This Privacy Policy regarding the processing and protection of users’ personal data (hereinafter referred to as the “Policy”) has been adopted and is in effect by the limited liability company SIA “Art Esthetic EU” (hereinafter referred to as the “Company” or “we”).

The controller for the processing of personal data is SIA “Art Esthetic EU”, registration No. 50203152921, address: Jūrmalas gatve 59 – 37, Riga, LV-1067; tel. +37129188510, email info@artesthetic.lv.

We collect, use and store personal data that you provide to us when you use our websites and mobile applications (hereinafter referred to as the “Sites”) from any device and when communicating with us in any form and in accordance with this Policy.

By using our Sites and providing us with your personal data, you consent to the processing of your personal data in accordance with this Policy.

1. Basic Concepts

“Personal data” – any information relating to a specific individual (subject of personal data).

“Processing of personal data” – any action (operation) or set of actions (operations) performed using automation tools or without the use of such means with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

2. Data we collect

We process:

• personal data that you provide to us when filling out information fields on our websites, including when filling out a contact form, when subscribing to a newsletter, when registering for events (webinars, conferences);
• personal data that you provide when filling out applications for the purchase of services offered by the Company, as well as for concluding an agreement;
• personal data that is necessary for the high-quality and safe provision of cosmetology services, namely information about your state of health, past illnesses, pregnancy, allergies and other information that the relevant specialist in a specific situation will request for a cosmetological procedure or manipulation;
• technical data that is automatically transmitted by the device with which you use our Sites, including technical characteristics of the device, IP address;
• information stored in cookies. Depending on the browser and device you use, different sets of cookies are used, including strictly necessary, performance, functional and analytical cookies;
• personal data that we receive through video surveillance during your visit to our cosmetology services center.

3. Purposes of processing personal data

We process your personal data solely for the purposes for which it was provided, including:

• providing you with information about the Company, our services and events, as well as sending you our news materials. Emails are sent only with your voluntary consent. After receiving an email from us with news materials, you will always be sent a link with the opportunity to unsubscribe from receiving news. If you choose this option, your email address will be removed from our newsletter database and you will no longer receive information;
• communications with you when you contact us;
• providing you with services in accordance with the service agreement.

We conduct video surveillance for the purposes of both your personal safety and the safety of our employees, clients and property. Video surveillance is carried out in public places according to strict security and privacy rules, using modern technology and equipment. Information signs are located in video surveillance areas.

If we process personal data for purposes that you were not informed about in this Policy, we will inform you separately about the individual conditions for processing this data.

We do not make decisions that give rise to legal consequences for you or otherwise affect your rights and legitimate interests based solely on automated processing of personal data.

4. Legal basis for processing personal data

We process your personal data if one of the following conditions is met:

• You have consented to the processing of your personal data;
• processing of personal data is necessary for the performance or conclusion of a contract;
• the processing of personal data is necessary to comply with the legal obligations imposed on us by regulations (for example, to transfer information to the State Revenue Service);
• the processing of personal data is necessary to ensure our legitimate (legitimate) interests (for example, to ensure the safety of property, we conduct video filming, we can also go to court to collect a debt, etc.);
• processing of data is necessary to protect the vital interests of you or another natural person.

5. General principles for processing personal data

The company ensures the processing of personal data in accordance with the following principles:

• limitation of the purpose of data processing – personal data is processed only for the purpose of processing and use of data established here, or for those actions to which the data subject has consented;
• quality and proportionality of data – personal data is processed as correctly as possible and updated as necessary. Personal data is relevant, relative and does not exceed the necessary volume, taking into account the purpose of processing;
• transparency – the data subject understands for what purposes the data is processed;
• security – when processing data, we apply technical and organizational security measures that are appropriate to possible risk factors, for example, measures against accidental or unlawful destruction of data, alterations, unauthorized disclosure or access;
• minimization – personal data is regularly reviewed in order to remove data that is no longer necessary to fulfill the purpose of processing.

6. Security of personal data

To ensure the security of your personal data during their processing, we take necessary and sufficient legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution, as well as from other unlawful actions regarding personal data.

7. Confidentiality/Transfer of personal data

Information about your personal data will not be posted in publicly available sources or disclosed to third parties, unless the Company receives your express consent, or the information is required in accordance with legal requirements. If necessary, we may disclose your personal data to government and law enforcement agencies to protect our legitimate interests.

Also, in order to fulfill our obligations to you, we may transfer your personal data to cooperation partners: data processors who perform the necessary data processing on our behalf, for example, IT infrastructure service specialists, marketing agencies, leasing companies, courier services, etc.  These companies, in accordance with the current regulations of the Republic of Latvia and our cooperation agreement, are obliged to protect your personal data and process it only in accordance with the purposes specified by us.

We do not transfer your data to third countries and international organizations.

8. Rights of the subject of personal data

The Company respects your rights to review, correct, update, object to, or otherwise change, or delete, information provided to the Company. For this purpose, you can contact us by sending a request with the subject line “Request for personal data” or “Revocation of consent to the processing of personal data” (in case of withdrawal of consent to the processing of personal data) to the email address info@artesthetic.lv.

In the event of your request to delete information associated with you, we will immediately delete your personal data, because Respect for your rights is Our priority. Unfortunately, we will not be able to delete your personal data if regulations impose an obligation on us to retain it. 

9. Shelf life

All personal data received from you is stored for the period during which you use our services, or, if your personal data is processed on the basis of your consent, until you revoke your consent. A longer retention period for personal data is permitted in order to comply with legal requirements regarding the minimum retention period for documents or information, or to protect our legitimate interests (for example, but not limited to, accounting or legal proceedings).

CCTV recordings are kept for no more than one month.

When the retention period for personal data ends, we will securely delete your personal data, or make it inaccessible (archiving), or unidentifiable so that it can no longer be associated with you.

10. Cookies

We use cookies. You can find out more about the policy and technical nuances related to cookies in the appropriate section.

11. Privacy Policy Changes

The policy is subject to change without prior notice. The amended version of the Policy, which is published on the Site, replaces all previous versions of the Policy. Any changes do not affect the Company’s general policy regarding respect for the rights of the subject of personal data.