PRIVACY

Special and/or sensitive personal data that we process
Our website and/or service does not intend to collect data about website visitors who are younger than 16 years of age. Unless they have permission from parents or guardians. However, we cannot check whether a visitor is older than 16. We therefore recommend that parents be involved in the online activities of their children, in order to prevent data about children from being collected without parental consent. If you are convinced that we have collected personal information about a minor without this consent, please contact us at browstarcosmetics@gmail.com and we will delete this information.

For what purpose and on what basis do we process personal data?
Browstar Cosmetics processes your personal data for the following purposes:
- Handling your payment
- Sending our newsletter and/or advertising brochure
- To be able to call or email you if this is necessary to provide our services
- To inform you about changes to our services and products
- Offer you the opportunity to create an account
- To deliver goods and services to you
- Browstar Cosmetics analyzes your behavior on the website in order to improve the website and tailor the range of products and services to your preferences.
- Browstar Cosmetics also processes personal data if we are legally obliged to do so, such as data that we need for our tax return.

How long we keep personal data
Browstar Cosmetics does not store your personal data for longer than is strictly necessary to achieve the purposes for which your data is collected. We do not store data for longer than unless we are legally obliged to keep your data for longer. How long certain data is kept depends on the nature of the data and the
purposes for which they are processed. The retention period may therefore differ depending on use

Sharing personal data with third parties n
Browstar Cosmetics does not sell your information to third parties and will only provide it if this is necessary for the execution of our agreement with you or to comply with a legal obligation. We enter into a processor agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. Browstar Cosmetics remains responsible for these processes. The companies with which we share your data are: DHL, Postnl, UPS, DPD and Mollie. Sharing your data is necessary to process your order, shipping and payment.

external links
The website may contain links to other websites. We are not responsible for the practices of other websites linked to or from our Website. Our privacy statement does not apply when you use a link to go from our website to another website. Your conduct on any third party website, including those that have a link on our website, is subject to their own rules and policies. We are not responsible for the privacy policies or the content of these other websites. We encourage you to familiarize yourself with the privacy statements on those websites.

Cookies, or similar techniques, that we use
Browstar Cosmetics only uses technical and functional cookies. And analytical cookies that do not infringe your privacy. A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit this website. The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and, for example, remember your preference settings. We can also optimize our website with this. You can unsubscribe from cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information previously stored via the settings of your browser.

View, adjust or delete data
You have the right to view, correct or delete your personal data. In addition, you have the right to withdraw your consent to data processing or to object to the processing of your personal data by Browstar Cosmetics and you have the right to data portability. This means that you can submit a request to us to send the personal data we have about you in a computer file to you or another organization mentioned by you.

You can send a request for access, correction, deletion, data transfer of your personal data or request for withdrawal of your consent or objection to the processing of your personal data to browstarcosmetics@gmail.com.

To ensure that the request for access has been made by you, we ask you to enclose a copy of your proof of identity with the request. Make your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen Service Number (BSN) black in this copy. This is to protect your privacy. We will respond to your request as quickly as possible, but within four weeks.

Browstar Cosmetics would also like to point out that you have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority. This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

How we protect personal data
Browstar Cosmetics takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your data is not properly secured or there are indications of misuse, please contact our customer service or via browstarcosmetics@gmail.com.

Which third parties have access to your personal data?
Only those employees who need to have access to your personal data have access to your personal data.
We may share your personal information set out in paragraph 2 with
third parties. We only share your personal data with third parties if this is necessary to provide our services, for analytical or market purposes or
to comply with legal obligations. We ensure that when we work with third parties, we enter into a processing agreement with that third party. We then agree with these third parties that they will only process your personal data in accordance with this privacy statement.

In some cases we may also have to provide data to third parties due to a legal obligation. We always look at how we do this
can respect your right to privacy as much as possible.

In principle, we do not share your personal data outside the European Economic Area (EEA), except with Google, based in the United States, for functional and tracking purposes. Otherwise, if we transfer your personal data outside the EEA, we will only do so under the terms set out by privacy legislation. However, with regard to some non-European service providers that we engage, data processing outside the European Economic Area cannot be excluded. We ensure that such service providers always provide an appropriate level of data protection.

Online store software
Our online store was developed with software from Shopify and the web hosting is also provided there. Personal data that you provide
provided to us for our services are shared with this party. Shopify has access to your data to provide us with (technical) support, they will never use your data for any other purpose. Based on the agreement we have concluded with them, Shopify is obliged to take appropriate security measures. These security measures consist of applying SSL encryption and a strong password policy. Backups are made regularly to prevent data loss.

Web hosting
We use web hosting from Shopify. Shopify processes personal data on our behalf and does not use your data for its own purposes. However, this party can collect metadata about the use of the services. This is not personal information. Shopify has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Shopify is obliged to maintain confidentiality under the agreement.

How do we protect your personal data?
We handle your personal data with the utmost care and ensure appropriate organizational and technical security measures are in place to protect personal data against unauthorized access or modification, disclosure or destruction of personal data. We comply with the applicable safety standards. The information exchanged, collected and analyzed on our Website is encrypted with a certificate. You can recognize this by the padlock in the address bar.

If, despite the security measures, there is a security incident that is likely to affect your privacy, we will inform you about the incident as soon as possible. We will also inform you about the measures we have taken to limit the consequences and prevent recurrence in the future.

How long do we keep your data?
We do not retain data for longer than is necessary to carry out our business, unless we are legally obliged to retain your data for longer. How long certain data is retained depends on the nature of the data and the purposes for which it is processed. The retention period may therefore differ depending on use.

Privacy statement change
We may change or update this privacy statement from time to time.
Changes to this privacy statement will take effect from the moment that
they are published on our Website. We therefore recommend that you:
to consult this privacy statement regularly so that you are aware of any changes to it. If these adjustments are of great importance to you, we will always inform you