Privacy Policy
by Ilaire Italian Cosmetics Srl
This Application collects some Personal Data from its Users.
Types of Data Collected
Among the Personal Data collected by this Application, either independently or through third parties, there are: name, surname, email, Cookies, and Usage Data.
Detailed information on each type of data collected is provided in the dedicated sections of this privacy policy or through specific explanatory texts displayed prior to the data collection. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application. Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, this Application may be unable to provide its Service. In cases where this Application specifies certain Data as optional, Users are free to refrain from communicating such Data without consequences on the availability or functioning of the Service.
Users who are unsure about which Data is mandatory are encouraged to contact the Data Controller. Any use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application, unless stated otherwise, serves to provide the Service requested by the User, as well as for the additional purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application and confirms that they have the third party’s consent to provide the Data, relieving the Data Controller of all responsibility toward third parties.
How and Where the Collected Data is Processed
Processing Methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using IT and/or telecommunication tools, following organizational procedures and methods strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of individuals involved with the operation of this Application (administration, sales, marketing, legal, system administration staff) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed as Data Processors by the Data Controller if necessary. The updated list of these parties may be requested from the Data Controller at any time.
Legal Basis for Processing
The Data Controller processes Personal Data related to the User if one of the following applies:
- The User has given consent for one or more specific purposes. Note: In some jurisdictions, the Data Controller may be allowed to process Personal Data until the User objects (“opt-out”), without relying on consent or any other legal bases. This does not apply if the processing of Personal Data is subject to European data protection laws;
- Processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations;
- Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- Processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- Processing is necessary for the purposes of legitimate interests pursued by the Data Controller or by a third party.
Users can contact the Data Controller to clarify the specific legal basis that applies to each processing operation.
Location
The Data is processed at the Data Controller’s operating offices and any other places where the parties involved in the processing are located. Depending on the User’s location, data transfers may involve transferring the User’s Data to a country other than their own.
Users are entitled to learn about the legal basis of Data transfers to countries outside the European Union or to any international organization governed by public international law or established by two or more countries, such as the UN, and about the security measures taken by the Data Controller to safeguard their Data.
Retention Time
Personal Data is processed and stored for as long as required by the purpose it has been collected for. Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
- Personal Data collected for legitimate interests of the Data Controller shall be retained as long as needed to fulfill such purposes.
User Rights
Users may exercise certain rights regarding their Data processed by the Data Controller, including but not limited to:
- Withdraw their consent at any time;
- Object to processing;
- Access, rectify, or delete their Data;
- Request the transfer of their Data to another Data Controller.
For further details and rights, refer to the complete document.
Contact
Ilaire Italian Cosmetics Srl
Email: info@cosmeticanaturalebio.com
Last Updated: July 22, 2024