Personal Data Protection Policy

Preamble

Your privacy is important to us: this Data protection Policy informs you of how your data is collected, used, disclosed, transferred and stored, and of your rights therein.

This approach is part of the personal data protection system:

➝ Regulation (EU) 2016 / 679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, entitled the General Data Protection Regulation (GDPR), effective since 25 May 2018 ;

➝ Law no. 78-17 dated 6 January 1978 relating to Information Technology, Files and Civil Liberties, known as the French Data Protection Act [loi Informatique et Libertés].

Personal data means any information that can directly or indirectly identify a natural person.

Our platform contains links to other websites, this does not mean that we endorse these sites. We recommend that you regularly check the personal data policies of these third-party sites as their processing of personal data may differ from ours.

Processing of personal data

Depending on the purpose for which the personal data is used, the processing of the data is based on:

-Consent of the data subject;
-Legitimate interest of the Platform (fraud prevention, security of tools…)
-Contractual performance with a customer or service provider;
-Compliance with a legal obligation where it requires the processing of personal data.

Collection of personal data

Personal data is collected directly by MAKEUP BAG. In addition, some of the personal data is also collected indirectly by MAKEUP BAG’s Customers. Access to personal data is made through the software called « TRUSTT ».For the respondents, the personal data collected are the following:

-Full name;
-E-mail address;
-Telephone number;
-Postal address;
-IP address;
-Ages;
-Gender;
-Answers to the various product and user test questionnaires set up by TRUSTT Software;
-Social media and related content (Instagram, Facebook…);
-Blogs of the data subject and content therein;

For customers, the personal data are as follows:

-Name of the company;
-Intra-Community VAT number;
-E-mail address;
-Telephone number;
-Postal address;
-IP address;
-Financial data (RIB, bank details, etc.)

Use of personal data

The personal data collected from users is intended to provide the Platform’s services, improve them and maintain a secure environment. The legal basis for the processing is the execution of the contract between the user and the Platform. More specifically, the following uses are made:

-Access and use of the Platform by the user;
-Management of the operation and optimization of the Platform;
-Verification, identification and authentication of data transmitted by the user;
-Personalization of services by displaying advertisements based on the user’s browsing history, according to their preferences;
-Fraud prevention and detection, malicious software and security incident management;
-Management of possible disputes with users;
-Sending commercial and advertising information, depending on the user’s preferences;
-Organisation of the conditions of use of the Payment Services.

Purpose of processing personal data

Personal data relating to the user is collected to enable the Platform to provide its services, to fulfil their obligations, to respond to law enforcement requests, to protect their rights and interests, to detect any malicious or fraudulent activity.

Personal data retention period

The Platform retains your data for as long as is necessary to provide its services or support to you.

To the extent reasonably necessary or required to satisfy legal obligations, resolve disputes, prevent fraud and abuse, or enforce the terms and conditions of the Platform, the Platform may also retain certain information strictly necessary for these purposes, even after your account has been deleted or the services of the Platform have been suspended.

Transfer of personal data – storage location and security

Personal data will be transferred with third-party companies exclusively within the European Union, within the following limits, when:

-The user uses payment services, for the implementation of these services, the Platform is in relation with third party banking and financial companies with which it has contracted;

-The user publishes publicly available information within the open comment areas of the Platform;

-The user authorises the third party website of a third party to access his/her data;

-The Platform uses service providers to provide user support, advertising and payment services. These service providers have limited access to the user’s data in order to provide these services and have a contractual obligation to use it in accordance with the provisions of the GDPR;

-The Platform may carry out the transmission of data to follow up on claims against the Platform and to comply with administrative and judicial procedures.

Rights of the data subjects

Users may exercise certain rights with regard to the Data processed by the Platform.

More specifically, Users have the following rights:

-The right of access: they may exercise their right of access, in order to know the personal data concerning them, by writing to the e-mail address mentioned below. In this case, before implementing this right, the Platform may request proof of the user’s identity in order to verify its accuracy;

-The right to request the rectification: if the personal data held by the Platform is inaccurate, they can request that the information be updated;

-The right to request the erasure: users can request the erasure of their personal data, in compliance with the GDPR;

-The right to restriction of processing: users may request the Platform to restrict the processing of personal data in compliance with the assumptions provided for in the GDPR;

-The right to object: users may object to their data being processed in compliance with the assumptions provided for in the GDPR;

-The right of portability: they can request that the Platform return their personal data to them.

Data controller

The Data controller is the company MAKEUP BAG.

SAS Makeup Bag
16 quai Alphonse le Gallo
92 100 Boulogne-Billancourt (FRANCE)
RCS Nanterre: 791 644 958
VAT NUMBER: FR 78791644958
CNIL notification: no. 1799236 v 0
contact@trustbeauty.io