Privacy Policy and request for consent for processing of personal data in terms of article 13 of Legislative Decree No. 196 of June 2003

In terms of Legislative Decree No. 193 of 30 June  (Privacy Policy), we hereby provide information regarding processing of your personal data and on how the same may be transmitted and/or divulged together with the kind of data possessed by us and how the same will be received.

1. Purpose of the processing for which consent is granted where requested  (Art. 23 of Legislative Decree No. 196/2003)

a) Management of the request for information related to the service selected by you; activities which are strictly related and essential to Client management relations (e.g. acquiring preliminary information upon signature of an agreement, transactions in terms of obligations arising on agreements entered into with Clients etc,) providing information and subscription to mailing lists – supply of goods and services and protection credits deriving there from; accounting (issuing invoices and managing payments) and transfer of data abroad within the European Union.;
b) Promotional mailings including personalized newsletters, market research, economic/statistical analysis, trading offers, client satisfaction assessment by sending brochures, advertising printed material, e-mails, sms, mms. The scope of automated collection  and processing of Personal Data also includes transmission of market research questionnaires to which the User is not obliged to reply; processing of personal data and information collected by entry and navigation on the website  www.prestigecosmetics.it in order to define the user’s profile; use of data and profile for promotional and marketing  of Prestige Cosmetics Srl; use of data and profile for third party promotion and marketing.

2. Processing of personal data
The processing will be performed using automated and manual methods, employing procedures and instruments designed to guarantee maximum security and confidentiality, by subjects specifically assigned to the task in accordance with the requirements of Section 31 and following of Italian Legislative Decree 196/03.

3. Sphere of dissemination and communication

Data forming the subject of this agreement will not be divulged to third parties. It may however be transmitted to companies associated with Prestige Cosmetics Srl even abroad within the limits established by law and in compliance with agreements in force and for the purpose of relations with third parties pertaining to the following categories:

a) companies with which Prestige Cosmetics Srl has directly or indirectly signed agreements;
b) b) subjects providing IT and telecommunications network management services to Prestige Cosmetics Srl (including e-mail);
c) companies providing services for the purchase, registration and processing of data arising from documents or means supplied by or originated from the clients  for managing payments, cheques, bills and other financial instruments;
d) subjects providing Client services (e.g. call centres, help desks, etc.);
e) firms or companies providing assistance and consultancy;
f) auditors, supervisors and persons authorized to issue certification on activities undertaken by Prestige Cosmetics Spaeven in the interest of Clients.
The subjects belonging to the above categories perform the function of Data Processor or operate independently as separate Data Holder. The list of the Data Processors is constantly updated and available at the Prestige Cosmetics Spahead office.

4. Nature of conferral and refusal

Conferral of data is at your discretion. Refusal to consent to processing of data for the reasons listed in article 1 letter a) will render registration to the Prestige Cosmetics Spa site impossible which would make it also impossible to provide services requested and necessary to fulfil the relative contractual, accounting and fiscal obligations. The Data Processor also notes that failure to provide data or providing wrong data where this is obligatory will result in:

a) make it impossible for the Data Processor to guarantee the compliance of the processing with any contractual agreements for which it is performed;
b) the possible inconsistency of the results of the processing with any requirements imposed by the fiscal, administrative and statutory legislation at which it is aimed.
The refusal of (optional) consent for the purposes illustrated under article 1, letter b) above will not have any negative effect on the registration. You may wish to enforce your claims in terms of articles 7, 8, 9 and 10 of Legislative Decree No. 196 of 30 June 2003 by referring to the Data Processor.

5. Right to Access Personal Data and Other Rights (Art. 7 Legislative Decree No. 196/2003)

a)  A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him/her exist, regardless of their being already recorded, and communication of such data in intelligible form.
b) A data subject shall have the right to be informed:
a. of the source of the personal data;
b. of the purposes and methods of the processing;
c. of the logic applied to the processing, if the latter is carried out with the help of electronic means;
d. of the identification data concerning data controller and data processors;
e. of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or subject(s) in charge of the processing.
c) A data subject shall have the right to obtain:
a. updating, rectification or, where interested therein, integration of the data;
b. erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c.certification to the effect that the operations as per letters a) and b) and their contents  have been notified to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
d)A data subject shall have the right to object, in whole or in part:
a. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

6. Cookies
a) Cookies are electronic files which record information on the Client’s navigation within the site (pages visited, preferred content etc.) .
b) Prestige Cosmetics Srl does not use cookies to send advertising message but only to collect statistical data during users’ visit to the site, in order to improve its website. More specifically  Prestige Cosmetics Srl does not use Flash Cookies.
c) Should the user so desire he/she may block the use of cookies by adjusting the settings on his/her web browser.
d) In any event the user may reject the use of cookies.

7. Target Advertising
When visiting the Prestige Cosmetics Srl website using a browser set to accept cookies or when using instruments, mobile applications or other Prestige Cosmetics Srl software and by consenting to the use of the products and services provided by Prestige Cosmetics Srl you are agreeing to the use of cookies and other technical instruments necessary for viewing as described in the relative part of the Privacy Policy. The following sectionexplains how to adjust your browser in such way that you will be notified when you receive a new cookie and will allow you to deactivate it.

8. Holder and Processor of Personal Data

Holder and Processor of Personal Data: Giorgio Ventura
Prestige Cosmetics Srl Head Office, Via Emilia 33/A  – Anzola Dell’Emilia – BO (Italy)