Dear Customer, we would like to inform you that your personal data will processed fairly, lawfully and transparently and in compliance with the regulations in force. For such purposes, please find below information on the data processed via the third party provider platform ("Platform"; this is the link to the privacy policy provided by the Platform provider https://www.olapic.com/tos/ ). The Platform collects, on behalf of the Data Controller, personal data present in public social media content bearing a Data Controller Tag or # (such as Instagram).

Data Controller contact details

The "Data Controller" is Beauty & Business S.p.A., with registered office at Via Cesare Cantù, 1, in Milan.

1. Type of data processed

All data are voluntarily provided by the user.

A. Social Network User, shall mean a user who spontaneously publishes their own content on social networks, with Data Controller tags or # ("Social Content"). In this case, the following public Social Media Content Is collected via the Platform: name, user name used on the social network, publicly posted photographs (if the photographs contain personal data), Social Media Content captions (if the captions contain personal data), physical address (if available), email address (if available), IP address and geolocation (if available).

B. User who uses the Data Controller’s website, shall mean a user who, when browsing the Data Controller’s website www.alfaparfmilanopro.com ("Site"), wants to request that their own photographic content ("User Content") be uploaded to the Site. The user submits a request through a special button on the Site provided by the Platform. The process allows users to upload content from their device to the Platform or by connecting to social network. In the case of the former, the Platform collects photographs (if the photographs contain personal data); in the case of the latter, the Platform collects: name, username used on the social network, publicly posted photographs (if the photographs contain personal data), Social Media Content caption (if the captions contain personal data), physical address (if available), email address (if available), IP address and geolocation (if available). Once the User Content is uploaded to the Platform, the Data Processor shall, at its discretion, post the User Content on the Site.

 

2. Purpose

Publication on the Site of only the graphic part of Social Content and User Content.

3. Lawful basis for processing

Consent to the processing of data.

4. Recipients

The data being processed may be disclosed to the following categories of subjects:

- Employees of the Data Controller who are authorized to process the data

- Consultants / social platform managers / Alfa Parf Group companies

- Competent public authorities

Individuals who belong to the specified third party categories take on the role of Data Processors, or operate completely independently as separate Data Controllers.

5. Processing method, security measures and retention period

All data will be processed mainly in electronic format. Personal data and any other information that can be directly or indirectly associated with a specific individual, are collected and processed while applying technical and organizational security measures to ensure an adequate level of security for the risk, while also taking into account the state of the art and the cost of implementation, or, where envisaged, the security measures prescribed by specific legislation such as but not limited to: measures envisaged by applicable measures issued by the Data Protection Authority, and will be accessible only to specifically authorized personnel.

The personal data processed will be retained in a format that allows you to be identified, as a Data Subject, for the time strictly necessary to fulfil the purposes for which they were collected and subsequently processed, without prejudice to the need to retain the personal data for a longer period of time at the request of the competent authorities for the prevention and prosecution of crimes or, in any case, to enforce or defend a right in court.

6. Data Subject rights

You may exercise your legal rights at any time :

a) the right to access your personal data, obtaining confirmation of the purposes pursued by the Data Controller, the categories of data involved, the recipients to whom the data may be disclosed, the applicable retention period, the existence of automated decision-making processes;

b) the right to have inaccurate personal data rectified without delay;

c) the right to have your personal data erased, where applicable;

d) the right to request the restriction of your personal data or to object to the processing of your personal date, where envisaged by the law;

e) the right to withdraw your consent at any time, where given for marketing and profiling purposes;

f) in the case of automated decision-making processes, including profiling, the right to object if the conditions provided for by law apply;

g) the right to request portability of the data you have provided to the Data Controller, i.e. to receive the data in a structured, commonly used and machine readable format, and to transmit such data to another data controller, without any impediment from the Data Controller, in the cases provided for by law

h) the right to complaint to the Data Protection Authority.

To exercise these rights, please contact the Data Controller: by email, at privacy@alfaparfgroup.it

 

TERMS AND CONDITIONS

The company Beauty & Business SpA ("Company") is able to collect photographic user content ("Content").and possibly upload it to its website, www.alfaparfmilanopro.com ("Site"), through a third party provider ("Platform").

By accepting these terms and conditions ("Terms"), and those of the https://www.olapic.com/tos/ Platform:

- you grant Company the right to use Your Content, which consists of an image You have posted on a social media site or of an image that is on Your device. Use of the image consists of the Company’s publication of the Content on the Website, through the Platform. The right is granted free of charge, without limitation in terms of time and space;

- you understand that publication is always at the discretion of the Company. Your request for publication does not therefore impose any obligation on the Company or establish any legal relationship therewith;

- you declare that you are the owner of the Content and that you are, in any case, entitled to grant the Company the right to use the Content. Otherwise you shall be solely responsible in respect of the third party owner of the right incorporated in the Content, and declare that you shall indemnify the Company against any third party claims;

- you are aware that the Company may remove the Content from the Site at its discretion, without anything being owed to you;

 

                                                           Beauty & Business SpA