The processing of the Personal data of Website users shall be carried out in Italy in compliance with applicable European regulations and with the Italian Legislative Decree no. 196 of 30 June 2003, that includes the Code on Personal data protection (the “Code”).
Beauty Project by Carola Devecchi, with registered office in Somma Lombardo (VA), via dell’Industria 20, VAT no. 02129650020 and enrolled with the Milan Registry of Industries under no. VA289014 manages the e-commerce and sale services of the products on the Website.
Shella.it, with registered office in Gallarate (VA), via Tiro a Segno 7, VAT no. 03235400128 manages the Website.
- THE POLICY
- DATA PROCESSING, MODALITIES AND PURPOSES
Beauty Project is the Data controller of the website user’s personal data for the management, conclusion and exercise of the commercial transactions related to the purchase of the products present on the Website. Beauty Project determines the purposes and the modalities of such data processing and the tools to be used to guarantee the utmost safety.
Specifically, in the pursuing of the purposes above, within the ambit of the purchase process of the products on the Website, Beauty Project collects the Personal data (such as personal data, email address, traditional mail address, credit card details, bank details, phone number) by means of a specific order form used for the purchase of the products on the Website.
All personal data are processed electronically and, in some cases, also in paper format (for example, when the data processing is necessary to prevent frauds on the Website).
Personal data shall be stored in a form that allows the identification of the user for the period strictly necessary for the purposes they have been collected for and processed and, in any case, within the term provided for by the law. To guarantee that personal data are updated, complete and correct, users are kindly invited to report any change to the following email address: firstname.lastname@example.org.
Without prejudice to the content of this policy, users’ personal data shall not be disseminated to third parties for any purpose that is not compliant with the law or without their expressed consent.
Personal data can be accessed by third parties for ancillary purposes related to the provision of the required services (for example, for purchase transactions). For further details on this aspect, users are kindly invited to consult paragraph 4 that follows. Users shall ask for and obtain at any time the complete and updated list of Data processors by writing to the following email address: email@example.com.
Users’ personal data shall be disseminated to officers of justice and to the police, within the ambit, for example, of the fulfilment of the Website anti-fraud services, in compliance with current legislation and if required. Personal data shall not be transferred abroad, especially to non-European Countries that could not guarantee proper protection to the users. If the transfer of data abroad turns out to be necessary for the achievement of the purposes of Beauty Project, users shall be assured that such transfer of personal data to non-European countries that could not assure proper protection to the users shall be carried out only upon conclusion of specific agreements between Beauty Project and the aforementioned users. Those specific agreements shall contain specific provisions established for the protection of users’ personal data, in compliance with current legislation and applicable regulations.
The purposes for which personal data are requested and processed are clearly indicated, from time to time, in the notice present on the page where such data are requested.
It is possible that Beauty Project processes third parties’ personal data disseminated by users to Beauty Project, for example, if a user wants to report a service or a product present on the Website to a friend, or if a user purchases a product to be delivered to a friend, or if the purchasing subject differs from the one to which the product is delivered.
In the aforementioned cases, Beauty Project, according to current legislation, shall comply with the informational obligation towards the users mentioned and, if necessary, it shall request their expressed consent upon registration in Beauty Project’s archives.
Even though no sections of the Beauty Project Website contain content forbidden to minors, it is important to point out that minors shall not compile any form available on the Website without the expressed consent of their parents or legal protectors. Beauty Project asks all parents and legal protectors to provide proper information to minors regarding the use of the Internet and the dissemination of their personal data in a safe and responsible way. Moreover, Beauty Project is committed not to consciously store and use personal data filled in in the forms by minors for any purpose, including for the dissemination to third parties.
- LACK OF PERSONAL DATA PROVISIONING AND CONSEQUENCES
The provision of personal data to Beauty Project and, specifically, of registry data, email address, traditional mail address, credit card details, bank details and phone number is necessary for the achievement of the aforementioned purposes.
Some of such personal data could be mandatory in order to comply with the legal obligations and for the provision of the services indicated in the Website and requested by the user.
Failure to provide the mandatory data marked with the (*) character, shall make it impossible to execute the purchase agreement or to comply with legal obligations. Failure to provide such data shall, therefore, represent from case to case a valid and legitimate reason not to execute such purchase agreement for the products and services indicated in the Website.
The provision of optional personal data to Beauty Project is not mandatory and does not imply any consequence related to the purchase of the products on the Website.
- DISSEMINATION OF PERSONAL DATA
Personal data shall be made available to third parties that carry out specific services on behalf of Beauty Project in their capacity as Data processors. Moreover, they shall be disseminated to other recipients of the data collected by Beauty Project, that process personal data independently solely to execute the purchase agreement on the Website (such as ICCREA Banca S.p.A., for the finalization of the payment services through credit/debit card) only if the final purpose is compatible with the purposes for which such data have been collected and processed and, in any case, according to current legislation.
Personal data shall not be disseminated, transferred to third parties, without previous communication to the interested users and without their expressed consent, when provided for by the law.
- HOW PERSONAL DATA ARE COLLECTED ON THE WEBSITE
Beauty Project collects personal data and other information within the ambit of the online registration process or of the transmission of the order forms, while purchasing the products on the Website, for the execution of electronic business transactions. Such personal data are processed by Beauty Project according to the limits and purposes indicated in the notice present in the section specifically dedicated to the collection of data.
- SAFETY MEASURES
However, as it is not possible to guarantee that the safety measures adopted to make the Website protected and the transmission of personal data and information on the same Website limit and exclude any risk of not-allowed access or of leak of data, users are invited to make sure that their computers are equipped with updated antivirus software for the safe transmission of inbound and outbound data and that the Internet provider adopted specific firewalls and antispam filters to protect the transmission of data on the Web.
- RIGHTS TO ACCESS DATA AND OTHER RIGHTS
Users, also those not registered, have the right to receive confirmation about the presence of their personal data in the archives and about their communication in an intelligible form.
Beauty Project shall always provide to the users what follows:
- the update, change or amendment of users’ personal data;
- the cancellation, transformation into anonymous form, interruption of use of personal data that have been processed in violation of current legislation, including those that shall not be stored for the purposes they have been collected and processed for;
- the certification that the abovementioned operations and their content have been brought to the attention of those to whom such data have been communicated and disseminated, except the fulfilment of this obligation turns out to be impossible or implies the use of excessive means if compared to the protected right.
Users shall have the right not to accept, totally or partially:
- the processing of their personal data for legitimate reasons, even if necessary for the purposes of the collection;
- the processing of their personal data for the purpose of direct marketing, advertisement, market researches or commercial communication;
- users shall at any time exercise their rights in compliance with the law by writing to Beauty Project to the following email address: firstname.lastname@example.org. Answers to users’ requests are guaranteed.
- LINKS TO OTHER WEBSITES
Cookies are small text files that websites send to users’ devices. Such small text files are saved and then retransmitted to the websites when the same user visits them later. While surfing a website, users’ devices can receive cookies that come from different websites and servers (the so called “third parties”).
There are two types of cookies:
- Technical cookies
These cookies are used to «perform the transmission of a communication on an electronic communication web, or, as far as it is strictly necessary to the provider of a service of the information society expressly requested by the subscriber or by the user to provide such service» (Art. 122, par. 1 of Italian Legislative Decree no. 196/2003).
They are not used for further purposes and are usually installed directly by the Website owner/manager. They can be divided into session cookies, that guarantee the standard navigation and use of the website (allowing, for instance, the completion of a purchase or the authentication to access reserved areas); analytical cookies, related to the technical cookies as far as they are used directly by the website manager in order to collect aggregated information on the number of users and on how they visit the same website; functional cookies, that make the user navigate according to a series of specific selected criteria (for example – language, selected products to be purchased) in order to enhance the service provided.
- Profiling cookies
These cookies are used solely to «perform the transmission of a communication on an electronic communication web, or, as far as it is strictly necessary to the provider of a service of the information society expressly requested by the subscriber or by the user to provide such service» (Art. 122, par. 1 of Italian Legislative Decree no. 196/2003).
Profiling cookies are used to create users’ profiles and to send advertisement messages in line with the preferences shown by them while navigating the Web.
This Website uses Google Analytics solely for statistical purposes and not to create users’ profiles.
As a matter of fact, this Website uses profiling cookies according to Italian Legislative Decree no. 196/2003 and following amendments, to the provisions set for by the privacy regulator, to what is stated in the banner present on the home page and on the COOKIES page.
Users that need to receive further information on how Beauty Project processes their personal data are invited to write an email to the following email address: email@example.com. To receive information on users’ rights and be updated on regulations about personal data processing protection, users are recommended to visit the Italian Data Protection Authority’s website at the following address: //www.garanteprivacy.it/
- APPLICABLE LAW
The Code guarantees that the processing of personal data is carried out according to data processing and liberty law, as well as respecting the dignity of the interested party, as regards confidentiality, personal identity and the right to protect personal data.