PERSONAL DATA POLICY IN ACCORDANCE TO art. 13 Reg. UE 2016/679
Dear Customer,
the information provided below describes, as required by the EU Regulation 2016/679, the processing operations performed on your personal data.
1. DATA CONTROLLER
Data controller is PDT Cosmetici S.r.l. (P.IVA 04754730721)
Registered office: Viale Cavalieri del Lavoro, 45/47 – 70017 Putignano (BA)
PEC: pdtcosmeticisrl@pec.it
E-mail: gdpr@pdtcosmetici.it.
2. PURPOSES AND LEGAL BASIS FOR THE PROCESSING
a. The personal data collected from sending request, site registration form and subsequent stages are processed for the following purposes and on the legal basis indicated below. We need these data to provide the requested service.
b. In addition, if you have already purchased products from the controller or if you are however customer, some personal data might be processed for further purposes. This shall be without prejudice to the right to object.
c. Finally, if you have never been customer, some personal data might be processed for further optional purposes:
3. DATA DISCLOSURE
4. DATA DISSEMINATION
Personal data shall not be disseminated.
5. DATA TRANSFER TO THIRD COUNTRIES
The controller may transfer personal data to third countries for ancillary reasons connected to previous purposes. Any transfer of personal data shall be based on:
- an adequacy decision;
- appropriate safeguards;
- binding corporate rules.
6. DATA RETENTION
Personal Data will be processed by the Controller: for no longer than is needed for the purposes of the contract although further retention required by law, for purposes under 2.a and 2.b (except opposition); for 2 years for purposes under 2.c (except withdraw).
7. RIGHTS OF DATA SUBJECTS
You are entitled to exercise the following rights at any time: right of access, right to rectification, right to erasure; right to restriction of processing, right to object, right to data portability, right to withdraw the consent.
You have also the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data by the Controller is in violation of the Regulation or applicable law.
To exercise any of the above rights, you have to contact the Controller by writing to the contacts under point 1.
8. AUTOMATED DECISION-MAKING
The controller does not adopt automated decision-making, including profiling.
