DATA PROTECTION
Identity and contact details of the controller
Beautie Bee, s.r.o.
Helsinská 7055/1 921 01
Piešt’any
ID NO: 5026905
VAT NUMBER: 2120264377
Company registered in the Commercial Register of the District Court of Trnava, Section: Sro, Insert No.: 38983/T
e-mail: hello@beautiebee.eu web: www.beautiebee.eu
Purpose of personal data processing and legal basis
1. Order of goods – conclusion of a purchase contract and related actions – order processing, payment, delivery of goods, application of liability for defects of goods, etc.
The legal basis for processing for the above purpose is the performance of the contract – Article 6(1)(b) of the Regulation.
2. Customer account – facilitating the ordering of goods and overview of previous purchases
The legal basis for processing for this purpose is the consent of the data subject – Article 6(1)(a) of the Regulation.
3. Marketing purposes – provision of comprehensive information about the products and services of the controller in the form of a newsletter by electronic means (email)
The legal basis for processing for the above purpose is the consent of the data subject – Article 6(1)(a) of the Regulation.
4. Cookies – to ensure the operation of the website and to detect customer and visitor behaviour; to tailor marketing offers
The legal basis for processing for this purpose is the consent of the data subject – Article 6(1)(a) of the Regulation
5. Contact form – answering questions and solving problems
The legal basis for processing for the above purpose is the legitimate interest of the controller – Article 6(1)(f) of the Regulation (the legitimate interest of the controller and at the same time the (legitimate) interest of the contact person in the processing of the personal data concerned derives from the aim to answer their questions or resolve the problems encountered, and thus to maintain and promote the satisfaction of the customers or users of the website of the controller)
Retention period of personal data
The retention period of personal data is (i) for the period necessary for processing and recording your order (generally 4 years), (ii) for the period of setting up a customer account (if you set one up), (iii) for the period of registering for the newsletter (until you unsubscribe from it) or dealing with your enquiry/suggestion, and (iv) in the case of other processing based on consent, until you revoke it.
Information on the rights of data subjects
The data subject (the person whose personal data is being processed) has the right to:
– access to data pursuant to Article 15 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter also referred to as “the Regulation”), and in particular (i) the right to confirm whether personal data relating to him or her are being processed and, if so, the right of access to such personal data, and (ii) information on the purpose of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations, where possible, the period of envisaged retention of the personal data or, where this is not possible, the criteria for determining it, the existence of a right to obtain from the controller the rectification or erasure of personal data relating to the data subject or the restriction or limitation of processing, or the right to object to such processing, the right to lodge a complaint with a supervisory authority if the personal data have not been obtained from the data subject, any available information as to their source, the existence of the following
automated decision-making, including profiling as referred to in Article 22(2) (iii) the right to be informed of the adequate safeguards under Article 46 of the Regulation concerning the transfer, where personal data are transferred to a third country or an international organisation, (iv) the right to a free copy of the personal data processed (for any additional copies requested by the data subject, the controller may charge a reasonable fee corresponding to the administrative costs; where the data subject has made the request by electronic means, the information shall be provided in a commonly used electronic form, unless the data subject has requested otherwise) – the right to obtain such a copy shall not adversely affect the rights and freedoms of others.
– the right to rectification of personal data pursuant to Article 16 of the Regulation, without undue delay, and the right to the completion of incomplete personal data pursuant to the aforementioned Article of the Regulation, including through the provision of a supplementary declaration.
– to erasure of personal data (right to be forgotten) pursuant to Article 17 of the Regulation, without undue delay and provided that (i) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) the data subject withdraws the consent on the basis of which the processing is carried out pursuant to Article 6(1)(a) or Article 9(2)(a) of the Regulation and where there is no other legal basis for the processing, (iii) the data subject objects to processing pursuant to Article 21(1)(a) or (2)(a) of the Regulation, or (iv) the data protection authority has the right to erasure of personal data pursuant to Article 21(1)(a) of the Regulation. (iii) the data subject objects to processing pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing or the data subject objects to processing pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing. 2 of the Regulation, (iv) the personal data have been unlawfully processed, (v) the personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject, (vi) the personal data have been collected in connection with the offer of information society services pursuant to Article 8(1) of the Regulation; the above shall not apply where the processing of personal data is necessary for the reasons set out in Article 17(3) of the Regulation.
3
– to restrict the processing of personal data pursuant to Article 18 of the Regulation where (i) the data subject contests the accuracy of the personal data during a period allowing the controller to verify the accuracy of the personal data, (ii) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use, (iii) the controller no longer needs the personal data for the purposes of the processing but the data subject needs them to establish, exercise or defend legal claims, (iv) the data subject has objected to the processing pursuant to Article 21(1)(a) of Directive 95/46/EC 1 of the Regulation, pending verification that the legitimate grounds on the part of the controller override the legitimate grounds of the data subject.
– to the portability of personal data pursuant to Article 20 of the Regulation – the data subject shall have the right to obtain personal data concerning him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another controller without being prevented from doing so by the controller to whom the personal data have been provided, (i) where the processing is based on consent pursuant to Article 6(1)(a) of the Regulation, (ii) where the processing is based on the data subject’s data subject’s consent pursuant to Article 6(1) of the Regulation. 1(a) or 9(2)(a) of the Regulation or on a contract pursuant to Article 6(1)(b) of the Regulation, and (ii) where the processing is carried out by automated means.
– object to processing of personal data pursuant to Article 21 of the Regulation – The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including objections to profiling based on those provisions. The controller shall not further process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
– Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for the purposes of such marketing, including profiling to the extent that it is related to such direct marketing.
– withdraw his or her consent at any time where the processing is based on Article 6(1)(a) or Article 9(2)(a) of the Regulation; the withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal.
– lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, https://dataprotection.gov.sk/uoou/sk
Cookies
Cookies allow us to remember your actions and preferences (e.g. login details, shopping cart order details) over a period of time so that you do not have to re-enter them each time you return to the website or move from one page to another.
Cookies also help us to understand what interests you about our website, whether it is clear enough for you and whether you can find what you are looking for on it.
Cookies may also record other information, such as the number of visitors to our website and what subpages of our website you visit most often. They are also used to ensure that you are shown advertising and content on the site that is relevant to your interests and needs.
On our site we use:
4
Functional and technical cookies – They are necessary for the proper functioning and display of our website; therefore (and due to their technical nature) your consent is not required for their storage and processing.
Analytical cookies – These cookies are used to obtain data about traffic to our website, data about searches made on our website and also to find out how you move around our website (so that we can make it more user-friendly).
Notice
You can withdraw your consent to receive newsletters at any time by unsubscribing from our newsletter on our website. You will find the unsubscribe link here or at the end of each newsletter. After unsubscribing, your personal data will be deleted.
This website uses cookies to improve its services. By using this you are giving your consent.
A cookie is a small amount of data in the HTTP protocol that servers send to the browser. They are then stored on the user’s computer.
The browser then sends this data back to the server on each subsequent visit to the site. Cookies are commonly used to distinguish individual users, storing the contents of “shopping baskets” in electronic shops, user preferences, etc.
Cookies contain information about how long the data is stored. Cookies are not directly linked to your name or email address, but may contain your login details. They are common to a single browser installation. Cookies are not secured in any way and this includes the data collected.