Links
|
Toggle Nav
Menu
Account
Settings
Language
ENG
Language
ENG
Advanced Search
My Cart

MYACCOUNT POLICY 

Information pursuant to Regulation (EU) 2016/679 (GDPR) and current national legislation

 

 

  1. General information
    Pettenon Cosmetics S.p.A. SB (hereinafter also referred to as the "Company" or "Pettenon") informs you that (hereinafter also referred to as the "User"), for the purposes indicated below, it will process your personal data (or that of the company/firm you represent if you act on behalf of the same) provided by you. Only the data necessary for the pursuit of the purposes indicated in this policy will be requested and processed. Please note that you must indicate only your data and/or data of the company/company you represent. If you act on behalf of a Company/firm, the activities envisaged in this information will be carried out towards the Company/Firm, making use of the data you have communicated and thus consenting to the processing (where consent is required) on behalf of the Company/Firm you represent.
  2. Purpose and legal basis
    The data will be processed by the Company:
    1. so that the Company can carry out commercial communications (such as advertising and/or information) on its products/services/initiatives, all by the Company to the e-mail address indicated by you in the form or to other contact details provided also below, including telephone and postal address (please note that communications may be made, even electronically with the aid of automated tools,  through email, SMS/MMS, messaging apps); the processing has consent as its legal basis; Please note that you can also communicate that you wish to be subject to the activities only by e-mail or only by telephone or postal communications, by writing to privacy@pettenon.it.
    2. so that the Company can carry out marketing and direct sales activities, in order to be able to offer you dedicated discounts, through the e-mail and telephone address you indicated in the form (and therefore also with automated tools through e-mail, SMS/MMS, messaging apps); the processing has consent as its legal basis;
    3. in order to contact you at the addresses provided, to submit questionnaires relating to Pettenon's products and services, and to analyze the answers, all for the constant improvement of our proposal to customers by also carrying out market research in this sense. The legal basis for the processing is consent. Please note that you may also communicate that you wish to be subject to the activities only by e-mail or only by telephone, by writing to privacy@pettenon.it or by contacting the company at the addresses indicated in point 6;
    4. so that the Company can create, on the basis of the information relating to the User in its possession, a profile of the User (profiling) including the study of consumption habits and choices deriving also, for example, from the analysis of product choices, purchasing behavior, browsing habits of the sites, interactions with the Pettenon world, aimed at sending the communications indicated in points 2 A and 2 B,   in accordance with the specific needs of the user himself that emerged from the profiling and also aimed at analyzing the choices and consumption habits of customers of Pettenon products. The processing for this purpose will also take place in databases in automated form. Both a profile of the individual user and homogeneous classes of users can be created. The data relating to purchases may also be found for this purpose, also from Sinergia s.r.l. See also point 9 of the policy. The legal basis for the processing is consent;
    5. to comply with an obligation provided for by law, regulation or EU legislation; the legal basis is the fulfilment of legal obligations;
    6. for legitimate interests such as that of asserting or defending Pettenon's rights; the legal basis is the pursuit of legitimate interests. In considering these legitimate interests, it was analysed that they do not compromise or interfere with the interests or fundamental rights and freedoms of the data subject (legitimate interest was assessed on the basis of a Triple Test available by contacting the Company).
  3. Mandatory provision
    PURPOSE OF POINT 2 lit, A
    You will be free or not to communicate to us the personal data of your/the Company/Firm you represent for the purposes referred to in point 2 (A) of the information as well as you will be free to give or not give consent and failure to provide and consent will therefore not entail any consequence other than that of not being subject to the activities referred to in point by Pettenon (as there are therefore no consequences on the other purposes) or not be subject to the activities themselves, to the addresses that they do not wish to communicate. Furthermore, if you consent to the processing for the purposes referred to in point 2 (A) of this policy, please note that you can always freely revoke the consent given without any reason (and therefore object to the activities in question) by contacting the Company as well as communicating that you do not wish to receive communications at certain addresses.
    PURPOSE OF POINT 2 lit, B and 2 C
    You will be free or not to communicate to us the personal data of your/the Company/Firm you represent for the purposes referred to in point 2 (B) and 2 (C) of the information as well as you will be free to give or not give consent and failure to provide and consent will therefore not entail any consequence other than that of not being subject to the activities referred to in points by Pettenon (since there is therefore no consequence on the other purposes). Furthermore, if you consent to the processing for the purposes referred to in points 2 (B) and 2 (C) of this policy, please note that you may always freely revoke your consent without any reason (and therefore object to the activities in question) by contacting the Company.
    PURPOSE OF POINT 2 letter D
    You will be free or not to communicate to us the personal data of your/the Company/Company you represent for the purposes referred to in point 2 (D) of the information as well as you will be free to give or not consent. Failure to provide it will not result in any consequence other than that of not being subject to the activities referred to in this point by Pettenon analyzing the data not provided (as there is therefore no consequence on the other purposes). Failure to consent will only result in the impossibility of being subject to the activities referred to in this point. Please note that you may always freely revoke your consent without any reason (and therefore oppose the activities in question) by contacting the Company. The processing is based on the following legal basis: consent;
    PURPOSE OF POINT 2 letter F and 2 G
    Communicating data to Pettenon for the purposes indicated in point 2 (E) 2 (F) of this information is necessary and failure to provide it will make it impossible for Pettenon to carry out the activities referred to in the previous points.
  4. Categories of data recipients
    For the purposes indicated in point 2 (A), the data may be communicated by Pettenon to carriers and freight forwarders and to the post office, for the dispatch of any advertising material in paper form. For the purposes indicated in point 2 (B), 2 (C) and 2 (D), the data will not be communicated to third parties by Pettenon. For the purposes referred to in point 2 (E) of this policy, the data may be communicated by Pettenon to public bodies, judicial bodies and police bodies. For the purposes referred to in point 2 (F) of this policy, the data may be communicated by Pettenon to lawyers-legal consultants, public bodies, judicial bodies and police bodies and to the post office (they may see the address for sending any written communications). Pettenon will not communicate only the data that is indispensable for the pursuit of the individual purposes indicated in this policy. On behalf of Pettenon, each in his or her role, all persons delegated by the Company (public relations officers, including those external to the Company, information systems employees, including those external to the Company and who may sometimes perform the tasks of system administrators and are in this case appointed as such, consultants, including those external to the Company, such as IT technicians who may sometimes perform the tasks of system administrators, may then know the data on behalf of Pettenon, each according to their role. and in this case the following are appointed, legal advisors - interns, website management staff including those external to the Company, marketing staff also external to the Company, legal practices staff, collaborators of the data processors) and data processors appointed by Pettenon (e.g. marketing consulting firms, IT outsourcers, companies responsible for sending newsletters or communications). The list of data processors is always available by contacting the company at the addresses indicated in point 6. The Data Processors will only process the data necessary for the performance of the assigned tasks.
  5. Data retention
    The data will be stored for the entire period necessary to pursue the purposes contained in this policy. The data retention period is as follows:
    • for legal obligations, regulations and EU legislation, the data may be stored for the periods imposed by these regulatory sources;
    • for the purposes referred to in points 2(A), 2 (B) and (C), until the withdrawal of consent and/or the request to no longer be subject to the activities indicated in these points (which you can do at any time by contacting the Company) without prejudice to storage for the periods provided for the purposes indicated in points 2 (E) and 2 (F); by 31 December of the second year following the year of registration, you will in any case be sent a communication to understand if there is still your interest in being subject to the activities referred to in points 2(A) 2 (B) and (C), and therefore in the storage of data for the purposes indicated in these points and if this interest is no longer available,  the data will always be deleted, without prejudice to storage for the periods provided for the purposes indicated in points 2 (E) and 2 (F). If, on the other hand, you are still interested in being subject to the activities referred to in points 2(A) 2 (B) and (C), and therefore in the storage of data for the purposes indicated in these points, by 31 December of the second year from the communication, you will be sent a further communication of the same nature and so on until your interest remains;
    • for the purposes referred to in point 2 (D) until the revocation of consent/request for cancellation or for a maximum of 12 months from their registration, except for the actual transformation into anonymous form that does not allow, even indirectly or by connecting other databases, to identify the data subjects;
    • in any case, all data may be stored for a period necessary to assert or defend a right of the Company, based on Italian civil and criminal regulations and therefore for a maximum of 10 years from the termination of the relationship, except in disputes or disputes that make a further retention period necessary.
  6. Data Controller and Data Protection Officer
    The Data Controller of the data provided is: Pettenon Cosmetics S.p.A. SB with registered office in Via del Palù, 7d, 35018 San Martino di Lupari PD, Tel. +39 049 99888 FAX +39 049 9988809, privacy@pettenon.it. There is a Data Protection Officer of the Company, who can be contacted at the Company's headquarters in Via del Palù, 7/d, 35018 - San Martino di Lupari (PD), as well as at the e-mail address dpo@pettenon.it
  7. Rights
    We inform you that the GDPR provides for the possibility for the User to ask the Company (at the addresses indicated above) for access to personal data and the rectification of data, the erasure of the same or the limitation of the processing concerning him/her, the portability of data; the User may also have the possibility, again by contacting the Company, to object to the processing of data and to exercise the other rights contained in Chapter 3 section 1 of the GDPR between which is mentioned is the right to withdraw consent, where applicable: the withdrawal of consent does not affect the lawfulness of the processing based on the consent given before the withdrawal
  8. Complaints
    If you believe that the processing of your data is in violation of the provisions of the GDPR, you have the right to lodge a complaint with the Italian Supervisory Authority (whose references can be found on the www.garanteprivacy.it website), as provided for by Article 77 of the GDPR, or to take legal action (Article 79 of the GDPR).  In addition, he can also contact the Supervisory Authority of the state in which he habitually resides or works. The list of the Supervisory Authority can be found at the link www.garanteprivacy.it/home/footer/link).
  9. Logic used for profiling
    The profiling referred to in point 2 (D) takes place by the Company through the analysis, also in an automated manner, of the User's data and characteristics (e.g. age, geographical area, gender, participation in an event, adhesion to particular initiatives, purchase of certain products, completion of questionnaires, actions carried out while browsing the Company's websites if the User has accepted the cookies of profiling on our websites). A consumption profile is then created that is also inserted into specific groups (clusters). Profiling has the purposes indicated in point 2 (D); however, this processing does not constitute a particular risk for the User, considering the type of basic profiling that does not require data of a particularly delicate nature or that allows the detailed reconstruction of particularly confidential aspects of private life. The User always has the right to obtain human intervention, to express his opinion, to obtain an explanation of the decision reached and to contest the decision.
  10. Processing methods
    The data will be processed with the aid of IT and paper/manual tools, adopting protection systems suitable for the protection of confidentiality. All the data of which will be stored and processed in full compliance with confidentiality in compliance with all current regulations (and therefore also in compliance with the principles of correctness, lawfulness and transparency and protection of confidentiality and rights) and with logics strictly related to the purposes indicated in this policy. Only the operations necessary to pursue the purposes indicated in this information will be carried out on the data. The data will be stored, as far as the Company is concerned, at its headquarters or server farm and as far as the data processors are concerned, at their premises or server farms. The data communicated to third parties will be stored and processed by them independently. The data will also be organized in databases - databases, including computer databases.

Information updated on 26/06/2024. Previous versions of the information are available by contacting the Company at the addresses referred to in point 6.