DATA CONTROLLER
Beautynette, with registered office in Viale S. Lavagnini 70, 50129 | Florence | FI | IT
VAT number: 01908060476 | REA FI – 682005, tel. +39 335 7008674 (“Society”).
DATA PROTECTION OFFICER (DPO)
email address info@beautynette.it
SOURCE OF DATA COLLECTION
Website www.beautynette.it, mobile apps or other mobile devices, surveys and market research carried out with automated tools.
| PURPOSE OF THE TREATMENT | LEGAL BASIS OF THE PROCESSING | DATA RETENTION PERIOD |
|---|---|---|
| A) Contractual purpose: • Execution of the sales contract of which you are a party (unregistered website user); • Execution of the contract linked to membership of the loyalty program (in store and/or online). As a consequence of the contract, as described above: take advantage of the services made available by the Company. through physical points (stores) or through the website www.beautynette.it (“Site”) or through the App. For example, after-sales assistance services; participation in prize events; registration on the website or mobile app; request for information in the "contact us" section of the Site or through instant messaging services; reviews, within the reserved area or in dedicated sections, on tested products; any other service made available to you by the Company. | Execution of a contract of which you are a party (or pre-contractual measures adopted at the request of the interested party. E.g. request for information via the dedicated sections of the website www.beautynette.it)Article 6, par. 1, letter b) GDPR. |
For the entire contractual duration and, after termination, for a maximum period of 10 years from their collection |
| Fulfill administrative-accounting obligations required by applicable national legislation. | Need to fulfill a legal obligation Article 6, par. 1, letter c GDPR. |
For the entire contractual duration and, after termination, for a maximum period of 10 years from their collection |
| B) Direct marketing purposes: sending, using automated contact methods (email and instant messaging), advertising material, newsletters, promotional and commercial communications relating to the Company's products and/or events. as well as carrying out market studies and statistical analyses. | Consent (optional and revocable at any time), given by subjects who have reached the age of 16.Article 6, par. 1, letter to GDPR. |
24 months starting from the registration/creation of your account, or until the consent given by you for this purpose is revoked if earlier. |
| C) Profiling purposes: analysis of your preferences, purchasing habits, related behaviors and/or interests in order to send you personalized commercial communications. | Consent (optional and revocable at any time), given by subjects who have reached the age of 16.Article 6, par. 1, letter to GDPR. |
For the analysis of your consumption habits, where authorized by you, your purchases that have a historical depth of no more than 12 months will be examined. |
| D) Communication/transfer of data to third parties (specifically, companies belonging to the same Group to which the Company belongs). Your personal and contact data will be communicated to the third parties indicated above for the purpose of carrying out marketing activities (for example, sending with automated contact methods such as text messages, e-mail, social networks, instant messaging apps) regarding their products . |
Consent (optional and revocable at any time), given by subjects who have reached the age of 16. Art. 6, par. 1, letter to GDPR. |
For the technical time necessary to transmit such data to the aforementioned subjects or until consent is revoked, if earlier. |
Once the retention periods indicated above have expired, the Data will be destroyed, deleted or made anonymous compatibly with the technical cancellation and backup procedures.
2.1 – CATEGORIES OF PERSONAL DATA PROCESSED FOR CONTRACTUAL AND LEGAL PURPOSES
Personal data, contact data, contractual data (e.g. customer code, product code, order number), tax data, data relating to purchased products, registration data on the website, mobile app or other mobile devices, navigation data , information requested.
2.2 – CATEGORIES OF PERSONAL DATA PROCESSED FOR MARKETING PURPOSES
Personal data, contact data, contractual data (e.g. product code, total spent), data relating to products purchased, mobile app or other mobile devices, navigation data, data relating to samples requested and tests carried out. The data must refer to subjects who have reached the age of 16.
2.3 – CATEGORIES OF PERSONAL DATA PROCESSED FOR PROFILING PURPOSES
Personal data, contractual data (e.g. product code, total spent), data relating to the products purchased, data relating to the products consulted and/or placed in the cart and not purchased, registration data on the website, mobile app or other mobile devices, navigation data, data relating to the samples requested and tests carried out. The data must refer to subjects who have reached the age of 16.
2.4 – CATEGORIES OF PERSONAL DATA PROCESSED FOR THE PURPOSE OF TRANSFER TO THIRD PARTIES
Personal and contact data.
3 – MANDATORY PROVISION OF DATA
The provision of personal data referred to in point 2.1 for the purpose A of the information (execution of the contract) is necessary to manage your purchase and provide the services related to the sale as described above and where requested by you. The refusal to provide the aforementioned personal data therefore does not allow the possibility of completing the purchase and using the services indicated.
The provision of personal data referred to in points 2.2 and 2.3 for purpose B And C (marketing and profiling respectively) it is optional and bound to your consent. You will have the possibility to revoke such consent by accessing the reserved area of the website ("Privacy Settings" section), by accessing the App (by clicking on "Preferences - Personal data"), or by writing to the email address info@beautynette.it. Such revocation will not affect in any way the lawfulness of the processing based on the consents (marketing and/or profiling) given before the revocation.
The provision of data for the purpose D of the information (transfer to third parties for direct marketing purposes) is optional. Therefore, in case of failure to provide consent. your personal data will not be transferred. You will have the possibility to revoke such consent by accessing the reserved area of the website ("Privacy Settings" section), accessing the App (by clicking on "Preferences - Personal data"), or by writing to the email address info@beautynette.it.
Such revocation will not affect in any way the lawfulness of the processing based on the consent given before the revocation.
4 – RECIPIENTS OF THE DATA
The data may be processed by external parties operating as independent data controllers articles. 4 and 24 GDPR such as, by way of example, supervisory and control authorities and bodies and in general subjects, public or private, entitled to request the data, consultancy companies and/or professional firms and/or professionals, for example legal, tax and insurance companies.
The data may also be processed, on behalf of the Company, by external parties designated as data controllers appointed pursuant to art. 28 GDPR, who are given adequate operational instructions regarding the correct processing of your personal data. These subjects are essentially included, by way of example, in the following categories: companies that offer e-mail sending services; companies that offer site maintenance and development services; companies that offer support in carrying out market studies; companies that provide after-sales and consumer assistance services; shipping and transportation companies; companies that provide postal services and other marketing activities; for the provision of intragroup services and the management of purchases made at the stores of each Group company.
5 – ENTITIES AUTHORIZED TO PROCESS
Your data may be processed by employees of the Company's corporate functions responsible for
pursuit of the purposes indicated above, who have been expressly authorized to process and who have received adequate operating instructions pursuant to and for the purposes of art. 29 GDPR
6. TRANSFER OF PERSONAL DATA TO COUNTRIES NOT BELONGING TO THE EUROPEAN UNION
In consideration of the global nature of the Company's activities, the data may be transferred abroad to countries located inside and outside the European Union, to subjects who, depending on the case, will operate as independent data controllers or data controllers. . In any case, it is understood that the transfer of personal data to countries located outside the European Union will be carried out in compliance with the measures established by the applicable legislation, ensuring an adequate level of protection for interested parties.
7 – YOUR RIGHTS AS AN INTERESTED PARTY – COMPLAINT TO THE SUPERVISORY AUTHORITY
By contacting the Company and the DPO at info@beautynette.it, you can request access to the data concerning you (art. 15 GDPR), the rectification of inaccurate personal data and/or the integration of incomplete personal data (art. 16 GDPR), the cancellation of your personal data in cases provided for (art. 17 GDPR) the limitation of processing in the cases provided for by the art. 18 of the GDPR. .
Furthermore, pursuant to art. 20 GDPR, in relation to the processing purposes of this information based on consent or contract and carried out with automated tools, you have the right to receive your personal data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another owner without impediments.
You have the right to revoke the consent given at any time for marketing and/or profiling purposes, as well as to object to the processing of data for marketing purposes, including profiling connected to direct marketing by accessing the reserved area of the website ( “Privacy Settings” section), by accessing the app (by clicking on “Preferences – Personal data”) or by writing to the email address info@beautynette.it.
Finally, you have the right to lodge a complaint with the Supervisory Authority, i.e. the Italian Guarantor for the protection of personal data (https://www.garanteprivacy.it/).
8 – CHANGES TO THIS INFORMATION
The Company reserves the right to update and/or modify this information at any time. To this end, the date of the last update is reported below.
Last update date: November 21, 2021
