Your cart
There are no more items in your cart
Hello!
If you have come here, you must be really valuing your privacy. We are well aware of that, which is why we prepared this document for you. It provides you with the principles of personal data processing and the use of cookies in relation to your use of https://goldenbeauty-lashes.com website.
First, let us give you some formal information: the administrator of the website is Weronika Szulc, 102 Caithness Road Mitcham CR4 2EW, London United Kingdom, e-mail: info@goldenbeauty-lashes.com
If you have any doubts regarding this Privacy Policy, you can contact us anytime by sending an e-mail to: info@goldenbeauty-lashes.com
In short: key information
Not only do we care about your privacy but we value your time, too! Therefore, we prepared a brief version of the most important principles related to privacy protection.
- If you create your user account through our website, place an order, subscribe to our newsletter, file a complaint, withdraw from an agreement or simply contact us, you provide us with your personal data and we assure you that your data stay confidential, secure and will not be made available to any third parties without your express consent.
- We contract personal data processing only to tried and trusted entities that offer personal data processing services.
- We use Google Analytics analytic tools, which collect information regarding your visits to our website such as the pages you viewed, the time you spent on our website and how you navigated between specific pages. In order to do that, we use cookies by Google LLC related to the Google Analytics service.
- We embed YouTube videos on our website. When you play such videos, we use cookies by Google LLC related to the YouTube service.
- We provide you with the possibility to use social media functionalities such as sharing content on social media and subscribing to our social media profiles. The use of this feature entails the use of cookies from administrators of social media such as Facebook, Instagram, YouTube, Google+
- Our website uses the Disqus comment system. This is related to the use of cookies from Disqus.
- We use our own cookies in order to ensure proper website operation.
If the above information is still insufficient, we have a bunch of details for you below.
Personal data
The Controller of your personal data in the meaning of personal data protection laws is: Weronika Szulc, 102 Caithness Road Mitcham CR4 2EW, London United Kingdom, e-mail: info@goldenbeauty-lashes.com
The purposes, legal bases and personal data processing duration were indicated separately for every data processing purpose (see descriptions of specific personal data processing purposes below).
Your rights. The GDPR provides you with the following potential rights related to the processing of your personal data:
1) Right of access to personal data,
2) Right of personal data rectification,
3) Right to erasure of personal data,
4) Right to restrict personal data processing,
5) Right to object against personal data processing,
6) Right to data portability,
7) Right to lodge a complaint with a supervisory authority,
8) Right to withdraw consent for personal data processing if you consented to it before.
The principles related to exercising the above rights were provided for in detail in Articles 16–21 of the GDPR. Please feel free to read the said provisions. We feel it is important to tell you that the above rights are not absolute and will not be available for all operations related to your personal data processing. For your convenience, we did our best to let you know about your rights related to specific personal data processing operations that we described below.
There is, however, one right that you can always exercise: if you think we violated personal data protection laws when processing your personal data, you may file a complaint with a supervisory body (President of the Office for Personal Data Protection).
You can always request us to tell you which information we hold about you and for which purposes we process your information. All you need to do is send an e-mail to: info@goldenbeauty-lashes.com. However, we made every effort to provide you with comprehensive information in this Privacy Policy.You can also write to the above e-mail address if you have any questions regarding the processing of your personal data.
Security. We guarantee that all your personal data that you provide to us are kept confidential.We undertake all personal data security and protection measures required by personal data protection laws. Personal data are collected with due diligence and adequately protected against access by unauthorised persons.
List of contractors. We contract personal data processing to the following entities:
- Sendin Blue, Francja– in order to be able to use the mailing system in which your data are processed, provided that you subscribed to our newsletter,
- Alograf, Poland – in order to keep personal data on a server and use IT support services, which may entail access to your personal data by the service provider.
All entities that we contract to process personal data guarantee they apply adequate personal data protection and security measures as required by the law.
Processing purposes and operations
User’s account. When you create your user’s account, you are required to provide your e-mail address and set up your account password.Although provision of the data is voluntary, it is necessary to create an account.When you edit your profile, you may provide more detailed information about you, i.e. your name, surname, invoicing address and mailing address. Provision of the above data is absolutely voluntary.You can have an account without providing such detailed information. In such a case, you will need to enter the data manually when you place an order with us.
The data you provide on your user’s account shall be processed solely to keep your account and enable you to use it. The data provided on your user’s account is only aimed at facilitating order placement thanks to populating order form fields in an automated manner.
The legal basis for processing your personal data on your user’s account is the performance of the account agreement that you have concluded in accordance with the store’s Regulations – Article 6(1)(b) of the GDPR.
Data collected on your user’s account are processed by the Prestashop system and are kept on a server hosted by Nazwa.pl.
Your data will be processed on your account as long as you keep your user’s account. When you delete your account, your data will be removed from the database, except for your ordering history.
You can access your personal data on your user’s account anytime by signing in to your user’s account. When you sign in to your account, you can modify or delete your data anytime, except for your ordering history. You can also decide to delete your account anytime.
You also have the right to transfer your data collected on your user’s account, as referred to in Article 20 of the GDPR.
Orders. When placing an order, you must provide data necessary to deliver the order, i.e. your name, surname, invoicing address, delivery address, e-mail address, phone number.Although provision of the data is voluntary, it is necessary to deliver your order.
The data you provide to us in relation to your order shall processed to deliver your order (Article 6(1)(b) of the GDPR), issue an invoice (Article 6(1)(c) of the GDPR), to account for the invoice in our accounting documentation (Article 6(1)(c) of the GDPR) as well as for archiving and statistical purposes (Article 6(1)(f) of the GDPR).
Data provided in your order placed through the store are processed by the Prestashop system and are kept on a server hosted by Nazwa.pl.
If you already have a user’s account, your order will be included in your account ordering history.
Every order is documented with an invoice. Invoices are issued using the Prestashop system.
We also record orders in our internal database for archiving and statistical purposes.
Ordering data shall be processed for a time necessary to deliver your order and then until the expiry of the claim limitation period under the agreement concluded. In addition, after the expiry of such period, we may still process the data for statistical purposes. You should also remember that we are legally obliged to keep invoices with your personal data for 5 years from the end of the financial year in which the tax obligation arose.
In the case of ordering data, you may not rectify the data after the order is delivered. You may neither object to data processing or demand erasure of your data until the limitation period for claims under the agreement concluded expires. Similarly, you may not object to data processing or demand erasure of your data included in invoices. However, when the limitation period for claims under the agreement concluded expires, you may object to our processing of your personal data for statistical purposes and demand erasure of your data from our database.
You also have the right to transfer your ordering data, as referred to in Article 20 of the GDPR.
Newsletter. If you want to subscribe to our newsletter, you need to provide us with your e-mail address using a newsletter subscription form.
The data you provide when subscribing to the newsletter will be used for sending you our newsletter and the legal basis for the processing of such data is your consent (Article 6(1)(a) of the GDPR) expressed when subscribing.
The data are processed in the SeninBlue.com mailing system and kept on a server hosted by SendinBlue.com
The data shall be processed until the newsletter is terminated unless you unsubscribe from it earlier, which shall result in the erasure of your data from the database.
You may rectify your data recorded in the newsletter database and demand their erasure by unsubscribing from the newsletter. You also have the right to transfer your data, as referred to in Article 20 of the GDPR.
Complaints and agreement withdrawa. When you file a complaint or withdraw from an agreement, you provide us with your personal data included in the content of your complaint or agreement withdrawal notice, which include your name, surname, residence address, phone number, e-mail number, bank account number.
The data you provide to us in relation to your complaint or agreement withdrawal shall be used to process the complaint or agreement withdrawal (Article 6(1)(c) of the GDPR).
The data shall be processed for a period necessary to process your complaint or agreement withdrawal. Tour complaints and agreement withdrawal notices may also be archived for statistical purposes.
In the case of data included in complaints and agreement withdrawal notices, you may not rectify the data. You may neither object to data processing or demand erasure of your data until the limitation period for claims under the agreement concluded expires. However, when the limitation period for claims under the agreement concluded expires, you may object to our processing of your personal data for statistical purposes and demand erasure of your data from our database.
E-mail contact. When contacting us by e-mail, including submission of a request using a contact form, you naturally provide us with your e-mail address as the address of the message sender. In addition, your message may include other personal data.
In such a case, your data shall be processed in order to contact you and the basis of such processing is Article 6(1)(a) of the GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for processing after termination of our contact is justified purpose of archiving correspondence for internal purposes (Article 6(1)(c) of the GDPR).
The content of the correspondence may be archived and we are unable to say precisely when it would be erased. You have the right to demand a history of your correspondence with us (if it was subject to archiving) and to demand that it is erased unless its archiving is justified by our overriding interest, e.g. protection against potential claims from you.
Cookies and other tracking technologies
Like almost all websites on the Internet, our website uses cookies to provide you with the best user experience.
Cookies are small pieces of text information stored on your terminal device (e.g. computer, tablet, smartphone), which may be read by our IT system.
Cookies may be classified into proprietary and third-party cookies.
These are explained in more detail below.
Cookie consent. On your first visit on the website, you will receive a message regarding the use of cookies with a request for consent to use cookies.Thanks to a special tool, you can manage cookies on the website. In addition, you can always change your cookie settings on your browser or delete all cookies. However, please bear in mind that disabling cookies may make it difficult to use the website and many other websites that use cookies.
Proprietary cookies. We use proprietary cookies in order to ensure proper website performance, in particular to ensure proper operation of store modules based on PrestaShop software.
Third-party cookies. Like most contemporary websites, our website uses features provided by third parties, which is related to the use of third-party cookies.The use of such cookies was described below.
Analytics and statistics. We use cookies to track website statistics such as the number of visitors, type of operating system and type of browser used to view our website, time spent on our website, pages visited, etc.For this purpose, we use Google Analytics, which entails the use of cookies from Google LLC.
Social media tools. We provide you with the possibility to use social media functionalities such as sharing content on social media and subscribing to our social media profiles.The use of this feature entails the use of cookies from administrators of social media such as Facebook, Instagram, YouTube.
The proper functioning of our newsletter is based on the use of cookies from sendinblue.com.
We embed YouTube videos on our website. When you play such videos, we use cookies by Google LLC related to the YouTube service.
Server logs
When you use the website, requests are sent to the server that hosts the website. Every request sent to the server is recorded in server logs.
Logs include, among others, your IP address, server date and time, your browser and operating system information. The logs are recorded and stored on the server.
Data recorded in server logs are not associated to any specific website users and are not used by us to identify you.
Server logs are solely as an aid to administer the website and their content is not shared with anyone except for persons authorised to administer the server.