Policy Newsletter

Newsletter Data Processing Information

1. Data Controller

The Data Controller is Barò Beauty Lab S.r.l., with registered office at Via G. Carducci no. 125 - 20099 Sesto San Giovanni (MI), and operational office at Piazza Michele Ferrero, 8, 12050 Alba CN, Tax Code and VAT No. 14800490964

The Data Protection Officer (DPO), appointed pursuant to Articles 37 et seq. of EU Regulation 2016/679, is Omniconsulting S.r.l.s., with registered office in Turin, Via Roma 366, Tax Code and VAT No. 11868170017, contactable at the email addressdpo@barocosmetics.it.

2. Types of Data Processed

For registration for the newsletter service, the following personal data are processed:

  1. email address provided by the data subject;
  2. technical browsing data necessary for the operation of the service.

3. Purposes of Processing

Personal data are processed for the following purposes:

  1. sending the newsletter;
  2. sending commercial communications relating to the Controller’s products and services;
  3. updates on promotions, events, and commercial initiatives.

4. Legal Basis for Processing

The legal basis for processing is the data subject’s explicit consent pursuant to Article 6(1)(a) of EU Regulation 2016/679 (GDPR).

5. Processing Methods

Personal data are processed using electronic and telematic tools, in compliance with the principles of fairness, lawfulness, and transparency established by applicable legislation.

Appropriate technical and organizational measures are adopted to ensure data security and prevent unauthorized access, loss, or unlawful use of the information.

6. Data Retention

Personal data will be retained until the data subject withdraws consent or requests cancellation from the newsletter service.

7. Data Disclosure

Personal data may be disclosed to providers of technical services and marketing communications management platforms, appointed as data processors pursuant to Article 28 of the GDPR.

8. Data Subject Rights

The data subject may exercise the rights provided for by Articles 15–22 of EU Regulation 2016/679 at any time, including:

  1. the right to access personal data;
  2. the right to rectification or updating;
  3. the right to erasure of data;
  4. the right to restriction of processing;
  5. the right to object to processing;
  6. the right to data portability.

9. Complaint to the Supervisory Authority

The data subject has the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11 - 00187 Rome, www.garanteprivacy.it.