Privacy Policy
PRIVACY POLICY
1. Who we are
Yas Beauty Cosmetics SRL is a company registered in Romania, focused on the retail sale of professional manicure products and related tools.
2. Personal data we process
Yas Beauty Cosmetics SRL is a personal data controller. We collect the following types of personal data from you:
- First and last name
- Phone number
- Billing address
- Shipping address
- Facebook account information
- Online behavior
- Order number
- Invoice number
- Product codes
- Product names
- Quantity
- Transaction ID
- Account holder name (IBAN)
- IBAN account
- Bank
- User ID
3. Why we need them
We need your personal data to provide you with the following services:
To fulfill the terms and conditions, and manage your Yas Beauty customer account:
- First and last name – to be able to contact you
- Email – to send you order-related information
- Phone number – to send you an SMS when your order is shipped
- Billing and shipping address – to issue invoices and deliver your orders
- Transaction ID – each card transaction has an assigned ID
- Order number – to identify your order
- Invoice number – automatically generated by the system
- Product codes – codes of the products on the invoice
- Product names – names of the products on the invoice
- User ID – the account identifier used by Yas Beauty Cosmetics SRL's e-commerce systems
In our legitimate interest to offer you the online return service and under the law, we need to process the following personal data:
- First and last name – to contact you
- Order number – to identify your order
- Invoice number – to identify your order
- Email – to send you return information
- Phone number – to contact you if there are issues regarding the return
- Address from identity document – mandatory for refund delivery
- Product codes – codes of the returned products
- Product names – names of the returned products
- Product quantities – quantities of the returned products
- Return reason – optional, to better understand the cause of the return
- Account holder name (IBAN) – necessary to process the payment
- IBAN account – necessary to process the payment
- Bank – necessary to process the payment
Under our legal obligation to ensure data security and prevent fraud:
- IP address – we need this to identify you as a unique user.
- Browsing history on yasbeauty.ro – we need this to know which pages you have already visited when you request assistance.
- Referrer (the web address from which you entered yasbeauty.ro) – we need this to know if you entered our site from a campaign banner, so we can offer you personalized assistance.
With your consent, we would also like to process the following personal data to send you our newsletter:
- First and last name – to communicate with you in a more personal way.
- Email – to be able to send the newsletter.
4. What we do with them
Your personal data is processed within Yas Beauty Cosmetics SRL, located in Romania. Your data is hosted and stored at Yas Beauty Cosmetics Srl in Romania.
Your personal data for the newsletter will be uploaded to Brevio, which will act as a processor for Yas Beauty Cosmetics SRL. The transfer of data to the United States is ensured by the Standard Contractual Clauses signed between Yas Beauty and Brevio.
5. How long we keep personal data
For your account, we will keep your personal data for a maximum of three years from the last activity on the account or until you decide to close it. Invoice and order data will be kept for ten years as required by the current tax code.
For the newsletter, we will keep your personal data only for the lifetime of the newsletter or until you notify us that you no longer wish to receive it. After this period, your personal data will be irreversibly destroyed.
6. What are your rights?
If you have reason to believe that any personal data we hold about you is incorrect or incomplete, you have the right to request to see this information, to rectify it, or to ask for it to be deleted, to request restriction of processing, to object to processing, and you also have the right to data portability. To exercise these rights, please contact us at [email protected].
To withdraw your consent for marketing communications, please contact us at [email protected].
If you wish to lodge a complaint regarding how we processed your personal data, please contact the Data Protection Officer at: [email protected]. The DPO will contact you to resolve the issue raised.
You can also contact the National Authority for Personal Data Processing at www.dataprotection.ro and file a complaint with them.
