Personal Data Processing

According to the law, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
Therefore, we provide you with the following information:

Who is the owner of your personal data?

TUTTESTETICA Srl is the owner of the personal data sent and is therefore responsible for the processing of the data provided online, in accordance with the applicable law on data protection.

TUTTESTETICA Srl
Via M. D'Azeglio, 19
40123 Bologna
VAT number: 03334251208

Where is personal data stored?
The data we collect from you is held within the European Economic Area (“EEA”) but may be transferred to and processed in a country outside the EEA. Any transfer of personal data will be carried out in accordance with applicable laws. For the transfer outside the EEA, TUTTESTETICA Srl will use the standard contractual clauses and the Privacy Shield as adequate guarantees for those countries that have not received an adequacy decision from the European Commission.

Who has access to your data?
Your data may be made accessible to employees and collaborators of TUTTESTETICA Srl, in their capacity as persons in charge and/or internal data processors and/or system administrators.
TUTTESTETICA Srl does not transfer, sell or exchange users' personal data with third parties for marketing purposes. Data forwarded to third parties is only used to provide our services to you. The categories of subjects for each type of processing are indicated below.

How is your data used?
The requested information will be used to
– allow access to the reserved area of ​​the site, and the eventual compilation of the order with consequent invoicing and shipment, with feedback via e-mail. TUTTESTETICA Srl may, where necessary, communicate your personal data to professionals, consultants and couriers, exclusively to perfect the aforementioned purposes. Any refusal to communicate the requested data prevents the provision of the service itself.
– send newsletters, commercial communications and/or advertising material on products or services offered by TUTTESTETICA Srl via e-mail, post and/or sms and/or telephone contacts and survey the degree of satisfaction with the quality of the services
– start a conversation through the "chat" of our customer service. In this case, the requested information (name and email address) will not be used for any commercial purpose but exclusively to guarantee the correct assistance service

Purpose
Management of contacts and sending of messages

Personal data collected

• Cookies
• Usage Data
• Unique device identifiers for advertising (google advertiser id or idfa identifier, for example)
• E-mail
• Geographic location
• Various types of data as specified in the privacy policy of the service

 

What are your rights?

Rights of access:
You have the right to request information about your personal data in our possession at any time. You can contact TUTTESTETICA Srl, which will provide you with all your personal data by e-mail.

Portability right:
Every time TUTTESTETICA Srl processes your personal data by automated means on the basis of your consent, or on the basis of an agreement, you have the right to be able to obtain a copy of the transferred data, in a commonly used format, in the form structured and readable electronically. This only includes personal data submitted to us by the user.

Right to rectification: 
You have the right to request rectification of personal data if it is inaccurate, including the right to request completion of incomplete personal data.
If you have an account on www.dermo28.com, you can change your personal data directly by logging into your account.

Right of cancellation:
You have the right to cancel any personal data processed by TUTTESTETICA Srl at any time, except for the following situations:

*there is an open position with Customer Service
*you have an open order that has not yet been shipped, or has only been partially shipped
*you have an open debt with TUTTESTETICA Srl, regardless of the payment method
*you are suspected of, or have fraudulently used our services in the last four years
*the debt was sold to a third party in the last three years or one year, in the event of the customer's death
*a credit application was sent in the last three months and was declined
* for any purchase you make, we will keep your personal data relating to the transaction, in accordance with the accounting rules

Right to oppose the processing of data based on legitimate interests:
You have the right to object to the processing of personal data based on the legitimate interest of TUTTESTETICA Srl. TUTTESTETICA Srl will not continue to process personal data unless it is able to demonstrate a legitimate basis for the processing, which overrides your interests or rights, or for legal reasons.

Right to object to Direct Marketing:
You have the right to object to Direct Marketing, including profiling carried out for Direct Marketing.

You can choose not to accept Direct Marketing by the following means:
*following the instructions in each marketing email
*setting up your account at www.dermo28.com

Right to restriction:
You have the right to request that TUTTESTETICA Srl limits the processing of your personal data in the following circumstances:
*if you object to TUTTESTETICA Srl's processing based on a legitimate interest, TUTTESTETICA Srl will limit all processing of such data up to the moment verification of the legitimate interest
*if you declare that the personal data are incorrect, TUTTESTETICA Srl must limit all processing of such data until their accuracy is verified
*if the processing is not legitimate, it is possible to oppose the cancellation of personal data and request instead a restriction of their use
*if TUTTESTETICA Srl no longer needs the personal data but they are necessary so that you can set up a legal defence

How can you assert your rights?
You can exercise your rights at any time by sending:
– a registered letter with return receipt to TUTTESTETICA Srl, Via M. D'Azeglio, 19 – 40123 Bologna (BO)
– an e-mail to privacy@tuttestetica.com

Data Protection Officer:
The data controller is TUTTESTETICA Srl, Via M. D'Azeglio, 19 – 40123 Bologna (BO).
The updated list of managers and persons in charge of processing is kept at the registered office of the data controller.

Right to complain to a competent Supervisory Authority:
If you believe that TUTTESTETICA Srl processes personal data incorrectly, you can contact us. You also have the right to lodge a complaint with a competent supervisory authority.

Updates to our Privacy Policy:
Updates to our Privacy Policy may be required. The most recent version of the Policy is always available on our website. You will be informed of any material changes to the Privacy Policy, such as the purpose of processing personal data, the identity of the controller or users' rights.