PRIVACY POLICY
HOLDER OF THE TREATMENT
The Holder of the Treatment is: Hair Gallery Europe S.r.l., based in Via Antonicelli Snc ‑ 63811 Sant’Elpidio a Mare (FM); e-mail: info@hair-gallery.it ‑ Vat no. 02212930446 (the “Holder”).
Responsible for Data Protection: to be contacted at the email address rpd@hair-gallery.it or at the above address by inserting the wording: "Inherent to Privacy”.
METHOD OF TREATMENT OF COLLECTED DATA
The European Regulation n. 679/2016 (hereafter also GDPR) establishes rules concerning the protection of individuals with regard to the processing of personal data and rules on the free movement of such data, aimed at protecting the fundamental rights and freedoms of natural persons and, in particular, the right to the protection of personal data.
Data protection is of utmost importance for Hair Gallery Europe S.r.l. and this, as Holder of the treatment, wants to guarantee maximum transparency regarding the processing of personal data provided by users/person concerned.
This document describes how the personal data of the same are processed and protected.
According to the law (Article 5 of Reg./EU n. 679/2016) the processing of data is based on the principles of lawfulness, fairness and transparency towards the data subject and protection of your privacy and your rights.
This site collects data, which are necessary for navigation and use of services connected to it.
The processing of such data will be carried out through automated and non-automated tools, in accordance with the purposes indicated and in compliance with the confidentiality requirements and the most appropriate security measures, as indicated in the aforementioned Regulation.
In addition to the Holder, other subjects involved in the organization of this application may have access to the data, or external subjects appointed as Data Controllers by the Holder.
PLACE AND PURPOSE OF THE TREATMENT
The treatments connected to the web service of this site take place at the headquarters of the Holder of the treatment, at the location identified by the operator of the website and are only handled by authorized personnel and instructed by the Holder for this purpose, or by persons in charge of occasional maintenance operations. No data deriving from the web is disseminated. Personal data that forward information requests are used to follow up the requests of the person concerned.
The collection and processing of personal data of the person concerned will take place in compliance with the principles of necessity, correctness, relevance and non-excess and in particular the processing of data will take place to allow the Holder to provide its services for the following purposes:
In the aforementioned cases, the processing of data is legitimate as it is necessary to execute a contract concluded or to provide the service that has been specifically requested. To provide the services of www.hair-gallery.it, such as subscription to the newsletter, it is necessary a specific declaration of the person concerned which certify that he/she is at least 16 years old with the consent to the processing of his/her personal data after checking the appropriate space.
DETAILS ON THE PROCESSING OF PERSONAL DATA
More specifically, personal data are collected for the following purposes and using the following services:
Contact form
By filling in the contact form with the own data, the person concerned consents to its use to respond to requests for information concerning the status of the order, for example, to change the address of the order, to receive information about shipping or products or other.
Account registration form
The person concerned, by filling in the details of the account registration form, consents to their use to proceed with its online orders.
Personal data collected: Name, Surname, Telephone, Address, Date of birth.
LEGAL BASIS OF THE TREATMENT
The Holder processes personal data concerning the person concerned in the event that one of the following conditions exists:
The treatments of personal data on a legal basis other than consent are the hypotheses in which, for example:
The person concerned can always ask to the Holder of the treatment and/of the Protection Officer to clarify the concrete legal basis of the processing by referring to the contact details indicated above.
CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The personal data provided may be known and processed for the sole purpose of executing the processing activities for which the data were collected. The personal data of the concerned person may be known only by authorized and trained staff for this purpose by the Holder of the treatment and by the designated Treatment Officer. The data of the treatment Officer may be known by the person concerned by writing to the e-mail address: info@hair-gallery.it
The Holder of the treatment will, if requested, forward this information without delay.
DATA CONSERVATION PERIOD
Personal data are processed and stored for the time required by the purposes for which they were collected, at the end of which they will be deleted or otherwise anonymously rendered irreversible. The personal data collected for purposes related to the execution of a contract between the holder and the person concerned will be retained until the execution of the contract is completed, without prejudice to the right to data retention for the time required by law, according, in particular, to the fulfillment of accounting and tax obligations as required by current legislation by the Holder of the treatment and by specifically appointed treatment Officers.
When the processing is based on the consent of the person concerned, the Holder may keep the personal data longer unless the consent is revoked.
The collected data to send newsletters are kept until the request for termination of the submission and in any case for a period not exceeding 36 months.
RIGHTS OF THE CONCERNED PERSON
At any time certain rights may be exercised with reference to the data processed by the Holder.
In particular, the person concerned, pursuant to the Reg./EU n. 679/2016 (GDPR), may exercise the following rights:
Right to withdraw consent. The person concerned may withdraw consent to the processing of their personal data previously expressed
Right to access to data (art. 15 GDPR). The person concerned has the right to obtain information on the data processed by the Holder, on certains aspects of the processing and to receive a copy of the processed data, with the right to communicate the following information: a) purpose of the processing; b) categories of personal data processed; c) recipients to whom such data have been or will be communicated; d) data retention period or criteria used; e) the right to receive information on the origin or personal data if these have not been collected from the person concerned.
Right of rectification (art. 16 GDPR). The concerned person may request, without undue delay, the rectification of personal data if they are not correct, including the right to request the completion of incomplete personal data.
Cancellation right (right to be forgotten pursuant to art. 17 GDPR). When certain conditions are met, the person concerned may request the data to be deleted by the holder if: a) the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) the data have been processed unlawfully; c) the person concerned successfully opposed the processing of personal data; d) the data have been processed unlawfully; e) the data must be deleted in compliance with a legal obligation.
The right of cancellation can not be made valuable in cases where the processing is necessary for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or for the assessment, the exercise or defense of a right in court.
Right of limitation (art. 18 GDPR). The person concerned has the right to request the limitation of the processing of its data. In this case, the Holder will not process the data for any other purpose than their conservation if: a) the person concerned disputes the accuracy of personal data; b) the processing is illegal and the person concerned opposes the cancellation of personal data and asks that its use is limited; c) although the Holder of the treatment no longer needs the data for processing purposes, personal data are essential for the person concerned to ascertain, exercise or defend a right in court; d) the person concerned has opposed the processing pending verification of the possible prevalence of the legitimate reasons of the Holder with respect to those of the person concerned.
Right to data portability (art. 20 GDPR). The person concerned has the right to transfer his data to another Holder of the treatment. For the purpose in question, the person concerned has the right to receive their data in a structured format, commonly used and readable by an automatic device.
Right to object (art. 21 GDPR). The person concerned may, at any time, object to the processing of their data when it takes place on a legal basis other than consent, unless there are legitimate reasons for the Holder to continue the processing that prevail over the interests, rights and freedoms of the person concerned or for the establishment, exercise or defense of a right in court.
All rights of the person concerned are exercised with a request addressed to the Holder of the treatment Hair Gallery Europe S.r.l. in written form using the "Form exercise rights in the matter of protection of personal data" addressed to the Holder of the Treatment and available at the following link: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924
The deadline for replying to the person concerned is, for all rights, equal to one month.
The general right to lodge a complaint with the Competition Authority for the protection of personal data remains unaffected, Piazza di Montecitorio n. 121, 00186, Roma (RM). The form for the complaint made available by the Competition Authority for the protection of personal data is available at the following link: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524
The claim at the Privacy Competition Authority can be signed directly by the person concerned or, on his behalf, by a lawyer, a public prosecutor, an entity, an organization or a non-profit association.
NOTICE TO CUSTOMERS - PRIVACY
The establishment of HairGallery Europe S.r.l. imposes the transition to the new legal entity of the customer originally headed by Hair Gallery Store srl.
For any information, it is always possible to contact the Data Protection Officer, designated through the email address: rpd@hair-gallery.it
This is without prejudice to the rights due under the European Regulation n. 679/2016 (GDPR) by customers / users.
In compliance with current legislation, we remain always at the disposal of the customers to provide the best possible service.
DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION
The personal data provided will not be transferred to non-EU countries.
To know about the rights and to be up-to date on the legislation regarding the protection of people with regard to the processing of personal data, we recommend to visit the website of the Guarantor for the protection of personal data at the address www.garanteprivacy.it
EXTENDED INFORMATION ON COOKIES
What are Cookies
Cookies are small text files which are automatically placed on the navigator's PC in the browser. They contain basic information on Internet browsing and are recognized by the browser each time the user visits the site. For example, they may temporarily remember your browsing preferences to avoid selecting the language all the time, thus making subsequent visits more convenient and intuitive. Or they can be used to make "anonymous surveys" on how users navigate throught the site, so that they can then improve it from real data.
Cookies do not record any personal information about a user and any identifiable data will not be stored. If you want to disable the use of cookies you need to customize your computer settings by setting the cancellation of all cookies or activating a warning message when cookies are stored.
Cookies used by this site
This site does not use any type of cookie suitable for user profiling.
Cookies management
Technical cookies
Strictly necessary activities for operation.
These cookies are of technical nature and allow the site to function properly. For example, they keep the user connected while browsing, preventing the site from requesting to log in multiple times to access the next pages.
Saving activities for preferences
These cookies allow you to remember the preferences selected by the user while browsing, for example, they allow you to set the language.
Statistical Activities and Audience Measurement
These cookies help us to understand, through data anonymously collected, how users interact with the website providing information on the visited sections, the time spent on the site, any malfunctions. This helps to improve the performance of the website.
Statistical Cookies and Third Party Audience Measurement
These cookies (third-party web services) provide anonymous/aggregated information on how visitors navigate the site.
Social media sharing cookies
These third-party cookies are used to integrate some widespread functionality of the main social media and provide them within the website. In particular, they allow the registration and authentication on the website through Facebook, Instagram and Twitter as well as sharing and commenting on social media pages, for example enabling the "like" feutures on Facebook.
Analytical cookies on this website
This site uses the free service of Google Analytics. Recall that the data are used only to get the data of the most visited pages, the number of visitors, aggregated data of visits by operating system, browser, etc. These parameters are stored on Google servers that regulate their privacy according to the guidelines. In addition to the pages visited among the collected data, the domain names and the browser type of the computers used to connect to the Site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, may also be included, by way of example the time of the request, parameters concerning the operating system and the IT environment that you use. These data do not allow, in any case, to reach your identity because of their nature and for the modality of their treatment and are therefore considered anonymous.
Analytics cookies are considered technical if used only for optimization purposes and if users'IPs are kept anonymous.
USE OF GOOGLE ANALYTICS IN THIS WEBSITE
Google Analytics (hereinafter simply "Analytics") is a statistical service offered by Google Inc., whose main office is situated at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Analytics allows you to keep track of the accesses to the Website and its administrators to generate and view the data in aggregate and anonymous form in order to understand the use of the Website and to process statistics.
Sources of personal data
For its functioning, Google Analytics requires the presence of a so-called tracking code on the pages of the website. The purpose of his code is to identify, for the purposes indicated below, the pages that you visit during the browsing session on the Website.
In addition to the visited pages, the data collected may include, but are not limited to, the domain names and the browser type of the computers used to connect to the website, the addresses in the URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, parameters regarding the operating system and the IT environment that you use. These data do not allow, in any case, to reach your identity by their nature and by the methods of their treament and are therefore considered anonymous.
As said, analytics cookies are considered technical if used only for optimization purposes and if the IPs of the users are kept anonymous. We inform the person concerned that this site uses the free service of Google Analytics. Recall that the data are used only to get the data of the most visited pages, the number of visitors, aggregated data of visits by operating system, browser, etc. These parameters are stored on Google servers that govern its Privacy. As specified, this site does not use any type of cookie suitable for user profiling. Instead, are used third-party cookies which are linked to the presence of "social plugins". Google Analytics has been anonymized, which allows gathering statistics without profiling purposes. From each page of the website it is possible to access the extended privacy policy.
A user can disable Google Analytics while browsing using the add-on available for Chrome, Firefox, Internet Explorer, Opera and Safari available at the following link
It should be rememberred that you can manage your cookie preferences also through the browser.
If you use Internet Explorer
In Internet Explorer, click on "Tools" then "Internet Options". In the Privacy tab, move the cursor up to block all cookies or down to allow all cookies; then click OK.
If you use Firefox Browser
Go to the "Tools" menu of the browser and select the "Options" menu. Click on the "Privacy" tab, uncheck the "Accept cookies" box and click OK.
If you use Safari Browser
From the Safari Browser select the "Edit" menu and select "Preferences". Click on "Privacy". Set always the "Block cookies" and click OK.
If you use Google Chrome
Access the Chrome menu in the browser toolbar. Select "Settings". Click on "Show advanced settings". In the "Privacy" section, click on the "Content settings" button. In the "Cookies" section, select "Do not allow sites to store data" and check "block cookies and third-party site data", and then click OK. If you use any other browser, check out in the browser settings to manage the cookies.