NOTICE PURSUANT TO ART. 13 OF EU REGULATION 2016/679
– WEBSITE –
EUROMAKEUP S.r.l. (Tax Code and VAT No. 03354000964) (hereinafter referred to as “EUROMAKEUP” and/or “Data Controller”), in the person of its legal representative pro tempore, with registered office in Trezzano s/N (MI) cap. 20090, via Mario Pagano, 59, as “Data Controller” ex art. 4 paragraph 1 no. 7) of the GDPR, hereby informs you that, pursuant to art. 13 of the GDPR, your personal data, as described in art. 1 below, will be processed for the purpose described in art. 2 below.
1. Category of personal data being processed
1.1. EUROMAKEUP collects and processes, for the purpose of pursuing the processing purpose described in article 2, your personal data in accordance with article 4 n. 1) of the GDPR so-called identification data (e.g. name; surname; e-mail address; telephone number; address of residence/domicile/department; VAT number) requested in one or more specific forms on the website of EUROMAKEUP https://www.euromakeup.it/ (hereinafter “Website”).
2. Purpose of the processing and legal basis.
2.1. Your personal data are processed by EUROMAKEUP for the following purpose:
- Execution of your request for contact and/or further information, made by filling in the form on the Website.
In compliance with art. 13 paragraph 2) letter e) of the GDPR, EUROMAKEUP specifies that failure to communicate (even partially) your personal data, unequivocally requested as compulsory within one or more specific forms on the Website, may make it impossible for EUROMAKEUP to correctly and fully perform the processing purpose as per art. 2.1. letter a).
In this regard, EUROMAKEUP points out that the legal basis of the processing purpose described in article 2.1. letter a) is to be found in the following legal provision: article 6 paragraph 1) letter b) of the GDPR.
2.2. Your personal data are processed by EUROMAKEUP for the following purposes:
- Execution of the registration request, formulated by filling in the form on the Website, in order to have and manage the personal area.
In compliance with art. 13 paragraph 2) letter e) of the GDPR, EUROMAKEUP specifies that failure to communicate (even partially) your personal data, unequivocally requested as compulsory within one or more specific forms on the Website, may make it impossible for EUROMAKEUP to correctly and fully perform the processing purpose set out in art. 2.2. letter b).
In this regard, EUROMAKEUP points out that the legal basis of the processing purpose described in article 2.2. letter b) is to be found in the following legal provision: article 6 paragraph 1) letter b) of the GDPR.
3. Retention period.
3.1. In accordance with article 13 paragraph 2) letter a) of the GDPR, EUROMAKEUP informs you of the following storage period, after which your personal data will be subject to deletion, destruction or anonymisation: (i) for the performance of the processing purpose referred to in article 2.1. letter a): no. 10 years, starting from the completion and complete execution of your request of contact and/or further information, a term that may be extended in order to comply with legal obligations (also in case of need) or to assert or defend a right, even in court; (ii) for the processing purpose referred to in art. 2.2 letter b): until you decide to irreversibly delete the account created on the Website (term that may be extended in order to comply with legal and/or regulatory obligations).
4. Target audience.
4.1. In compliance with art. 13 paragraph 1) letter e) of the GDPR, EUROMAKEUP specifies that your personal data may be subject to communication, where appropriate and necessary, to one or more recipients pursuant to art. 4 no. 9) of the GDPR, identified as follows, in general, by category: (i) for the performance of the processing purpose referred to in art. 2.1. letter a) and 2.2. letter b): parties authorised to process data by EUROMAKEUP; companies controlled by or otherwise connected, even indirectly, to EUROMAKEUP; consultants or companies of various kinds that provide, in any case, services and/or performances (including professional ones) connected, even indirectly, to the fulfilment of the purpose in question (e.g. IT companies).
5. Transfer.
5.1. EUROMAKEUP hereby specifies that your personal data are/may be stored in automated, partially automated or non-automated files belonging to or otherwise traceable, even indirectly, to EUROMAKEUP, and located within the European Economic Area (EEA).
6. Rights of the data subject.
6.1. In relation to your personal data, EUROMAKEUP informs you of your right to exercise the following rights, which may be subject to the limitations set out in articles 2-undecies and 2-duodecies of the Privacy Code: right of access pursuant to article 15 of the GDPR: right to obtain confirmation as to whether or not personal data is being processed, in addition to the information referred to in article. 15 of the GDPR (e.g. purpose of processing; categories of data concerned; storage period); right of rectification ex art. 16 of the GDPR: right to correct, update or supplement personal data; right to erasure ex art. 17 of the GDPR: right to obtain the deletion or destruction or anonymisation of personal data, where the conditions listed in the same article are met; right to restriction of processing under art. 18 of the GDPR: right to obtain the restriction of processing where the conditions governed by art. 18 exist. 18; the right to data portability under article 20 of the GDPR: the right to obtain personal data, provided to the Data Controller, in a structured, commonly used and machine-readable format (and, where required, to transmit them directly to another Data Controller). Where the specific conditions indicated in the same article are met (e.g. legal basis of consent and/or performance of a contract; personal data provided by the data subject); right of objection under art. 21 of the GDPR: right to obtain the cessation, on a permanent basis, of a certain processing of personal data; right to lodge a complaint with the Supervisory Authority (i.e. Italian Privacy Guarantor) under art. 77 of the GDPR: right to lodge a complaint where it is considered that the processing under analysis violates national and EU data protection legislation.
6.2. In addition to the rights described in Section 6.1. above, the Data Controller would like to point out to you that, in relation to your personal data, there is, where possible and conferrable, the right to exercise, on the one hand, the (sub)right provided for in art. 19 of the GDPR (‘The controller shall communicate to each of the recipients to whom the personal data have been transmitted any rectification or erasure or restriction of processing carried out pursuant to article 16, article 17(1) and article 18, unless this proves impossible or involves a disproportionate effort. The data controller shall inform the data subject of such recipients if the data subject so requests”), to be considered connected and related to the exercise of one or more of the rights regulated in articles 16, 17 and 18 of the GDPR; on the other hand, the data controller would like to inform you that, in relation to your personal data, there is, where possible and conferring, the right to exercise the right provided for in art. 22 paragraph 1) of the GDPR (“The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar way”), subject to the exceptions provided for in paragraph 2) below.
6.3. In compliance with article 12 paragraph 1) of the GDPR, EUROMAKEUP undertakes to provide the communications referred to in articles 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible, easily accessible form and in simple and clear language: such information will be provided in writing or by other possibly electronic means or, at the request of the data subject, will be provided orally provided that the identity of the data subject is proven by other means.
6.4. Pursuant to article 12 paragraph 3) of the GDPR, EUROMAKEUP informs you that it undertakes to provide you with information about the action taken regarding a request pursuant to articles 15 to 22 of the GDPR without undue delay and, in any case, no later than one month after receipt of the request; this deadline may be extended by n. 2 months if necessary, taking into account the complexity and number of requests (in which case, EUROMAKEUP undertakes to inform you of such extension and the reasons for the delay, within one month of receipt of the request).
6.5. The rights described above (with the exception of the right pursuant to art. 77 of the GDPR) may be exercised by means of the contact details set out in art. 7 below.
7. Contact details.
7.1. EUROMAKEUP can be contacted at the following address: privacy@euromakeup.it
Trezzano s/N (MI), there 26 August 2024 (date of last update).
EUROMAKEUP S.r.l.
(in the person of its legal representative pro tempore)
