• Register
Cart 0
MenuKIKO Stores
  • KIKO Stores
EU_PopUpNlSub

Notice in relation to the processing of the personal data of online customers pursuant to regulation (eu) 2016/679 (“GDPR”)

DATA CONTROLLER

DATA CONTROLLER

KIKO S.p.A., with registered headquarters in Via Giorgio and Guido Paglia n. 1/D Bergamo, IVA and Tax Code 02817030162 12132110151, post code 24122, tel. 035280011 (“Company”).

DATA PROTECTION OFFICER (DPO)

DATA PROTECTION OFFICER (DPO)

PERSONAL DATA PROCESSED

PERSONAL DATA PROCESSED

Vital statistics. Contact data. Purchase detail data.  Navigation data (see Cookie Policy on the home page of the KIKO site www.kikocosmetics.com)

AIM OF PROCESSING
LEGAL BASIS OF PROCESSING
DATA STORAGE PERIOD
Purchase of goods and services on-line
Execution of the contract for which you are party
For the duration of the contract and, after validity, for an ordinary period of 10 years.
Registration on the site www.kikocosmetics.com; membership of loyalty programmes and/or registration of data in the Company's CRM
Execution of the contract for which you are party
For the duration of the contract and, after validity, for an ordinary period of 10 years.
Activation of requested exclusive services (gift card, order tracking, wish list, satisfied or reimbursed)
Execution of the contract for which you are party
For the duration of the contract and, after validity, for an ordinary period of 10 years.
Participation in competitions, events, prize operations, loyalty programmes, on-line and social initiatives.
Execution of the contract for which you are party
For the duration of the contract and, after validity, for an ordinary period of 10 years.
Management of notification and complaint activities, customer care
Execution of the contract for which you are party
For the duration of the contract and, after validity, for an ordinary period of 10 years.
Satisfaction of obligations pursuant to regulations and national and international laws.
Need to meet legal obligations
Duration under the law (10 years for satisfaction of administrative-accounting obligations)
If necessary, to ascertain, exercise or protect the rights of the Owner in a Court of Law
Legitimate interest (legal protection)
In the case of legal dispute, for the entire duration of the same, until the completion of the terms of enforceability of the impeachment action.
Recovery of extra-judicial debits
Legitimate interest (legal protection)
In the case of legal dispute, for the entire duration of the same, until the completion of the terms of enforceability of the impeachment action.
Direct marketing aims: by way of example, dispatch - with automated contact means (e.g. sms, mms, e-mail, social networks, instantaneous messaging service, push notifications) and traditional means (operator calls and traditional post) - of promotional and commercial communications relative to services/products offered by the Company or the notification of corporate events, as well as communication of level of client satisfaction, execution of market research and statistical analysis.
Consent (optional and revocable at any time)
Vital statistics and contact data: until consent revoked Data concerning purchase details: 7 years from collection
Communication/transfer of data to companies in the Odissea Group: your vital statistics and contact data will be communicated to companies in the Odissea Group that KIKO S.p.A. belongs to (Womo S.r.l., Bullfrog S.r.l., D-retail S.r.l., Madina S.r.l., Hexagon S.p.a.) to allow these companies to execute marketing services (e.g., the dispatch - with automated contact means such as sms, mms, e-mail, social networks, instantaneous messaging apps and traditional means such as operator calls and traditional post - of promotional and commercial communications for services/products offered by the companies or notification of corporate events, as well as the execution of market research studies and statistical analysis) concerning their products.
Consent (optional and revocable at any time)
Until cancellation of consent
Aim of profiling: analysis of your preferences, habits, behaviours and interests also through the installation of cookies (e.g., analysis of navigation, monitoring of selected products and virtual shopping cart, refer to the cookie policy on the home page of the KIKO site www.kikocosmetics.com in order to send you personalised commercial communications/targeted promotional initiatives/offers and services relevant to your requirements/preferences.
Consent (optional and revocable at any time)
Vital statistics and contact data: until consent revoked Data concerning purchase details: 7 years from collection

After completion of the storage time indicated above, the data will be destroyed, cancelled or made anonymous

COMPULSORY PROVISION OF DATA

COMPULSORY PROVISION OF DATA

The vital statistics and the contact data are obligatory for the stipulation of contracts. 
With respect to navigation data refer to the Cookie Policy on the home age of the KIKI site www.kikocosmetics.com

DATA RECEIVERS

DATA RECEIVERS

The data can be processed by third parties operating as independent owners, such as authorities and vigilance and control authorities. All subjects that offer electronic payment services on their circuits are also considered independent owners.

Data can be processed, on behalf of the Company, by third parties who are designated as managers and who receive appropriate operating instructions. These subjects generally fall into the following categories:

companies that offer e-mail dispatch services;

companies that offer services for the execution of aims indicated in this informative note (media agency, IT suppliers, dispatchers)

companies that offer support in the execution of market research studies.

The data can also be communicated/transferred to other companies in group owned by Odissea S.r.l. (Womo S.r.l., Bullfrog S.r.l., D-retail S.r.l., Madina s.r.l., Hexagon S.p.a.) for the aims indicated above and only following the express consent of the interested party that is elective and can be revoked at any moment.

AUTHORISED DATA PROCESSING SUBJECTS

AUTHORISED DATA PROCESSING SUBJECTS

The data can be processed by employees of the corporate divisions responsible for the execution of the above-cited aims that are expressly authorised for processing and have received appropriate operating instructions.

TRANSFERENCE OF PERSONAL DATA TO COUNTRIES THAT DO NOT BELONG TO THE EU

TRANSFERENCE OF PERSONAL DATA TO COUNTRIES THAT DO NOT BELONG TO THE EU

Transference of data outside of the EU is not anticipated

RIGHTS OF INTERESTED PARTY - COMPLAINTS AGAINST THE CONTROL AUTHORITY

RIGHTS OF INTERESTED PARTY - COMPLAINTS AGAINST THE CONTROL AUTHORITY

By contacting the Privacy Office via post at the address KIKO S.p.A. via Giorgio and Guido Paglia no. 1/D 24122 Bergamo, for the attention of the Privacy Reference, at the telephone number 035280011 or via the e-mail privacy@percassi.com the interested parties can request data, their cancellation, correction of inexact data, modification of incomplete data, restriction of processing pursuant to Art. 18 GDPR, as well as opposition to processing if in the legitimate interest of the owner.
If the processing is based on consent or contract and effected with automated tools the interested parties have the right to receive the data in a structured, commonly used and legible format by an automatic device if technically possible.
At any time the interested parties have the right to revoke consent offered for marketing purposes, as well as to oppose the processing of data for marketing purposes,  including profiling connected with direct marketing. If the interested party prefers he/she can be contacted for these aims exclusively via traditional means and/or can indicate disinterest in communication via automated means. 
The interested parties have the right to complain to the relevant Control Authority in the member State in which they generally reside or work or the State in which the presumed violation occurred.

[1] What is the right of restriction?

It is the temporary processing of data which consists of data conservation only, in the following cases:

- The data subject contests the accuracy of his/her personal data, for the time necessary for the controller to verify the accuracy;

- The processing is unlawful because the data subject is against his/her data erasure and requests the restriction of their use;

- The data controller no longer needs the personal data but data subject needs his/her data for court proceedings purposes;

The data subject objects to the processing pursuant to art. 21.1 pending the verification whether the legitimate grounds of the controller override his/her legitimate grounds.


Notice in relation to the processing of the personal data of online customers COOKIE policy pursuant to regulation (eu) 2016/679 (“GDPR”) HERE >>

Information notice regarding the processing of users’ personal data in accordance with eu regulation 2016/679 (“GDPR”) - NEWSLETTERS HERE >>

Information notice regarding the processing of users’ personal data in accordance with eu regulation 2016/679 (“GDPR”) - CONTACT US - HERE >>

Top
Close