Privacy Policy
Date: 20 October 2026
This Privacy Policy explains how we process your personal data when you use www.janssen-beauty.ee, shop in our online store, create an account, contact us, or register for services and training courses.
1. Data Controller
The controller responsible for processing your personal data is:
OSAÜHING TVP
Registry code: 10199356
Address: Sõpruse pst 257, 13414 Tallinn, Estonia
Email: info@janssen-beauty.ee
Telephone: +372 654 2693
For questions or requests concerning your personal data, please contact us at info@janssen-beauty.ee.
2. What Personal Data Do We Process?
The personal data we process depends on how you use our services.
- Contact details: first name, surname, email address and telephone number.
- Account information: name, company, email address, login credentials and information relating to the use of your account.
- Order information: products purchased, quantities, order number, billing and delivery details, and information relating to order fulfilment.
- Payment information: payment amount, payment reference number, payment status and, where necessary, the bank account number required for a refund.
- Enquiry information: messages submitted through the contact form or other channels, and correspondence needed to address your enquiry.
- Booking and training information: participant’s name, contact details, selected service or training course, and information relating to registration and invoicing.
- Technical information: IP address, request timestamps, browser and device information, and log entries relating to website operation and security.
- Consent records: consents given, when they were given or withdrawn, and cookie preferences.
We primarily obtain personal data directly from you. When fulfilling an order, we may also receive information from payment and delivery partners about payment receipt and delivery status.
Please provide only the information necessary to address your enquiry when using the contact form. Do not include passwords, payment card security codes or unnecessary health information in your message.
3. Why Do We Use Personal Data, and on What Legal Basis?
| Purpose | Legal basis |
|---|---|
| Receiving orders, checking payments, delivering goods and arranging returns | Entering into and performing a contract |
| Creating and managing an account at your request | Entering into and performing a contract |
| Booking services and organising participation in training courses | Entering into and performing a contract |
| Responding to enquiries relating to a purchase or service | Taking steps before entering into a contract or performing a contract |
| Handling other enquiries and communicating with company representatives | Our legitimate interest in managing customer communications and business operations |
| Maintaining accounting records and fulfilling statutory obligations | Compliance with a legal obligation |
| Ensuring website security, preventing misuse and establishing, exercising or defending legal claims | Our legitimate interest in protecting customers, the website and the company’s rights |
| Sending marketing communications that require consent | Your consent |
| Using non-essential cookies and similar technologies | Your consent |
When relying on legitimate interests, we assess whether the processing is necessary and how it affects your rights and privacy.
Fields required to place an order, create an account or make a booking are marked in the relevant form. If you do not provide the necessary information, we may be unable to carry out your request. Consent to marketing is voluntary.
4. Who May Receive Your Personal Data?
We disclose personal data only to the extent necessary and for a specific purpose to the following categories of recipients:
- Postal and courier service providers, to deliver your order;
- Banks and payment service providers, to process payments and refunds;
- Hosting, email and IT maintenance providers, to operate the website and support customer communications;
- Accounting service providers, to fulfil accounting and reporting obligations;
- Legal advisers and competent authorities, where necessary to handle legal claims or comply with a legal obligation;
- Newsletter and marketing service providers, where we use them to send communications based on your consent.
Service providers processing personal data on our behalf must follow our instructions and comply with data protection requirements. Banks, payment service providers and other independent data controllers also process personal data under their own privacy policies.
5. Transfers Outside the European Economic Area
Where personal data is transferred outside the European Economic Area, the transfer must rely on an appropriate legal mechanism, such as a European Commission adequacy decision or standard contractual clauses, supplemented by additional safeguards where necessary.
You can request information about the safeguards applied and how to obtain copies by contacting info@janssen-beauty.ee.
6. How Long Do We Retain Personal Data?
We retain personal data for the following periods, depending on the purpose for which it was collected.
| Type of information | Retention period |
|---|---|
| Invoices and other accounting source documents | Seven years from the end of the financial year in which the source document was recorded in the accounts |
| Order and contract performance information that does not form part of accounting documents | Generally three years after the contract has been performed |
| Account information | Until the account is closed; separate retention periods apply to orders and invoices |
| General enquiries and contact form correspondence | Up to 12 months after the enquiry has been resolved |
| Administrative information relating to service bookings and participation in training courses | Up to three years after the service has been provided or the training course has ended |
| Routine website security logs | Up to 90 days; extracts relating to a specific security incident are retained until the proceedings concerning that incident have concluded |
| Contact details used for marketing | Until consent is withdrawn or the marketing activity ends |
| Cookies and related information | For the period specified in the cookie list or until earlier withdrawal of consent, depending on the type of information |
If a dispute arises, we retain the relevant information until the dispute has been finally resolved and the applicable appeal or enforcement period has expired. Information subject to a statutory retention obligation is not deleted before the required period expires.
Once the retention period ends, the information is deleted or anonymised.
7. Cookies and How to Manage Them
Cookies are small files that a website stores on your device. Other similar technologies may also be used.
Strictly necessary cookies support the services you request, such as the shopping basket, account login and remembering your consent choices. Consent is not requested where these cookies are strictly necessary to provide the service.
Non-essential preference, statistics and marketing cookies require prior consent. You may refuse their use and change your choices later using the “Nõusoleku haldamine” (“Manage consent”) button on the website.
Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal. You can also delete cookies through your browser settings. Blocking strictly necessary cookies may prevent the shopping basket or your account from working properly.
[Insert a verified cookie list or a link to it. For each cookie or similar technology, specify its name, provider, purpose, lifespan and category, and whether third parties have access to it.]
8. Newsletters and Offers
If you give your consent, we use your contact details to send newsletters, product offers and information about training courses.
You can withdraw your consent at any time, free of charge, by using the unsubscribe option provided in the message or by contacting info@janssen-beauty.ee.
Making a purchase, creating an account or reading this Privacy Policy does not, in itself, constitute consent to receive marketing communications. We send communications necessary to fulfil your order regardless of whether you have consented to marketing.
9. How Do We Protect Personal Data?
We apply technical and organisational measures appropriate to the risks of processing to protect personal data against unauthorised access, alteration, disclosure, destruction and loss.
Access to personal data is granted only to employees and service providers who need it to perform their duties. We use an HTTPS connection for communication with the website.
Please keep your account password confidential and notify us immediately if you suspect that your account has been used without authorisation.
10. Your Rights
You have the right to:
- Receive information about the processing of your personal data and access your data;
- Request the correction of inaccurate personal data;
- Request the deletion of personal data or restriction of processing under the conditions laid down by law;
- Receive the personal data you have provided in a structured, machine-readable format and request its transfer to another controller, where processing is based on consent or a contract and is carried out by automated means;
- Object, on grounds relating to your particular situation, to processing based on legitimate interests;
- Object at any time to the use of your personal data for direct marketing;
- Withdraw your consent without affecting the lawfulness of processing carried out before its withdrawal.
To exercise your rights or request the deletion of your account, contact info@janssen-beauty.ee. Where necessary, we may request additional information to confirm your identity.
We respond without undue delay and no later than one month after receiving your request. For complex or extensive requests, this period may be extended by up to two additional months. We will inform you of the extension and the reasons for it within the first month.
Deleting your account does not mean deleting information that we must retain by law or that is necessary for the justified establishment, exercise or defence of legal claims.
If you believe that the processing of your personal data has infringed your rights, you may lodge a complaint with the Estonian Data Protection Inspectorate — Andmekaitse Inspektsioon:
Website: https://www.aki.ee
Email: info@aki.ee
You also have the right to seek a judicial remedy.
11. Changes to This Privacy Policy
We update this Privacy Policy when our processing practices or legal requirements change. The current version is published on this page together with its update date.
Where necessary, we will provide additional notice of significant changes. If a new processing purpose requires your consent, we will obtain it before that processing begins.