PERSONAL DATA POLICY IN ACCORDANCE TO art. 13 Reg. UE 2016/679

Dear Customer, the information provided below describes, as required by the EU Regulation 2016/679, the processing operations performed on your personal data.

1. DATA CONTROLLER

Data controller is PDT Cosmetici S.r.l. (P.IVA 04754730721)

Registered office: Viale Cavalieri del Lavoro, 45/47 – 70017 Putignano (BA)

PEC: pdtcosmeticisrl@pec.it

E-mail: gdpr@pdtcosmetici.it.

2. PURPOSES AND LEGAL BASIS FOR THE PROCESSING

a. The personal data collected from sending request, site registration form and subsequent stages are processed for the following purposes and on the legal basis indicated below. We need these data to provide the requested service.

b. In addition, if you have already purchased products from the controller or if you are however customer, some personal data might be processed for further purposes. This shall be without prejudice to the right to object.

c. Finally, if you have never been customer, some personal data might be processed for further optional purposes:

3. DATA DISCLOSURE

4. DATA DISSEMINATION

Personal data shall not be disseminated.

5. DATA TRANSFER TO THIRD COUNTRIES

The controller may transfer personal data to third countries for ancillary reasons connected to previous purposes. Any transfer of personal data shall be based on:

• an adequacy decision;
• appropriate safeguards;
• binding corporate rules.

6. DATA RETENTION

Personal Data will be processed by the Controller: for no longer than is needed for the purposes of the contract although further retention required by law, for purposes under 2.a and 2.b (except opposition); for 2 years for purposes under 2.c (except withdraw).

7. RIGHTS OF DATA SUBJECTS

You are entitled to exercise the following rights at any time: right of access, right to rectification, right to erasure; right to restriction of processing, right to object, right to data portability, right to withdraw the consent.

You have also the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data by the Controller is in violation of the Regulation or applicable law.

To exercise any of the above rights, you have to contact the Controller by writing to the contacts under point 1.

8. AUTOMATED DECISION-MAKING

The controller does not adopt automated decision-making, including profiling.