Information on the processing of personal data pursuant to art. 13 of the European Regulation (EU) 2016/679

Privacy Policy

This information is made pursuant to Regulation (EU) 2016/679 (hereinafter "Regulation" or "GDPR") and describes the methods for processing the personal data of users who consult and use this website, accessible to the HTTPS address : //procosmet.com/ (hereinafter also "Site").

Data processing owner

The data controller is the Procosmet s.r.l., via della solidarity n. 29/A, 40056 Crespellano (BO), P.I.  02883540243 below "Owner".

Following the consultation of the Site, data relating to the user who access the Site (defined as "interested" as an identified or identifiable natural person) can be processed.

The owner can be contacted at the email address: support@procosmet.com

 

Types of data collected, purposes and legal base

Personal data can be collected autonomously by the owner or through third parties. In this case, the IT systems and software procedures responsible for the functioning of this site acquire some personal data of users, of a technical-information nature (e.g. the IP address, the type of browser used, the operating system, the name of Domain and the addresses of websites from which access or exit was carried out, etc.), the transmission of which is inherent in the normal operation of the Internet. These data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.

The data that the user chooses to spontaneously provide are collected to allow the website to provide their services, as well as for The following purposes:

A. Contacts by the user by filling in the form.

The optional, explicit and voluntary sending of communications through the compilation of the form on the Site entails the subsequent acquisition of the data communicated by the User, including his e-mail address or telephone number and consent to receive any reply messages to their requests.

In this case, the provision of the e-mail address and the other possibly indicated data is optional, but indispensable to be able to take advantage of the service and receive a response to your request and, in the absence, we will not be able to proceed with the processing.

The personal data thus provided are used to the sole purpose of satisfying or refunding to the requests transmitted and are communicated to third parties only in the event that this is necessary for this purpose. The data are kept for the period necessary for the purpose of carrying out the request and in accordance with current legislation.

Legal base: The treatment is carried out for the fulfillment of a contractual and pre -contractual obligation assumed by the owner with the service (art. 6, par. 1 Lett.b).

Conservation: The data provided voluntarily by the User are kept for the period necessary for the purpose of carrying out the request and on the basis of what is allowed by current legislation and contractual obligations that are possibly arisen.

B. Newsletters and commercial/promotional communications.

Where explicitly requested by the user, it is possible to provide your contact data in order to receive commercial and/or information communications with regard to the activity of the owner with reference to the site consulted and the products offered.

The provision of these data for these purposes is completely optional but indispensable in order to proceed with the supply of the promotional information service described above. The personal data thus provided are used to the sole purpose of satisfying or refunding to the requests transmitted and are communicated to third parties only in the event that this is necessary for this purpose and only subject to the performance of explicit consent by the interested party.

To send the newsletter we use Tidium, read theirs Privacy information. 

Legal base: The treatment is carried out on the basis of the explicit consent of the interested party (art. 6, par. 1 letter).

Conservation: The data provided will be kept for the period necessary to the performance of the activity for which they have been conferred and in any case, specifically to the above purposes, no later than two years as expressly provided for by the law (except for the renewal of the consent by the Interested use for other purposes for as required by current legislation).

1. Soft Spam activities

The owner may send the user to the user promotional communications with products and/or services similar to those already purchased or re-propose the same without the need for the express and estimate consent of the user pursuant to art. 130, 4 paragraph, privacy code, provided that the user does not exercise the right of opposition.

Legal base: This treatment is based on art. 130, 4 paragraph, of the Privacy Code as novelty by Legislative Decree No. 101 of 2018.

E. This site uses technical, tracking and profiling cookies. For details, please refer to the appropriate Cookie Policy.

Methods and place of the processing of the data collected

Methods of treatment

The owner deals with the personal data of users by adopting the appropriate security measures aimed at preventing access, dissemination, modification or destruction of personal data.
The treatment is carried out through IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, categories of persons may have access to the data involved in the organization of the site (administrative, commercial, legal, system administrators) or external subjects (such as third party service providers, postal couriers, hosting providers , computer companies, communication agencies) also appointed, if necessary, responsible for the treatment by the owner.

Among the external subjects appointed external managers of the data processing includes partner commercial activities (suppliers).

The updated list of managers may always be requested from the data controller.

Place and times

The data are processed at the owner's operating offices and in any other place where the parties involved in the treatment are located. The data are processed for the time necessary to carry out the service requested by the user, or requested by the purposes described in this document, and the user can always request the interruption of the processing or the cancellation of the data.

Data transfer

Personal data are not transferred abroad.

Rights of the interested parties

Interested parties - the individuals identified or identifiable to whom the data refer - can exercise specific data protection rights, reported in the following list:

a) Right of access: right to obtain the confirmation from the Data Controller is a processing of personal data and in this case, to obtain access to personal data and detail information regarding the origin, purposes, Categories of data processed, communication and/or data transfer recipients and more;

b) Right of correction: right to obtain from the owner the correction of inaccurate personal data without unjustified delay, as well as the integration of incomplete personal data, also providing an additional declaration;

c) Right to cancellation ("oblivion"): right to obtain from the owner the cancellation of personal data without unjustified delay in the event that: i. The necessary data are no longer necessary than the purposes of the processing; II. The consent on which the treatment is based is revoked and there is no other legal basis for the treatment; III. Personal data were processed illegally; IV. Personal data must be deleted to fulfill a legal obligation;

d) right of opposition to the processing: right to oppose any time to the processing of personal data which have as its legal basis a legitimate interest of the owner;

e) Right to limitation: right to obtain the limitation of the processing from the Data Controller, in the event that the accuracy of personal data is contested (for the period necessary for the Data Controller to verify the accuracy of such personal data), if the processing is illegal and/or the interested party opposed the treatment;

f) right to data portability: right to receive in a structured format, commonly used and legible from automatic device personal data and to transmit such data to another data controller, if technically feasible, only for cases where the processing is based on consent or contract and for only data processed through electronic tools;

g) Right to propose a complaint to the control authority: without prejudice to any other administrative or jurisdictional appeal, the interested party who believes that the treatment concerning him violates the regulation has the right to propose a complaint to the control authority of the Member State in to which he resides or work habitually, or of the state in which the alleged violation has occurred.

Rights can be exercised by contacting the owner at the following addresses: support@procosmet.com

Facebook Authentication (Facebook, inc.)

Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and connected to the social network Facebook.

Personal data processed: various types of data according to what is specified by the privacy policy of the service.

Place of the treatment: USA - Privacy Policy.

 

Google OAuth (Google inc.)

Google Oauth is a registration and authentication service provided by Google Inc. and connected to the Google network.

Personal data processed: various types of data according to what is specified by the privacy policy of the service.

Place of the treatment: USA - Privacy Policy.

 

Remarketing and Behavoral Targeting

These services allow this website and its partners to communicate, optimize and serve advertising advertisements based on the past use of this website by the user.

This activity is carried out through the tracking of use data and the use of cookies, information that is transferred to the partners to which the Remarketing and Behavoral Targeting activity is connected.

 

Facebook Remarketing (Facebook, inc.)

Facebook Remarketing is a Remarketing and Behavoral Targeting service provided by Facebook, Inc. that connects the activity of this website with the Facebook Advertising network.

Personal data collected: cookies and use data.

Place of the treatment: USA - Privacy Policy

 

Remarketing Google Ads (Google inc.)

Remarketing Google Ads is a remarketing and Behavoral Targeting service provided by Google LLC or Google Ireland Limited, depending on the position in which Procosmet Italy is used, which connects the procosmet Italy activity with the Advertising Google Ads network and the cookie DoubleClick. Users can choose not to use Google cookies to customize ads by visiting the Google ads settings.

Personal data processed: Cookies; Use data.

Place of the treatment: USA - Privacy Policy - Opt Out.

 

Payment management

Payment management services allow the site to process payments by credit card, bank transfer or other tools. The data used for payment are acquired directly by the payment service manager requested without being treated in any way by this site.

Some of these services may also allow the planned sending of messages to the user, such as emails containing invoices or notifications regarding payment.

 

Paypal (PayPal)

Paypal is a payment service provided by Paypal Inc., which allows the user to make online payments using his PayPal credentials.

Personal data collected: various types of data according to what is specified by the privacy policy of the service

 Place of the treatment: use- Privacy Policy

 

Stripe (Stripe inc)

Stripe is a payment service provided by Stripe Inc.

Personal data processed: various types of data according to what is specified by the privacy policy of the service.

Place of the treatment: USA - Privacy Policy

 

Gpay (Google inc)

Gpay is a payment service provided by Google Inc.

Personal data processed: various types of data according to what is specified by the privacy policy of the service.

Place of the treatment: USA - Privacy Policy.

 

Shop Pay (Shopify)

Shop Pay is a payment service provided by Shopify.

Personal data processed: various types of data according to what is specified by the privacy policy of the service.

Place of the treatment: Canada - Privacy Policy

 

View content from external platforms

These services allow you to view content hosted on external platforms directly from the pages of this website and to interact with them.

In the event that a service of this type is installed, it is possible that, even if users do not use the service, the same collects traffic data relating to the pages in which it is installed.

 

YouTube video widgets (Google)

YouTube is a video content display service managed by Google Inc. which allows this website to integrate these content within its pages.

Personal data collected: cookies and use data.

Place of the treatment: USA - Privacy Policy

 

Google Fonts (Google inc.)

Google Fonts is a viewing service of character styles managed by Google Inc. which allows this website to integrate these content within its pages.

Personal data collected: cookies and use data. 

Place of the treatment: USA - Privacy Policy

 

Google Maps widget (Google inc.)

Google Maps is a map display service managed by Google Inc. which allows this website to integrate these content within its pages.

Personal data collected: cookies and use data. 

Place of the treatment: USA - Privacy Policy

 

Instagram widget (Instagram, inc.)

Instagram is a image viewing service managed by Instagram, Inc. that allows Procosmet Italy to integrate these content within its pages.

Personal data processed: Cookies; Use data.

Place of the treatment: USA - Privacy Policy.

 

Platform and hosting services

These services are intended to host and operate key components of Procosmet Italy, making the provision of Procosmet Italy possible from a single platform. These platforms provide the owner with a wide range of tools such as, for example, analytical tools, for the management of user registration, for the management of comments and databases, for electronic commerce, for the processing of payments etc. The use of these tools involves the collection and processing of personal data. Some of these services work through servers geographically located in different places, making it difficult for the determination of the exact place where personal data are kept.

 

 Shopify (Shopphy inc.)

Shopify is a platform provided by Shopify Inc. which allows the owner to develop, make work and host a website dedicated to electronic commerce.

Personal data processed: various types of data according to what is specified by the privacy policy of the service.

Place of the treatment: Canada - Privacy Policy.

 

 

 

More information on personal data

 

Google Search Console

Google Search Console is a diagnostic and data analysis service for websites offered by Google Inc.

[Pp] https://www.google.com/intl/it/policies/privacy/

[Place] USA

 

Profit

If the user lends his consent to this processing, the Data Controller could save and use the personal data acquired on the basis of this document, and in particular the data relating to purchasing behaviors, to create profiles relating to users, in order to Send commercial and/or promotional messages in line with the preferences expressed by the latter, also during their browsing activities on Procosmet Italy. The user will always have the opportunity to revoke his consent to the profiling activity simply by sending an email to the contact details contained in this document.

 

Facebook Insights

Provides access to Insight data for pages, applications and domains that the user owns.

In the event that an interaction service with social networks is installed, it is possible that, even if users do not use the service, the same collects traffic data relating to the pages in which it is installed.

 

Mcheckout (webloudspeaker pvt ltd)

Mcheckout is a checkout service that allows you to make the payment in idioms other than the Italian language (for example in English) and in the currencies supported by stripes other than the euro.

The data used for payment are acquired directly by the payment service manager requested without being treated by Mcheckout in any way.

Personal data collected: various types of data according to what is specified by the privacy policy of the service.

Place of treatment: India - Privacy Policy.

 

 

Additional information on treatment

 

Defense in court

The user's personal data can be used for the defense by the owner in court or in the preparatory phases to its possible establishment, by abuse in the use of the same or of the services connected by the user.

The user declares to be aware that the owner may be requested to reveal the data at the request of public authorities.

 

Specific information

At the request of the User, in addition to the information contained in this Privacy Policy, this website could provide the user of additional and contextual information regarding specific services, or the collection and processing of personal data.

 

System and maintenance log

For needs related to operation and maintenance, this website and any third party services used by it may collect system logs, i.e. files that record interactions and which may also contain personal data, such as the user IP address.

Information not contained in this policy

More information in relation to the processing of personal data may be requested at any time to the data controller using contact information.

 

Exercise of rights by users

The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or not of the same at the data controller, to know its content and origin, to verify its accuracy or ask for its integration , the cancellation, updating, the correction, the transformation into anonymous form or the blocking of personal data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their treatment. Requests should be addressed to the data controller.

This website does not support "do not track" requests. To know if any third -party services used support them, consult their privacy policies.

 

Details on the right of opposition

When personal data are processed in the public interest, in the exercise of public authorities of which the owner is invested or to pursue a legitimate interest of the owner, users have the right to oppose the treatment for reasons related to their particular situation.

Users are in mind that, where their data were processed with direct marketing purposes, they can oppose the processing without providing any motivation. To find out if the Data Controller Sose data with direct marketing purposes, users can refer to the respective sections of this document.

 

How to exercise rights

To exercise the user's rights, users can direct a request to the contact details of the owner indicated in this document. The requests are deposited free of charge and processed by the owner as soon as possible, in any case within a month.

 

Cookie policy

Procosmet Italy uses tracking tools. To find out more, the user can consult the cookie policy: https://procosmet.com/pages/terms-of-vice 

 

Changes to this privacy policy

The data controller reserves the right to make changes to this Privacy Policy at any time by advertising users on this page. So please consult this page often, taking as a reference the date of the last change indicated at the bottom. In the event of non -acceptance of the changes made to this Privacy Policy, the user is required to cease the use of this website and may request the data controller to remove their personal data. Unless otherwise specified, the previous Privacy Policy will continue to apply to personal data until that moment collected.

 

Definitions and legal references

 

Personal data (or data)

It constitutes a personal given any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.

 

Use data

These are the personal data collected automatically from the website (or by the applications of third parties that it uses it), including: the IP addresses or the domain names of the computers used by the user who connects to the website, the addresses In URI (Uniform Resource Identifier) ​​notation, the time of the request, the method used in subjecting the request to the server, the size of the file obtained in response, the numerical code indicating the state of the response from the server (good end, error, etc. .) The country of origin, the characteristics of the browser and the operating system used by the visitor, the various time connotations of the visit (for example the time of stay on each page) and the details relating to the itinerary followed within the website, With particular reference to the sequence of the pages consulted, to the parameters relating to the operating system and the user's IT environment.

 

USER

The individual who uses this website, who must coincide with the interested party or be authorized by this and whose personal data are the subject of the processing.

 

INTERESTED

The natural or legal person to whom personal data refer.

Data Processor (or Manager)

The natural, legal person, the public administration and any other body, association or organism responsible for the owner to the processing of personal data, according to what is prepared by this Privacy Policy.

 

The data controller (or owner)

The natural, legal person, the public administration and any other body, association or organism to which they compete, also together with other owner, the decisions regarding the purposes, the methods of processing personal data and the tools used, including the profile of the safety, in relation to the operation and use of this website. The data controller, unless otherwise specified, is the owner of this website.

 

Procosmet Italy (or this application)

The hardware or software tool through which users' personal data are collected and processed.

 

SERVICE

The service provided by Procosmet Italy as defined in the relative terms (if present) on this site/application.

 

European Union (or EU)

Unless otherwise specified, any reference to the European Union contained in this document is intended to all the current Member States of the European Union and the European Economic Area.

 

Cookies

Cookies are tracing tools that consist of small portions of data stored within the user's browser.

 

Tracking tool

By tracking tool we mean any technology - e.g. Cookies, unique identification, web beacons, integrated scripts, e -tags and fingerprinting - which allows you to trace users, for example by collecting or saving information on the user's device.

 

Legal references

Notice to European users: this Privacy Policy is drawn up in fulfillment of the obligations provided for by the European Regulation 679/2016.