Principles of personal data processing

The company SCETG ELTA LOGISTIK SRL Tabya Lashes), the operator of the online store www.tabyalashes.com, declares that all personal data (hereinafter, "data") are considered strictly confidential and are treated in accordance with the laws in force in the field of personal data protection.

The security of your personal data is a priority for us. Accordingly, we pay the utmost attention to personal data and its protection. Within the framework of these Principles of Personal Data Processing (“Principles”), we would like to inform you what personal data we collect about you and how we further use it.

1. Personal data and their processing

1.1. Categories of personal data

We collect various information, depending on which services from our offer you choose to use.

If you purchase from us, we collect:

  • Name and contact details: first and last name, email address, postal address, billing address, telephone number and billing bank details.
  • Demographic data. Information regarding gender, date of birth, country.
  • Data that appears during the contract's existence – products purchased, customer segment, volume of services provided
  • If you subscribe to our marketing messages, we collect: name and contact details – email address and first name; demographic data – country, gender information.
  • In addition, we process the following personal data:
  • Details from messages between Tabya Lashes and the client
  • Camera recordings from the Tabya Lashes store and premises
  • Records of behavior on Web pages managed by Taby Lashes

1.2. Purpose of processing personal data: Media

  • Providing and improving services. In order to provide and improve the services offered to your satisfaction, we process your personal data. Specifically, this includes:
    • Processing orders for products or services, ordered either through our website, mobile application or customer service hotline. Here, the legal reason is that the data is indispensable for the execution of the purchase contract or collaboration contract, and some information is indispensable for the fulfillment of legal obligations (e.g. accounting documents).
    • Product availability notification. If you request to monitor the availability of an item, we process your personal data based on your consent.
    • Customer service. In order to provide customer service and eliminate any problems in the execution of the sales contract, we process personal data based on the need to comply with these contracts.
    • Communication. We use the data collected to communicate with you in a personalized way. For example, we may contact you by phone, email or other means to remind you that you have products in your online shopping cart, to help you complete your order, to communicate the current status of your request, order or complaint, to obtain additional information, if applicable, or to notify you that you need to take action to keep your account active.
    • Improving services. We use data to continuously improve our services and systems, including adding new features and, at the same time, to make informed decisions using aggregate analysis and business intelligence, all based on our legitimate interest, derived from business freedom and the need to improve the services provided, to maintain competitiveness. In order to ensure adequate protection of your rights and interests, we will use anonymized personal data in order to improve the services.
    • We use analytics services (e.g. Google Analytics) to understand how users use our site. These services may collect data such as IP address, device type, pages visited, length of visit and user interactions.
  • Protection, security and dispute resolution. We may also process data based on a legitimate interest, which consists of ensuring the protection and security of our systems and customers, for the prevention and detection of fraud, the resolution of disputes and the implementation of our agreements, based on legitimate interest.
  • Camera recordings. They place cameras in stores and other owned premises to protect their legitimate interests. The spaces where cameras are placed are always marked with a warning.
  • Marketing offers.
    • Information letter sent by email (commercial communications)
    • We send you commercial communications regarding products similar to those purchased.
    • You always have the option to refuse these commercial communications by using the unsubscribe link in each email.
    • If you unsubscribe from commercial messages, we will no longer use your electronic contact details for these purposes. We will only resume using them if you subscribe or if you expressly request them.
    • The marketing offers displayed may be selected based on other information acquired about you over time, starting from contact information, demographic information, preferred products and data on the use of products and our website (cookies, IP address, information provided by your browser, clicks, displayed commercial messages, products visited). The processing is not fully automated, as this would have legal effects for you.
    • If you are not our customer, we process data based on your consent.
    • You have the right to object at any time and free of charge to such processing. Contact details are provided at the end of this document.
  • Processing of cookies on websites operated by Taya Lashes
    If you enable cookies in your browser, we process records of behavior from cookies placed on the website operated by Tabya Lashes, in order to ensure better functionality of the website and for the purposes of the company's online advertising. You can find more information in a separate chapter of this document.

1.3. Transfer of personal data to third parties

We may use third-party providers for payment processing (e.g. euPlatesc.ro), order delivery, analytics and hosting services. These providers process data only to the extent necessary to provide their services.

a) subsidiaries and processing companies, for the fulfillment of the sales contract or contract, in order to execute internal processes and practices

b) to credit card companies, payment service providers for payment processing and banks, based on your order, in order to execute the sales contract

c) transport companies, for the purpose of delivering the products or services ordered by you and resolving complaints, including termination of the contract

d) our partners in the loyalty programs you opt for

e) other service providers, third parties involved in data processing;

f) to third parties, for example prosecutors and courts, for the purpose of recovery or the conclusion of any contract with you;

g) public authorities (e.g. police)

h) third parties conducting customer surveys

If a third party uses the data in the context of its legitimate interest, the administrator does not assume this responsibility. This process is governed by the principles of personal data processing of the relevant companies and individuals.

2. Security of personal data and duration of its storage

2.1. Security of personal data

a) Your data is transmitted in encrypted form. We will use the SSL (secure socket layer) encryption system. We secure our website and other systems through technical and organizational measures against the loss and destruction of your data, against access by unauthorized persons, modification or dissemination.

b) We require the data processors we collaborate with to prove the compliance of their systems with the GDPR regulation.

c) Access to your customer account is only possible after entering your personal password. In this context, we would like to point out that it is absolutely necessary not to disclose your access data to third parties and, after ending your session in the customer account, to always close the browser window, especially if you share a computer with other users. Tabya Lashes does not assume responsibility for abuses of passwords used, unless the situation was directly caused by.

2.2. Processing time

We process and store personal data

  • for a period absolutely necessary to ensure all rights and obligations arising from the sales contract, more precisely for the duration of the order and the warranty period;
  • for 1 year after the end of the warranty period, to resolve possible disputes;
  • for as long as Taby Lashes, as administrator, is obliged to keep the information, in accordance with general legal regulations. Accounting documents, for example invoices issued by Tabya Lashes, are archived according to the law, for a period of 10 years from their issuance;
  • The agreement for notification of the availability of goods remains in force for the duration of the availability of the information sent, but not more than a period of 1 year or until its revocation;
  • The marketing offer agreement is valid for 4 years or until revoked;
  • CCTV recordings from Tabya Lashes stores and the immediate vicinity of the company's buildings are processed for a period of 90 days from the date of the CCTV recording.

In other cases, the processing time arises from the purpose of the processing or is dictated by personal data protection regulations.

3. Rights of data subjects

a) If we process your personal data, you can request information regarding the processing of your personal data free of charge.

b) If you believe that the processing of personal data does not comply with the protection of your personal data and contravenes the legal regulations on the protection of personal data, you may request explanations, request the removal of the situation thus arising and, in particular, you may request the correction, completion, deletion or blocking of personal data.

c) If you wish to exercise your rights, contact the data protection officer at the email address office@tabyalashes.com You can also contact the National Supervisory Authority for Personal Data Processing.

d) Your consent to the processing of personal data can be revoked at any time. If you withdraw your consent to the processing of personal data, they will be deleted or anonymized; however, these measures do not affect personal data that are necessary for Tabya Lashes to fulfill its legal obligations (e.g., the execution of orders already taken) or to protect its legitimate interests. The deletion of personal data also takes place when they are no longer necessary for the intended purpose or if the storage of your data is inadmissible for other reasons provided for by law.

4. Web Pages

Our pages use so-called cookies to make our offer relevant, interesting and enjoyable for you. Cookies are small text files that are stored on your computer, smartphone or other device and are used by your browser. We use cookies for purposes such as:

  • correct functionality of the shopping cart, to complete the order as simply as possible
  • remembering login details so that they do not need to be entered repeatedly
  • better personalizing our Web pages, according to your requirements, by monitoring your visits, your movement on the site and the functions used
  • monitoring the ads you view, so as not to show you ads for products you are not interested in

Some cookies may collect information that is subsequently used by third parties and that, for example, directly support our promotional activities (so-called "third-party cookies"). For example, information about products purchased on our site may be provided to an advertising agency, in order to display and personalize the advertising banners on the Internet that appear on the sites you view. Please note that it is not possible to identify you based on this data.

The cookies used on our website can be classified into two categories. Short-term cookies, so-called "session cookies", are deleted as soon as you leave our website. Long-term cookies, so-called "persistent cookies", remain stored on your device for much longer or until you delete them manually (the persistence of cookies on your device depends on their settings and your browser settings).

Cookies can also be classified by functionality:

  • analytics, which help us improve the user experience on our website by understanding how users use it
  • conversion, which allow us to analyze the performance of various sales channels
  • tracking, which, in combination with conversion, helps analyze the performance of various sales channels
  • remarketing, used to personalize ad content and target them correctly
  • essential, important for the basic functionality of the site

4.3. Refusal of cookies

The setting for the use of cookies is included in your Internet browser. In the default setting, most browsers automatically accept cookies. With the help of the browser, you can refuse these cookies or reduce them to certain types, which you specifically select.

Information about browsers and setting cookie preferences can be found on the following web pages or in other web browser files.

  • Chrome
  • Firefox
  • Internet Explorer
  • Android

Our website contains links to other websites that are convenient and contain useful information. Please note that these websites may be owned and operated by other companies and organizations, which may have different security and privacy policies. Our company has no control over, and assumes no responsibility for, the information, materials, products or services included on or accessible through these websites.

5. Contact us

If you have any questions, comments, or requests regarding these Principles, please contact us at the address or customer service line listed at the bottom of these Principles – or by email.

Data Protection Officer: office@tabyalashes.com

Contact: 23, ground floor, apt. 6, Department Entrance no. 17, Bucharest 014162

Customer service: 0314 178 006 or office@tabyalashes.com

6. Mobile app

The Tabya Lashes mobile application is a WebView application, which displays the content of the website www.tabyalashes.com.

We do not collect personal data directly through the mobile application. All personal data is collected and processed through our website, in accordance with this privacy policy.

Using the application involves the same data collection and processing processes as using the website.

The mobile app does not use advertising SDKs and does not display third-party ads.

Data may be collected automatically through the website accessed in the mobile application (WebView), including through cookies and similar technologies.

7. Validity

These Principles regarding the protection of personal data enter into force on 01.05.2018.