Site Logotype

Privacy Notice

PRIVACY NOTICE FOR THE PROCESSING OF PERSONAL DATA BY MOOD NAIL LOUNGE

Date: 10.10.2022

1. Administrator data and contact details.
The nail salon Mood Nail Lounge is owned by “PLANET NAILS” OOD, with EIC: 206243674, headquarters and management address: city of Varna, g.k. Chaika, bl. 203, entry A, fl. 1. Contact details for the Company include:

Address: city of Varna, Chaika district, bl. 203, entry A, fl. 1

Phone: +359 882 498 151

Email address: info@moodnaillounge.com

We recognize that it is important for you to understand how we collect, store and share personal data processed when using the services we provide. In compliance with the principles of transparency and good faith in the processing of your data, we provide you with the required information through this Privacy Policy.
2. Who is this Privacy Notice intended for?
This Privacy Policy is intended for all persons whose personal data we process in connection with the operation of our salon. Such persons may be:
  • Visitors to our website/social media profiles;
  • Persons who have made a reservation to receive our services;
  • Customers who use our services;
  • Recipients of vouchers for using our services;
  • Recipients of discounts on the price of using our services;
  • Persons who have made inquiries by telephone, e-mail or social networks;
  • Business partners and their employees;
3. What kind of personal data do we process, for what purposes, on what basis and for how long do we process it?
The type of personal data we process depends on the purpose for which we need it and the activities for which we receive the data.

3.1 Visit to our website https://moodnaillounge.com/

When you visit the website https://moodnaillounge.com/, we register in the so-called log files the following data: IP address; the date, time and duration of the visit; browser type; the user’s operating system; URL address (source URL from which you reached the site); amount of data transferred. We process this information to ensure the functioning of the website, such as to establish a connection with it, to identify errors in their operation and to analyze the security of the system. The basis for the processing of this information is to guarantee our legitimate interests, which consist in achieving the stated goals. We store data as soon as possible – the data until the end of the current month.

 

When you visit the site, we create data that we store on your end device. More information about the processed data, the purposes and grounds for their processing, is contained in our Declaration about the use of cookies.

 

The data we process when visiting the site does not allow us to establish your identity, except when you enter your identification data when ordering a voucher.

3.2 Ordering a gift card

In order to process an order placed by you and to be able to fulfill it, it is necessary to provide us with information about your names, e-mail and telephone, names of the recipient of the gift card, value of the voucher, information that is contained in the personal message, delivery address when you requested one. In the process of executing the order, we will save data on the date and order number of the voucher, the amount due, the method of ordering, the method of payment, the courier who will make the delivery and the number of the order’s bill of lading. The basis for data processing is the conclusion and performance of a contract with the data subject.

 

We use the data created in the process of concluding and executing contracts for the purchase of gift vouchers to identify and prevent the conclusion of contracts with unscrupulous customers who do not comply with the rules established by our General Terms and Conditions. An example of such processing is the identification of several consecutive cases where the person who should receive the order cannot be found at the address or refuses to pick up the ordered voucher from the courier’s office. The establishment of such practices will lead to the refusal to conclude a contract in the next order. All decisions to refuse to enter into a contract are made with human participation.

 

According to the requirements of the tax legislation, we keep the data for a period of 5 years.

3.3 Booking an appointment to use our services

When booking an appointment to use our services, we require the provision of customer data, including names, telephone number and/or email, time and type of service you wish to use. We process this data in order to improve the quality of the services and the service, by creating a schedule for the provision of the services and notifying the client of changes to it. The basis for their processing is the protection of the administrator’s legitimate interests in providing quality services.

 

According to the requirements of the tax legislation, we keep the data for a period of 5 years.

3.4 Using the services provided at MOOD NAIL LOUNGE

When you use our services, we process the following data: names, telephone number and/or e-mail, information about the service used, as well as consumables used, date and time of service provision in order to improve the quality of the services and the service, by providing personalized services. The basis for the processing is the protection of our legitimate interests in providing quality services.

 

We retain the data about the services used for a period of 18 months from the date of your last visit, so that we can ensure that we can provide you with a personalized experience even if we have not seen each other recently.

3.5 Customer Service

In order to facilitate the interaction with customers and potential customers, we process data about such persons when asking questions and inquiries to the announced phone, e-mail and through our profiles on social networks, incl. through the applications the following communication applications: Instagram, Viber, Messenger, Google, What’s up, Telegram. This information includes names, e-mail or telephone, and any other information that is provided to us in the process of communication. Please do not provide us with information that is not related to our activity!

 

To ensure that you receive the highest quality service, we record the conversations in which we process voice data. The goal is to improve the service and ensure the traceability of the activities of the persons who are assigned to provide customer service over the phone.

 

The basis for these processing activities is the protection of our legitimate interests, which consist in the effective management of relationships with customers and potential customers.

 

We process the data within 18 months of receiving it, after which we delete it.

3.6 Marketing

To promote our business and to attract new customers, we use various forms of direct marketing. The information we use depends on the type of activity. E.g. When we notify you of current merchandise, promotions, and games through messages, we use the email address and/or phone number provided. When we promote our services through social networks, data about your preferences is also used. We base these activities on the legitimate interests in promoting and developing our commercial activity, by providing up-to-date information about the goods and promotional conditions offered by us. We use this data for up to 1 year after your last visit to us.

 

We may process the information about the services used and for analysis of our activity or for marketing purposes. In this case, the basis for the processing is the protection of our legitimate interests, which consist in the development of our commercial activity.

 

In any case where we use your information for our legitimate interests, we take care and take the necessary measures to ensure that your fundamental rights and freedoms are not affected. You may at any time terminate the processing of your personal data for marketing purposes and we will respond to your request. You can do this by using the unsubscribe option in the communications you receive or by using the standard way to exercise your rights below.

 

To share the result of our activity, we publish photos on the website and on the social network profiles. We strive to keep these photos free of personal information, but if this is not possible, we will ask for your consent before publishing. The purpose of the processing is to expand the customer base by sharing the results achieved for real customers. The basis for processing is the consent of the data subject. We process your data as long as we have your consent.

3.7 Social media profiles

We maintain profiles on Facebook and Instagram social networks (services of Facebook Ireland Ltd. 4 Grand Canal Square, D2 Dublin) through which we publish and share content, incl. commercial communications about goods and services offered by us. When you visit our profiles, the relevant social network registers your visit and behavior through cookies and other technologies. You can learn more by reading the privacy information each provides to its users. The basis for processing the data contained in visiting and participating in our profiles on social networks is consent. We process this data as long as we have your consent.

 

With respect to the information we receive through the Page Analytics service, we are a joint controller with Facebook. The service allows us to understand how our pages are used and what is interesting to the persons who visit them but does not allow us to uniquely individualize you. Key elements of the co-administration agreement are available at: https://www.facebook.com/legal/terms/information_about_page_insights_data

4. How do we receive data?

Most often, we receive the data directly from you when you visit the website, when you use our services or when you contact us. It is possible that the data is received by other persons, e.g. when the person making the order and the person for whom the voucher is intended differ or when reserving an appointment for another person.

 

We may receive your data from another client of ours who wishes to share with you promotional terms or discounts applicable to them for the use of services.

 

If you provide us with information about other individuals, ensure that you have a basis for providing the data (e.g. you have the individual’s consent) and familiarize the individual with this Privacy Policy.

5. Who do we share your personal data with?

In certain cases, we may provide access to the data of providers who support our business and provide us with services necessary for the website to function. Such a service is e.g. hosting and data storage (“SuperHosting.BG” EOOD). As our processor, they are required to provide a high level of security, and we control the processing activities they carry out.

 

To administer online reservations, we use the Reservation studio platform. With regard to the processing of your data, the platform provider is an independent controller of your data who provides us with the data based on your consent and as such will independently inform you of the processing activities necessary for the operation of the platform.

 

We do not transfer personal data to third countries or international organizations without providing a reliable mechanism to protect your rights during this exchange. We use the following applications for communication: Instagram, Viber, Messenger, Google, What’s up, Telegram, where the data is processed by the provider of the respective application. Some of these providers are established outside the European Economic Area and may not provide a level of protection consistent with European requirements. You choose how to communicate with us. Selecting an application is evidence of your consent to the processing of your data outside the EEA when the relevant provider carries out such processing.

 

We provide data to the competent state authorities whenever this is provided for by law.

 

If there is a reason, we may provide data to private legal entities that process them as independent administrators – e.g. to courier service providers we provide details of the name, telephone number, address of the recipient and the payment amount when delivering a gift voucher.

6. Is your data protected?

We take reasonable physical, technical and organizational security measures designed to protect all personal data from loss, misuse, alteration, destruction or damage, as required by law. We determine these measures based on the risks we identify, periodically review the measures in place and update them as necessary.

 

If you would like to know more about the measures provided, please contact us in the ways indicated above.

7. What rights do you have?

When processing personal data in connection with our commercial activity, we apply in good faith the statutory rules for exercising the rights of data subjects.

 

As a owner of your personal data, you have the right to request:

  • to provide you with access to your personal data, subject to the rights of third parties;
  • to remove inaccurate personal data (including the right to have incomplete personal data completed);
  • to delete personal data. It is applicable only in the following cases:
    • the personal data are no longer necessary for the purposes for which they were processed;
    • you withdraw your consent and there is no other basis for the processing;
    • you object to processing based on our legitimate interests and we cannot demonstrate that our interests override your rights;
    • the personal data were processed unlawfully;
    • data erasure is necessary to comply with a legal obligation under Union law or the law of a Member State that applies to the controller.
  • to limit the processing of personal data to storage only when:
    • the accuracy of the personal data is contested;
    • the processing is unlawful, but you object to the deletion of the personal data;
    • we no longer require the personal data, but you still need it to establish, exercise or defend a legal claim;
  • to withdraw your consent at any time, and the withdrawal will not affect the processing activities already carried out;
  • to exercise your right to portability – for the data processed on the basis of a contract or consent, when their processing is carried out in an automated manner.

You have the right to object to data processing based on our legitimate interests at any time and on grounds related to your specific situation.


If you have any questions or concerns about the processing of your personal data or wish to exercise any of your rights, please contact us at the following email address: info@moodnaillounge.com.


If you wish to use your rights as a data subject, send a request for the exercise of rights to the above email address. In your request to exercise rights, you should state your names in order to identify you as a data subject. Specify what your request is. Indicate the address for correspondence with you (physical address, electronic address), according to the preferred form of communication.


In order to process your request, we need to identify you. Therefore, it is necessary to send us your request via the e-mail or telephone number with which you communicate with us (eg when making a reservation, purchasing a gift voucher or when communicating via the contact form). If you are using an email other than the one you have already provided us with, please sign the sample request or email with a qualified electronic signature.


If necessary, at our discretion, we may request additional identification data, as well as an identity document. We will inform you about the reasons that require the provision of additional information.


If you consider that the processing of personal data is illegal or violates your rights, you can file a complaint with the Commission for the Protection of Personal Data, address: Sofia 1592, “Prof. Tsvetan Lazarov” No. 2, with electronic address: https://www.cpdp.bg/ or to the competent court.


This DECLARATION OF CONFIDENTIALITY ABOUT THE PROCESSING OF PERSONAL DATA is written in Bulgarian, Russian and English languages and all three languages shall have equal validity. If there is any conflict or inconsistency between the language versions, the Bulgarian shall be the governing and prevailing version.