Cookie & Privacy Policy

Cookie Policy

1. General

This cookie policy (" Cookie Policy ") governs the use of cookies and similar technologies as part of your use of our Website (the " Website ") and its associated services (collectively referred to hereinafter as " Services "). This processing is carried out by NyaCurls as controller, with registered office at Heidebergstraat 46 Kessel-Lo 3010 (" we ", “ us ”), registered with the KBO under number BE 0749 859 092, in accordance with the applicable legislation regarding the protection of personal data.

Cookies are small text files that are stored on the hard drive of a device and contain certain information, including sometimes personal data. When you use our Website and/or Services, we also collect and process personal information other than via cookies and similar technologies. If you would like to know more, please read our Privacy Policy .

By continuing to use our Website and/or Services or by clicking "Accept" after being informed of the use of cookies and similar technologies, you acknowledge that you have carefully read this Cookie Policy and that you agree to it agrees without reservation. As set out in this Cookie Policy, you can change your cookie preferences at any time.

We reserve the right to change, supplement or replace this Cookie Policy from time to time. Any such changes, additions or replacements will be brought to your attention via our Website and/or Services. If you do not agree with these changes, additions or replacements, we ask you to send an email to info@nyacurls.be . If we have not received notification of this within three (3) working days after the changes, additions or replacements have been communicated to you via our Website or Services, you will be deemed to have accepted all changes, additions or replacements.

2. Which cookies & why

1. When you visit and/or use our Website, we place cookies or use similar technologies with which we collect and process personal data about you. Such cookies and similar technologies include, but are not limited to:

Name

Type

Goal

Retention period


_acloggedin

Functional and required

Supports login by Scheduling client if the client has an account.

January 1, 2025


_client_acloggedin

Functional and required

Supports login by Scheduling client if the client has an account.

January 1, 2025


algoliasearch-client-js

Functional and required

Adds auto-populated suggestions to address fields in Scheduling to help clients complete forms faster.

Persistent


AWSALB, AWSALBCORS

Functional and required

Improves performance in Scheduling by using one server for the duration of the session.

1 week


CART

Functional and required

Shows when a visitor adds a product to their cart.

2 weeks


CHECKOUT_WEBSITE

Functional and required

Identifies the correct site for checkout when Checkout on Your Domain is disabled.

Session


Commerce-checkout-state

Functional and required

Stores state of checkout while the visitor is completing their order in PayPal

Session


Crumb

Functional and required

Session


hasCart

Functional and required

Tells Squarespace that the visitor has a cart.

2 weeks


Locked

Functional and required

Prevents the password-protected screen from displaying if a visitor enters the correct site-wide password.

Session


PHPSESSID

Functional and required

Securely authenticates a visitor during their checkout in Scheduling.

1 month


RecentRedirect

Functional and required

Prevents redirect loops if a site has custom URL redirects . Redirect loops are bad for SEO.

30 minutes


remember_client

Functional and required

Remembers Scheduling client's login details if they have an account.

365 days


siteUserCrumb

Functional and required

Prevents cross-site request forgery (CSRF) for logged in site users.

3 years


SiteUserInfo

Functional and required

Identifies a visitor who logs into a customer account

3 years


SiteUserSecureAuthToken

Functional and required

Authenticates a visitor who logs into a customer account.

3 years


squarespace-announcement-bar

Functional and required

Prevents the announcement bar from displaying if a visitor dismisses it.

Persistent


squarespace likes

Functional and required

Shows when you've already "liked" a blog post.

Persistent


squarespace-popup-overlay

Functional and required

Prevents the promotional pop-up from displaying if a visitor dismisses it.

Persistent


ss_sd

Functional and required

Ensures that visitors on the Squarespace 5 platform remain authenticated during their sessions.

Session


Test

Functional and required

Investigates if the browser supports cookies and prevents errors.

Session


TZ

Functional and required

Allows a Scheduling client's appointments to display correctly based on their time zone preferences.

Persistent


ss_cid

Analytics & performance

Identifies unique visitors and tracks a visitor's sessions on a site.

2 years


ss_cookieAllowed

Analytics & performance

Remembers if a visitor agreed to place Analytics cookies on their browser if a site is restricting the placement of cookies.

30 days


ss_cpvisit

Analytics & performance

Identifies unique visitors and tracks a visitor's sessions on a site.

2 years


ss_cvisit

Analytics & performance

Identifies unique visitors and tracks a visitor's sessions on a site

30 minutes


ss_cvr

Analytics & performance

Identifies unique visitors and tracks a visitor's sessions on a site.

2 years


ss_cvt

Analytics & performance

Identifies unique visitors and tracks a visitor's sessions on a site

30 minutes


2. You can prevent cookies from being placed or delete cookies that have already been placed by adjusting your settings in your browser. Help with adjusting these settings can be found on the website of the browser you are using. Please note that disallowing cookies when visiting the Website may result in some or all features of the Website not functioning properly.

Internet Explorer : https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

Microsoft Edge : http://windows.microsoft.com/en-gb/windows-10/edge-privacy-faq

Chrome : https://support.google.com/chrome/answer/95647?hl=en

Firefox : https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Safari : https://support.apple.com/kb/PH21411?locale=nl_BE&viewlocale=en_US .

3. Who we share data with

1. We do not transfer your personal data in an identifiable manner to third parties if this is not required to provide the Services, without your express consent.

2. We may rely on external processors to offer you the Website and/or Services. We ensure that third party processors may only process your personal data on our behalf and on our written instructions. We guarantee that all external processors are selected with due care so that we can count on the security and integrity of your personal data.

3. We may transfer anonymized and/or aggregated data to other organizations that can use this data to improve products and services and organize the marketing, presentation and sale of customized products and services.

4. Where we process data

1. We and our third party processors will only process your identifiable personal data in the EEA.

2. We may transfer your anonymized and/or aggregated data to organizations outside the EEA. If such a transfer takes place, we will ensure that there are appropriate safeguards in place to ensure the security and integrity of your personal data, and that all rights in relation to personal data that you may enjoy under applicable mandatory law are guaranteed.

5. How we process data

1. We will do our utmost to only process the personal data necessary to achieve the purposes stated in this Cookie Policy. We will process your personal data in a lawful, fair and transparent manner. We will do our utmost to keep the personal data accurate and up to date.

2. Your personal data will only be processed for as long as necessary to achieve the purposes stated in this Cookie Policy or until you withdraw your consent to its processing. Please note that withdrawal of consent may imply that you are no longer able to use the Website or Services in whole or in part. If you have registered with our Website, we will delete your personal data if you delete your profile, unless a legal or regulatory obligation or a judicial or administrative order would prevent us from doing so.

We will take appropriate technical and organizational measures to keep your personal data secure against unauthorized access or theft and against accidental loss, manipulation or destruction. Access by our staff or staff of our third party processors is only on a need-to-know basis and is subject to strict confidentiality obligations. However, you understand that the care for safety and security are only best efforts obligations, which can never be guaranteed.

6. Your rights

1. You have the right to request access to all personal data that we process about you. However, requests for access that are clearly submitted with a view to causing inconvenience or damage to us will not be processed.

You have the right to request that any personal data about you that is incorrect or inaccurate be corrected free of charge. If you have registered on our Website, you can correct much of this information yourself via your profile. If such a request is made, you must also attach proof that the personal data for which correction is requested is incorrect.

You have the right to withdraw the consent you have given us for the processing of data, but this withdrawal will not affect the data we have already collected via cookies or similar technologies based on your prior consent. If you no longer want us to collect data via cookies or similar technologies, you can change your browser settings or delete cookies at any time.

If the intended processing is qualified as direct marketing, you have the right to object to this processing free of charge and without justification.

You have the right to request that personal data relating to you be deleted if it is no longer necessary in light of the purposes set out in this Cookie Policy or if you withdraw your consent to its processing. However, you should note that a request for deletion will be assessed by us in the light of legal or regulatory obligations or administrative or judicial orders that may prevent us from deleting the personal data in question.

Instead of deletion, you can also request that we restrict the processing of your personal data if (a) you contest the accuracy of that data, (b) the processing is unlawful or (c) the data is no longer necessary for the stated purposes , but you need them to defend yourself in legal proceedings.

Where your personal data is processed on the basis of consent or on the basis of a contract and the processing is by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and, if technically possible, you have the right to transmit this data directly to another service provider. The technical feasibility of this is exclusively assessed by us.

If you would like to submit a request to exercise one or more of the rights mentioned above, you can send an email to info@nyacurls.be . This request must clearly state which right you wish to exercise and why. It must also be dated, signed and accompanied by a digitally scanned copy of your valid identity card proving your identity. We will notify you immediately upon receipt of such request. If the request appears to be well-founded, we will grant it as soon as reasonably possible and no later than thirty (30) days after receipt of the request.

If you have a complaint about the processing of your personal data by us, you can always contact us via the email address info@nyacurls.be . If you remain dissatisfied with our response, you are free to file a complaint with the competent data protection authority, the Belgian Privacy Commission. For more information, visit http://www.privacycommission.be.

Privacy Policy

1. General

1. This privacy policy (“ Privacy Policy ”) governs the processing of your personal data as part of your use of our Website (the “ Website ”) and the services associated with it (collectively referred to as the “ Services ”). This processing is carried out by NyaCurls as controller, with registered office at Heidebergstraat 46 Kessel-Lo 3010 (“ we ”, “ us ”), registered in the KBO under number BE 0749 859 092, in accordance with the applicable legislation on data protection. protection of personal data.

2. By using our Website and/or our Services, you acknowledge that you have read this Privacy Policy carefully and that you agree to it without reservation. We reserve the right to change the Privacy Policy periodically at our sole discretion. Such change will be communicated via the Website.

3. Please note that we may use so-called 'cookies' or similar technology as part of the Website and/or the Services. Cookies are small text files that are placed on the hard drive of a device and contain certain information, including sometimes personal data. For more information regarding our use of cookies, please read our cookie policy .

4. This Privacy Policy was last updated on 04/12/2020.

2. What & why we process data

1. When you use the Website and/or Services, we process personal data relating to you. Such personal data includes:

When? Use of Services, contacting us, use of Website

Which? Identification information

Why (purpose)? Processing of request

Legal basis? Legitimate interest

2. In principle, we obtain the above-mentioned personal data directly from you. However, if you choose to register via a social media account (for example Facebook or Google Plus), this data is collected via your social media profile. We recommend that you consult the privacy policy of your social media service provider to determine which data is processed by your social media service provider when you use the social media login function. We do not forward any of the personal information you provide via the Website to social media providers unless you consent to this. In addition to the above purposes, we may also process your personal data:

a) To provide you with information about products and services you request in a personalized and efficient manner, either via the Website, e-mail, telephone or social media channels.

b) To process your personal data so that we can provide the Services.

c) For direct marketing purposes, i.e. to provide you with targeted communications, promotions, offers and other advertisements from us or our selected partners. We will request your prior permission for this.

d) To perform statistical analyzes to improve our Website and/or Services, or to develop new products or services.

e) To provide to a financial institution or payment service provider, to enable your financial institution and the payment service provider to comply with their legal obligations.

f) To transfer to the police or judicial authorities as evidence of possible crimes or if there are reasonable suspicions of an unlawful act or crime committed by you through your registration with or use of the Website or the Services.

g) In the context of a possible merger with, acquisition of/by or demerger by a third party, even if that third party is located outside the EEA.

3. If and when your registration on the Website or use of the Website or Services may be considered (a) a violation of the Terms or the intellectual property rights or any other right of a third party, (b) a threat to security or integrity of the Services, (c) a danger to the Website or Services or systems of us or our subcontractors as a result of viruses, Trojan horses, spyware, malware, or any other form of malicious code, or (d) in any way in any way that is illegal or unlawful, discriminatory or offensive, we may process your data in the interests of ourselves, our partners or third parties.

3. Who we share data with

1. We do not transfer your personal data in an identifiable manner to third parties if this is not required to provide the Services, without your express consent.

2. We may rely on external processors to offer you the Website and/or Services. We ensure that third party processors may only process your personal data on our behalf and on our written instructions. We guarantee that all external processors are selected with due care so that we can count on the security and integrity of your personal data.

3. We may transfer anonymized and/or aggregated data to other organizations that can use this data to improve products and services and organize the marketing, presentation and sale of customized products and services.

4. Where we process data

1. We and our third party processors will only process your identifiable personal data in the EEA.

2. We may transfer your anonymized and/or aggregated data to organizations outside the EEA. If such a transfer takes place, we will ensure that there are appropriate safeguards in place to ensure the security and integrity of your personal data, and that all rights in relation to personal data that you may enjoy under applicable mandatory law are guaranteed.

5. How we process data

1. We will do our utmost to process only the personal data necessary to achieve the purposes stated in this Privacy Policy. We will process your personal data in a lawful, fair and transparent manner. We will do our utmost to keep the personal data accurate and up to date.

2. Your personal data will only be processed for as long as necessary to achieve the purposes stated in this Privacy Policy or until you withdraw your consent to its processing. Please note that withdrawal of consent may imply that you are no longer able to use the Website and/or Services in whole or in part. If you have registered with our Website, we will delete your personal data if you delete your profile, unless a legal or regulatory obligation or a judicial or administrative order would prevent us from doing so.

3. We will take appropriate technical and organizational measures to keep your personal data secure against unauthorized access or theft and against accidental loss, manipulation or destruction. Access by our staff or staff of our third party processors is only on a need-to-know basis and is subject to strict confidentiality obligations. However, you understand that the care for safety and security are only best efforts obligations, which can never be guaranteed.

6. Your rights

1. You have the right to request access to all personal data that we process about you. However, requests for access that are clearly submitted with a view to causing inconvenience or damage to us will not be processed.

2. You have the right to request that any personal data about you that is incorrect or inaccurate be corrected free of charge. If you have registered on our Website, you can correct much of this information yourself via your profile. If such a request is made, you must also attach proof that the personal data for which correction is requested is incorrect.

3. You have the right to withdraw your previously given consent for the processing of your personal data. You can withdraw your consent at any time by sending an email to info@nyacurls.be, or by deleting your profile (if applicable).

4. You have the right to request that personal data relating to you be deleted if it is no longer necessary in light of the purposes set out in this Privacy Policy or if you withdraw your consent to its processing. However, you should note that a request for deletion will be assessed by us in the light of legal or regulatory obligations or administrative or judicial orders that may prevent us from deleting the personal data in question.

5. Instead of deletion, you can also request that we restrict the processing of your personal data if (a) you contest the accuracy of that data, (b) the processing is unlawful or (c) the data is no longer necessary for the purposes of purposes mentioned, but you need them to defend yourself in legal proceedings.

6. You have the right to object to the processing of personal data if you can demonstrate that there are serious and legitimate reasons related to special circumstances that justify such an objection. However, if the intended processing constitutes direct marketing, you have the right to object to such processing free of charge and without justification.

7. Where your personal data is processed on the basis of consent or on the basis of a contract and the processing is by automated means, you have the right to receive and receive the personal data you have provided to us in a structured, commonly used and machine-readable format. If technically possible, you have the right to transmit this data directly to another service provider. The technical feasibility of this is exclusively assessed by us.

8. If you would like to submit a request to exercise one or more of the rights mentioned above, you can send an email to info@nyacurls.be. This request must clearly state which right you wish to exercise and why. It must also be dated, signed and accompanied by a digitally scanned copy of your valid identity card proving your identity. We will notify you immediately upon receipt of such request. If the request appears to be well-founded, we will grant it as soon as reasonably possible and no later than thirty (30) days after receipt of the request.

9. If you have a complaint about the processing of your personal data by us, you can always contact us via the email address info@nyacurls.be. If you remain dissatisfied with our response, you are free to file a complaint with the competent data protection authority, the Belgian Privacy Commission. For more information, visit http://www.privacycommission.be.