DATA PROTECTION POLICY

LULU NAILS SRL, whose registered office is located at Rue du Chêne, No. 216, 4100 Seraing, and registered with the Crossroads Bank for Enterprises under the number (BE) 0741.380.797 (hereinafter: "LULU NAILS", "we"), is a company specializing in the sale of manicure and pedicure equipment to its customers (hereinafter: the "Client", "you") through its website www.lulunails.be (hereinafter: the "Website").

The data you provide us when you visit our Website, create an Account on our Website, and order Products from our Website primarily constitute personal data.

LULU NAILS is committed to respecting your privacy and your rights concerning the protection of personal data. LULU NAILS processes your data as a data controller, complying with applicable data protection regulations, including the European Regulation 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data ("GDPR") as well as the Belgian law of July 30, 2018, on the protection of natural persons concerning the processing of personal data.

This document exclusively governs how LULU NAILS provides its Clients with Products on its Website. It does not govern the services offered through the Website, such as booking appointments in salons, services performed in salons, and training sessions. These services are subject to the general terms and conditions of the partners offering them. The data processed for these purposes are handled by these partners in accordance with their own data protection policies, which we encourage you to review.

Why do we process your data?

A. Browsing our Website

You can visit our Website and learn about our services without providing us with any personal information.

However, the use of certain cookies is necessary to navigate our Website. For more information in this regard, we refer you to our cookie policy.

B. Communicating with You

Categories of Data – This includes your first name, last name, email address, phone number, and any other information you may provide during our interactions.

Purpose – We process this data when you contact us via the "Contact" section of our website to communicate with you and respond to your questions.

Legal Basis – Providing this data is necessary to answer your questions and provide the requested service. This data is therefore essential for the performance of our contract. Without it, we cannot fulfill our mission.

Data Recipients – Your data may also be processed by the host of our website or other IT service providers strictly for purposes necessary to comply with the instructions we provide them. They act as processors in this respect.

Retention Period – The data is kept for 1 year after our last contact.

C. Creating an Account on Our Website

Categories of Data – This may include:

Identification data (first name, last name, email address)
Login data (IP address, username, password, status, access rights, etc.)

Purpose of Processing – Creating an account on our platform allows you to purchase our Products and benefit from features linked to your Client Account (order history, saved delivery address, etc.).

Legal Basis – Creating a Client Account is mandatory to place an Order on our Website. Providing this data is necessary for the requested service. Therefore, this data is essential for the performance of our contract. Without it, we cannot fulfill our mission.

Data Recipients – Your data may also be processed by the host of our website or other IT service providers strictly for purposes necessary to comply with the instructions we provide them. They act as processors in this respect.

Retention Period – The data you provide us is kept for 10 years after the end of our contractual relationship for tax and accounting purposes, as well as for liability reasons.

In general, the data will be kept for a duration that complies with our legal and regulatory obligations.

D. Managing Our Contractual Relationship

Categories of Data - This may include your first name, last name, home or residence address, phone number, email address, organization, bank details, billing data, delivery address, etc.

Purpose – Your data is used to allow you to place an Order on our Website and purchase our Products. Your data is also used to send you the confirmation of your Order, process the billing of our Products, deliver these Products, or notify you of any changes to the Contract or Data Protection Policy (including new purposes).

Legal basis - The personal data processed is essential for the performance of the agreement and legal obligations. Without it, we cannot fulfill our mission.

Data recipients – The data is transmitted to the companies responsible for the delivery of the products.

It is also transmitted to tax and social administrations, our payroll service provider, and our accountant. It could be transmitted to our legal advisor or a bailiff in case of judicial recovery.

Finally, your data may be processed by the host of our website or other IT service providers for purposes strictly necessary to comply with the instructions we provide them. They act as processors in this regard.

Retention period – The data you entrust to us is retained for 10 years after the end of our mission for tax and accounting purposes, as well as for liability reasons.

D. Promotion of our services

Categories of data – Your contact data (name, first name, email address) may be used for the promotion of our services and the sending of our Newsletter.

Purpose of processing – We process this data to send you communications that may interest you (promotions, special offers, new products, events, etc.).

Legal basis - Our legitimate interest in promoting our services justifies carrying out information or promotion operations for our company's services. Consequently, you may receive emails, announcements, or notifications containing commercial information about our new products and services.

Data recipients – Your contact data may be transmitted to the email service provider we may use.

Retention period – We retain your contact data for this purpose until you ask us to stop.

You can notify us at any time if you no longer wish to receive announcements. Simply send us an email at info@lulunails.be or click on the unsubscribe link at the bottom of any electronic communication we send you for this purpose.

E. Exercising your rights

Purpose – When you exercise the rights granted to you by the GDPR and described in this data protection policy (right of access, rectification, etc.), we retain the data strictly necessary to prove that we have adequately responded to your requests.

Legal basis – The retention of this data stems from the legal obligation imposed by Article 5.2 of the GDPR, namely the accountability obligation.

Categories of data – This includes your name, first name, request, and evidence of the measures taken by LULU NAILS in response to the request.

Data recipients – This data is not transmitted to any recipient other than the data protection authority.

Retention period – We retain your data for this purpose as long as our responsibility may be engaged for non-compliance with requests, namely for a maximum period of 10 years.

F. Social Media

Categories of Data – This may include data related to your account, data related to content sharing, or communications you have with other people.

Purposes – The data you provide by visiting our pages on social media may be or could be processed jointly by the social network and the administrator of that page for the following purposes:

the collection of certain data through cookies;
the improvement by the social network of its advertising system;
the obtaining of audience statistics for the page.

These data will be processed by the page administrator only within the framework of their legitimate interest in obtaining statistics on visitors to their page in order to promote their page adequately. The audience statistics provided by the social network will only be transmitted to the page administrator in an anonymized form.

Recipients of the Data – Communication of these data to our employees, suppliers, external service providers, or consultants may be necessary for the execution of this purpose.

Retention Period – These data may be processed as long as the page exists and you visit it.

Each social network's privacy policies can be found by clicking the following links:

Modification

This policy may, at any time, for various reasons, be subject to corrections, additions, or modifications. The most current version can be permanently viewed on our website. We encourage you to consult it regularly.

Third-Party Websites

Our website may contain hyperlinks to third-party websites and information about them. We have no control over these sites and are not responsible for their privacy policies, which we encourage you to review.

Location of Your Data

Your personal data is generally stored exclusively on servers located within the European Union.

What Are Your Rights?

Information – This right is exercised through this document. If any of the data processed pertains to your employees, you are responsible for making them aware of this document.

Access and Rectification – You have the right to access and rectify your data if necessary.

Objection – You can object to the processing of your data that we conduct based on our legitimate interest.

Withdraw Your Consent – When data is processed based on your consent, you can withdraw this consent at any time without affecting past processing.

Erasure – You can request the erasure of your data or the limitation of processing under the conditions outlined in Articles 17 and 18 of the General Data Protection Regulation.

Portability – The data you have provided may be communicated to you or transmitted to a third party of your choice in electronic format.

For more information about your rights:

https://www.autoriteprotectiondonnees.be/citoyen/vie-privee/quels-sont-mes-droits-

Who to Contact?

The data controller of your data, LULU NAILS SRL, whose registered office is located at Rue du Chêne, No. 216, 4100 Seraing, is available for any questions and requests related to the rights outlined above (phone: +32 499 84 08 50; email: info@lulunails.be).

If you wish to receive more information or file a complaint, you can contact the Data Protection Authority (Rue de la Presse, 35 – 1000 Brussels, Tel. + 32 2 274 48 00 - https://www.autoriteprotectiondonnees.be/citoyen/agir/introduire-une-plainte).