Information pursuant to Regulation (EU) 2016/679 (GDPR) and current national legislation

1. General information 
   Pettenon Cosmetics S.p.A. SB (hereinafter also referred to as "Company" or "Pettenon") informs you that (indicating you hereinafter also as "User"), for the purposes indicated below, it will process your personal data (or of the company it represents if it acts on behalf of the same) provided by you. Only the data necessary for the pursuit of the purposes indicated in this statement will be requested and processed. Please note that you must indicate only your data and / or data of the company you represent. If you act on behalf of a company, the activities envisaged in this statement will be carried out towards the company using the data communicated by you and therefore consenting to the processing (where consent is required) on behalf of the company you represent.
2. Purpose and legal basis 
   The data will be processed by the Company:
   
   
   1. so that the Company can carry out commercial communications (such as advertising and / or information) on products / services / initiatives of the Company to the e-mail address indicated by you in the form (please note that e-mails may also be sent with the aid of automated tools). The processing is based on the following legal basis: consent;
   2. to fulfill an obligation established by law, by a regulation or by community legislation (the legal basis is the fulfillment of legal obligations);
   3. for legitimate interests such as the right to assert or defend a right of Pettenon (the legal basis is the pursuit of legitimate interests). In considering these legitimate interests, it was analyzed that they do not compromise or interfere with the interests or fundamental rights and freedoms of the interested party (the legitimate interest was assessed on the basis of a Triple Test available by contacting the Company).
3. Mandatory provision
   • PURPOSE OF POINT 2 lett. A 
     You will be free or not to communicate your personal data to us / the company you represent for the purposes referred to in point 2 (A) of the information as well as you will be free to give consent or not and failure to provide and consent will therefore not entail any consequence other than that of not being subject to the activities referred to in point by Pettenon (since there is therefore no consequence on the other purposes). Furthermore, if you consent to the processing for the purposes referred to in point 2 (A) of this statement, please note that you can always revoke freely and without any reason the consent given (and therefore oppose the activities in question) by contacting the Company at the addresses indicated in point 6.
   • PURPOSE OF POINT 2 letters B, C, D 
     The provision of data for the purposes indicated in point 2 (B), 2 (C) of this information is necessary and failure to provide it could make it impossible for Pettenon to carry out the activities referred to in the previous points.
4. Categories of data recipients 
   

   For the purposes indicated in point 2 (A) the data will not be disclosed to third parties (without prejudice to the communication to persons in charge and data processors as specified below)

   For the purposes referred to in point 2 (B) of this statement, Pettenon may communicate the data to public bodies, judicial bodies and police bodies.

   For the purposes referred to in point 2 (C) of this statement, the data may be communicated by Pettenon to lawyers-legal consultants, public bodies, judicial bodies and police bodies and to the post office (they can see the address for sending any written communications).

   Pettenon will communicate only the data necessary for the pursuit of the individual purposes indicated in this statement.

   They will then be able to know the data on behalf of Pettenon, each for his role, all the subjects delegated by the Company (public relations officers also external to the Company, information systems employees also external to the Company and who can sometimes perform system administrator tasks and are in this case appointed as such, consultants also external to the Company - such as IT technicians who can sometimes perform system administrator tasks and in this case are appointed as such, legal consultants-interns, employees in charge of managing the website also external to the Company, marketing employees also external to the Company, legal practice staff, collaborators of data processors) and data processors appointed by Pettenon (e.g. marketing consulting companies, IT outsourcers, companies responsible for sending news letters or communications,  companies that provide corporate management assistance such as the parent company). The list of data processors is always available by contacting the Company at the addresses indicated in point 6. The Data Processors will process only the data necessary for the performance of the assigned tasks.

   
   
   
5. Data retention
   The data will be kept for the entire period necessary to pursue the purposes contained in this statement. The data retention period is as follows:
   
   • for legal obligations, regulations and community legislation, for the periods imposed by these regulatory sources;
   • for the purposes referred to in point 2 (A), until the withdraw of consent and / or the request for cancellation without prejudice to the conservation for evidentiary purposes for the period provided for by law; every 24 months from the consent you will in any case be reminded of the right to cancel if you no longer have interest in being subject to the activities indicated in this point;
   • in any case, all data may be kept for a period necessary to assert or defend a right of the Company according to Italian and European regulations.
6. Data Controller and Data Protection Officer 
   The data controller is: Pettenon Cosmetics S.p.A. SB with registered office in Via del Palù, 7d, 35018 San Martino di Lupari PD, Tel. +39 049 99888, FAX +39 049 9988809, [email protected].
   
   There is a Data Protection Officer of the Company, who can be contacted at the Company's headquarters in Via del Palù, 7/d, 35018 - San Martino di Lupari (PD), as well as at the e-mail address [email protected].
7. Rights 
   We inform you that the GDPR provides for the possibility for the User to ask the Company (at the addresses indicated above) for access to personal data and the correction of data, the cancellation of the same or the limitation of the processing that concerns him, the portability of data; the user may also have the possibility, always by contacting the company, to oppose the processing of data and to exercise the other rights contained in Chapter 3 section 1 of the GDPR including that of withdrawing consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on the consent given before the withdraw.
8. Complaints 
   If you believe that the processing of data is in violation of the provisions of the GDPR, you have the right to lodge a complaint with the Italian Supervisory Authority (whose references can be found on the website www.garanteprivacy.it), as required by Article 77 of the GDPR, or to take the appropriate judicial offices (Article 79 of the GDPR).  You can also contact the Supervisory Authority of the state in which you habitually reside or work. The list of the Supervisory Authority can be found at the link www.garanteprivacy.it/home/footer/link).
9. Logic used for profiling 
   The profiling referred to in point 2 (C) takes place by the Company through the analysis, also in an automated manner, of the User's data and characteristics (for example age, geographical area, gender, adhesion to an event, adhesions to particular initiatives, purchase of certain products, completion of questionnaires, actions carried out while browsing the Company's websites if the User has accepted profiling cookies on our websites). A consumption profile is then created that is also included in specific groups (clusters). Profiling has the purposes indicated in point 2(C); however, this processing does not constitute a particular risk for the User considering the type of basic profiling that does not require data of a particularly delicate nature or that allows the detailed reconstruction of particularly confidential aspects of private life. The User always has the right to obtain human intervention, to express his opinion, to obtain an explanation of the decision reached and to contest the decision.
10. Processing methods 
    The data will be processed with the aid of IT and paper / manual tools adopting protection systems suitable for the protection of confidentiality. All data will be stored and processed in full compliance with confidentiality in compliance with all current regulations (and therefore also in compliance with the principles of correctness, lawfulness and transparency and protection of confidentiality and rights) and with logic strictly related to the purposes indicated in this statement. Only the operations necessary for the pursuit of the purposes indicated in this statement will be carried out on the data. The data will be stored, with regard to the Company at its headquarters or server farm and as regards the data processors at their offices or server farms. The data communicated to third parties will be stored and processed independently by them. The data will also be organized in databases - databases including computer databases.

Information updated to 13/10/2023. Previous versions of the information can be found by contacting the Company at the addresses referred to in point 6.