Privacy

DATA PROTECTION POLICY

LULU NAILS SRL, whose registered office is located at Rue du Chêne, No. 216, 4100 Seraing, and registered with the Crossroads Bank for Enterprises under the number (BE) 0741.380.797 (hereinafter: "LULU NAILS", "we"), is a company specialized in selling manicure and pedicure equipment to its clients (hereinafter: the "Client", "you") via its website www.lulunails.be (hereinafter: "the Site").

The data you entrust to us when you visit our website, create an account on our Site, and order products on our Site is mainly personal data. LULU NAILS is committed to respecting your privacy and your rights regarding the protection of personal data.

LULU NAILS processes your data as a data controller and in compliance with the applicable data protection regulations, including the European Regulation 2016/679 of April 27, 2016, on the protection of individuals regarding the processing of personal data ("GDPR") and the Belgian law of July 30, 2018, on the protection of individuals with regard to the processing of personal data.

This document exclusively governs the way LULU NAILS makes Products available to its Clients on its Site. It does not govern the services offered through the Site, such as making salon appointments, services performed in the salon, and training courses. These services are subject to the general terms and conditions of the partners who offer them. The data processed for these purposes are handled by these partners in accordance with their own data protection policies, which we invite you to review.

WHY DO WE PROCESS YOUR DATA?

A. Browsing on our website

You can visit our website and learn about our services without having to provide any personal information.

However, the use of certain cookies is necessary to navigate on our website. For further information, please refer to our cookie usage policy.

B. Communicating with you

Categories of data - This includes your first and last name, email address, phone number, and any other information you might provide during our exchanges.

Purpose - We process this data when you contact us via the "Contact" tab on our website to communicate with you and respond to your questions.

Legal basis - Providing this data is necessary to respond to your questions and to provide the requested service. Therefore, this data is essential for the performance of our contract. Without it, we cannot carry out our mission.

Data recipients - Your data may also be processed by the host of our website or other IT service providers for the strictly necessary purposes in accordance with the instructions we provide. They act as data processors in this regard.

Retention period - The data will be retained for 1 year after our last contact.

C. Creating an Account on our Site

Categories of data - This may include: - Identification data (name, email address, date of birth, age, phone number, etc.) - Login data (IP address, username, password, status, and access information, etc.)

Purpose of processing - Creating an account on our platform allows you to purchase our Products and benefit from features related to your Client Account (order history, delivery address registration, etc.).

Legal basis - Creating a Client Account is required to place an order on our Site. Providing this data is necessary for the provision of the requested service. Therefore, this data is essential for the performance of our contract. Without it, we cannot complete our mission.

Retention period - The data you entrust to us will be kept for 10 years after the end of our contractual relationship for tax and accounting reasons, as well as for liability purposes.

In general, the data will be retained for a period that complies with our legal and regulatory obligations.

C. Managing our contractual relationship

Categories of data - This may include your name, first name, home or residence address, phone number, email address, organization, bank data, billing data, delivery address, etc.

Purpose - Your data is used to allow you to place an order on our Site and purchase our Products. Your data is also used to send you order confirmations, process billing for our Products, deliver these Products, or notify you of any changes to the Contract or the Data Protection Policy (including new purposes).

Legal basis - The personal data processed is necessary for the execution of the contract and legal obligations. Without it, we cannot carry out our mission.

Data recipients - The data is transmitted to the companies responsible for the delivery of the products.

It is also transmitted to tax and social administrations, our social secretariat, and our accountant. It could also be transmitted to our legal advisor or a bailiff in case of judicial recovery. Finally, your data may be processed by the host of our website or other IT service providers for the strictly necessary purposes in accordance with the instructions we provide. They act as data processors in this regard.

Retention period - The data you entrust to us will be retained for 10 years after the end of our mission for tax and accounting reasons, as well as for liability purposes.

D. Promotion of our services

Categories of data - Your contact data (name, first name, postal address, email address) may be used for the promotion of our services and the sending of our Newsletter.Purpose of processing - We process this data to send you communications that may interest you (promotions, special offers, new products, events, etc.).

Legal basis - Our legitimate interest in promoting our services justifies that we carry out information or promotion activities related to our company's services. As a result, you may receive emails, ads, or notifications containing commercial information about our new products and services.

Data recipients - Your contact data may be transmitted to the email service provider we may use.

Retention period - We keep your contact data for this purpose until you request us to stop. You can inform us at any time that you no longer wish to receive announcements. Just send us an email at info@lulunails.be or click the unsubscribe link at the bottom of any electronic communication we send you for this purpose.

E. Exercise of your rights

Purposes – When you exercise the rights granted to you by the GDPR and described in this data protection policy (right of access, rectification, etc.), we keep the data strictly necessary to prove that we have adequately responded to your requests.

Legal basis – The retention of this data is required to comply with the legal obligation set out in Article 5.2 of the GDPR, namely the duty of accountability.
Categories of data – This includes your first name, last name, request, and evidence of the measures taken by LULU NAILS in response to the request.

Recipients of the data – This data is not shared with any recipient other than the data protection authority.

Retention period – We retain your data for this purpose for as long as our responsibility could be engaged for failing to comply with the requests, namely for a period of up to 10 years.

F. Social networks

Categories of data – This may include data related to your account, data related to shared content, or communications you have with others.

Purposes – The data you provide by visiting our pages on social networks are or may be processed jointly by the social network and the administrator of this page for the following purposes:

Collecting certain data via cookies;
Improving the social network's advertising system;
Obtaining audience statistics of the page.

This data is only processed by the page administrator for their legitimate interest in obtaining statistics about the visitors of their page in order to adequately promote the page.

Audience statistics established by the social network are only shared with the page administrator in anonymized form.

Recipients of the data – Communication of these data to our employees, suppliers, external service providers, or consultants may be necessary for the execution of this purpose.

Retention period – This data is or may be processed as long as the page exists and as long as you visit it.

Modification

This policy may be corrected, supplemented, or modified at any time for various reasons. The most current version can be consulted at any time on our website. We encourage you to consult it regularly.

Third-party websites

Our website may contain hyperlinks to third-party websites and information about these websites. We have no control over these websites and are not responsible for their privacy policies, which we encourage you to consult.

Location of your data

Your personal data is generally stored exclusively on servers located within the European Union.

What are your rights?

Information – This right is exercised through this document. If the data processed includes your personnel's data, you are responsible for ensuring they are informed about this document.

Access and rectification – You have the right to access your data and have it corrected if necessary.

Objection – You can object to the processing of your data that we carry out based on our legitimate interest.

Withdraw your consent – When data is processed based on your consent, you can withdraw this decision at any time, without affecting the past processing.

Erasure – You can request the erasure of your data or the restriction of processing in the conditions provided by Articles 17 and 18 of the General Data Protection Regulation (GDPR).

Portability – The data you have provided to us may be communicated to you or transferred to a third party of your choice in electronic format.

For more information about your rights: https://www.autoriteprotectiondonnees.be/citoyen/vie-privee/quels-sont-mes-droits-

Who should you contact?

The data controller of your data, LULU NAILS SRL, with its registered office at Rue du Chêne 216, 4100 Seraing, is available for any questions or requests related to the rights described above (phone: +32 499 84 08 50; email: info@lulunails.be).

If you wish to obtain further information or wish to file a complaint, you can contact the Data Protection Authority (Rue de la Presse 35, 1000 Brussels, Tel. +32 2 274 48 00 – https://www.autoriteprotectiondonnees.be/citoyen/agir/introduire-une-plainte).