Legal
Privacy & U.S. State Rights
What this website collects, why, how long it is kept, and how to have it removed.
Last updated
The short version. This site has no analytics, no advertising pixels and no tracking cookies. The only personal data it collects is what you type into one of three forms and send us on purpose. That data goes to one mailbox and one file on our server. It is never sold and never shared with an advertiser.
Who is responsible
The data controller is Magnolia R. Bloch Sp. K., Topolowa 10, 21-003 Dys, Poland — VAT PL7133121574, KRS 0000998379, trading as RosaNera Cosmetics. Because the controller is established in Poland, the EU General Data Protection Regulation applies to this site's handling of personal data wherever in the world you are reading from.
All privacy correspondence: info@rosaneracosmetics.com.
What we collect, and when
Nothing is collected by browsing. Personal data reaches us only when you complete and send one of the three forms on this site.
| Form | What it asks for | Why |
|---|---|---|
| Distribution application | Company name, website, your name and role, work email, phone, the states you cover, years trading, number of representatives, brands carried, target volume | To assess a territory and prepare terms before a call |
| Salon partner enquiry | Salon name, city, state, number of chairs, colour brand used now, cosmetology licence number, email | To route you to the nearest distributor, or record the demand where there is not one yet |
| Sample kit request | Business type and name, cosmetology licence or EIN and issuing state, your name, shipping address, phone | To verify trade status and ship the kit |
Our web server also keeps standard access logs — IP address, time, page requested, browser string — as every web server does. Each form submission additionally records the sending IP address and browser string alongside it, which is what makes the anti-spam rate limit possible.
Licence numbers
Two forms ask for a cosmetology licence number or EIN. This is the basis on which RosaNera is supplied to the trade rather than to consumers, and it is the only reason we ask. A licence number is checked once against the issuing state board's public register and then removed from the record. It is not used to build a profile, is never passed to a third party, and is not required to simply ask us a question by email.
Legal basis
- Steps prior to entering a contract (GDPR Art. 6(1)(b)) — for everything in a distribution application, a salon enquiry or a kit request. You are asking us to do business; this is the data that makes that possible.
- Legitimate interests (GDPR Art. 6(1)(f)) — for server logs and the anti-spam rate limit. The interest is keeping the site available and the forms usable; the data involved is minimal and is not used to identify anyone.
- Legal obligation (GDPR Art. 6(1)(c)) — where accounting or product-safety law requires a record to be kept.
We do not rely on consent for anything on this site, because nothing here asks for it: there is no newsletter sign-up, no marketing checkbox and no tracking to consent to.
How long we keep it
| Data | Kept for |
|---|---|
| Licence number or EIN | Until verified, then deleted from the record |
| An enquiry that does not lead to a business relationship | 24 months, then deleted |
| An enquiry that becomes a customer or distributor relationship | For the life of the relationship, and afterwards only as long as accounting and product-safety law requires |
| Server access logs | As retained by our hosting provider in the ordinary course |
| Anti-spam rate-limit records | One hour |
Who else sees it
Form submissions are emailed to one company mailbox and written to one file on the same server. Both are operated for us by our hosting provider, LH.pl sp. z o.o. (Poznań, Poland), acting as a processor. Data stays in the European Union.
One further disclosure is inherent in what a salon enquiry is for: if you ask to be connected to a distributor, we pass your salon name, city, state and contact details to the distributor holding that territory, because that is the connection you asked us to make. We tell you who they are. If you would rather we did not, say so in the enquiry and we will reply directly instead.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. There is no advertising technology on this site to share it with.
Cookies and tracking
This site sets no analytics cookies, no advertising cookies and no third-party cookies of any kind. There is no Google Analytics, no Meta pixel, no heatmap tool and no consent-management platform, because there is nothing here that would need consent. See the cookie notice for the full detail, including the one first-party cookie the site is capable of setting and when.
Your rights
Everyone
Under GDPR you may ask for access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Write to info@rosaneracosmetics.com. We answer within one month. There is no charge, and you do not need to explain why.
If you are not satisfied with our answer you may complain to a supervisory authority. Ours is the Polish Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw.
California, and other U.S. states with privacy laws
Residents of California (CCPA/CPRA) and of other states with comparable laws — including Colorado, Connecticut, Virginia, Utah and Texas — may request the categories and specific pieces of personal information collected about them, request deletion, request correction, and opt out of sale or sharing.
Notice at collection. The categories above are the complete list of what this site collects: identifiers, commercial information and professional information, collected directly from you through a form, for the business purposes stated beside each form, retained for the periods in the table above. We do not sell or share personal information, and we do not process sensitive personal information beyond the professional licence number described above.
To exercise any of these rights, write to info@rosaneracosmetics.com with "privacy request" in the subject. We will not discriminate against you for making one — there is no pricing tier, service level or product that depends on it.
Children
This site is addressed to licensed cosmetology professionals and trade businesses. It is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has sent us data, write to us and we will delete it.
Security
The site is served over HTTPS only. Form submissions are written to a location outside the public web root and are not reachable over the web. Access to the mailbox is limited to the people who need to answer enquiries. No system is perfect, and we would rather say that than claim otherwise.
Changes
When this notice changes materially we update the date at the top and, where the change affects someone whose data we already hold, tell them directly. We do not backdate.