also use cookies or trackers:
- To secure your navigation and improve your user experience, in particular by recognizing the username and password you have already provided so that you do not have to enter them on each page of the Site where they are required. The refusal of these will prevent any order on the Site (Identification impossible).
- analyze the traffic and data on the Site in order to measure the number of users of the Site, to make it easier to use and to ensure its ability to respond quickly to your requests.
Refusal to correctly fill in the form (s) of the Site may block access to certain pages, in particular those concerning the ordering of products or services.
4. WHO PROCESSES YOUR DATA?
Your Data is processed by the staff and employees of The Company in charge of:
- Site management (Orders and shipments)
- Support management, to answer all your questions
- Invoice management.
In addition, as part of our activity, and for processing purposes, your Data may be communicated to subcontractors, service providers or other third parties, and in particular:
- PayPal
- Credit card, Visa, Bancontact, Maestro by Mollie
- Mailjet emailing service
- The carrier you select (example Bpost, Mondial relay)
- Accounting services
- Tax services
- Google, Facebook
- Alizé Web for the maintenance and technical development of the site
The host (see contact details below)
Each of its actors respecting a confidentiality commitment concerning the use and processing of personal data.
For the management of the payment and in order to facilitate the experience of its users, the Company offers the following means of payment to make purchases on the Site:
- Online payment by Credit Card, Visa, Bancontact, Maestro by Mollie
- Online payment by PayPal
- Payment by bank transfer
- In-store payment
The Company has no access to your credentials and credit card numbers. All transactions are secured using SSL encryption, guaranteeing both the identity of the payment provider and the confidentiality of the data.
For the sending of our Newsletters, our e-mailing campaigns are managed through the services of Mailjet SAS, 13-13 bis, rue de l 'Aubrac – 75012 Paris, France, RCS Paris 524 536 992 00059.
All of the aforementioned subcontractors, service providers, Partners or other third parties are bound by contractual obligations to respect the confidentiality and protection of the Data and to process it only for the purposes for which we transmit it to them.
Your Data may be transferred to any purchaser or other successor in the event of a merger, assignment, restructuring, reorganization, dissolution or other sale or transfer of some or all of the assets of the Company due to uncertainties or bankruptcy, liquidation or other processes in which the Data of the Company's users are among the transferred assets.
Finally, we may also disclose your Data:
- to comply with any mandate required by applicable laws, including governmental and regulatory requests
- if we believe that disclosure is necessary or required for the protection of the rights, property or safety of The Company, its customers or other stakeholders.
Such eventual disclosure includes the exchange of information with other companies and organizations for the purpose of protecting against fraud and counterfeiting.
The Site may contain links to different social networking sites and platforms managed on third-party servers, by persons or organizations over which the Company has no control. Therefore, we can in no way be held responsible for the way in which your Data will be stored or used on the servers of these third parties. We advise you to read the applicable personal data protection charter of each third-party website you access via the Site in order to assess how your Data will be used.
5. HOW LONG IS YOUR DATA KEPT?
The Company retains your Data only for as long as necessary for the purposes set out in Article 3. This retention period is not the same according to the Data in question, the nature and purpose of the collection being likely to vary this period. Similarly, certain legal obligations impose a specific retention period.
When you are subscribed to the Newsletter, we keep your email address until you unsubscribe.
When you contact The Company through the contact form or communicate with us by phone, your data may be retained:
- up to three (3) years from the last contact if you do not have a customer account or an order placed on the Site.
- up to ten (10) years (Legal obligation) from the last order placed on the Site, if this information concerns this order.
- In all other cases, the retention period of this exchanged Data may not exceed three (3) years.
With regard to your user account, all of your billing data is kept for ten (10) years from the date of purchase, even if you have made a request to deactivate your user account.
If you make a request to delete Personal Data, your Site user account will be deactivated and anonymized, and then completely deleted at the end of the aforementioned periods from the day you made the request. Finally, with regard to the Data collected by means of cookies or tracers, they will be kept for up to six (6) months for cookies or tracers measuring the audience (except those of Google analytics which sets the duration at fourteen (14) months) and up to thirteen (13) months for the others. Beyond the aforementioned retention periods, your Data will be anonymized to be kept for exclusively statistical purposes.
6. HOW IS YOUR DATA PROTECTED?
Your Data is kept on a secure server and protected by a firewall and antivirus. We have put in place technical and organisational measures to ensure the security and confidentiality of your Data against accidental loss and against unauthorised access, use, modification and disclosure. Given the peculiarities inherent in the Internet, however, it is impossible for us to guarantee the optimal security of information exchanges on this network. We strive to protect your Data, but we cannot guarantee the absolute security of the information transmitted to the Site. You agree that you transmit your Data at your own risk. We cannot be held responsible for non-compliance with the privacy settings or security measures in place on the Site. As such, you agree that the security of your information is also your responsibility. For example, it is your responsibility to keep the password to your user account secret. Do not disclose it to third parties under any circumstances. Likewise, be careful when disclosing information in public areas of the Site, which may be viewed by any user of the Site.
7. WHAT ARE YOUR RIGHTS?
You can choose how the Data you transmit to us is used:
- You can browse the Site without providing any Data. If necessary, you will not be able to use certain features of the Site and in particular, make purchases (if you are a simple user) and/or downloads on the Site.
- You can refuse to provide your bank or PayPal details and/or postal addresses. In this case, you will not be able to make a purchase on the Site
- You can decide to no longer receive the Newsletter as well as our personalized offers: all you have to do is log in to your Site user account or click on the link in the email sent to you.
In any case, you have the option to access your user account at any time to view or update your Data and unsubscribe from our Newsletter if you were registered. In accordance with the provisions of the applicable regulations on the protection of personal data, in particular European Regulation 2016/679 on Data Protection (the "GDPR"), you have a right of access and a right of rectification on your Data.
In addition, subject to the conditions provided by the said regulations for the exercise of these rights, you benefit from:
- A right to erasure of your Data (excluding accounting data whose retention for 10 years is required by law)
- A right to limit the processing of your Data
- A right to object to the processing of your Data on legitimate grounds, in accordance with Article 21 of the GDPR
- A right to portability on the Data you have provided (for automated processing based on consent or the performance of a contract)
- The right to withdraw consent, when it has been requested. Where the processing of your Data is carried out on the basis of your consent, you may withdraw your consent at any time.
However, you acknowledge that the processing carried out before the revocation of your consent remains perfectly valid. You also have an unjustified right to object to the Company performing an analysis of your Data to share it for marketing purposes.
However, in accordance with Article 12.6 of the GDPR, for the exercise of these rights, the Company, as the controller, reserves the right to ask you to justify your identity. We inform you that the data to justify your identity will be deleted once we have responded to your request. You can exercise these rights by sending an email in French to info@indigonails.be or to the following address:
13 rue Champ Lionne 7600 Péruwelz - Belgium
We have a period of one month to respond to any request relating to the exercise of your rights. This period may be extended by two months, due to the complexity or the too large number of requests.
8. STORAGE OF DATA COLLECTED BY the Company
The Data collected as part of the use of the Site are stored exclusively on a server located in Europe (France), hosted by the company Hiwit.net, service published by Aznet SARL - RCS 444 818 215 - BP 26197 72006 Le Mans cedex1.
Cookie settings
If you're having trouble logging in, try clearing the cache and deleting cookies from your web browser. Cookies are small files saved on your computer that store specific information (such as your passwords and site-specific preferences, your orders).
How to clear cache and delete cookies from your web browser help here
Set up your browser
You have the option to configure your browser to disable the deposit of cookies. Depending on your browser, the configuration is different. It is possible to change your consent to the deposit of cookies. To help you with this setup, you can follow the following links, depending on your browser:
- - Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647
- - Firefox: https://support.mozilla.org/fr/kb/Activer%20and%20d%C3%A9sactivate%20the%20cookies
- - Microsoft Internet Explorer: https://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
- - Safari: https://support.apple.com/kb/PH21411?viewlocale=fr_FR&locale=fr_FR
- - iPhone / iPad Safari: https://support.apple.com/fr-fr/HT201265
- - Opera: https://help.opera.com/Windows/10.20/en/cookies.html
Some browsers also offer a “Do Not Track” option (which can be translated as “do not track me”). There is an extension to set Google analytics cookies (audience cookie): https://tools.google.com/dlpage/gaoptout?hl=fr