/ Privacy Policy

Personal data (Art 4 L 1 GDPR)

The regulations of the GDPR apply to the processing of personal data of natural persons.

As per definition “personal data” are all pieces of information which refer to an identified or identifiable natural person (“data subject”). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to a name, an identification number, site data, an online identification sign or by one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of that natural person.

Processing (Art 4 L 2 GDPR)

With the term “processing” the GDPR describes any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Data Controller (Art 4 L 7 GDPR) and Data Processor (Art 4 L 8 GDPR)

The “Data Controller” is a natural or legal person, authority, entity or any other body who jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

The “Data Processor” is a natural or legal person, authority, entity or any other body who processes personal data on behalf of the Data Controller;

Consent (Art 4 L 11 GDPR)

The “consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Pseudonymization

The pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Personal data processed and collected

Your navigation on the Site and/or access to certain sections of the Site may result in the collection and subsequent processing of your personal data by the Controller. In fact, when connecting to the Site, computer systems and software procedures for their operation automatically and/or automatically and indirectly acquire certain information (such as, but simply an example, the so-called “cookies”, as specified in the “Cookie Policy”, which is located at the end of this policy, “IP” addresses, domain names of the computers used by users who connect to the Site, request, the time of the request to the server, etc.).

Specifically, your navigation to the Site and/or any requests for information or services from you may also involve the collection and subsequent processing of your personal data (such as first name, last name, postal and e-mail address, password, age, date of birth, gender, image, profession, marital status, etc.).

In particular, the collection of your personal data may take place:

— by filling out online forms on your part;

— through the publication by you of Contributions (as defined below), the content of which may include your personal data conferred directly by you, on social networks independently managed by third parties, such as, but not limited to, Facebook, YouTube, etc. (below “Social Network”). By “Contributions” we mean the images, comments, effect phrases associated with what is the subject of the Site, the contents and any other information that you conceived and published on the pages of the Social Networks dedicated to products of the different brands of the Controller, including the image that you possibly give. The publication of the Contributions can also take place under a pseudonym (“nickname”) chosen by you during registration on the Site, and possibly to the image that you have associated with your nickname. In choosing the nickname and any image associated with it, you remain solely responsible for any prejudices that the use of the nickname or image may cause to third parties.

In case you choose to send a request through the “Contact Us” section of the Site, the granting of some personal data is necessary for the Controller to meet your needs within the functionality of the Site.

Purposes and legal basis of data processing

According to the needs you have expressed from time to time by accessing the various sections of the Site the following are the purposes of the processing of your personal data and its legal basis.

Your personal data will be processed for the following purposes on the basis of the establishment of a precontractual relationship or with your consent to the data processing, which can be revoked at any time according to the procedures indicated by the Controller at the time of the collection of consent:

Owner and Data Controller

Nicehair FZE LLC, AMC — Boulevard-A Building, Ajman Media City, the UAE

Email: info@nicehair.pro