Welcome to Svitlana Studio and our website, https://svitlana.studio/. We appreciate your interest in our website and services. This Privacy Policy outlines how we handle, store, and utilize your personal data during your visit to our site, adhering to the guidelines of the NYC Privacy Act (NYPA).
Data Controller Details
Under the NYPA, the data controller is:
Svitlana Studio LLC
Address: Pearl Studios, 519 8th Ave 12th Fl, New York, NY 10018
Email: info@svitlana.studio
Privacy Principles
At Svitlana Studio, we process personal data to better understand and enhance our services for customers. Personal data is used within the context of your customer relationship with us, as allowed by law or with your explicit consent. Our key principles include:
Prioritizing your privacy and offering services suited to your needs.
Collecting personal data for specific purposes, based on your consent or our legitimate interest.
Allowing you the right to access, correct, or delete your personal data at any time.
Not selling your personal data to third parties.
Implementing measures to protect your data from misuse.
Processing personal data only as needed for a functional, user-friendly website and its services.
Your Rights
You have rights concerning your personal data:
Right to Know and Access: You can request information about the categories, purposes, sources, and specific pieces of personal data we have collected about you.
Right to Equal Service: We do not discriminate against those who exercise their privacy rights.
Right to Delete: You can ask us to delete your personal data by closing your account.
To exercise these rights or for more information, please contact us. Your consent to data processing can be withdrawn anytime, not affecting the lawfulness of processing before the withdrawal.
For asserting your rights or other data protection concerns, you can reach us through the contact details provided.
Additional Information on the Right of Objection
We also inform you that you can object to the processing of your personal data based on legitimate interest and/or if it’s used for direct marketing.
General Technical and Organizational Measures
Svitlana Studio implements various security measures to adequately and appropriately protect personal data. All data held by us is safeguarded through physical, technical, and procedural methods, restricting access to authorized individuals in line with this Privacy Policy.
Our website is secured with a software firewall to block unauthorized network access. Additionally, access to personal identifiable information is limited to employees who need it for their work. These employees are well-trained in security and privacy practices, ensuring the confidentiality of your information.
Secure Data Transfer
We employ suitable technical and organizational security measures to protect your data from accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security protocols are continuously updated in collaboration with security experts, adhering to new standards.
Data exchange with our website is always encrypted. We use HTTPS as our transmission protocol, utilizing the latest encryption technologies.
We also provide encrypted communication through our contact forms and booking requests, with decryption accessible only to us. Furthermore, alternative communication methods, such as postal service, are available.
Transmission and Disclosure of Personal Information
In processing personal data, it may be transmitted to or shared with other entities, companies, independent organizational units, or individuals. This includes payment institutions for transactions, IT service providers, Customer Relationship Management (CRM) systems, and other service providers integrated into our website. We comply with legal requirements, including entering agreements to protect your data with these recipients.
Svitlana Studio will not sell, rent, or transfer your personal information to third parties without your consent. We may share data with contractors for fulfilling customer obligations, such as customer service, payment processing, and marketing support. We ensure these service providers maintain data security and only partner with companies that guarantee secure data processing.
If data processing occurs outside the USA or involves third-party services, it adheres to legal requirements. We only process data in countries with adequate data protection, or under contractual obligations like standard contractual clauses, certifications, or binding internal data protection policies.
Storage Period and Deletion
We store your personal data as long as necessary for its intended purpose (e.g., contract fulfillment, responding to inquiries) or as required by legal retention periods. If legal obligations or other valid reasons prevent immediate deletion, we’ll restrict processing until deletion is legally feasible.
Data Processing for Legal Obligations and Misuse Protection
Svitlana Studio may process personal data to meet legal obligations, including transferring data to authorities, law enforcement, and courts. Data processing might also occur to detect or prevent misuse of our website or to protect Svitlana Studio’s rights, its employees, or users.
Direct Marketing and Customer Relationship
We use your data to fulfill contracts, respond to inquiries, or based on your consent. With your separate consent for consultation, quotation, and advertising purposes, Svitlana Studio may contact you through your preferred communication channels.
Consent for Advertising, Market, and Opinion Research
If you’ve consented to us using your personal data, such as email and phone number, for advertising or market research, you can withdraw this consent at any time or object to future data use.
Legal Defense and Rights Enforcement
Processing your personal information for legal defense and rights enforcement is based on our legitimate interest. This processing aims to defend against unjustified claims and legally pursue and assert claims and rights. Your data will be deleted when no longer necessary for these purposes.
In the context of legal defense and rights enforcement, processing your personal information is essential and not subject to objection.
Processing for Service Use
We collect, process, and use personal data in relation to our services, in compliance with the NYDPA. We seek your explicit consent for any use requiring it by law.
We also process data for administrative tasks, operational organization, financial accounting, and legal obligations like archiving. This includes data we process during our contractual services, aiming to maintain our business operations, perform tasks, and provide services. Data deletion for contractual services and communication aligns with these processing activities.
We share or transfer data to tax authorities, consultants, auditors, fee offices, and payment service providers as needed.
We store supplier and business partner information for future contact, based on business interests. This mostly company-related data is generally stored permanently.
Website Usage Information
Using our website doesn’t always require personal data. Website access and file retrievals are logged, recording data such as your IP address, request details, data transferred, and browser type. This data, used only for statistical purposes, doesn’t reveal your identity.
This data collection and processing enable website usage, with our interest being in providing the website. We store and analyze this data, including IP addresses, in anonymized form to enhance user experience and our online offerings.
Contacting Us and Booking Requests
When you contact us, your provided details are stored for related purposes, like answering your query or for follow-up questions.
Your consent, given through the contact form, forms the basis for storing and using your data. Providing personal information for queries or quotes is necessary; without it, we can’t process your request.
You can revoke consent for data processing at any time. Upon revocation or if storage becomes legally inadmissible, your data will be deleted.
Reviews
When you leave a review, you can choose to display certain information, share details, engage with others, exchange knowledge and insights, and post and view relevant content. This content and data are publicly viewable. You have control over the information you include in your review. It’s optional to provide additional information in your review, and you can decide whether to share sensitive information publicly. Please avoid posting personal data that you wouldn’t want publicly available. The storage of this information is based on our legitimate interest.
Content Delivery Network (CDN)
Our website utilizes a Content Delivery Network (CDN), a network of servers caching content in various locations globally to deliver content quickly and reduce web host load. CDNs handle static content (identical for all visitors, like streaming video or code frameworks) and dynamic content (adapted to each user, like web applications or personalized online shop content). The use of a CDN and data transmission is based on our legitimate interest for a technically smooth and fast website presentation and easing our IT infrastructure. You can object to this data processing by contacting us using the provided details.
Google Analytics
We use Google Analytics to tailor and improve our website based on user needs. Google Analytics uses cookies to analyze your website usage, with data typically sent to and stored on a Google server. We employ IP anonymization (IP masking), meaning Google shortens your IP address. Google processes this data on our behalf to evaluate website usage, compile reports on website activities, and provide related services.
Google Analytics also generates reports on advertising effectiveness, user demographics and interests, and online advertising delivery if you’re a Google account holder and consent to Ads Personalization.
You can opt out of Google Analytics data collection and analysis by installing the browser plugin available at https://tools.google.com/dlpage/gaoptout. Data linked to cookies, user IDs, or advertising IDs is automatically deleted after 14 months. For Google Analytics terms, visit https://www.google.com/analytics/terms/.
Social Media Plugins
Our website uses social plugins (“plugins”) from Facebook, Instagram, Pinterest. These plugins are identified with each social network’s logo.
When you visit a page on our website with a plugin, your browser establishes a direct connection to the servers of the respective social network. The plugin’s content is sent from the social network directly to your browser and integrated into the page. This integration enables the social network to receive information that your browser visited our site, regardless of whether you have a profile or are logged in. This data (including your IP address) is sent from your browser directly to the social network’s server and stored there.
These data processing activities are based on the social networks’ legitimate interests in displaying personalized advertising, informing other users about your activities on our site, and tailoring their services. If you don’t want the social network to link data collected from our site to your profile, log out of the social network before visiting our website.
Data Collection and Usage by Social Networks
For details on the collection, processing, and use of data by social networks, as well as your rights and privacy settings, please refer to the respective social network’s privacy policy.
Social Media Interaction
The data you post on our social media pages, such as comments, videos, pictures, likes, and public messages, are published by the social media platform and are not further used or processed by us. We reserve the right to delete content if necessary. We may share your content on our website if the platform allows, and communicate with you through the platform. This is based on our legitimate interest in public relations and communication.
If you object to specific data processes under our control, please reach out to us. We’ll review your objection. For confidential inquiries, you can use the address provided in our imprint. We strive to make our social media pages as data-compliant as possible, within the limits set by the platform providers. We have limited control over the statistics provided by these providers but ensure no additional optional statistics are used.
Scope of This Privacy Policy
This policy applies only to Svitlana Studio’s websites and data processing on our servers. It doesn’t include third-party content or websites linked from our site. The processing of personal data by these third-party sites is done by their respective providers, over which we have no control. Please refer to the respective website’s privacy policy for information on their data handling and protection.
Privacy Policy Updates
Svitlana Studio may periodically update this privacy policy due to new technical developments, legal changes, or alterations in business operations. We recommend reviewing this policy regularly to stay informed about how we collect, process, and use personal data.
Further Information
For any questions regarding our privacy policy, feel free to contact us.
Our customer service team is always available to help you. One of our beauty specialists will reach out to discuss your event or answer any questions you may have!