Information to data subjects pursuant to Regulation (EU) 2016/679 (GDPR) and to the Italian applicable legislation
1. General information
Pettenon Cosmetics S.p.A. SB (hereinafter referred to for short also as the “Company” or “Pettenon”) informs you (and hereinafter you are referred to also as “User”) that, pursuing the purposes stated herein, the Company will process your personal data (or the data of the company/firm that you represent in chase you are acting on its behalf) provided by you. Only the data that are necessary to pursue the purposes stated herein will be requested and processed. Please, bear in mind that you must provide only your data and/or data of the firm/company that your represent. If you are acting on behalf of a company/firm, the activities represented herein will be carried out having regard to said company/firm using the data provided by you and based on the consent given by you to their processing (where consent is required) on behalf of the company/firm that you represent.
2. Purposes and legal basis
The data will be processed by the Company:
- In order for the Company to be allowed to send you advertisements and/or information about products/services/initiatives of the Company and of its partners to the e-mail address provided by you in the form (please, be informed that the e-mails may be sent also using automated tools). The legal basis of the processing is: consent;
- In order to comply with any obligation laid down by the applicable law, regulations or EU legislation (the legal basis for the processing is complying with legal obligations) and to pursue legitimate interests, such as the one to enforce or defend a right of Pettenon (the legal basis for the processing is the pursuance of legitimate interests).
3. Mandatory provision of data
- PURPOSES STATED IN POINT 2 letter A
It is up to you to decide whether to provide your personal data/the data of the company/firm that you represent for the purposes stated in point 2 (A) of this information to data subjects as well as to decide whether to give your consent or not; therefore, your decision not to provide the data or not to give your consent will have no consequences other than that of not receiving advertisements and information from Pettenon (so with no consequence whatsoever on the other purposes). Furthermore, please bear in mind that, if you give your consent to the processing for the purposes stated in point 2 (A) of this information to data subjects, you will always have the right to withdraw your consent at any time and with no obligation to give any reason (and therefore the right to object to the processing and activities under said point) notifying the data controller of it. - PURPOSES STATED IN POINT 2 letter B
Conversely, the provision of your data for the purposes stated in point 2 (C) of this information to data subject is mandatory, as any failure to provide them may entail the impossibility by Pettenon to perform the activities stated in the previous points.
4. Categories of data recipients
For the purposes stated in point 2 (A), your data will not communicated to any third parties (except to persons in charge of data processing and data processors as specified below)
For the purposes stated in point 2 (B), of this information to data subjects, the data many be communicated by Pettenon to lawyers-legal advisors, public administration bodies, judicial authorities, the police, and the postal service (as the postal service would see the address to which any written notices are sent by post) Pettenon will communicate only the data that are strictly necessary to pursue the individual purposes stated in this information to data subject.
Your data may also become known, on Pettenon’s behalf, to all the persons, each one for the relevant scope, vested by Pettenon with specific tasks (persons engaged in relations with the public, also external to the Company, persons working with the information systems, also external to the Company and persons working as system administrators, all of them being appointed as such, legal advisors- interns, persons engaged in the website management, also external to the Company, persons engaged in marketing, also external to the Company, persons carrying out legal procedures, data processors’ staff) and the data processors appointed by Pettenon (e.g., marketing consulting firms, firms IT services are outsourced from, companies in charge of sending news letters or communications, companies helping with the Company management, such as the parent company). The list of data processors can be obtained at any time from the Data Controller sending the related request to the addresses given in point 6. The data processors will process only the data that are necessary to perform their respective tasks.
5. Storage of the data
The data will be stored for the time necessary to pursue the purposes stated in this information to data subjects. The period for which the data are stored is as follows:
- To comply with obligations laid down by the applicable law, regulations and EU legislation, the data may be stored for the time required by said applicable law, legislation and regulations;
- To pursue the purposes stated in point 2 (A) of this information to data subjects, the data may be stored until consent is withdrawn or their erasure is requested, without prejudice to any longer period required by law the data shall be stored for as evidence of the consent given;
- In any case, all the data may be stored for the time necessary to enforce or defend a right of the Company in accordance with the Italian and EU applicable legislation.
6. Data Controller and Data Protection Officer
The Data Controller is: Pettenon Cosmetics S.p.A. SB having its headquarters at Via del Palù, 7d, 35018 San Martino di Lupari PD, Italy, phone +39 049 99888 FAX +39 049 9988809, info@pettenon.it.
For the time being, the applicable law does not require that the Company has a Data Protection Officer; should the appointment of a Data Protection Officer become required, that will be stated and the Data Protection Officer’s contact details will be given on the Company’s website www.pettenon.it, which users are invited to periodically visit for any updates to this privacy policy and information to data subjects.
7. Rights
Please, be informed that, in accordance with the GDPR, the data subject has the right to obtain, from the data controller (sending the related request to the contact details given above), access to his or her personal data, the rectification of said data, their erasure or restriction to their processing, and the portability of the data.; furthermore, the data subject has the right to object to the processing of his or her personal data and to exercise the other rights set out in Chapter 3 section 1 of the GDPR including the right to withdraw consent, where applicable: the withdrawal of consent shall not prejudice the lawfulness of the processing based on the consent given before its withdrawal.
8. Complaints
If the User believes that the processing of his or her personal data breaches the GDPR and any other applicable legislation on personal data protection, the User has the right to lodge a complaint with the Italian Data Protection Authority (Autorità Garante della Protezione dei dati personali) whose contact details can be found on the website www.garanteprivacy.it.
9. Processing method
Please, be informed that your data will be processed using IT tools and on paper/manually and adopting appropriate systems to ensure the protection of their confidentiality. All the data will be stored and processed ensuring their confidentiality and in compliance with all applicable legislation (and therefore in compliance with the principles of fairness, lawfulness, transparency and protection of confidentiality and rights) and with logics strictly linked to the purposes stated in this information to data subjects. Only the processing operations that are necessary to pursue the purposes stated in this information to data subject will be performed on the data. As regards the Company, the data will be stored at its headquarters or server farm, while, as regards the data processors, at their headquarters or server farms. The data communicated to third parties will be independently stored and processed by the third parties concerned. The data will be organized also in databanks-databases.
Information to data subjects updated on 18 July 2022