NOTICE REGARDING THE PROCESSING OF PERSONAL DATA OF ONLINE CUSTOMERS IN ACCORDANCE WITH REGULATION (EU) 2016/679 (“GDPR”)

1) DATA CONTROLLER

Opcosmetics s.r.l, registered office via Giuseppe Antonio Borgese 24 – cap 95122 Catania | VAT P.
05274050870 Tel: +39 095 0935093

PERSONAL DATA PROCESSED

Biographical data. Contact details. Data inherent in purchase detail. Browsing data (see Cookie Policy found on the home page of the OP Cosmetics website www.opcosmetics.com);

1.1 PURPOSE OF PROCESSING:

– Purchasing goods or services online
– Registration at www.opcosmetics.com; membership in any loyalty programs
and/or data recording in the Company’s CRM
– Activation of any exclusive services requested (gift card, order tracking, wishlist,
satisfied or refunded…)
– Participation in contests, events, sweepstakes, loyalty programs, online initiatives, and
On social media.
– Management of reporting and complaint activities, customer care;

LEGAL BASIS FOR PROCESSING:

Performance of a contract to which you are a party;

DATA RETENTION PERIOD:

Contract term and, after termination, for the ordinary limitation period of 10 years;

1.2 PURPOSE OF PROCESSING:

Fulfilling obligations under national and supranational regulations and legislation
applicable;

LEGAL BASIS FOR PROCESSING:

Need to fulfill legal obligations;

DATA RETENTION PERIOD:

Statutory duration (10 years for administrative-accounting fulfillment);

1.3 PURPOSE OF PROCESSING:

If necessary, to ascertain, exercise or defend the rights of the Holder in judicial proceedings Extrajudicial debt collection;

LEGAL BASIS FOR PROCESSING:

Legitimate interest (judicial protection);

DATA RETENTION PERIOD:

In the case of court litigation, throughout the duration of the litigation, until the exhaustion of the time limits for appeal actions;

1.4 PURPOSE OF PROCESSING:

Direct marketing purposes: by way of example, sending – using automated contact methods (such as sms, mms, e-mail, social networks, instant messaging apps, push notifications) and traditional methods (such as telephone calls with operator and traditional mail) – promotional and commercial communications related to services/products offered by the Company or reporting on company events, as well as detecting the degree of customer satisfaction, conducting market surveys and statistical analysis;

LEGAL BASIS FOR PROCESSING:

Consent (optional and revocable at any time);

DATA RETENTION PERIOD:

Master and contact information: until consent is revoked
Data pertaining to purchase detail: 7 years from the collection of each data item;

1.5 PURPOSE OF PROCESSING:

Communication/data transfer to Salone Facile s r l related company OPcosmetics s r l , for
allow such companies to carry out marketing activities (e.g., sending – with
Automated modes of contact such as sms, mms, email, social networks, messaging apps
instant and traditional such as operator phone calls and traditional mail – of communications
Promotional and commercial related to services/products offered by the companies or reporting of events
companies, as well as conducting market studies and statistical analysis) regarding their products.

LEGAL BASIS FOR PROCESSING:

Consent (optional and revocable at any time);

DATA RETENTION PERIOD:

Until consent is revoked

1.6 PURPOSE OF PROCESSING:

Profiling purposes: analysis of your preferences, habits, behaviors, interests also through the installation of cookies (e.g., browsing analysis, monitoring of selected products and virtual shopping cart…see the cookie policy on the home page of OP Cosmetics’ website www.opcosmetics.com in order to send you personalized commercial communications/targeted promotional actions/offers and services adapted to your needs/preferences.

LEGAL BASIS FOR PROCESSING:

Consent (optional and revocable at any time).

DATA RETENTION PERIOD:

Master and contact information: until consent is revoked
Data pertaining to purchase detail: 7 years from the collection of each data item.
After the above retention periods have expired, the Data will be destroyed, deleted, or anonymized.

MANDATORY NATURE OF DATA PROVISION

Personal and contact information is required for entering into contractual relationships.
Regarding browsing data, see Cookie Policy found on the home page of the Opcosmetics website www.opcosmetics.com

DATA RECIPIENTS:

Data may be processed by external parties acting as autonomous data controllers such as, but not limited to, authorities and supervisory and control bodies. All entities offering electronic payment services on their own circuits are also autonomous holders.
Data may also be processed on behalf of the Company by external parties designated as data processors, who are given appropriate operating instructions. These subjects are essentially included in the following categories:
– Companies that offer e-mailing services;
– Companies that offer services instrumental to the pursuit of the purposes stated in this
information (media agencies, IT suppliers, shippers…);
– Companies that offer support in conducting market studies.

Finally, the data may be communicated/disseminated to the company OP Cosmetics S.r.l. for the purposes indicated above and only with the consent of the person concerned, which is optional and revocable at any time.

SUBJECTS AUTHORIZED FOR PROCESSING:

The data may be processed by employees of the company functions assigned to the pursuit of the above purposes, who have been expressly authorized to process the data and have received appropriate operating instructions.

TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION:

There are no data transfers outside the European Union

RIGHTS OF THE DATA SUBJECT – COMPLAINT TO THE SUPERVISORY AUTHORITY:

By contacting the Privacy Office, by mail at OPcosmetics s r l . Via Giuseppe Antonio Borgese n.24 – 95122 Catania, to the kind attention of the Privacy Referent, at tel. +39 095 0935093 or through the email info@opcosmetics.com interested parties may ask the owner for access to the data concerning them, their cancellation, the rectification of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as opposition to processing in cases of legitimate interest of the owner. In addition, data subjects, where processing is based on consent or contract and is carried out by automated means, have the right to receive in a structured, commonly used and machine-readable format the data, as well as, if technically feasible, to transmit them to another data controller without hindrance. Data subjects have the right to revoke the consent given at any time for marketing and/or profiling purposes, as well as to object to the processing of data for marketing purposes, including profiling related to direct marketing. This is without prejudice to the possibility for a data subject who prefers to be contacted for the aforementioned purpose exclusively through traditional modes, to express his or her opposition only to the receipt of communications through modes
automated. Data subjects have the right to lodge a complaint with the competent supervisory authority in the member state where they usually reside or work or the state where the alleged violation occurred.

2) Use of cookies

This site uses so-called cookies, which are small text strings that are sent to the user’s terminal (usually the browser), thus recording the user’s actions or preferences (e.g. login, language, font size, and other display settings). In the course of browsing our site, the user may also receive on his/her terminal equipment cookies that are sent from different sites or web servers (so-called third parties), on which some elements (such as, for example, images, maps and sounds, specific links to pages of other domains) may be found on the site that the same is visiting.

3) Types of cookies used by our site

Our site uses the following types below.

Technical cookies : are navigation or session files that ensure normal navigation and enjoyment of the website and installed directly by our site.Our site uses the following types below.

Technical cookies : are navigation or session files that ensure normal navigation and enjoyment of the website and installed directly by our site.Our site uses the following types below.

Name	Duration	Description
wordpress_test_cookie	End of session	Test system for cookie service availability check
wp-settings-time-*	1 Day	TimeZone navigator management. is activated when the user is logged in (user id and password) thus personalizing the viewing of the site itself
wordpress_logged_in_*	1 week	RememberMe management in wordpress login panel
wordpress_*	1 week	Session management for wordpress admin panel navigators
wp-settings-*	1 Day	Managing wordpress options for admin navigators

Own and third-party profiling cookies: are aimed at creating profiles related to the user and are used in order to send advertising messages in line with the preferences manifested by the same scope of web browsing.

Name	Duration	Description
_ga	2 years	Google Analytics cookies do not allow us to identify you personally. They are used to collect information about the pages you visit, time spent on the site, and other statistical information all anonymously. Find more information at this address http://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
_gat	10 minutes	Used to optimize data collection. Find more information at this address http://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

The site uses the following third-party plugins that make use of cookies, for more information see the sites of the relevant ones:

Facebook Connect (www.facebook.it)
Youtube video (www.youtube.com)
Google Maps (www.maps.google.it)

4) Consent

The user is informed of the presence of cookies through the brief information contained in the banner when accessing our site.
Users who click “ok” on the short notice or continue browsing by accessing another area of the site or selecting an element of the site (for example: clicking an image or link), consent to the use of cookies on our site.
Acceptance of cookies is not a necessary condition in order to visit our website.
Exclusively in the event that the user wants to place an order for a product offered by our site, it is necessary to accept the cookies used and indicated in this policy.

5) Disabling cookies

Most web browsers accept cookies, but you can usually modify your web browser settings to reject all cookies or only third-party cookies, disable existing cookies, or simply be notified when a new cookie is sent to your device.

You can set your browser to reject cookies, refer to the instructions provided by your browser manufacturer (usually within the “Help,” “Tools,” or “Edit” menu). By refusing or disabling cookies, some of the functionality of the website may be lost.

You can find a more detailed guide on how to control manage and delete cookies on your computer at the following addresses:

http://www.allaboutcookies.org/manage-cookies/index.html
http://www.wikihow.com/Disable-Cookies