Data protection

PERSONAL DATA PROTECTION GENERAL TERMS OF PERSONAL DATA PROTECTION GENERAL PROVISIONS

The General Terms of Personal Data Protection refer to the personal data stated on the website, and to those processed through the use of www.noellebrush.com, i.e. collected and stored by the data controller of NOELLE d.o.o., Nova Ves 45/1, Zagreb, TIN 87410410340, from a natural person as the data subject. NOELLE d.o.o. collects personal data in order to conclude and perform sales contracts, record purchase orders, perform user identification, analyse business operations, carry out marketing activities, implement a reward system, deliver products, draw up sale and purchase documentation, provide technical assistance and authorise payments with credit and debit cards.

As the www.noellebrush.com website service provider, NOELLE d.o.o. is dedicated to protecting your privacy and personal data. The user is kindly asked to read these General Terms of Service to better understand what type of data NOELLE d.o.o. collects and for what purposes it uses them. The user can ask any questions related to the protection of personal data by sending an email to info@noellebrush.com The user is kindly asked to carefully read the General Terms of Personal Data Protection. By providing their personal data via www.noellebrush.com and accepting these General Terms of Service via www.noellebrush.com, the user acknowledges that they have read, understood and accepted the General Terms of Personal Data Protection and that they agree to the collection, processing and use of their personal data in accordance with these General Terms of Service. If the user disagrees with these General Terms of Service and the General Terms of Personal Data Protection, they are obliged to leave www.noellebrush.com and stop using it. The General Terms of Service of www.noellebrush.com apply to any and all issues that are not specifically regulated by the General Terms of Personal Data Protection.

AMENDMENTS TO THE GENERAL TERMS OF PERSONAL DATA PROTECTION

NOELLE d.o.o. may amend the General Terms of Personal Data Protection at any time by publishing the amended text on www.noellebrush.com. The amendments to the General Terms of Personal Data Protection enter into force immediately upon their publication on www.noellebrush.com. As the data subject, the user undertakes to carefully read and examine the applicable General Terms of Personal Data Protection available on www.noellebrush.com before providing their personal data.

PERSONAL DATA TO BE PROCESSED AND THEIR USE

NOELLE d.o.o. collects the following personal data from the data subject on www.noellebrush.com: name and surname, password, telephone number, address, email address, product delivery address, invoice delivery address, postal code, city, sex, date of birth, company name and TIN (for companies). The following persons can consult the user’s personal data in order to carry out the necessary activities related to the sales contract between the customer and NOELLE d.o.o.: legal persons participating in the execution of a sales contract such as courier and bookkeeping companies, IT support, marketing support, companies affiliated with NOELLE d.o.o. and public bodies requiring the submission of personal data in accordance with binding regulations, of which NOELLE d.o.o. keeps a database of personal data. The customer hereby agrees that NOELLE d.o.o. may process provided personal data for the purpose of its own record-keeping and statistics, creating customer databases, providing information about products, services and delivery, delivering promotional material as well as for improving customer relationships and the level of services. NOELLE d.o.o. may provide the above data to a third party in order to perform a contract, protect the interests of the customer and NOELLE d.o.o., prevent any potential misuse, gain better understanding of customer’s individual needs and requirements, and boost the service level of NOELLE d.o.o. resulting in improved customer satisfaction. NOELLE d.o.o. will keep personal data as long as this is necessary for the purposes provided for in these General Terms of Service. NOELLE d.o.o. will ensure that all personal data are kept in a safe place (with reasonable administrative, technical and physical protection to prevent their unauthorised use, access, disclosure, copying, or modification) accessible only to authorised persons of NOELLE d.o.o. NOELLE d.o.o. undertakes to enable the user access to their personal data to make sure that they are accurate, complete and up-to-date. If the user requests that their personal data be corrected or deleted, NOELLE d.o.o. will carry out the requested actions. NOELLE d.o.o. forwards the necessary personal data to its business partners only, for the purpose of delivering customer orders or addressing printed advertising material. NOELLE d.o.o. does not record or store the transaction data required for card payments. NOELLE d.o.o. will keep personal data as long as this is necessary for the purposes provided for in these General Terms of Service. The data controller is NOELLE d.o.o. The data controller will, for every database of personal data it maintains, set up and keep records containing basic database information, in particular the following: • Database name; • Name or personal name of the data controller and their seat or address; • Purpose of data processing; • Legal grounds for creating a database; • Categories of persons to whom the data refer; • Types of data contained in the database; • Manner of collecting and keeping data; • Period of data retention and use; • Personal name or the name of database recipient, their address or seat; • Information about a data transfer to or from the Republic of Croatia stating the country, international organisation or the foreign recipient of personal data and the transfer purpose prescribed by the relevant international agreement, law or other regulation, or by a written consent of the person the data relate to; • Information about the personal data protection measures undertaken.

The data protection officer is: Paula Žitnik, paula@noellebrush.com, +385 99 547 7178, Nova Ves 45/1, Zagreb

Personal data in such databases are adequately protected against accidental or deliberate misuse, destruction, loss, or unauthorised alteration or access. The data collector has undertaken technical, staff-related and organisational measures needed to protect personal data from accidental loss or destruction, unauthorised access, modifications or disclosure, and has prescribed mandatory signing of a confidentiality statement by the employees who process data. The user of www.noellebrush.com is entitled to receive information about the collection and processing of their personal data from the data controller. Within 30 days from the day when the request was made by the user of www.noellebrush.com or by their legal representatives or authorised persons, the data controller will: • Confirm whether the user’s personal data are being processed or not; • Provide an unambiguous notice about the user’s data that are being processed and of their source; • Enable the user to access the database of personal data, and inspect and copy their personal data contained therein; • Deliver to the user excerpts, certificates or printouts of their personal data contained in the database of personal data indicating the purpose and legal grounds for the collection, processing and use of such data; • Deliver a printout of data about who, for what purpose and on what legal grounds was allowed to use the user’s personal data; • Give a notice about the logic of any kind of automatic processing of the user’s data. Upon request of the user of www.noellebrush.com or their legal representatives or authorised persons, the data controller will amend or delete personal data if they are incomplete, inaccurate or not up-to-date. Irrespective of the request of the user of www.noellebrush.com, the data controller will amend their personal data if they are incomplete, inaccurate or not up-to-date. The data controller will notify the person to whom the data relate and the recipients of personal data of amendments or deletions of personal data within 30 days. When the user engages in certain activities on www.noellebrush.com such as opening a user account, using the online shop, filling out surveys, commenting, posting content, participating in competitions or prize games, sending feedback, requesting information about services, replying to a job offer, etc., NOELLE d.o.o. may request from the user to provide additional personal data. In this case the user is required, before providing additional personal data, to carefully read the General Terms of Personal Data Protection and agree to their application in relation to additional data. Some of the required data are mandatory and some are optional, depending on the type of activity. If the user fails to provide mandatory data for an activity that requires them, they will not be allowed to engage in the activity. NOELLE d.o.o. collects and uses personal data to enable the use of services and activities provided through www.noellebrush.com, improve the functioning of www.noellebrush.com, create a customer database for the purpose of improving services and/or marketing, contact the users for the purpose of delivering marketing notifications, improve advertising and promotional activities, and analyse the use of www.noellebrush.com. Furthermore, personal data can be used for problem solving, performance of administrative tasks and contacting the users. By providing personal data and accepting the General Terms of Personal Data Protection, the user agrees that NOELLE d.o.o. and the persons mentioned in these General Terms of Service may inform them about their promotional activities, products and services.

PROVISION OF PERSONAL DATA

By providing their personal data on the basis of the General Terms of Personal Data Protection, the user acknowledges that NOELLE d.o.o. will grant the right to use their personal data to affiliated persons for the purpose of marketing, performing marketing and promotional activities and delivering marketing notifications. Any other provision of personal data to third parties may be performed exclusively in accordance with legal provisions regulating the protection of personal data.

AMENDMENTS TO AND CORRECTIONS OF PERSONAL DATA

NOELLE d.o.o. deems that any data subject should be able to ensure the accuracy, completeness and updated status of their personal data. If the user deems that their personal data are incomplete, incorrect or not updated, they can contact NOELLE d.o.o. by sending an email to info@noellebrush.com and request that they be appropriately amended or deleted. In case of a change, NOELLE d.o.o. recommends the user to update their personal data as soon as possible. The user may also request that the information about their user account be deleted or removed. DATA PROTECTION NOELLE d.o.o. pays particular attention to the protection of personal data and has undertaken a set of precautionary measures aimed at protecting the user’s personal data. The personal data on www.noellebrush.com can be accessed via a password or email address. THIRD PARTY DATA CONFIDENTIALITY The General Terms of Personal Data Protection refer only to the use of data collected by NOELLE d.o.o. from data subjects. Other websites that can be accessed via www.noellebrush.com have in place their own data collection and confidentiality statements, and the methods of their use and publication. If the user visits one or more other websites via www.noellebrush.com, NOELLE d.o.o. recommends them to carefully read the related data confidentiality statement. NOELLE d.o.o. will not be held liable for the third party terms and conditions of service. OTHER DATA In addition to personal data, NOELLE d.o.o. may request other, personally non-identifiable data that are not considered personal data (for example, data about the use of the website, computer and Internet server, preferences, hobbies, interests, activities). NOELLE d.o.o. uses them to select data that are relevant to the user in a better, more accurate and personalised way as well as for promoting the website and additionally directing and customising its content to the user. On the basis of the said data, NOELLE d.o.o. learns what content is the most popular among certain users.