Nº1. INTRO

This policy describes our privacy practices in plain language to ensure that you understand what information we collect, why we collect it, how it is used and what choices you have about your information.

This privacy policy applies to the processing of data on Kenlan website. The entity who is responsible for your information under this Privacy Policy (the "Data Controller") is:

Kenlan Haircare LLC

(hereinafter referred to as "we", "us" or "our")

If you have any questions about data protection, wish to exercise your rights as a data subject or wish to revoke consent, you can contact us at [email protected].

Nº2. WHAT ARE THE LEGAL BASES OF PROCESSING PERSONAL DATA?

The legal bases for processing are listed below and at least one of these must apply whenever we process personal data:

Consent: the individual has given clear consent to process personal data for a specific purpose.
Legal Obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
Vital Interests: the processing is necessary to protect someone’s life.
Public Task: the processing is necessary for us to perform a task in the public interest or for official functions, and the task or function has a clear basis in law.
Legitimate Interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests.

Nº3. WHAT ARE YOUR RIGHTS?

You have the following rights with respect to us processing your personal data:

Right of Access
You have the right to obtain information about whether and which of your personal data is processed by us. In this case, we will also inform you about:

The purpose of the processing; the categories of data; the recipients of your personal data; the planned storage period or the criteria for the planned storage period. Your further rights; unless we have been provided with your personal data by you: any available information about its origin. If available: the existence of automated decision-making and information about the logic involved, the scope and the intended effects of the processing.

Right to Rectification
You have a right to rectification and/or completion if your personal data processed by us is inaccurate or incomplete.

Right to Restriction of Processing
You have a right to restriction of processing, provided that we verify the accuracy of your personal data processed by us; the processing of your personal data is unlawful; you need your personal data processed by us for legal prosecution after the purpose has ceased to exist; you have objected to the processing of your personal data and we are reviewing this objection.

Right to Erasure
You have a right to erasure if we no longer need your personal data for its original purpose; you withdraw your consent and there is no further legal basis for processing your personal data; you object to the processing of your personal data and - unless it is direct marketing - there are no overriding reasons for further processing; the processing of your personal data is unlawful; the erasure of your personal data is required by law; your personal data was collected as a minor for information society services.

Right to Information
If you have exercised your right to rectification, erasure or restriction of processing, we will inform all recipients of your personal data, of this rectification, erasure of data or restriction of the processing.

Right to data portability
You have a right to receive your personal data processed by us on the basis of consent or for the performance of a contract in a structured, common and machine-readable format and to transfer it to another controller. If technically feasible, you have the right to have us transfer this data directly to another controller.

Right to object
You have the right to object to the processing of your personal data in case of special reasons. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing. In case of processing of your personal data for direct marketing purposes, you have the right to object at any time.

Right of withdrawal
You have the right to revoke any consent given to us at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data by us violates the law.

Nº4. PURPOSE OF DATA PROCESSING

We process data collected about you for various purposes. For example, if you place an order at kenlanhair.com, the data stored in our system will be processed by us solely for the purpose of having a record of what your order included in order to prepare your order, including the order total and the means used to process & pay for the order in the case of needing to refund the order.

At the same time, address data stored in the account is also used, among other things, for the purpose of delivering your order. Individual data collected about you may also be processed for the purpose of direct advertising. For example, we may send you our own advertising emails or reminder emails regarding your order to the address stored in your account. In individual cases, we may also pass on your personal data to third parties. This is the case, for example, when goods are delivered by a delivery company / courier. If you are obliged to provide your e-mail address when creating an account, this is necessary because we are legally obliged to send you an electronic confirmation of receipt of your order after you have placed it. The email address you provide will be used for us to send you promotional email newsletters. However, we may also send you e-mail advertising about goods/services similar to those you have purchased from us in the past. You will be expressly informed in this privacy policy about the possibility of using your e-mail address for this purpose and about your right to object in this respect.

Nº5. GEO-LOCALIZATION

Each time you access our website, information is sent to the server of our website by the respective internet browser of your respective end device and temporarily stored in log files. The data records stored in this process contain the following data, which are stored until automatic deletion: Date and time of access, name of the page accessed, IP address of the requesting device, referrer URL (origin URL from which you came to our web sites), the amount of data transferred, loading time, as well as product and version information of the respective browser used and the name of your access provider. The legal basis for the processing of the IP address is our legitimate interest. Our legitimate interest results from:

Ensuring a smooth connection setup, ensuring comfortable use of our website, evaluation of system security and stability. A direct conclusion to your identity is not possible on the basis of the information and will not be drawn by us. The data is stored and automatically deleted after the aforementioned purposes have been achieved. The standard periods for deletion are based on the criterion of necessity.

Nº6. DATA PROCESSING WHEN CONCLUDING A CONTRACT

If you no longer place orders or purchase goods from our website, we continue to store the data collected from the order history. This includes First Name, Last Name, Billing and Delivery Address, E-mail address, Billing and Payment Data, Telephone Number, if applicable. The legal basis for this is the provision of a service-based measure, i.e. you provided us with the data on the basis of the respective relationship (e.g. management of your account, processing of a purchase) between you and us. We are obliged to process your e-mail address in the event of purchase via our website due to legal requirements. Insofar as we do not use your data for advertising purposes, we store the data collected for the processing of the orders, or reference to past orders, until the expiry of the statutory or possible contractual warranty and guarantee rights. After the expiry of this period, we retain the information of the contractual relationship required by the company and tax law for the periods determined by law. For this period, the data will be processed again solely in the event of an audit by the tax authorities. The following data processing is also required for the execution of a purchase via our website: Your payment data will be passed on to payment service providers commissioned by us to process the payment(s). We pass on details of your delivery address to logistics companies and partners commissioned by us to deliver your order. In order to ensure that the goods are delivered in accordance with your wishes, we transmit your e-mail address and, if applicable, telephone number, and address to the logistics company and/or shipping partner commissioned by us to carry out the delivery. If necessary, they will contact you in advance of the delivery in order to coordinate the details of the delivery with you. The respective data will be transmitted solely for the respective purposes and deleted again after delivery has taken place.