Privacy & cookies policy
1. RIFERIMENTI NORMATIVI
• Directive 2002/58/EC – concerning the processing of personal data and the protection of privacy in the electronic communications sector
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).
2. DATA CONTROLLER
Following consultation of this website, data relating to identified or identifiable persons may be processed. The Data Controller is Eurosirel S.p.A., Viale Europa 30, 20090 Cusago (MI), Italy.
3. DATA PROTECTION OFFICER
In accordance with Article 37 of Regulation (EU) 2016/679, the Data Controller has appointed a Data Protection Officer (DPO), who can be contacted atactymaskcosmetic@gmail.com
4. PLACE OF DATA PROCESSING AND RETENTION PERIODS
Processing connected with the web services of this site takes place at the above-mentioned premises of the Data Controller and is carried out only by personnel expressly authorized by the Controller, or by any third-party suppliers appointed to perform occasional operations and designated as Data Processors pursuant to Article 28 of the GDPR. For each category of data processed, the data collected will be retained only for the time necessary to fulfill the specific purposes indicated in the relevant short-form privacy notices displayed on the website pages for particular services.
5. PURPOSES AND METHODS OF PERSONAL DATA PROCESSING
MCD BEAUTY LIFE processes users' personal data (provided by the user when interacting with the Site or lawfully obtained from third parties) for the following purposes: managing registration on the Site, newsletters and mailing lists; managing purchases of products through the Site (including all activities related to sales and after-sales services, such as fraud prevention, returns management, warranty, customer assistance and interaction with customer service); managing participation in promotions and other initiatives carried out through the Site (such as contests and similar initiatives); and providing the service.
With the user's freely given and optional consent, ACTY MASK may process personal data for statistical research, market analysis, creation of individual profiles (profiling) and marketing purposes, including sending information and promotional material about ACTY MASK products, special promotions, initiatives and discounts by email, SMS and MMS. The user may always object to receiving promotional communications by email: each communication will specify easy and free methods for objecting to the processing and no longer receiving further communications.
In these cases, providing the data is optional; failure to provide it will result in commercial communications not being sent and no profiling being carried out.
With the User's consent, ACTY MASK may store credit card details solely to avoid requiring them to be entered again for subsequent payments. In the 'Account' section, the User may modify, save or delete their credit card details. Failure to provide consent for storage will mean that credit card details will not be stored by ACTY MASK.
ACTY MASK may also retain the User's purchase history, specifically the list of orders placed online and in-store, for the period during which the User's account remains active and for the following three years after deactivation.
ACTY MASK processes personal data primarily using electronic and automated tools, according to logic and procedures related to the purposes specified above. Data is retained only for the period necessary to achieve the specific purpose pursued from time to time.
6. TYPES OF DATA PROCESSED
6.1 Browsing data
During normal operation, the IT systems and software procedures used to run this website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but by its very nature it could, through processing and association with data held by third parties, make it possible to identify users.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user's operating system and IT environment.
This data is used solely to obtain anonymous statistical information on use of the site and to check that it is functioning correctly, and is deleted immediately after processing. The data could be used to establish liability in the event of alleged cybercrimes against the site.
6.2 Data voluntarily provided by the user
The optional, explicit and voluntary submission of personal data by the user through the registration forms on this site results in the subsequent acquisition of the data provided by the sender, which is necessary to deliver the requested service. Specific short-form privacy notices will progressively be provided or displayed on the pages of the site dedicated to particular services available on request.
7. COOKIES
Cookies are small text files containing a certain amount of information exchanged between a website and the user's device (usually the browser). They are mainly used to enable websites to function and operate more efficiently, as well as to provide information to website owners. Cookies may be session cookies or persistent cookies. Session cookies are stored on the device for a short period and are deleted as soon as the user closes the browser. Their use is strictly limited to transmitting session identifiers (made up of random numbers generated by the server) necessary to allow safe and efficient browsing of the site. Persistent cookies, on the other hand, remain stored on the user's device until a predetermined expiry date. Since they are not deleted when the browser is closed, they make it possible to remember choices made by the user on the site and to collect information about the pages visited, the frequency of visits and users' browsing paths, in order to improve the experience on this site. Session or persistent cookies may also be first-party or third-party cookies depending on whether the party installing the cookies on the user's device is the same operator of the website the user is visiting (first-party cookies) or a different party (third-party cookies).
7.1 Cookies used by this site
This site uses both first-party and third-party cookies because it uses the features of Google Analytics services provided by Google Inc.
Google Analytics uses 'cookies' to collect and analyze information about how users use the websites they visit.
ACTY MASK uses cookies for the following purposes, subject to the user's consent:
• to compile statistics, monitor traffic volumes and measure use of the various sections of the Site (e.g. titles and content visited, click flows), in order to improve the efficiency and usability of ACTY MASK services;
• to calculate the total number of advertising messages shown in the designated advertising spaces, identify those messages and the number of times they are viewed, determine the number of users who click on each of them and, where possible, the subsequent actions taken by users on those pages, in order to calculate compensation due to commercial partners (e.g. communications and advertising agencies, websites, etc.) for statistical analysis purposes;
• to customize the presentation of the Site according to the display settings of the user's device (language, screen resolution, operating system, etc.) during the visit, based on the hardware, software and video software of that device;
• to customize advertising spaces according to the display settings of the user's device (language, screen resolution, operating system, etc.), based on the hardware, software and video software of that device;
• where the user has provided personal data, including contact details, and has chosen to accept cookies when registering for or accessing the services, browsing data acquired through cookies may be linked to the user's personal data in order to send advertising material or display personalized advertising on the user's device in advertising spaces that use our cookies. These are advertising messages specifically targeted to the user and potentially relevant to their interests;
• to store information entered in forms completed on the Site and information relating to certain products or services selected through the Site (e.g. services the user has subscribed to, shopping cart contents, etc.);
• to implement security measures (for example, measures that make it possible to recognize a registered user on subsequent visits after a certain period of time by requiring the user to log in again);
The user may decide whether or not to accept the installation of cookies on their device. The user is free to make this choice and to change it at any time through the settings of the browser used on the device. If the browser is configured to accept cookies on the user's device, the cookies used by the web pages visited will be temporarily stored in a dedicated area of the user's device. They may be read only by the party that installed the cookie.
.
7.2 Cookie management
Browsers normally allow users to control most cookies through the browser settings. Please note, however, that fully or partially disabling so-called technical cookies may impair the use of website features. In any event, if the user does not wish to receive any type of cookie on their device, either from this site or from other sites, they can increase the level of privacy protection by changing their browser's security settings.
This site may contain links or references that provide access to other websites, such as the Facebook and Google social networks. By clicking the relevant links, you may, for example, share our content. Please note that the Data Controller does not control the cookies or other tracking technologies used by those websites, to which this Policy does not apply.
9. OPTIONAL PROVISION OF DATA
Except as specified for browsing data, the user is free to provide their personal data. However, failure to provide such data may make it impossible to obtain what has been requested.
10. PROCESSING METHODS AND RETENTION PERIODS
Personal data is processed, including with the aid of automated tools, only for the time strictly necessary to achieve the purposes for which it was collected.
Specific security measures are observed to prevent data loss, unlawful or improper use and unauthorized access. The Data Controller has adopted all minimum security measures required by law and, drawing on the main international standards, has also implemented additional security measures to minimize risks to the confidentiality, availability and integrity of the personal data collected and processed.
11. SHARING, COMMUNICATION AND DISCLOSURE OF DATA
The data collected may be transferred or communicated to other companies for activities strictly connected with and instrumental to operation of the service, such as management of the IT system. Personal data provided by users who request the sending of information material (brochures, information materials, etc.) is used solely to provide the requested service or performance and is communicated to third parties only where this is necessary for that purpose (for example, companies providing envelope stuffing, labeling or shipping services). Outside these cases, personal data will not be communicated unless required by contract or law, or unless the data subject has given specific consent.
Accordingly, personal data may be transmitted to third parties only and exclusively where:
a) explicit consent has been given to share the data with third parties;
b) it is necessary to share the information with third parties in order to provide the requested service;
c) this is necessary to comply with requests from Judicial or Public Security Authorities.
No data deriving from the web service is disseminated.
12. DATA SUBJECT RIGHTS
Personal data protection legislation expressly grants certain rights to the persons to whom the data relates (data subjects). In particular, pursuant to Articles 15 et seq. of Regulation (EU) 2016/679, each data subject has the right of access, rectification, erasure, restriction of processing, notification, data portability, objection, and the right not to be subject to decisions based solely on automated processing, including profiling.
The data subject also has the right to lodge a complaint with a supervisory authority if they believe that the rights described here have not been recognized.
13. CHANGES TO THIS PRIVACY POLICY
The Data Controller periodically reviews its privacy and security policy and, where appropriate, revises it in response to regulatory or organizational changes or technological developments. If the policy is changed, the new version will be published on this page of the website.
14. QUESTIONS, COMPLAINTS, SUGGESTIONS AND EXERCISE OF RIGHTS
Contact the Data Controller by writing to MCD BEAUTY LIFE or by sending an email toactymaskcosmetic@gmail.com