Privacy policy
This page describes the methods and logic of processing the personal data of users (hereinafter, also users) who consult the cherrybeauty.it website (hereinafter, also the Site). This is an information notice provided pursuant to art. 13 of EU Regulation 2016/679 'General Data Protection Regulation' (hereinafter GDPR) and current Italian legislation for the protection of personal data, Legislative Decree 196/2003 and subsequent amendments, in particular those introduced by Legislative Decree no. 101/2018, to those who interact with the site and not for other external and possibly linked websites. Personal data processing means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collection, recording, organization, structuring, storage, processing, selection, blocking, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, erasure or destruction.
Data Controller
The data controller of personal data is GESTULUX S.R.L.S.
Data Protection Officer
The data protection officer is identified as the company appointed to manage the portal and/or the owner of the company. As provided for by art. 37, seventh paragraph, of the GDPR, the contact details of the Data Protection Officer are given below:
- Certified email: gestlux@sicurezzapostale.it
Legal basis for processing
Following consultation of this site, data relating to identified or identifiable persons may be processed. The data freely and voluntarily provided by users are acquired and processed in compliance with the rules set by the GDPR and used exclusively for advertising purposes. Our company undertakes to respect and protect privacy by processing personal data in compliance with legal provisions designed to guarantee the security, accuracy, updating and relevance of the data with respect to the stated purposes. The personal data provided by users who send requests are used solely for the purpose of providing clarifications on orders and products but are not forwarded to third parties without reason.
Processing methods
Personal data are collected electronically only when accessing the site and its sections that require registration and only for the purpose of safeguarding the navigability of the site and its functions.
Type of data and purpose of processing
All personal data provided through the Site will be processed lawfully and fairly in order to provide the requested services and to respond to user communications and questions.
- Data provided voluntarily Through the Site it is possible to send requests and communications. The provision of such data is mandatory, necessary to respond to requests sent and to contact the sender to obtain clarifications regarding what has been reported.
- Navigation data This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters. Navigation data is acquired in the interest of our users in order to safeguard their payments, transactions and overall security.
Cookies
Cookies are small text files that visited sites send to the user's terminal, where they are stored, to then be retransmitted to the same sites on the next visit. The Site uses:
- session cookies that are not permanently stored on the user's device and are automatically deleted when the browser is closed.
- third-party cookies collected anonymously in order to ensure an easy and intuitive browsing experience. GESTLUX S.R.L.S does not have access to the data that are collected and processed independently by third parties. For more information on the logic and methods of processing data collected by social networks, users are invited to read the privacy notices provided by the subjects that provide the services in question: Google https://www.google.it/intl/it/policies/privacy/
- analytics cookies used to collect information, in aggregate form, on the number of users and how they visit the Site. The site collects statistical data on visits through the Google Analytics Italy platform. More information is available in the privacy policy of Google Analytics, whose cookie policy can be viewed at https://support.google.com/analytics/answer/6004245. The data are collected for the sole purpose of processing statistical information on the use of the Site, to verify its correct functioning and that of the advertising campaigns linked to the site and the newsletter.
Technical cookies are not used for user profiling activities. The user can choose to enable or disable cookies by intervening on the settings of their navigation browser according to the instructions made available by the respective providers at the links indicated below.
Rights of data subjects
Data subjects (natural persons to whom the data refer), pursuant to art. 15 et seq. of the GDPR, may exercise their rights at any time and in particular, the right to access their personal data, to request their rectification or restriction, updating if incomplete or erroneous and deletion if collected in violation of the law, as well as to object to their processing, subject to the existence of legitimate reasons on the part of the Data Controller. To this end, it is possible to contact those who perform the functions of Data Controller, pursuant to the DPCM of 25 May 2018, by sending a request to the relevant contact points or by email to the following email addresses, certified and ordinary respectively: Pec: gestlux@sicurezzapostale.it, using the appropriate form available on the website of the Italian Data Protection Authority at: www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924. It is also possible to lodge a complaint with the Italian Data Protection Authority, following the procedures and indications published on the Authority's official website at www.garanteprivacy.it. The exercise of rights is not subject to any formal constraints and is free of charge. Please note that the personal data published on this site may be reused only under the conditions provided for by current legislation on the reuse of public data, in terms compatible with the purposes for which they were collected and recorded, and in compliance with the legislation on the protection of personal data. This information notice is subject to updates in compliance with regulatory provisions.
Data List
Contacting the User
|
Contact Type |
Personal Data |
|
Contact by phone |
Phone number |
|
Mailing list or newsletter (MailChimp) |
Email; First Name, Last Name |
|
Contact form |
First Name, Last Name, Email, Phone number |
Payment management The Personal Data collected are used for the provision of services to the User or for the sale of products, including payment and any delivery. The Personal Data collected to complete the payment may be those relating to the credit card, the current account used for the bank transfer or other payment instruments provided. The Payment Data collected by this Website depend on the payment system used.
|
Payment Type |
Personal Data |
|
PayPal |
various types of data as specified by the service's privacy policy |
|
Bank Transfer |
Email; First Name, Last Name, Payment-related data |
Registration and authentication provided directly by this Website
|
Registration Type |
Personal Data |
|
Direct |
First Name, Last Name, Billing Address, Shipping Address, Phone Number |
|
Via Facebook |
Email; First Name, Last Name |
Statistics
|
Collection Type |
Personal Data |
|
Google Analytics |
Personal Data: Cookie; Usage Data |
|
MailChimp |
Personal Data: First Name, Last Name, Email |