PRIVACY NOTICE
Last updated: September 8, 2020
Thank you for visiting our community at NINA LIPA INC, operating as Beauty Sale PL (” Beauty Sale PL “,” We “,” us “,” our “). We are committed to protecting your personal data and your right to privacy. If you have any questions or concerns regarding this privacy notice or our practices in relation to your personal data, please contact us at sklep@beautysale.pl.
When you visit our website https://www.beautysale.pl (” Site “), use our mobile application, use our Facebook application as applicable (” Application “) and more generally, use our services ( ” Services “, which includes the Site and the Application), we appreciate the fact that you entrust us with your personal data. We take your privacy very seriously. In this privacy notice, we try to explain to you as clearly as possible what information we collect, how we use it and what rights you have in relation to it. We hope you will take the time to read it carefully as this is important. If there are any terms in this privacy notice that you do not agree with, please stop using our Services immediately.
This privacy policy applies to all information collected through our Services (which includes our Site and Application as described above ) as well as any related services, sales, marketing or events.
Please read this privacy notice carefully as it will help you understand what we do with the information we collect.
CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In short: We collect the personal information you provide to us.
We collect personal data that you voluntarily provide to us by registering with Services, expressing an interest in obtaining information about us or our products and Services when you participate in activities on the Services (e.g. by posting messages on our online forums or participating in contests, contests or gifts) or otherwise when you contact us.
The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include:
Personal information provided by you. We collect names; telephone numbers; e-mail addresses; postal addresses; username; Passwords; billing addresses; debit / credit card numbers; and other similar information.
Payment data. When you make a purchase, we may collect data necessary to process your payment, such as a payment instrument number (eg credit card number) and a security code associated with the payment instrument. All payment details are stored by Paypal and Stripe. Links to their privacy notices can be found here: https://www.paypal.com/us/webapps/mpp/ua/privacy-full and https://stripe.com/privacy .
Social media login details. We may provide you with the option to register with us using your existing social media account details such as Facebook, Twitter or other social media account. If you choose to register in this manner, we will collect the Information described in the ” HOW WE SERVE YOUR COMMUNITY LOGINS ” section below.
All personal information you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.
Information Collected Automatically
In brief: Certain information – such as internet protocol (IP) address and / or browser and device characteristics – is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (such as your name or contact details), but may include device and usage information such as IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is needed primarily to maintain the security and operation of our Services and for our internal analysis and reporting purposes.
Like many companies, we also collect information using cookies and similar technologies.
The information we collect includes:
- Log and Usage Data. Log and Usage Data is information about services, diagnostics, usage, and performance that our servers automatically collect when you access or use our Services and that we save in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings, and information about your activity on the Services (such as date / time stamps related to your use, pages and files viewed, searches and other actions you take, such as the functions used), information about device events (such as system activity, error reports (sometimes referred to as “crash dumps”), and hardware settings.
- Device data. We collect device data, such as information about your computer, phone, tablet or other device that you use to access the Services. Depending on the device used, this data may include information such as IP address (or proxy server), device and application identification numbers, location, browser type, hardware model Internet service provider and / or mobile operator, operating system and system configuration. .
- Location data. We collect location data, such as information about the location of your device, which may be accurate or inaccurate. The amount of information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information by denying access to the information or by turning off the location setting on your device. However, please note that if you choose to opt-out, you may not be able to use certain aspects of the Services.
Information collected through our application
In short: when you use our app, we collect information about your geographic location, mobile device, push notifications and Facebook permissions.
If you use our application, we also collect the following information:
- Geographic Location Information. We may request access or permission to access and track location-based information from your mobile device, either continuously or while using our application, to provide certain location-based services. If you want to change our access or permissions, you can do so in your device’s settings.
- Mobile device data. We automatically collect device information (such as mobile device ID, model and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and / or mobile operator , and an internet protocol (IP) address (or proxy server). If you use our application, we may also collect information about the telephone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device used, the unique identifier of the mobile device, and information about the features of our application that you have accessed.
- Push notifications. We may ask for push notifications to be sent to you regarding your account or certain features of the Application. If you want to opt out of receiving these kinds of messages, you can turn them off in your device’s settings.
- Facebook permissions. By default, we access basic information about your Facebook account, including your name, email address, gender, birthday, current city and profile photo URL, as well as other information that you choose to make public. We may also request access to other permissions related to your account, such as friends, check-ins and likes, and you can grant or deny access to each individual permission. For more information on Facebook’s permissions, see Facebook ‘s Permissions Reference.
This information is primarily needed to keep our application secure and operational, for troubleshooting, and for our internal analysis and reporting purposes.
In brief: We only share information with your consent to comply with the law, provide services, protect your rights, or fulfill business obligations.
We may process or share your data that we have, based on the following legal basis:
- Consent: We may process your data if you have expressly consented to the use of your personal data for a specific purpose.
- Legitimate interests : We may process your data when it is necessary to pursue our legitimate business interests.
- Performance of the contract: if we have entered into a contract with you, we may process your personal data in order to fulfill the terms of our contract.
- Legal Obligations: We may disclose your information if we are legally required to do so to comply with applicable law, governmental requests, legal process, court order or legal process, for example in response to a court order or subpoena (including in response to public authorities to meet national security or law enforcement requirements).
- Important interests: We may disclose your information if we believe it is necessary to investigate, prevent or take action in relation to potential violations of our policies, suspected fraud, situations involving a potential threat to the security of any person and illegal activity, or as evidence in litigation, in which we are involved.
More specifically, we may need to process your data or share your personal data in the following situations:
- Business transfers. We may share or transfer your information in connection with or in the process of negotiating any merger, sale of company assets, financing, or the acquisition of all or part of our business with another company.
In short: we may use cookies and other tracking technologies to collect and store information.
We may use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information. Detailed information on how we use such technologies and how you can decline certain cookies can be found in our Cookie Notice.
In short: if you choose to register or log in to our services using your social media account, we may have access to certain information about you.
Our Services offers you the ability to register and login using your third-party social media account details (like your Facebook or Twitter logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile Information we receive may vary depending on the social media provider, but will often include your name, email address, friends list, profile picture as well as other information you choose to make public on such social media platform. If you login using Facebook, we may also request access to other permissions related to your account, such as your friends, check-ins, and likes, and you may choose to grant or deny us access to each individual permission.
We will only use the information we receive for the purposes described in this privacy notice or as otherwise explained in the relevant Services. Please note that we do not control and are not responsible for any other uses of your personal information by the third party social media provider. We recommend that you read their privacy policies to understand how they collect, use and share your personal information and how you can set your privacy preferences on their sites and apps.
5. HOW LONG DO WE KEEP YOUR INFORMATION FOR?
In short: we keep your information for as long as necessary to fulfill the purposes set out in this privacy notice, unless otherwise required by law.
We will only retain your personal information for as long as necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (eg, tax, accounting or other legal requirements). Nothing in this notice will require us to keep your personal data longer than the period for which users have an account with us.
When we do not have a continuing legitimate business need to process your personal data, we will delete or anonymize such information, or, if this is not possible (for example, because your personal data has been stored in backup archives), we will securely store and isolate your personal data from further processing until their removal is possible.
6. HOW DO WE SECURE YOUR INFORMATION?
In short: Our goal is to protect your personal data through a system of organizational and technical security measures.
We have implemented appropriate technical and organizational security measures to protect any personal data we process. However, despite our security measures and efforts to secure your information, no electronic transmission over the Internet or information storage technology can guarantee 100% security, therefore we cannot promise or guarantee that hackers, cyber criminals or other unauthorized third parties will not be able to defeat our safeguards and improperly collect, access, steal or modify information. While we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. The Services should only be accessed in a safe environment.
7. DO WE COLLECT INFORMATION FROM MINORS?
In short: We do not knowingly collect or sell data from children under the age of 18.
We do not knowingly solicit or sell information from children under the age of 18. By using the Services, you represent that you are at least 18 years of age or are the parent or guardian of such minor, and consent to the minor’s use of the Services. If we learn that Personal Data has been collected from users under the age of 18, we will deactivate the account and take reasonable steps to promptly delete such data from our records. If you become aware of any data we may have collected from children under 18, please contact us at nina@beautysale.pl.
8. WHAT ARE YOUR PRIVACY RIGHTS?
In short: v Some regions, such as in the European Economic Area, have rights that give you greater access to and control of your personal data. You can review, change or close your account at any time.
In some regions (such as the European Economic Area), you have specific rights under applicable data protection laws. This may include the law (i) to request access and obtain a copy of your personal data, (ii) request for rectification or deletion; (iii) restriction of the processing of personal data; and (iv) where applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal data. To make such a request, please use the contact details provided below. We will consider and respond to any request in accordance with applicable data protection laws.
If we are relying on your consent to process your personal data, you have the right to withdraw your consent at any time. However, it should be remembered that this will not affect the lawfulness of processing before its withdrawal, or the processing of your personal data based on legal grounds other than consent.
If you are a resident of the European Economic Area and you believe that we are processing your personal data unlawfully, you also have the right to lodge a complaint with your local data protection supervisory authority. Their contact details can be found here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm .
If you are a Swiss resident, the contact details of the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html .
If you have questions or comments regarding your privacy rights, you can send us an e-mail to admin@beautysale.pl.
account information
If at any time you want to review or change your account information or close your account, you can:
- Log in to your account settings and update your user account.
- Please contact us using the contact information provided.
Upon your request to close your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our Terms of Use, and / or comply with applicable legal requirements.
Cookies and Similar Technologies: Most web browsers are set to accept cookies by default. If you prefer, you can usually set your browser to delete cookies and to decline cookies. If you choose to delete cookies or decline cookies, some features or services of our Services may be affected. To opt out of interest-based advertising on our Services, please visit http://www.aboutads.info/choices/ .
Opt-Out of Email Marketing: You can unsubscribe from our email marketing list at any time by clicking on the unsubscribe link in the emails we send you or by contacting us using the details provided below. You will then be removed from the marketing email list – however we may still communicate with you, for example to send you service-related emails that are necessary to administer and use your account, to respond to service requests or for other non-marketing purposes. To opt-out otherwise you can:
- Access your account settings and update your preferences.
- Please contact us using the contact information provided.
9. CONTROL OF NON TRACKING FUNCTION
Most web browsers and some mobile operating systems and mobile applications contain a Do-Not-Track (“DNT”) feature or setting that can be activated to signal your privacy preferences so as not to monitor and collect data about your online browsing activities. At this stage, no uniform technological standard for the recognition and implementation of DNT signals has been finalized. As such, we currently do not respond to DNT browser signals or any other mechanism that automatically lets you know you do not wish to be tracked online. If an online tracking standard is adopted that we must adhere to in the future, we will inform you of this practice in an updated version of this privacy notice.
10. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In short: yes, if you are a California resident you have certain rights to access your personal information.
Section 1798.83 of the California Civil Code, also known as the “Shine The Light” law, allows our California resident users to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) disclosed to third parties for purposes of direct marketing and the names and addresses of all third parties with whom we shared personal data in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please send us your request in writing using the contact details provided below.
If you are under the age of 18, live in California, and have a registered account with the Service, you have the right to request the deletion of unsolicited data that you publicly post on the Services. To request deletion of such data, please contact us using the contact details provided below and include the email address associated with your account and a statement that you live in California. We will make sure that your data is not publicly visible on the Services, but please note that data may not be completely or comprehensively erased from all our systems (eg backups, etc.).
CCPA Privacy Notice
The California Code of Regulations defines a “resident” as:
(1) any person residing in the State of California for any purpose other than temporary or transitional; and
(2) any California resident who is outside of California on a temporary or transitional basis
All other people are referred to as “non-residents”.
If this definition of “resident” applies to you, we must comply with certain rights and obligations regarding your personal information.
What categories of personal data do we collect?
In the last twelve (12) months, we have collected the following categories of Personal Data:
| Category | Examples | harvested |
|
A. Identifiers
|
Contact information such as real name, alias, postal address, telephone or mobile number, unique personal identifier, internet identifier, internet protocol address, email address, and account name
|
NOT
|
|
B. Categories of personal information listed in the California Customer Records charter
|
Name, contact details, education, employment, employment history and financial information
|
YES
|
|
C. Protected Classifications under California or Federal Law
|
Gender and date of birth
|
NOT
|
|
D. Commercial Information
|
Transaction information, purchase history, financial data, and payment information
|
NOT
|
|
E. Biometric information
|
Fingerprints and voice prints
|
NOT
|
|
F. Internet or other similar network activity
|
Browsing history, search history, online behavior, interest data and interactions with our and other websites, applications, systems and advertising
|
NOT
|
|
G. Geolocation data
|
Device location
|
NOT
|
|
H. Information by sound, electronic, visual, thermal, olfactory or similar
|
Audio, video or conversation images and recordings created in connection with our business activities
|
NOT
|
|
I. Professional or employment related information
|
Business contact details for the provision of our services at the business level, position as well as your employment history and professional qualifications if you are applying for a job with us
|
NOT
|
|
J. Educational information
|
Student records and directory information
|
NOT
|
|
K. Conclusions drawn from other personal data
|
Inference to be drawn from any collected personal data mentioned above to create a profile or summarize, for example, about the preferences and characteristics of the person
|
NOT
|
We may also collect other personal data outside of these categories where you contact us in person, online, by phone or by mail in the context of:
- Receiving support through our customer service channels;
- Participation in customer surveys or contests; and
- Facilitate the provision of our Services and responding to your inquiries.
How do we use and share your personal data?
For more information on our data collection and sharing practices, please see this privacy notice.
You can contact us by email at admin@beautysale.pl, by visiting https://www.beautysale.pl/contact , or by referring to the contact details at the bottom of this document.
If you are using an authorized agent to exercise your right of opt-out, we may deny your request if the authorized agent fails to provide proof that it has been validly authorized to act on your behalf.
Will your information be shared with anyone else?
We may disclose your personal information to our service providers on the basis of a written agreement between us and each service provider. Each service provider is a for-profit entity that processes information on our behalf.
We may use your personal information for our own business purposes, such as conducting internal technological development research and demonstration. It does not mean ‘selling’ your personal information.
NINA LIPA INC has not disclosed or sold any personal information to third parties for business or commercial purposes in the last 12 months. NINA LIPA INC will not sell the personal data of website visitors, users and other consumers in the future.
Your rights in relation to your personal data
The right to request deletion of data – request for deletion
You can request the deletion of your personal data. If you ask us to delete your personal data, we will honor your request and we will delete your personal data, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his right to freedom of expression, our compliance requirements under any legal obligation or processing that may be required to protect against unlawful activities.
Right to information – request for information
Depending on the circumstances, you have the right to know:
- whether we collect and use your personal data;
- the categories of personal data we collect;
- the purposes for which the collected personal data is used;
- whether we sell your personal data to third parties;
- the categories of personal data that we have sold or disclosed for business purposes;
- categories of third parties to whom personal data has been sold or disclosed for business purposes; and
- the business or commercial purpose of collecting or selling personal data.
Under applicable law, we are not required to provide or remove de-identified consumer information in response to a consumer’s request, or to re-identify personal data to verify the consumer’s request.
The right to non-discrimination in the exercise of consumer privacy rights
We will not discriminate against you if you exercise your privacy rights.
Verification process
Upon receipt of your request, we will need to verify your identity to determine that you are the same person that we have information about in our system. These verification efforts require that we ask you for information so that we can match it with information that you have previously provided to us. For example, depending on the type of request submitted, we may ask you to provide certain information so that we can match the information you provide with information we already have on file, or we may contact you through a communication method (e.g. or e-mail). -mail) that you provided to us earlier. We may also use other verification methods if circumstances so require.
We will only use the personal information provided in the application for the purpose of verifying your identity or authorizing you to submit the application. As far as possible, we will avoid requesting additional information from you for verification. However, if we are unable to verify your identity based on information already stored by us, we may ask you for additional information to verify your identity and for security or fraud prevention purposes. We will delete such additional information as soon as we complete the verification.
Other Privacy Rights
- you can object to the processing of your personal data
- you can request the rectification of your personal data if it is incorrect or no longer relevant, or request the restriction of data processing
- you may appoint an authorized agent to submit a CCPA application on your behalf. We may deny a request from an authorized representative who fails to provide proof that he or she has been validly authorized to act on your behalf under the CCPA.
- you can opt-out of the future sale of your personal data to third parties. Upon receipt of your opt-out request, we will act upon it as soon as practicable but no later than 15 days from the date you submit your request.
To exercise these rights, you can contact us by e-mail at admin@beautysale.pl by visiting https://www.beautysale.pl/contact , or by referring to the contact details at the bottom of this document. If you have a complaint about the way we handle your information, we would like to know you.
11. DO WE UPDATE THIS ANNOUNCEMENT?
In short: yes, we will update this notice as necessary to comply with relevant laws.
We may update this privacy notice from time to time. The updated version will be marked with the updated “Revised” date and the updated version will take effect as soon as it is available. If we make material changes to this privacy notice, we may notify you by prominently posting a notice of such changes or by sending a direct notification. We encourage you to review this privacy notice frequently for information on how we protect your information.
12. HOW CAN YOU CONTACT US ABOUT THIS INFORMATION?
If you have any questions or comments regarding this notification, you can contact our Data Protection Officer (DPO), Nina Lipa, at the e-mail address sklep@beautysale.pl, by phone at 9177190118 or by post to the following address:
BEAUTYSALEPL
99 park avenue
New York, NY 10014
United States
If you have additional questions or comments, you can also contact us by mail at the following company address:
BEAUTYSALEPL
99 park avenue
New York, NY 10014
United States
Phone: 9177190118
13. HOW CAN YOU VIEW, UPDATE OR DELETE THE DATA WE COLLECT FROM YOU?
In accordance with the laws in force in your country, you may have the right to request access to, amend or delete the personal information we collect from you in certain circumstances. To request a review, update or deletion of your personal data, visit: https://www.beautysale.pl . We will respond to your inquiry within 30 days.
