Privacy policy
# PRIVACY POLICY BEAUTY BELGIUM
**Last updated: 03.11.2026**
## 1. DATA CONTROLLER
The data controller responsible for processing personal data in connection with the operation of the Beauty Belgium website, available at [https://beauty.rkcreations.be](https://beauty.rkcreations.be), is Rafał Klimek, operating as a self-employed business under the trade name RK CREATIONS.
**Address:** Beysstraat 188, 1770 Liedekerke, Belgium
**Business registration number / VAT number:** BE1015306522
**Email:** [klimekrafal48@gmail.com](mailto:klimekrafal48@gmail.com)
**Phone:** +32 495 66 28 12
For any questions regarding the processing of personal data, you may contact the data controller by email or by post at the address provided above.
## 2. WHAT DATA DO WE PROCESS?
Depending on how you use our website, we may process the following personal data:
- Account and login information, such as your name, email address, and information required to verify your email address and access your account;
- Beauty profile information, such as business name, city or municipality, description, service categories, addresses, phone numbers, email addresses, and links to social media profiles;
- Materials uploaded to profiles, including logos, photographs, and graphics;
- Content of posts and replies published on Beautyboard, together with the author's displayed name;
- Publication information, such as the date and time of publication, selected language, and publication confirmation;
- Technical and security information, such as IP addresses, connection dates and times, browser information, and data required for session management and website security.
The email address used for logging in or verifying an account is not publicly displayed unless the user chooses to include it in a public profile or published content.
## 3. PURPOSES AND LEGAL BASES FOR PROCESSING
We process personal data for the following purposes:
- **Creating and managing accounts, logging in, and managing beauty profiles:** to perform a contract or take steps at the user's request before entering into a contract (Article 6(1)(b) of the GDPR);
- **Displaying profiles, posts, and replies according to user settings:** to provide our services and, where applicable, based on the data controller's legitimate interest in operating the beauty directory and Beautyboard (Article 6(1)(b) or (f) of the GDPR);
- **Sending necessary communications:** to verify email addresses, enable login, and manage user accounts;
- **Protecting the website, detecting misuse, resolving technical issues, and establishing, exercising, or defending legal claims:** based on the legitimate interests of the data controller (Article 6(1)(f) of the GDPR);
- **Complying with legal obligations:** based on Article 6(1)(c) of the GDPR, where such obligations apply to the data controller.
## 4. PUBLICLY VISIBLE CONTENT AND INFORMATION
Once a beauty profile has been published, the information and materials added to it may become publicly accessible.
This may include the business name, city or municipality, description, service categories, addresses, contact details, photographs, and logos.
Posts and replies published on Beautyboard may be visible to visitors of the website.
Before publishing any content, please ensure that it does not contain personal data or other information that you do not wish to make publicly available.
Profile information and published content are processed to display them to website visitors in accordance with the features used by each user.
Users who publish profiles or posts decide which information and materials they wish to include.
## 5. COOKIES AND TECHNICAL DATA
The website may use strictly necessary technical cookies required for session management, user authentication, and security.
Your browser may also transmit certain technical information, such as your IP address, browser type, and connection time. This information may be necessary to ensure the proper functioning and protection of the website.
If optional cookies or analytics tools requiring consent are introduced in the future, the appropriate consent will be obtained before such cookies or tools are activated.
## 6. RECIPIENTS OF PERSONAL DATA
Personal data may be shared, where necessary, with the following recipients:
- **Hosting and IT infrastructure providers**, including Hostinger, for hosting and maintaining the application, database, and files;
- **Email service providers** used to send messages related to user accounts and login procedures;
- **Technical service providers** supporting the operation of the website on behalf of the data controller;
- **Competent public authorities**, where disclosure is required by applicable law.
Information and materials published in public profiles or posts are accessible to visitors of the relevant website pages.
**The data controller does not sell personal data.**
Where a profile displays a map or external content provided by a third party, that provider may receive certain technical information about visitors when the content is loaded.
Such processing is subject to the privacy policy of the respective third-party provider.
## 7. TRANSFERS OF DATA OUTSIDE THE EEA
Some service providers may use infrastructure located outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, the data controller applies a transfer mechanism required under the General Data Protection Regulation (GDPR).
This may include an adequacy decision adopted by the European Commission or appropriate contractual safeguards.
## 8. RETENTION PERIOD OF PERSONAL DATA
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
- **Account and profile data:** for as long as the account or profile remains active, and afterwards for the period necessary to comply with legal obligations, resolve disputes, or establish, exercise, or defend legal claims;
- **Posts and replies:** until they are deleted, the account is removed, or the relevant feature is discontinued, subject to requirements related to handling reports and potential legal claims;
- **Emails related to login and account verification:** for the period necessary to process and manage these communications;
- **Technical data and security logs:** for the period necessary for security purposes, server configuration, and the handling of potential legal claims;
- **Backups:** according to the established schedule for creating and deleting backup copies.
Once the applicable retention period has expired, personal data will be deleted or anonymised unless further retention is required by law.
## 9. YOUR RIGHTS
Under the General Data Protection Regulation (GDPR), you have several rights regarding your personal data, subject to the conditions and limitations established by applicable law.
You may request:
- Access to your personal data;
- Correction of inaccurate or incomplete data;
- Erasure of your personal data;
- Restriction of the processing of your data;
- Objection to processing based on legitimate interests;
- Data portability, where this right applies;
- Withdrawal of your consent where processing is based on consent.
Withdrawing your consent does not affect the lawfulness of any processing carried out before the withdrawal.
To exercise your rights, please contact us at:
**Email:** [klimekrafal48@gmail.com](mailto:klimekrafal48@gmail.com)
We may request additional information to verify your identity and protect your personal data against unauthorised access or disclosure.
You also have the right to lodge a complaint with the Belgian Data Protection Authority.
**Belgian Data Protection Authority (APD/GBA)**
Rue de la Presse 35, 1000 Brussels, Belgium
**Email:** [contact@apd-gba.be](mailto:contact@apd-gba.be)
## 10. SECURITY OF PERSONAL DATA
The data controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure.
Access to personal data is restricted to individuals and service providers who require such access to manage and operate the website.
## 11. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated whenever changes occur in the operation of the website, the technologies used, or applicable legislation.
The most recent version of this Privacy Policy will be published on this page, together with the date of its latest update.
**Last updated: 03.11.2026**
## 1. DATA CONTROLLER
The data controller responsible for processing personal data in connection with the operation of the Beauty Belgium website, available at [https://beauty.rkcreations.be](https://beauty.rkcreations.be), is Rafał Klimek, operating as a self-employed business under the trade name RK CREATIONS.
**Address:** Beysstraat 188, 1770 Liedekerke, Belgium
**Business registration number / VAT number:** BE1015306522
**Email:** [klimekrafal48@gmail.com](mailto:klimekrafal48@gmail.com)
**Phone:** +32 495 66 28 12
For any questions regarding the processing of personal data, you may contact the data controller by email or by post at the address provided above.
## 2. WHAT DATA DO WE PROCESS?
Depending on how you use our website, we may process the following personal data:
- Account and login information, such as your name, email address, and information required to verify your email address and access your account;
- Beauty profile information, such as business name, city or municipality, description, service categories, addresses, phone numbers, email addresses, and links to social media profiles;
- Materials uploaded to profiles, including logos, photographs, and graphics;
- Content of posts and replies published on Beautyboard, together with the author's displayed name;
- Publication information, such as the date and time of publication, selected language, and publication confirmation;
- Technical and security information, such as IP addresses, connection dates and times, browser information, and data required for session management and website security.
The email address used for logging in or verifying an account is not publicly displayed unless the user chooses to include it in a public profile or published content.
## 3. PURPOSES AND LEGAL BASES FOR PROCESSING
We process personal data for the following purposes:
- **Creating and managing accounts, logging in, and managing beauty profiles:** to perform a contract or take steps at the user's request before entering into a contract (Article 6(1)(b) of the GDPR);
- **Displaying profiles, posts, and replies according to user settings:** to provide our services and, where applicable, based on the data controller's legitimate interest in operating the beauty directory and Beautyboard (Article 6(1)(b) or (f) of the GDPR);
- **Sending necessary communications:** to verify email addresses, enable login, and manage user accounts;
- **Protecting the website, detecting misuse, resolving technical issues, and establishing, exercising, or defending legal claims:** based on the legitimate interests of the data controller (Article 6(1)(f) of the GDPR);
- **Complying with legal obligations:** based on Article 6(1)(c) of the GDPR, where such obligations apply to the data controller.
## 4. PUBLICLY VISIBLE CONTENT AND INFORMATION
Once a beauty profile has been published, the information and materials added to it may become publicly accessible.
This may include the business name, city or municipality, description, service categories, addresses, contact details, photographs, and logos.
Posts and replies published on Beautyboard may be visible to visitors of the website.
Before publishing any content, please ensure that it does not contain personal data or other information that you do not wish to make publicly available.
Profile information and published content are processed to display them to website visitors in accordance with the features used by each user.
Users who publish profiles or posts decide which information and materials they wish to include.
## 5. COOKIES AND TECHNICAL DATA
The website may use strictly necessary technical cookies required for session management, user authentication, and security.
Your browser may also transmit certain technical information, such as your IP address, browser type, and connection time. This information may be necessary to ensure the proper functioning and protection of the website.
If optional cookies or analytics tools requiring consent are introduced in the future, the appropriate consent will be obtained before such cookies or tools are activated.
## 6. RECIPIENTS OF PERSONAL DATA
Personal data may be shared, where necessary, with the following recipients:
- **Hosting and IT infrastructure providers**, including Hostinger, for hosting and maintaining the application, database, and files;
- **Email service providers** used to send messages related to user accounts and login procedures;
- **Technical service providers** supporting the operation of the website on behalf of the data controller;
- **Competent public authorities**, where disclosure is required by applicable law.
Information and materials published in public profiles or posts are accessible to visitors of the relevant website pages.
**The data controller does not sell personal data.**
Where a profile displays a map or external content provided by a third party, that provider may receive certain technical information about visitors when the content is loaded.
Such processing is subject to the privacy policy of the respective third-party provider.
## 7. TRANSFERS OF DATA OUTSIDE THE EEA
Some service providers may use infrastructure located outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, the data controller applies a transfer mechanism required under the General Data Protection Regulation (GDPR).
This may include an adequacy decision adopted by the European Commission or appropriate contractual safeguards.
## 8. RETENTION PERIOD OF PERSONAL DATA
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
- **Account and profile data:** for as long as the account or profile remains active, and afterwards for the period necessary to comply with legal obligations, resolve disputes, or establish, exercise, or defend legal claims;
- **Posts and replies:** until they are deleted, the account is removed, or the relevant feature is discontinued, subject to requirements related to handling reports and potential legal claims;
- **Emails related to login and account verification:** for the period necessary to process and manage these communications;
- **Technical data and security logs:** for the period necessary for security purposes, server configuration, and the handling of potential legal claims;
- **Backups:** according to the established schedule for creating and deleting backup copies.
Once the applicable retention period has expired, personal data will be deleted or anonymised unless further retention is required by law.
## 9. YOUR RIGHTS
Under the General Data Protection Regulation (GDPR), you have several rights regarding your personal data, subject to the conditions and limitations established by applicable law.
You may request:
- Access to your personal data;
- Correction of inaccurate or incomplete data;
- Erasure of your personal data;
- Restriction of the processing of your data;
- Objection to processing based on legitimate interests;
- Data portability, where this right applies;
- Withdrawal of your consent where processing is based on consent.
Withdrawing your consent does not affect the lawfulness of any processing carried out before the withdrawal.
To exercise your rights, please contact us at:
**Email:** [klimekrafal48@gmail.com](mailto:klimekrafal48@gmail.com)
We may request additional information to verify your identity and protect your personal data against unauthorised access or disclosure.
You also have the right to lodge a complaint with the Belgian Data Protection Authority.
**Belgian Data Protection Authority (APD/GBA)**
Rue de la Presse 35, 1000 Brussels, Belgium
**Email:** [contact@apd-gba.be](mailto:contact@apd-gba.be)
## 10. SECURITY OF PERSONAL DATA
The data controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure.
Access to personal data is restricted to individuals and service providers who require such access to manage and operate the website.
## 11. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated whenever changes occur in the operation of the website, the technologies used, or applicable legislation.
The most recent version of this Privacy Policy will be published on this page, together with the date of its latest update.