Information pursuant to Regulation (EU) 2016/679 (GDPR) and current national legislation
1 General information
Pettenon Cosmetics S.p.A. SB (hereinafter also referred to as "Company" or "Pettenon") informs you that (indicating you hereinafter also as "User"), for the purposes indicated below, it will process your personal data (or of the company it represents if it acts on behalf of the same) provided by you. Only the data necessary for the pursuit of the purposes indicated in this statement will be requested and processed. Please note that you must indicate only your data and / or data of the company you represent. If you act on behalf of a company, the activities envisaged in this statement will be carried out towards the company using the data communicated by you and therefore consenting to the processing (where consent is required) on behalf of the company you represent.
2 Purpose and legal basis
The data will be processed by the Company:
- in order that the Company may analyse the request and reply to you. The processing is based on the following legal basis: consent;
- to fulfill an obligation established by law, by a regulation or by community legislation (the legal basis is the fulfillment of legal obligations);
- for legitimate interests such as the right to assert or defend a right of Pettenon (the legal basis is the pursuit of legitimate interests). In considering these legitimate interests, it was analyzed that they do not compromise or interfere with the interests or fundamental rights and freedoms of the interested party (the legitimate interest was assessed on the basis of a Triple Test available by contacting the Company).
3 Mandatory provision
PURPOSE OF POINT 2 lett. A
You will be free or not to disclose your personal data for the purposes set out in point 2 (A) of the policy as well as you will be free to give or not to give your consent, but without the provision and consent, the Company will not be able to answer your request.
PURPOSE OF POINT 2 letters B, C
The provision of data for the purposes indicated in point 2 (B), 2 (C) of this information is necessary and failure to provide it could make it impossible for Pettenon to carry out the activities referred to in the previous points.
4 Categories of data recipients
For the purposes indicated in point 2 (A), the data will not be communicated to third parties unless such communication is necessary on the basis of the request (e.g. to post office/courier services in the case of a request for the dispatch of paper material).
For the purposes indicated in point 2 (B), Pettenon may communicate the data to public bodies, judicial bodies and police bodies.
For the purposes referred to in point 2 (C) of this statement, the data may be communicated by Pettenon to lawyers-legal consultants, public bodies, judicial bodies and police bodies and to the post office (they can see the address for sending any written communications).
Pettenon will communicate only the data necessary for the pursuit of the individual purposes indicated in this statement.
They will then be able to know the data on behalf of Pettenon, each for his role, all the subjects delegated by the Company (public relations employees also external to the Company, information systems employees also external to the Company , consultants also external to the Company - such as computer technicians, legal consultants - stagiaires, website management employees also external to the Company, employees of the department in charge of the subject matter of your request, legal employees, employees of data processors) and data processors appointed by Pettenon (e.g. marketing IT outsourcers). The list of data processors is always available by contacting the Company at the addresses indicated in point 6. The Data Processors will process only the data necessary for the performance of the assigned tasks.
5 Data retention
The data will be kept for the entire period necessary to pursue the purposes contained in this statement. The data retention period is as follows:
- for legal obligations, regulations and community legislation, for the periods imposed by these regulatory sources;
- for the purposes indicated in point 2(A), for 6 months from the final answer to the request without prejudice to storage for the purposes indicated in points 2(B) and 2(C);;
- in any case, all data may be kept for a period necessary to assert or defend a right of the Company according to Italian and European regulations.
6 Data Controller and Data Protection Officer
The data controller is: Pettenon Cosmetics S.p.A. SB with registered office in Via del Palù, 7d, 35018 San Martino di Lupari PD, Tel. +39 049 99888, FAX +39 049 9988809, privacy@pettenon.it.
There is a Data Protection Officer of the Company, who can be contacted at the Company's headquarters in Via del Palù, 7/d, 35018 - San Martino di Lupari (PD), as well as at the e-mail address privacy@pettenon.it.
7 Rights
We inform you that the GDPR provides for the possibility for the User to ask the Company (at the addresses indicated above) for access to personal data and the correction of data, the cancellation of the same or the limitation of the processing that concerns him, the portability of data; the user may also have the possibility, always by contacting the company, to oppose the processing of data and to exercise the other rights contained in Chapter 3 section 1 of the GDPR including that of withdrawing consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on the consent given before the withdraw.
8 Complaints
If you believe that the processing of data is in violation of the provisions of the GDPR, you have the right to lodge a complaint with the Italian Supervisory Authority (whose references can be found on the website www.garanteprivacy.it), as required by Article 77 of the GDPR, or to take the appropriate judicial offices (Article 79 of the GDPR). You can also contact the Supervisory Authority of the state in which you habitually reside or work. The list of the Supervisory Authority can be found at the link www.garanteprivacy.it/home/footer/link).
9 Processing methods
The data will be processed with the aid of IT and paper / manual tools adopting protection systems suitable for the protection of confidentiality. All data will be stored and processed in full compliance with confidentiality in compliance with all current regulations (and therefore also in compliance with the principles of correctness, lawfulness and transparency and protection of confidentiality and rights) and with logic strictly related to the purposes indicated in this statement. Only the operations necessary for the pursuit of the purposes indicated in this statement will be carried out on the data. The data will be stored, with regard to the Company at its headquarters or server farm and as regards the data processors at their offices or server farms. The data communicated to third parties will be stored and processed independently by them. The data will also be organized in databases - databases including computer databases.
Information updated to 10/10/2023. Previous versions of the information can be found by contacting the Company at the addresses referred to in point 6.