Privacy policy
Web privacy notice to be provided pursuant to Article 13 of EU Regulation 2016/679 (GDPR)
Identity and contact details of the data controller
The Data Controller is: Beauty Lab S.r.l. Registered Office: Via G. Carducci 125, 20099 Sesto San Giovanni (MI) - Operating Office: Piazza Michele Ferrero 8 - 12051 Alba (CN) Tax Code and VAT No. 14800490964.
The Data Protection Officer (DPO), appointed by the Data Controller pursuant to Articles 37 et seq. of the GDPR, is Omniconsulting S.r.l.s., with registered office in Turin, Via Roma 366, tax code and VAT No. 11868170017, e-mail dpo@barocosmetics.com
Categories of personal data, purposes of processing and legal basis
The Data Controller processes your personal data to ensure the functionality and security of the website and therefore enable its navigation, collecting the data in anonymous and aggregated form.
The categories of personal data are:
- Browsing data
The IT systems and software procedures used to operate the website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols. This concerns information that is not collected to be associated with identified Users but which, by its very nature, could—through processing and association with data held by third parties—make it possible to identify them.
This category of data includes the IP addresses or domain names of the computers used by Users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relating to the operating system and the User’s IT environment.
These data are used solely to obtain anonymous statistical information on the use of the website and to monitor its proper functioning. The data may also be used to ascertain liability in the event of cybercrimes against the website.
Processing is carried out in pursuit of the Data Controller’s legitimate interest in ensuring the proper functioning of the website (Article 6(1)(f) GDPR.
- Cookies
Cookies are short text files (letters and/or numbers) that enable the web server to store information on the client (the browser) for reuse during the same visit to the website (session cookies) or subsequently, even after several days (persistent cookies).
Cookies are stored, based on the User’s preferences, by the individual browser on the specific device used (computer, tablet, smartphone).
This website uses various types of cookies:
- strictly necessary cookies: help make a website usable by enabling basic functions such as page navigation and access to protected areas of the website. The website cannot function properly without these cookies (Article 6(1)(f) GDPR).
- preference cookies: allow a website to remember information that affects the way the website behaves or looks, such as the preferred language or the region in which the user is located (Article 6(1)(a) GDPR).
- statistical cookies: help website operators understand how visitors interact with websites by collecting and transmitting information anonymously (Article 6(1)(a) GDPR).
- marketing cookies: are used to track visitors across websites. The intention is to display advertisements that are relevant and engaging to the individual user and therefore of greater value to publishers and third-party advertisers (Article 6(1)(a) GDPR).
Barò Cosmetics uses cookies to personalise content, provide social media features and analyse traffic. Some cookies are placed by third-party services that appear on the website pages. The information collected is shared with our partners that provide web data analysis and social media services, who may combine it with other information that you have provided to them or that they have collected through your use of their services. You may modify or withdraw your consent at any time from the “Cookie Statement” available on our website.
- Contact form or email
While browsing, a contact form may be included in certain sections of the Website for requesting information and materials, subscribing to a newsletter or registering for an event organised by the Data Controller. The data collected will be used to respond to requests (Article 6(1)(b) GDPR. Furthermore, sending email to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. The data collected may also be used to create an archive for the purpose of sending proposals or future initiatives of the Data Controller by email, on the basis of a legitimate interest (Article 6(1)(f) GDPR.
Data retention periods
Browsing data are retained for short periods, except for any extensions connected with investigative activities or for the purpose of ascertaining liability in the event of alleged cybercrimes against the website. Cookies are retained as indicated in the “Cookie Statement”. Data collected through contact forms or received by email will instead be retained for as long as necessary to process the requests.
Processing methods
Personal data are processed by the Data Controller primarily by electronic means and are stored on servers within its corporate management system and/or belonging to third-party companies appointed and duly designated as Data Processors. Appropriate security measures are adopted to prevent the loss or alteration of data—including accidental loss or alteration—unlawful or incorrect use and unauthorised access.
No automated decision-making process is envisaged in the processing that Barò Beauty Lab srl will carry out on your personal data that could produce legal effects concerning you or similarly significantly affect you.
Scope of data disclosure
Where appropriate and in accordance with applicable laws and requirements, we may transmit your personal data, in various ways and for various reasons, to the following categories of recipients:
- External service providers acting on our behalf (including external consultants, business partners and professionals, IT consultants and technical support personnel who carry out checks and development activities on our IT systems);
- External providers of IT and data analysis services, as well as digital marketing, ADV and social media services, acting as our external Data Processors, appointed pursuant to Article 28 of the GDPR, or as independent Data Controllers.
Place of processing and transfer of data to non-EU countries
The Data are not transferred outside the European Union, but the Data Controller reserves the right to change the location of the servers, including to locations outside the European Union, ensuring in such case that the transfer will take place in compliance with the applicable provisions and with adequate legal safeguards.
Data subjects’ rights pursuant to Articles 15–22 of the GDPR
By writing to the Data Controller at the postal address Barò Beauty Lab S.r.l. Registered Office: Via G. Carducci 125, 20099 Sesto San Giovanni (MI) Operating Office: Piazza Michele Ferrero 8, 12051 Alba (CN), email: privacy@barocosmetics.com the data subject may exercise the rights of: access (Article 15, GDPR), rectification (Article 16, GDPR), erasure and the right to be forgotten (Article 17, GDPR), restriction of processing (Article 18, GDPR), notification in the event of rectification or erasure (Article 19, GDPR), data portability (Article 20, GDPR), withdrawal of consent, objection to processing (Article 21, GDPR), and objection to profiling (Article 22, GDPR). At any time, the data subject may request the complete and up-to-date list of Data Processors and third parties to whom personal data may be disclosed.
Complaint to the Supervisory Authority
The data subject has the right to lodge a complaint with the Supervisory Authority, which in Italy is the Italian Data Protection Authority – Piazza Venezia 11, 00187 Rome (RM)– www.garanteprivacy.it, by sending an email to protocollo@pec.gpdp.it, using the form available on the Authority’s website.