Privacy Policy

 

This Privacy Policy describes how El-Makeup (hereinafter referred to as “Elizabeth Loughlin Makeup”) processes and protects according to the General Data Protection Regulation (GDPR) and the relevant Irish data protection laws, the data you provide us with when using our website.

The security of personal data such as name, address, telephone number or email, is a serious and important concern for our company. Therefore, we conduct our online activities in compliance with the respective statutory provisions relating to data protection and data security. Below, you can find the information we process.

 

Personal data / types of use

As a principle, the protection of your personal data is of highest priority for EL-Makeup. You decide whether or not you wish to make such data known to us, for example in the course of any service enquiry, bookings or reservations. Such information on your part is relevant for your enquiry, but you provide it on a voluntary basis. An exception to this rule is when prior consent cannot be obtained for practical reasons and the processing of data is permitted by law.

 

Legal basis for the processing of personal data

If we obtain the consent of the data subject to process their personal data, Article 6(1)(a) GDPR serves as the legal basis for the processing of personal data.

When processing personal data necessary for the performance of a booking or reservation to which the data subject is party, Article 6(1)(b) GDPR shall serve as the legal basis. This also applies to any processing required to perform pre-contractual measures.

If processing of personal data is necessary for compliance with a legal obligation to which EL-Makeup is subject, Article 6(1)(c) GDPR shall serve as the legal basis.

In the event that the vital interests of the data subject or of another natural person necessitate the processing of personal data, Article 6 (1)(d) GDPR shall serve as the legal basis.

If processing is necessary to safeguard the legitimate interests of our company or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR shall serve as the legal basis for processing.

 

Data deletion and storage duration

The data subject’s personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond this if provisions have been made for this by the European or national legislator in Union regulations, laws or other rules to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the standards mentioned above expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

 

Exchange of data / contractual relationships with partners / third parties

In addition to the types of use described above, El-Makeup does not work within contractual relationships of partners or third parties. For example, if you place a reservation via our website, we will not transmit your information to be processes by partners or third parties. Nevertheless we do keep a temporary record of your Data on Google Drive for our purpose as descript below under the section “use of service for data storage”. The Data will only be used to verify, if the service or product is available on the requested date to process an enquiry. We will only transmit personal data to third parties where we are required to do so by law.

 

Data automatically collected on our website / usage data

We welcome anybody to visit and use our website free of charge and to look at the products and Services on offer. When you visit our website, Squarespace whom acts as our Website hosting company is recording the following general usage data and provides EL-Makeup a graphical assessment of which parts of our website you visit and how long you stay there:

1.    Information about the browser type and version used

2.    The user’s operating system

3.    The user’s IP address

4.    Date and time of access

5.    Websites from which the user’ system reaches our website

6.    The services and functions used on our website

Such data will be combined with the usage data of all visitors to our website in order to measure the number of visitors, the average time of the visits, pages visited, etc. This data Squarespace Ireland collects is through the agreement of Cookies and is used to be displayed to EL-Makeup on an analytics management surface integrated as a Squarespace Website feature.

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

Further Details of Squarespace Privacy Policy and Data Processing Addendum can be obtained on following Link: https://www.squarespace.com/privacy

Third party advertisements or links to other websites displayed on our website may collect user data if you click on them or otherwise follow their instructions. We have no control over the data collected either voluntarily or involuntarily via advertisements or websites of third parties. We recommend that you read the privacy policies of the promoted websites if you have any concerns regarding the collection and use of your data.

 

Cookies

Like many other commercial websites, Squarespace Ireland is hosting our web site, enabling the technology known as “cookies” to collect information on how you use the website, and to ensure your visit runs smoothly.

Cookies are text files that are stored in the Internet browser or come from the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string that allows the browser to be uniquely identified when the website is visited again.

Squarespace Cookie Policy: 

https://www.squarespace.com/cookie-policy

About the cookies Squarespace uses:

https://support.squarespace.com/hc/en-us/articles/360001264507

 

Contact forms and email contact

Our website offers options to contact us, to enquire about Services nor Products and to leave notes/comments for bookings nor orders. If a user takes advantage of one of these options, the data entered on the input screen will be transmitted to us by email and temporarily stored on Google Drive. This data includes:

1.    “Hiring Products”: your message through the contact form of our landing pages may contain mandatory fields such as Name, required date, phone number & email for us to get in contact with you and in order to process your query. The mandatory fields are label with a red *-Symbol. All other fields without a *-Symbol are voluntary information such as comments or address details and are optional.

2.   Bookings/Reservations: general queries or feedback can be submitted using our contact form on the contact tab with mandatory fields such as your Name, email address, Subject and a message will be required for us to process your individual request.  

Alternatively, you can contact us via the phone number provided on our website. 

No data is passed on to third parties in this context. The data is used exclusively for processing the conversation.

The legal basis for processing the data transmitted in the course of sending an email is Article 6 (1)(f) GDPR. If the purpose of the email is to conclude a contract, the additional legal basis for the processing shall be Article 6(1)(b) GDPR.

The personal data from the input screen is only processed in order for us to process the contact. In the event of contact via email, this is also the basis for the required legitimate interest in the processing of data.

Any other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the contact form input screen and the data sent by email, this is the case if the respective conversation with the user has ended. The conversation is deemed to be ended if it can be inferred from the circumstances that the relevant facts have been conclusively clarified.

Use of services for Data storage

Google Drive

Google Drive is a Data storage solution offered by Google Inc. EL-Makeup is utilising the service of Google Drive to temporarily store your queries for bookings nor orders via Google drive spreadsheets. The temporarily Data stored on Google Drive will be imported to our on-premise spreadsheet on a regular bases and deleted of Google Drive once it’s imported. You can find further information about Google Drive Privacy Policies on the below link.

Google Drive Privacy Policy: https://support.google.com/drive/answer/2450387?hl=en

 

Use of services for marketing and analysis purposes

Embedding and use of links to social media (Facebook, Instagram, twitter)

Links to external social network services such as Facebook, Instagram and Twitter are embedded on our website, in particular in the areas displaying our products & services. The responsibility for the internet services of these social network services lies solely with their operators. Below you will find further information, categorised according to the corresponding social network service.

None of your data is transferred to social media services as a result of our links to these services. These are normal hyperlinks, through which no regular data transmission takes place. If you click on the link, you will be taken directly to our social media page on the respective social media service. Data is only transmitted if you are logged into your user account of the corresponding social media service. You can then link to or share content from our websites directly using the social media service. Under certain circumstances, the social media service may thus ascertain which content you have viewed on our website.

The responsibility for the social media services linked to by El-Makeup lies exclusively with:

·       Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, for Facebook and its website;

·       Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA, for Instagram and its website; 

·       Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA, for Pinterest and its website;

·       Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for Google+ and its website;

·       YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA, for YouTube and its website;

·       Twitter Inc., 1355 Market St., Suite 900, San Francisco, CA 94103, USA, for Twitter and its website;

For further information regarding the purpose and scope of data collection, and regarding the further processing and use of your data by the respective social media service, see the privacy rules of the relevant service. These are available online:

·       Facebook: https://www.facebook.com/about/privacy/

·       Instagram: https://www.instagram.com/about/legal/privacy/

·       Pinterest: https://about.pinterest.com/de/privacy-policy

·       Google+ and YouTube: https://www.google.de/intl/de/policies/privacy/

·       Twitter: https://twitter.com/privacy

Under the above-mentioned links you will also find information regarding settings for the protection of your privacy and regarding your further rights concerning the processing of your data by the respective social network service.

All services are used for advertising and marketing purposes with the aim of making El-Makeup’s offering more attractive. As described above for each of the individual services, we take your right to privacy seriously by allowing you to object to the use of all services and informing you in advance about this Privacy Notice. The legal basis for the aforementioned data processing is Article 6(1)(f) GDPR. The information in this Privacy Notice and the right of objection granted to you sufficiently protects your right to privacy.

 

Security

El-Makeup takes precautions to ensure the security of your personal data. Your data will be diligently protected against loss, destruction, manipulation and unauthorized access or unauthorized disclosure and transmission.

El-Makeup protects collected customer data by saving it on Excel Files protected by passwords and deleting the data of the device connected to the internet bi-monthly, after storing it on an external drive located on-premise.

El-Makeup does its utmost and utilises state-of-the-art technology provided by Squarespace as a Web-Hosting company to provide you with a secure environment for the completion of your order or booking; however, we cannot guarantee absolute security of your data.

We ask you to take every available precaution to protect your personal data when online. We encourage you to at least change your passwords on a regular basis, to use a combination of letters and numbers, and to ensure you use a secure browser when surfing the internet.

 

Rights as a data subject

If your personal data is processed, you are a data subject as defined in the GDPR and you have the following rights with regard to the controller:

1. Information, rectification, restriction and deletion

You have the right to access the data stored about you by El-Makeup and information concerning its origin and recipient and the purpose of data processing by EL-Makeup website free of charge at any time. In addition, you have the right to rectify, delete or restrict the processing of your personal data, provided the legal requirements to do so are met.

Details can be found in the relevant statutory provisions, Article 15 to 19 GDPR.

2. Right to data portability

You have the right to receive the personal data concerning you that you have provided to EL-Makeup as the controller, in a structured, commonly used and machine-readable format. EL-Makeup can comply with this right by providing a csv export of the customer data processed about you, for example.

3. Right to information

If you have exercised your right of rectification, deletion or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or deletion of data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the controller.

4. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you that is based upon point (e) or (f) of Article 6(1) GDPR, including profiling based upon those provisions.

The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

5. Revocability of declarations of consent under data protection law

You may also revoke your consent with regard to El-Makeup at any time with effect for the future using the contact details given below.

6. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

 

Responsible authority, contact person for queries or exercising your rights as a data subject, contact

The responsible authority within the meaning of the data protection regulations for all data processing through the EL-Makeup website is:

EL-Makeup, Dunboyne Castle Estate, Dunboyne, Co. Meath, Ireland

In the event of any questions, comments, complaints or to exercise your rights as a data subject in connection with our Privacy Notice and the processing of your personal data by EL-Makeup website, you can contact me “Elizabeth Loughlin” directly by email (e.loughlin@live.ie).I will gladly take care of your data protection concerns.

 

Update of the Privacy Policy

EL-Makeup may update this Privacy Policy from time to time. Any such change will be displayed on the website. If you have any comments or questions regarding this Privacy Policy or any other guidelines on this website, please contact us in writing.