PRIVACY DISCLAIMER
tatuibeauty.com
In compliance with the provisions of art. 13 of EU Regulation 2016/679 on the protection of personal data (hereinafter also just "GDPR") and the subsequent national adaptation legislation, below is the general information relating to the processing and protection of users' personal data that interact with the services accessible through the address tatuibeauty.com (hereinafter also just the "Site"). Therefore, each user is invited to read this information carefully.
1. Data Controller
The Data Controller (hereinafter also just "Owner") is:
HCH Srl, VAT number 04680590280, with registered office in via dell'Industria, 11, 35028 - Piove di Sacco (PD), tel: 041.4165289 and e-mail address: customercare@hchacademy.com
2. Categories of personal data
What are personal data.
Personal data (hereinafter also just "Data") are all information that, directly or indirectly, allow the user (hereinafter also just "Data Subject") to be identified as a natural person.
Data provided voluntarily by the user.
The data provided directly by the user are all personal data entered by the same on the Site (e.g. by filling in the contact form / form; sending e-mail and / or ordinary mail to the contact details on the Site; sending spontaneous applications using the contact details on the Site, etc. etc.). Examples of data provided directly by the user are: name, surname, residence / domicile address, e-mail address, telephone number, payment details, etc. etc..The optional, explicit and voluntary sending of e-mails to the addresses indicated on the Site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other data included in the message.
In specific cases, the Data may have been provided to us by third parties through the use of a function or service activated on the Site, such as, by way of example, by sending a gift card or by reason of the shipment of an order to the address of the recipient of the purchase. In such cases, communicated data are processed only if they are relevant to the performance of that function or service, as indicated in this Privacy and Cookie Policy.
Navigation data.
The computer systems and software procedures used to operate the Site itself acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified persons, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by individual users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the interested party.
The navigation data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the Site (legitimate interest of the Owner).
Cookies
The Site uses cookies, as better specified in the specific information to which reference is made https: /www.tatuibeauty.com/cookies
Social Network Plugin
This site also incorporates plugins and / or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins are programmed so as not to set any cookies when accessing the page, to safeguard user privacy. Eventually cookies are set, if so provided by social networks, only when the user makes effective and voluntary use of the plugin. Please note that if the user browses being logged into the social network then he has already consented to the use of cookies conveyed through this site at the time of registration to the social network.
The collection and use of the information obtained through the plugin are governed by the respective privacy policies of the social networks, to which please refer.
- Facebook:https://www.facebook.com/policies/cookies/
- Twitter: https://help.twitter.com/en/rules-and-policies/twitter-cookies
- Instagram:https://help.instagram.com/519522125107875
- Google:https://policies.google.com/technologies/cookies?hl=it&gl=it
- Linkedin: https://it.linkedin.com/legal/cookie-policy
3. Purpose and legal basis of the processing
Without prejudice to what is specified in relation to navigation data and cookies, the Data of the interested party is collected and processed for the purposes indicated below.
A) Execution of pre-contractual measures at the request of the interested party, subsequent execution of the contract and related obligations.
The data provided by the interested party may be processed for purposes strictly related to the execution of purchase orders for products and / or services and to the execution of related activities (such as payment management, communications about the status of orders, product delivery, exchange of goods or returns following the purchase and management of related requests, product reservations,use of other features or services available on the Site, including the livechat service). The execution of pre-contractual measures and the subsequent execution of the contract (Article 6, paragraph 1, letter b) of the GDPR) constitute the legal basis for the processing of Data.
We specify that if, upon purchasing one of our products through the Site, the user decides to activate the function that allows saving the data of a payment card for future purchases (if this function is available), we need to process the data indicated for the activation and provision of this functionality. The consent to the activation of this function makes it possible to automatically complete the payment data in subsequent purchases, so as not to have to enter them for each new operation, and these data will be considered valid and effective for future purchases. It is possible to modify or delete the data relating to payment cards entered on the Site at any time, either through the section relating to payment information,
· The data provided by the interested party may also be processed for the fulfillment of obligations established by law and / or by national or community regulations that the Data Controller is required to observe in providing the requested services and in executing the contract. The need to fulfill a legal obligation (Article 6, paragraph 1, letter c) of the GDPR) constitutes the legal basis of the processing.
· Finally, the data provided by the interested party may be processed for the purpose of protecting credit positions, exercising the right of defense in court, for ordinary internal organizational-operational, management and accounting needs. The pursuit of a legitimate interest of the Data Controller (Article 6, paragraph 1, letter f) of the GDPR) constitutes the legal basis of the processing.
B) Registration for access to the reserved area
The Data provided by the Data Subject may be processed for the purposes of registration and access to the Reserved Area on the Data Controller's website, which allows you to use services reserved for registered users. The execution of the contract (Article 6, paragraph 1, letter b) of the GDPR) and the legitimate interest of the Data Controller (Article 6, paragraph 1, letter f) of the GDPR) constitute the legal basis of the processing.
C) Job opportunities (application)
The Data provided by the user interested in submitting his application for open positions in HCH Srl may be processed to evaluate the curriculum vitae sent, fix any cognitive interviews and carry out the subsequent evaluation of the application. The processing of the Data provided by the interested party is aimed at examining your collaboration proposal (Article 6, paragraph 1, letter f) of the GDPR). Therefore, the candidate is invited to include in the curriculum vitae only the Data necessary to evaluate his profile and to refrain from indicating particular data (such as those relating to: registration with trade union or category organizations; trade union positions; political opinions and membership of parties, trade unions, associations or organizations of a religious, philosophical or political nature; religious convictions, philosophical or otherwise; racial and ethnic origin; personal data relating to disclosing the state of health and sexual life).
D) Direct marketing
With specific consent of the user,the Data may be processed for sending newsletters, advertising, information, commercial and promotional material, as well as updates on initiatives, promotions and offers relating to HCH Srl products and services, for direct sales, market research and sending invitations to events in which the Data Controller participates / organized. The express consent (Article 6, paragraph 1, letter a) of the GDPR) constitutes the legal basis of the processing.
E) Third Party Marketing
With the specific consent of the user, the Data may be disclosed to third-party companies, which may process them to send commercial and / or promotional communications on products and services, as well as carry out market research.
Your consent (Article 6, paragraph 1, letter a) of the GDPR) constitutes the legal basis of the processing.
F) Profiling
With the specific consent of the user, the Data may be processed for analysis of purchase choices, detection of the degree of consent on products and / or services offered, habits and propensities to consume, in order to improve the marketing and services offered. by the Owner, as well as to meet the specific needs of customers (hereinafter also just "Profiling"). Consent (Article 6, paragraph 1, letter a) of the GDPR) constitutes the legal basis of the processing.
4. Nature of the provision of data and consequences of refusal
Without prejudice to what is indicated in relation to navigation data and cookies, the provision of data is necessary for the purposes indicated under art. 3 lett. A) and B). Failure to provide the Data will make it impossible to follow up on the interested party's pre-contractual / contractual request and to execute the contract, to access the reserved area, as well as to proceed with the provision of any services requested.
The provision of your data for the purpose indicated under art. 3 lett. C) is optional. Failure to provide the Data by the Data Subject may, however, make it impossible for the Data Controller to examine and evaluate your collaboration proposal.
The consent to the processing of data for the purposes indicated above sub art. 3 lett. D), E) and F) is optional. Failure to consent to the processing for the purposes indicated under art. 3 lett. D), E) and F) will make it impossible for the Data Controller to process your data respectively for the purposes of direct marketing, third-party marketing and profiling described above. Failure to consent to the processing for the purposes referred to in Articles. 3 lett. In fact, D), E) and F) will not prevent the execution of pre-contractual measures and the subsequent conclusion and execution of the contract. In any case, even once consent has been given for the purposes referred to in Articles. 3 lett. D), E) and F) the interested party may request, at any time, the interruption of the processing for these purposes by sending an e-mail to customercare@hchacademy.com or by clicking on the link contained in each email.
5. Processing methods
Personal data are processed with electronic, IT, telematic and / or paper tools, with logic strictly related to the purposes indicated above, in full compliance with current legislation, as well as the principles of lawfulness, transparency, necessity, proportionality and non-excess, and in such a way as to guarantee the confidentiality of users.
Specific security measures are observed to prevent the loss of data, illicit or incorrect use of the same and unauthorized access.
6. Retention period
The Data will be stored for the purpose of executing pre-contractual measures and of the contract and the related regulatory obligations (Article 3 letter A) in compliance with the principle of proportionality and not excess and, in any case, for a period of time not exceeding that strictly necessary to achieve the purposes for which they were collected, in compliance with the limitation periods provided for by the civil code. The Data will therefore be processed for as long as necessary to manage the purchase of the products or to provide the requested services, including any returns, complaints or disputes relating to the purchase of the product or service in question.
As regards the purpose of registration for access to the Reserved Area of the Site (Article 3 letter B), it should be noted that the user can, at any time, request to be removed from the list of registered subjects using the " unregister "present on the Site.
As regards the purpose of evaluating the collaboration proposal (Article 3 letter C), the data processing will last no longer than necessary for the purposes for which the data were collected and, in any case, no longer than six months from receipt of the curriculum vitae.
As regards the processing for marketing purposes (Article 3 letter D), your Data will be kept by the Data Controller for a maximum period of 24 months from the collection of your consent and / or from the renewal of the latter. You can still request, at any time, the interruption of the processing for marketing purposes and in this case your data can no longer be processed for this purpose.
As regards the processing for profiling purposes (Article 3 letter F), your Data will be kept by the Data Controller for a maximum period of 12 months starting from the collection of the consent or from the renewal of the latter. You can still request, at any time, the interruption of the processing for Profiling purposes and in this case your Data can no longer be processed for this purpose.
7. Data recipients
For the pursuit of the purposes described in this information, the user's data may be processed by employees, similar personnel and / or collaborators, as well as partners of the owner, who operate, rightly appointed, as persons authorized to process data personal pursuant to art. 29 GDPR.
The personal data communicated by users, customers and suppliers may also be processed, on behalf of HCH Srl by third parties, duly appointed as Data Processors pursuant to and for the purposes of art. 28 of the GDPR, belonging, by way of example, to the following categories:
a) service providers for the management of the IT system (web hosting).
b) subjects who take care of administrative and / or fiscal obligations.
c) subjects who provide legal and / or tax advice.
d) subjects that the Data Controller uses for the purposes of the execution of the contract (eg for shipment and delivery of products), the correct fulfillment of the contractual obligations assumed as well as the obligations deriving from the law;
is) advertising and marketing company for the promotion of the activity of HCH Srl and the products / services it offers.
f) third-party companies, in relation to the marketing purposes of third parties, only if you have given specific consent.
The complete and updated list of data processors is available upon request by the user.
Furthermore, the Data may be communicated to the judicial authority and / or police bodies, or to subjects to whom there is an obligation of communication pursuant to the law and / or national or community regulations.
8. Dissemination of data
Personal data are not subject to disclosure.
9. Data transfer abroad
The data of the interested party will not be transferred outside the European Union.
10. Rights of the interested party
The GDPR grants users, as data subjects, the exercise of specific rights.
In particular, at any time, the interested party can obtain:
a) to request and obtain access to personal data, confirmation of the existence or otherwise of the same and their communication in an intelligible form.
b) to obtain an indication of the origin of personal data and to verify its accuracy, request its integration and / or updating, or correction if inaccurate.
c) to request and obtain the cancellation of personal data if no longer necessary with respect to the purposes for which they were collected and processed, the transformation of the same into anonymous form or the blocking of data processed in violation of the law.
d) to request and obtain the limitation of processing if the personal data are inaccurate, are no longer necessary with respect to the purposes for which they were collected and processed or in case of unlawful processing of the same.
e) to oppose in any case, for legitimate reasons, to the processing of the data.
f) to receive the data concerning him, provided to the Data Controller and processed by automated means and to transmit them to another data controller, without impediments by the Data Controller, as well as, if technically feasible, to obtain the direct transmission of data from the Data Controller which he has provided them to another data controller.
All these rights can be exercised by writing to the e-mail address of the owner indicated above.
The Data Controller will take charge of the user's request and provide the latter, without undue delay, with information relating to the action taken regarding his request.
Any corrections or deletions of data or limitations of processing, carried out at the request of the user and unless this proves impossible or involves a disproportionate effort, will be communicated by the Data Controller to each of the subjects to whom the Data were transmitted.
Pursuant to art. 13, paragraph 2, lett. d) of the GDPR, finally, the interested party may exercise his rights by submitting a complaint to the Guarantor Authority for the protection of personal data, based in 00186 - Rome, Piazza di Montecitorio, 121.
This information may be subject to periodic updates.