Privacy policy

 

Privacy Policy

This Privacy Policy (the "Policy") describes the ways in which we process the customer's personal data that is transmitted to us by the company L’Occitane en Provence (see point 4) which manages the website and is the owner of the L’Occitane en Provence through [https://cy.loccitane.com/] (the "Website"), and through other tools (eg. Through social media, cookies, etc.). Please read this information carefully. This Privacy Policy refers exclusively to the Site in its Greek and English version for the international version see the Privacy Policy (  https://cy.loccitane.com/privacy-policy). This document is drawn up in compliance with the (General Data Protection Regulation - EU Reg. No. 2016/679, hereinafter the "GDPR").

 

  1. WHO IS THE OWNER

This website is managed by  N&M BEAUTYBERRY CO. LTD 24, Solonos Michaelides, 1035, Nicosia, Cyprus which acts as an independent data controller for all activities related to the online sale of products, such as the conclusion and execution of the contract; the payment; issuing the invoice; the shipment of the product; any management of the right of withdrawal, return and legal guarantees and processing for the purposes of marketing, profiling and sharing your data for these purposes, if you provide your express consent to such processing.

The Data Protection Officer for N&M BEAUTYBERRY CO. LTD, domiciled at the headquarters of the same, can be contacted at the following email address [info@beautyberry.com.cy].  

N&M BEAUTYBERRY CO. LTD recognizes the importance of protecting all data relating to its customers, for this reason, N&M BEAUTYBERRY CO. LTD guarantees the adoption of specific procedures and suitable security measures in order to protect your data in the best possible way.

For any clarification, question or need related to your privacy or to exercise your rights recognized by the GDPR (see point 7) you can contact us by sending a request to [info@beautyberry.com.cy].  

N&M BEAUTYBERRY CO. LTD reserves the right to modify its Privacy Policy and, consequently, this information. Updates will be posted on this same site. We therefore recommend that you periodically consult this page of the site.

 

  1. WHAT DATA DOES N&M BEAUTYBERRY CO. LTD COLLECT.

We inform you that N&M BEAUTYBERRY CO. LTD does not collect personal data relating to (and consequently does not accept online orders from) customers under the age of eighteen. We therefore ask minors not to enter their data (and purchase online) and to have the necessary procedures carried out by people of legal age.

 N&M BEAUTYBERRY CO. LTD collects the personal data of those who visit the website    or those who register for promotional purposes.

We collect different types of customer personal data for the purposes described in this Notice, including:

- Customer data (such as name, birthday, nationality, e-mail address, postal address, telephone number and other personal data) provided by the customer by filling in forms on the Website, including '' the possibility of subscribing to our newsletter and registering and creating an account on the Website; 

- Data of any transactions made by the customer. We do not collect or store any data relating to information on debit / credit cards or current accounts; The provision of credit card data takes place on the banking circuit to which Beauty San has no access except for the information of the amount actually credited at the end of the transaction.

- Personal data that may be contained in communications sent to us by the customer, for example to report a problem or to forward requests, problems or observations relating to the Website or its contents; 

- Other personal data shared voluntarily with our customer care;

- Information deriving from surveys that we may carry out over time on the Website for research purposes, where the customer decides to respond or participate; 

- Information about the use and navigation of the customer on our website, such as the customer's IP address and other device identifiers, the operating system and the type of browser and information concerning the pages of the website visited, collected through cookies or other tracking technologies;

- We may also collect information on how the customer's device interacted with us, including the pages visited and the links clicked, how it moves to and from the site  https://cy.loccitane.com (such as the way the site scrolls and the contents parties clicks and how long they spend on each page), their preferences, the products and / or services they viewed or searched for, computer freezes, download errors and response times; 

- Personal data collected from third parties, such as data that the customer agrees to share with us on publicly accessible social networks (e.g. Facebook, Instagram, etc.) and / or that we can collect from other publicly accessible databases.

The customer is under no obligation to provide the aforementioned personal data. The provision of personal data by the customer (in particular personal details, e-mail address, postal address and telephone number) is necessary for us in order to process the order for the purchase of products. on the Website, for the provision of other services on our Website at the request of the customer, or for the fulfilment of the obligations established by laws or regulations. The refusal by the customer to provide us with the data necessary for the pursuit of the aforementioned purposes may make it impossible for us to process the order for the purchase of products for sale on our website or to fulfil the obligations established by laws or regulations.

The provision of personal data other than and different from those required for the fulfilment of legal or contractual obligations and for the correct display of our services with the necessary traffic data is on the contrary optional and has no effect on the use. of the Website and related services or the purchase of products on the Website. The customer will be informed by us at each stage for the purchase of products and / or for the provision of services if the provision of personal data is necessary or optional.

 

  1. HOW N&M BEAUTYBERRY CO. LTD USES THE DATA PROVIDED (DATA PROCESSING).

Any processing of the customer's personal data takes place on the basis of a lawful "justification" (or legal basis) for the processing. In most cases, the processing of the customer's personal data is justified on the basis of one or more of the following conditions:

- the processing is necessary for the fulfilment of the contract with the customer or to perform the activities requested by the customer in order to enter into the contract (for example, a sales contract);

- the processing is necessary to allow us to fulfil the obligations established by law;

- the processing constitutes our legitimate interest as a company and our interests do not prevail over the interests, fundamental rights or freedoms of the customer. Our legitimate interests may include the interest in using the personal data of the customer or the user of the Website for the conduct and development of our commercial activities (including the performance of ordinary marketing activities), with current or potential customers and users of the Website; and in the preparation, exercise or defence of legal actions; or 

- the processing is based on the customer's prior express consent, such as personalized and segmented marketing activities.

 

There are therefore three main cases:

3.1 PURPOSES RELATED TO THE ONLINE SALE OF PRODUCTS COMPULSORY CONSENT N&M BEAUTYBERRY CO. LTD, as an independent data controller, processes the personal data of customers for the online sale of Costume National Scents products and the related activities related to it. In particular for:

the conclusion and execution of the purchase contract on the Site of one or more products, for the payment, the shipment of the product, any management of the right of withdrawal, return and the legal guarantee. This processing is necessary for the execution of a contract to which the customer is a party (sales contract). The provision of the customer's personal data is mandatory; failing that, you will not be able to make a purchase on the Site or manage any requests relating to the right of withdrawal, return and legal guarantee or receive dedicated customer assistance;

customer support. The processing is necessary for the execution of a contract to which the customer is a party (provision of assistance). The provision of personal data is mandatory; failing that, you will not be able to receive the requested assistance;

the fulfilment of legal obligations relating to the sales activity (such as, for example, the issuance and storage of the invoice). This treatment is necessary to fulfil a legal obligation to which N&M BEAUTYBERRY CO. LTD is subject. The provision of the customer's personal data is therefore mandatory; failing that, it will not be possible to make a purchase on the Site;

registration on the Site and use of the services reserved for registered users. This processing is necessary for the execution of a contract to which the customer is a party (registration on the Website and related provision of services). The provision of personal data is mandatory; failing that, it will not be possible to register on the Site and use the services dedicated to registered users;

3.2 MARKETING PURPOSE OPTIONAL CONSENT

With the consent, which is optional, N&M BEAUTYBERRY CO. LTD will use personal data for marketing purposes. N&M BEAUTYBERRY CO. LTD, in fact, may send promotions, commercial or advertising communications on its products, services and events. Marketing activities may include carrying out market research and surveys for the detection of satisfaction or to carry out statistical analyses, even with anonymous data organized in aggregate form. The data processing is based on your freely expressed consent and the provision of data is optional; in case of refusal, in fact, there will be no consequences on the possibility of purchasing our products online.

With the consent, which is optional, through this or other sites or through social media accounts, N&M BEAUTYBERRY CO. LTD collect information relating to your preferences, habits, lifestyle as well as the details of the purchases made. The data are used for the creation of group and / or individual profiles ("profiling") that allow us to send personalized communications in line with joint interests, or to carry out market research and statistical analysis, even with anonymous data, organized in aggregate form. The processing of your data is based on freely expressed consent and the provision of data is optional; in case of refusal, in fact, there will be no consequences on the possibility of purchasing our products online. 

  3.3 FURTHER PURPOSES

Personal data are processed by the data controller, also for:

- the management of requests for the exercise of rights regarding the protection of personal data. This processing is necessary to fulfil a legal obligation to which the data controller is subject;

- other obligations regarding the protection of personal data. In certain circumstances, the legislation on the protection of personal data obliges the data controller to use contact data to provide specific information on the processing of data such as, for example, to inform of any security breaches that have affected the data and of the measures taken. to deal with it, as well as to notify you of any significant updates to this privacy statement. This processing is therefore necessary to fulfil a legal obligation to which the data controller is subject.

 

  1. CATEGORIES OF RECIPIENTS AND INTERNATIONAL TRANSFERS

From whom do we receive the data and to whom do we transfer the personal data and where is it located?

All your data is collected by the company that owns the "L’Occitane en Provence" trademark, L’Occitane en Provence , see L’Occitane en Provence ( https://cy.loccitane.com/privacy-policy ) and treated according to European privacy standards . The data is processed in accordance with the Standard Contractual Clauses published by the European Commission to ensure that the protection of the customer's personal data complies with applicable law. For this reason, having L’Occitane en Provence based in France, the personal data collected by L’Occitane en Provence can be transferred and processed within the European Economic Area ("EEA") and sent to N&M BEAUTYBERRY CO. LTD, always in compliance with European regulations.

The personal data transmitted by L’Occitane en Provence and necessary for the purposes of the treatments described above depending on the categories and purposes for which they were collected can be received by:

- duly trained employees of the N&M BEAUTYBERRY CO. LTD departments

- by third parties (suppliers and / or business partners) in order to maintain our site and provide our customers with e-commerce and communication services. Subjects who have been adequately selected by the data controller and offer a suitable guarantee of compliance with the rules on the processing of personal data. These third parties may carry out, on the basis of a specific designation (by each of them for the processing of their own ownership), their activity as "data processors" (therefore under the direct responsibility of the data controller who designated them: for example, internet providers, companies specialized in IT and telematic services, customer service companies, companies that carry out marketing activities,

- from law enforcement, government authorities, judicial authorities, legal advisors, external consultants or business partners under the law.

- third parties involved in the merger or acquisition, in the event of a corporate merger or acquisition.

Any access to your personal data is limited to those individuals who need to know to fulfil their job responsibilities. N&M BEAUTYBERRY CO. LTD does not sell or rent personal data relating to its customers with entities that do not belong to N&M BEAUTYBERRY CO. LTD.

 

  1. SECURITY

We attach great importance to the security of all personal data relating to our users. We take security measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, communication or unauthorized access. In order to best protect the customer's personal data outside the limits of our control, your devices must be protected (with up-to-date antivirus systems) and the customer's internet service provider must take adequate measures for the security of data transmission in network (such as firewalls and spam filters).

While we do our best to protect customer personal data, we cannot guarantee that any personal data communicated to us by the customer will be 100% secure or that no data breaches will occur.

The client accepts the implications connected to online trading and will not hold N&M BEAUTYBERRY CO. LTD or their respective operators responsible for any data breaches unless this is due to our negligence.

 

  1. STORAGE OF PERSONAL DATA

Our general approach is aimed at storing the customer's personal data exclusively up to the time when this is required for the pursuit of the purposes for which they were collected.

In some cases, however, we may retain personal data for longer periods of time, for example where we are required to do so in accordance with legal, tax or accounting requirements.

In specific cases, we may also retain customer personal data for longer periods of time that correspond to applicable legal limits so that we have accurate documentation of the customer's negotiations with us in the event of complaints or disputes.

We keep your personal data for a limited period of time, strictly related to the purpose for which it was collected and in compliance with applicable legal or regulatory obligations. At the end of the established retention period, your personal data will be irreversibly deleted or in any case made anonymous, except in the case in which N&M BEAUTYBERRY CO. LTD is required to keep the data for a further period to comply with legal or regulatory obligations or to exercise or defend a right in court. The retention period is different depending on the purpose of the processing, in particular:

- for the online sale of products and the related activities connected to it ( point 3.1 ), your personal data will be kept by N&M BEAUTYBERRY CO. LTD for the entire duration of the contractual relationship and for 10 (ten) years after its termination, except that for registration on the Site in relation to which your personal data will be kept until you request the cancellation of your account; 

- when N&M BEAUTYBERRY CO. LTD processes your data for profiling or marketing purposes (point 3.2), your data is kept for a period of 7 (seven) years from the moment of the release of your consent for the aforementioned purposes, or until the request cancellation, withdrawal of consent or opposition to processing;

- to fulfil the legal obligations regarding the processing of personal data (point 3.3), your personal data will be processed by each owner, to the extent of their competence, for the period necessary to manage your request to exercise the rights recognized by the GDPR or to fulfil the legal obligation to which the data controller is subject. The data necessary to demonstrate compliance with the legal obligations to which the owner is subject will be kept for 10 (ten) years;

- in the event of a judicial or administrative dispute, your data will be kept for the period necessary for the legal protection of a right by N&M BEAUTYBERRY CO. LTD or a third party or within the limits imposed by the judicial or administrative authority.

 

  1. WHAT ARE YOUR RIGHTSYou can contact each data controller or the respective Data Protection Officer at any time, at the addresses specified (point 8), to exercise your rights recognized by the GDPR and, in particular:

- confirm whether or not personal data concerning you is being processed and, in this case, to obtain access and a copy of such personal data ("right of access");

- correction of your personal data, that is to obtain the correction, modification or updating of any inaccurate or no longer correct data, as well as to obtain the integration of incomplete personal data, also by providing an additional declaration ("right of rectification");

- withdraw your consent ("right to withdraw consent"): you can withdraw the consent you have given for the processing of your personal data at any time, including in relation to any activity for marketing purposes, including profiling. In this regard, we remind you that the sending of commercial and promotional communications, the carrying out of market research and surveys for the detection of satisfaction and the personalization of commercial offers based on your interests are considered marketing activities. Upon receipt of your request, the owner will promptly cease the processing of your personal data based on this consent, while different treatments or based on other assumptions will continue to be carried out in full compliance with the provisions in force;

- request the deletion of your personal data when these, in particular, (i) are no longer necessary with respect to the purposes for which they were collected or processed, or (ii) they have been unlawfully processed, or (iii) must be deleted to fulfil a legal obligation, or, finally, (iv) you have opposed their processing (see below "right to object") and there is no legitimate overriding reason that allows the owner to proceed with the processing anyway ("right of cancellation" or "right to be forgotten");

- obtain the limitation of the processing of your personal data, i.e. that the owner retains such data without being able to use them without prejudice to any requests and exceptions provided by law. This right can be exercised only when, in particular, (i) you contest the accuracy of personal data, for the period necessary for the owner to verify the accuracy of such personal data, or (ii) the processing of the data is unlawful and you request the limitation of their use, rather than cancellation, or (iii) although the owner no longer needs them for processing purposes, the personal data are necessary for you to ascertain, exercise or defend a right in court or (iv) you have opposed their processing (see "right to object" below),

- request your data or transfer them to a person other than the owner ("right to data portability"). You can request to receive the data we process based on your consent or on the basis of a contract stipulated with you, in a structured, commonly used and machine-readable format. If you wish, where technically possible, we can, upon your request, transfer your data directly to a third party indicated by you;

- lodge a complaint with one of the competent supervisory authorities for compliance with the rules on the protection of personal data, if you believe that the processing of your personal data has been carried out illegally ("right to lodge a complaint"). 

- Furthermore, as an interested party you also enjoy the "right of opposition", that is to oppose at any time, for reasons connected with your particular situation, to the processing of your personal data carried out for the pursuit of a legitimate interest of the owner or for purposes marketing, including profiling. The owner will refrain from further processing your personal data unless it demonstrates the existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or for the verification, exercise or defence of a right in court.

To ensure full compliance with the rights described above and that our users' data are not violated or illegitimate by third parties, before accepting your request to exercise one of the rights indicated, we may ask you for some information to ascertain your identity or for clarification on the request made.

 

  1. CONTACT US

If you have any comments or any clarification, question or need related to your privacy or to exercise your rights recognized by European legislation on the processing of your personal data (General Data Protection Regulation - EU Reg. No. 2016/679, of hereinafter "GDPR"), please send us an email to [info@beautyberry.com.cy]

Furthermore, if you consent to the sending of promotional material, you may at any time oppose this treatment, free of charge, by requesting cancellation by selecting the "Unsubscribe" link that you will find in any communication via e-mail, or via e-mail [info@beautyberry.com.cy].