Skip to main content

CLIENTS' INFORMATION IN ACCORDANCE WITH REGULATION (EU) 2016/679, hereinafter also GDPR

  1. General information: The undersigned Company (Pettenon Cosmetics S.p.A S.B.) hereinafter also referred to simply as the "Company", hereby communicates information on the processing of your data/data of the company/firm represented by you (e.g. master data, addresses, tax code, VAT number, data necessary for the management including administrative management of customers, contract execution and fulfillment of legal obligations, data related to payments, data necessary to defend or enforce a right of the Company). Only data necessary for the pursuit of the purposes set forth in this privacy policy will be requested and processed by the Company. Some data (those contained in chamber of commerce visas and those on solvency status retrieved from credit information companies used for contractual and pre-contractual purposes as well as for legitimate interests such as those of verifying the existence and data of the customer as well as any prejudicial.
  2. Purpose and legal basis: The data may be processed by the Company:

A) for pre-contractual purposes if a contract has yet to be signed; the legal basis for processing is the need for execution of pre-contractual measures taken at the request of the data subject;

B) for contractual purposes (e.g. order management, administrative accounting fulfillment, customer management, sending information notes on new products to be marketed falling under the brands referred to in the contract ...); the legal basis of processing is the need for the execution of the contract;

C) to comply with legal obligations, regulations and EU regulations; the legal basis for processing is the fulfillment of legal obligations;

D) to assert or defend a right of the Company and thus for a legitimate interest of the Company consisting in enabling the defense and actions for its own protection; the legal basis for the processing is the pursuit of legitimate interests. In considering such legitimate interests, it has been analyzed that the same do not compromise or interfere with the interests or fundamental rights and freedoms of the data subject (legitimate interest has been assessed based on a Triple Test available by contacting the Company);

E) to assess possible detriments to the establishment or continuation of the relationship (e.g., companies in bankruptcy) and thus for a legitimate interest consisting in preventing risky situations; the legal basis for the processing is the pursuit of legitimate interests. In considering such legitimate interests, it has been analyzed that the same do not compromise or interfere with the interests or fundamental rights and freedoms of the data subject (legitimate interest has been assessed based on a Triple Test available by contacting the Company);

F) to assign or discount receivables (and thus for a legitimate interest of the Company consisting of obtaining liquidity before payment deadlines or pending payment); the legal basis for the processing is the pursuit of legitimate interests. In considering such legitimate interests, it has been analyzed that the same do not compromise or interfere with the interests or fundamental rights and freedoms of the data subject (legitimate interest has been assessed based on a Triple Test available by contacting the Company);  

G) in order for the Company to carry out marketing communications about its products/services/initiatives, all by the Company to the e-mail address you have provided or other contact details including telephone and postal address (please note that e-mail and SMS/MMS may also be sent electronically with the help of automated tools); the processing has consent as its legal basis;

Please note that you may also communicate that you wish to be subject to the activities only through e-mail or only through telephone or postal communications by writing to privacy@pettenon.it.

it is recalled that these communications do not include the information notes in point 2 letter A, which are communications instead necessary to fulfill the contract;

H) in order to share your data with the other AGF88 Group Companies in order to coordinate the Group's activities thus avoiding overlapping of customers and reporting any defaults and risks (e.g., bankruptcy, prejudicial) in the interest of the AGF88 Group; all therefore for legitimate interests consisting of having qualified customers and avoiding business overlaps; the legal basis for the processing is the pursuit of legitimate interests. In considering such legitimate interests, it has been analyzed that the same do not compromise or interfere with the interests or fundamental rights and freedoms of the data subject (legitimate interest has been assessed based on a Triple Test available by contacting the Company).

  1. Is it Obligatory to Provide Personal Data? The provision of the requested data is necessary for the purposes of point 2 letter A, B, C, D and therefore any refusal to provide them in whole or in part may make it impossible for the Company to execute the contract or continue the relationship.

The provision of data for the purposes referred to in point 2 letter E of this information is optional but failure to provide it may result in the impossibility of undertaking or continuing the relationship.

The provision of data for the purposes of point 2 lett F of this privacy policy is optional but failure to provide it may result in the inability to enter into or continue the relationship.

The provision of the data requested for the purposes set out in point 2 lett G is optional as is the relevant consent (always, however, freely revocable by contacting the Company) and failure to provide and consent will not result in any consequence other than that the Company will not be able to carry out the activities referred to in the point or will not be able to carry them out at the addresses not provided.

The conferment for the purposes referred to in point 2 letter H is optional but failure to confer it may result in the impossibility of following up the contract or continuing the relationship.

  1. Categories of Recipients of your Personal Data: Without prejudice to further communications (of which you/the company/firm you represent will be informed in any case if the communications themselves were not already known) that may be necessary in fulfillment of legal and contractual obligations, the data collected and processed may be communicated by the Company (communicating the data only if necessary for the pursuit of the purposes indicated in this privacy policy and communicating only the indispensable data):

- for the purposes referred to in point 2 letter A to public bodies, postal-courier (communicating the data necessary to send any communications);

- for the purposes referred to in point 2 letter B to banks, professionals (e.g., lawyers), consultants and, auditors), service companies, transporters, shippers judicial authorities and police and supervisory bodies, public bodies, post-couriers (communicating the data necessary to send any communications);

- for the purposes of point 2 lett C to judicial authorities and police and supervisory bodies, public entities;

- for the purposes referred to in point 2 lett. D to professionals (e.g., lawyers), judicial authorities and police and supervisory bodies, public entities, postal-courier services (communicating the data necessary to send any communications);

- for the purposes of point 2 lett F to factoring companies or companies to which receivables are assigned not that to banks, forwarding carriers in case of sending communications/paper material;

- for the purposes of point 2 letter E, the data will not be communicated.

Persons specifically delegated by the Company to process the data (administrative/legal and logistics employees, business practice employees also external to the Company, marketing employees also external to the Company, members of the Board of Directors and the Board of Statutory Auditors, agents, area managers, computer technicians and information system employees, consultants also external to the Company - e.g., quality/certification consultants, computer consultants, lawyers, tax consultants- interns, collaborators of data processors, quality/certification consultants, IT consultants, lawyers, tax consultants- interns, collaborators of the data processors) and data processors (companies that carry out activities auxiliary to that of the Company such as IT consulting companies, accountants and tax consultants, consulting companies in general,) always appointed by the Company and whose list can be found by contacting the Data Controller.

Please note that for debt collection activities, the Company may use debt collection companies and lawyers whose names will be available from the Data Controller and who may act as data controllers or autonomous data controllers. The names of these individuals, if appointed as Data Controllers, will in any case be communicated to you prior to entrusting the case to them.

  1. Data retention: Data may be retained and processed by the Company for as long as is necessary for the pursuit of the purposes contained in this privacy policy. The period of data retention is as follows:

-for pre-contractual purposes until the eventual approval or formalization of the contract unless further storage is required by Italian and European regulations; 

- for legal obligations, regulations and EU regulations, for the periods imposed by these regulatory sources;

- for the purposes referred to in point 2 letter E until the data analysis;

- for the purposes mentioned in point 2 lett F for the entire duration of the contract and thereafter if required by legal obligations;

- for the purposes set forth in 2(G), until you withdraw your consent or request deletion subject to retention for the purposes set forth in 2(C) 2(D) ; by December 31 of the second year following the year in which you gave your consent, you will in any case be sent a communication to understand whether there is still your interest in being subject to the activities referred to in point 2(G) and therefore to the retention of the data by the Company for the purposes indicated in that point and in the event that this interest ceases, the data will be deleted subject always to retention for evidentiary purposes for the period provided for by Italian law. If, on the other hand, there is still your interest in being subject to the activities referred to in point 2(G) and therefore to the retention of the data by the Company for the purposes indicated in that point, by December 31 of the second year after the communication, you will be sent a further communication of the same nature and so on as long as your interest remains;

- for the purposes mentioned in point 2 letter H, for the entire contractual period except for the exercise of the rights indicated in point 7 of this privacy policy;

- in any case, all data may be retained for a period necessary to assert or defend a right of the Company, in accordance with Italian civil and criminal law and therefore for a maximum of 10 years from the termination of the relationship, except for litigation or disputes that make a further retention period necessary and subject to further retention if required by local regulations applicable to the data subjects.

  1. Data Controller and Data Protection Officer: The Data Controller is Pettenon Cosmetics S.p.A. SB with registered office in Via del Palù, 7d, 35018 San Martino di Lupari PD, Tel. +39 049 99888 FAX +39 049 9988809, privacy@pettenon.it.  

There is a Data Protection Officer of the Company, contactable at the Company’s headquarters in Via del Palù, 7/d, 35018 - San Martino di Lupari (PD), as well as at dpo@pettenon.it.

  1. Rights: We inform you that the GDPR stipulates that you may request from the Company (at the contact details given in Section 6) access to and rectification of your personal data, deletion of your data or restriction of the processing that concerns you, data portability; you may also have the option, again by contacting the Company, to object to the processing of your data and to exercise the other rights contained in Chapter 3 Section 1 of the GDPR.
  2. CompliantsWhere you believe that data processing is taking place in violation of the provisions of the GDPR, you have the right to lodge a complaint with the Italian Supervisory Authority (whose references can be found at www.garanteprivacy.it), as provided for in Article 77 of the GDPR, or to take appropriate legal action (Article 79 of the GDPR).  In addition, he or she may also turn to the Control Authority of the state where he or she normally resides or works. A list of the Supervisory Authority can be found at the link www.garanteprivacy.it/home/footer/link).
  3. Data of collaborators/employees: It is recalled that if the data subject to whom this privacy policy is addressed has to communicate to the Company for reasons inherent in the performance of the contract, of the names and contact details of their collaborators, the data subject must inform the collaborator of the information contained in this privacy policy and of the fact that they will communicate the data to the Company, which may process the data for reasons inherent in the performance of the contract, obtaining their consent to the communication and processing where necessary.
  4. Processing method: The data may be processed by the Company in paper, manual, computer and telematic mode (thus storing and processing the data on both paper and computer). The data will be stored and processed by the Company, taking all necessary measures for their protection, in accordance with all current regulations (and therefore also in compliance with the principles of correctness lawfulness and transparency and protection of confidentiality and rights) and with logics strictly related to the purposes indicated in this information. On the data will be carried out only the operations necessary for the pursuit of the purposes indicated in this statement. The data will be stored, as far as the Company is concerned, at the offices of the Company and at the data processors appointed by the Company (as well as at the third parties indicated in this statement to whom the data are communicated and who process them as autonomous data controllers). The data will also be organized in databases - databases including computerized databases.

 

Information updated to 26/06/2023. Previous versions of the information can be found by contacting the Company at the addresses referred to in point 6.