Privacy Policy - Newsletter
Data controller KIKO S.p.A., with registered address at 24122 Bergamo, via Giorgio e Guido Paglia n. 1/D, VAT Number 02817030162, Fiscal Code 12132110151 (the “Company”).
Data protection officer (PO) Email address: dpo.kiko@kikocosmetics.com
Sources of personal data Website www.kikocosmetics.com, app or other mobile devices, surveys and market researches carried out through automated means, KIKO physical stores.
Upon expiration of the abovementioned data retention periods, personal data will be destroyed, canceled, or anonymized according to the technical cancellation and backup procedures of the Company.
PERSONAL DATA PROCESSED FOR DIRECT MARKETING PURPOSES
ID Data, contact details, contractual details (e.g. customer code, product code, order number), fiscal data, data related to the purchases made by the data subject, data acquired during the registration on the Website, on the App, or on other mobile devices, browsing data, information required by the data subject.
PERSONAL DATA PROCESSED FOR DIRECT MARKETING PURPOSES
ID Data, contact details, contractual details (e.g. product code, total amount of the purchase), data related to the purchases made by the data subject, data acquired during the registration on the Website, on the App or on other mobile devices, browsing data, data provided by the data subject when asking samples to the Company and when testing the products. Personal data refers only to subjects who are at least 16 years old.
PERSONAL DATA PROCESSED FOR PROFILING PURPOSES
ID, contact details, contractual details (eg. product code, total amount of the purchase), data related to the purchases, data related to the products seen and/or added to the cart but not purchased, data acquired during the registration on the Website, on the App or on other mobile devices, browsing data, data provided by the data subject when asking samples to the Company and when testing the products. Personal data refers only to subjects who are at least 16 years old.
PERSONAL DATA COMMUNICATED/TRANSFERRED TO THIRD PARTIES
ID Data and contact details.
Provision of personal data The provision of personal data indicated in paragraph 2.1 for purpose A of the Information Notice (Contract execution) is necessary in order to manage your purchase and perform the related services you requested. Any failure to provide such data shall entail the impossibility for you to place the order and enjoy the abovementioned services. Provision of personal data indicated in paragraphs 2.2 and 2.3 for purposes B and C of the Information Notice (respectively, direct marketing and profiling) is optional and bound by your consent. You have the right to withdraw your consent at any time by entering your account on the Website (Section “Privacy Settings”), by entering the App (by clicking “Preferences – Personal Data”), or by writing an email at dpo.kiko@kikocosmetics.com. The consent withdrawal will not affect the lawfulness of the processing based on your consent (for marketing and/or profiling) previously given. The provision of personal data indicated in paragraph 2.4 for purpose C of the Information Notice (communication/transfer of personal data to third parties) is optional. Hence, in case of refusal, your personal data will not be transferred. You have the right to withdraw your consent at any time by entering your account on the Website (Section “Privacy Settings”), by entering the App (by clicking “Preferences – Personal Data”), or by writing an email at dpo.kiko@kikocosmetics.com. The consent withdrawal will not affect the lawfulness of the processing based on your consent previously given.
Categories of recipients/recipients of personal data Personal data could be processed by external subjects acting as Data Controller pursuant to articles 4 and 24 GDPR such as, for instance: public authorities or monitoring bodies, public or private bodies entitled to request personal data, consulting companies, professionals such as lawyers, tax consultants and insurance companies. Personal data could also be processed by external subjects appointed by the Company as Data processors pursuant to article 28 GDPR. The latter have received from the Company the necessary instructions required for ensuring the proper processing of personal data. The abovementioned Data Processor are included in the following categories: companies offering e-mail sending services, companies offering the maintenance and implementation of the website, companies offering market researches services; companies offering after-sale services and assistance to the consumer, shipping and/or trucking companies, companies offering marketing services, companies within Kiko Group in order to provide intra-group services and manage the purchases made in the store of each Kiko entity.
Subjects authorized by the data controller Your personal data will be also processed by the employees of the Company who belong to the areas in charge of achieving the abovementioned purposes of processing. Such employees have been authorized by the Data Controller and have received adequate instruction in order to process personal data pursuant to Article 29 of GDPR.
Transfers of personal data to third countries or international organizations Considering that the activities of the Company are performed at a global level, personal data could be transferred to countries inside or outside the European Union to subjects acting as Data Controller or Data Processor. It is understood that the transfers outside the European Union will be carried out according to the measures established by the relevant provisions. An adequate level of protection with reference to data subjects will be ensured.
Your right as data subjects - Compliant with a supervisory authority By contacting the company and the DPO at the address dpo.kiko@kikocosmetics.com, you have the right to obtain access to your personal data (article 15), request their rectification (article 16), their erasure in the case provided by the law (article 17) or restriction of their processing (article 18). Furthermore, pursuant to Article 20 GDPR, with reference to the purposes of processing based on the contract or consent which are performed via automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, as well as the right to transmit those data to another controller without hindrance from the Company if technically feasible. You have the right to withdraw the consent given at any time for marketing and/or profiling activities, as well as the right to object any time to the processing of your personal data for marketing and/or profiling activities by entering into your account on the Website (Section “Privacy Settings”), by entering on the App (by clicking “Preferences – Personal Data”), or by writing an email at dpo.kiko@kikocosmetics.com. Finally, you have the right to lodge a complaint with the Supervisory Authority, that is to say, the Italian Authority for the protection of personal data (https://www.garanteprivacy.it/).
Update of the information notice
The Data Controller reserves the right to amend/update the present information notice at any time. For this purpose, you will find here below the date of the last update.
Last update: 21.09.2020
Notice in relation to the processing of the personal data of online customers COOKIE policy pursuant to Regulation (EU) 2016/679 (“GDPR”) Here
Information notice regarding the processing of users’ personal data in accordance with EU regulation 2016/679 (“GDPR”) - CONTACT US Here
Need help? Our customer care is there for you! Contact us.