Privacy Policy

May 20, 2018

Beautilicious Delights collects some Personal Data from its Users.

We have updated our Privacy Policy. The new policy provides clear and transparent information about:

  • how and what data we collect to offer you a positive and personalized online experience
  • the ways in which we collect, store, use, and protect your data
  • how to contact us for any information
  • with whom we share your data when you visit or make a purchase on www.curavisoecapelli.it (the "SITE")

Keeping your personal data 100% secure and giving you full control over it is one of our priorities. Below you will find a summary of the key points of our Privacy Policy BUT we suggest you read the entire document.

We also ask you to read the COOKIE POLICY, the GENERAL TERMS OF USE AND SALE which you can find here on the site.

The regulations are designed to give you more control over your personal data and to ensure that the information you need is easily and immediately available, whenever you want it!

If you wish to view, modify or delete any data in our possession, please contact HELLO@BEAUTILICIOUSDELIGHTS.COM. If at any time you are interested or have questions about how we handle your personal information, please contact HELLO@BEAUTILICIOUSDELIGHTS.COM.

Assolutamente! Ecco la traduzione in inglese della prima parte della tua privacy policy, con alcune note esplicative:

Who we are:

Beautilicious Delights di Rozalia Chiru

Registered office:
Via Don Bertoni 30, 37029, San Pietro in Cariano (VR) Italy

The national data protection authority is: the Italian Data Protection Authority

Privacy Policy

This policy applies only to the website curavisoecapelli.it and not to other websites that may be consulted by the user through links from this site.

THE "DATA CONTROLLER"

The "data controller" is Beautilicious Delights di Rozalia Chiru, with registered office at Via Don Bertoni 30, 37029, San Pietro in Cariano (VR) Italy.

THE "DATA PROCESSOR"

The "data processor" is Beautilicious Delights di Rozalia Chiru, with registered office at Via Don Bertoni 30, 37029, San Pietro in Cariano (VR) Italy.

DATA PROCESSING LOCATION

The Data is processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller. The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the section concerning details on the processing of Personal Data. In the case of higher protection, the User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization of public international law or established by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data. If one of the aforementioned transfers takes place, the User can refer to the respective sections of this document or request information from the Data Controller by contacting the addresses indicated at the beginning.  

Certamente, ecco la traduzione in inglese della sezione che hai fornito, con qualche nota aggiuntiva per chiarire alcuni aspetti:

LEGAL BASIS FOR PROCESSING

The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

  • The User has given consent for one or more specific purposes. Note: in some jurisdictions, the Data Controller may be authorized to process Personal Data without the need for the User's consent or another of the legal bases specified below, until the User objects ("opt-out") to such processing. However, this does not apply if the processing of Personal Data is governed by European legislation on data protection;   
  • Processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures;
  • Processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;   
  • Processing is necessary for the pursuit of the legitimate interests of the Data Controller or of third parties.  

In any case, it is always possible to ask the Data Controller to clarify the specific legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.    

WHAT IS PERSONAL DATA?

Personal data is information that relates to an identified or identifiable natural person, such as the name, email address, telephone number, postal address or IP address of the computer.    

Beautilicious Delights will process the user's personal data for:

  • Allowing browsing, account registration, and the purchase of goods and services;
  • For the periodic sending, via email, of newsletters and advertising material, subject to specific consent;
  • For communicating the availability of requested items with the "Notify me" service, subject to specific consent;
  • Storing personal data, order history, billing and shipping addresses;
  • Allowing the conclusion of the purchase contract and the correct execution of the obligations arising from such contract (e.g. delivery);
  • Following up on requests sent (e.g. customer care).

This data is used solely to improve our offer and does not allow any conclusions to be drawn about your person.

Types of Data Collected

Among the Personal Data collected by curavisoecapelli.it, independently or through third parties, there are: Cookies, Usage Data, email, name, surname, various types of Data, telephone number, nation, province, city and password. Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data collection itself. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of curavisoecapelli.it. Unless otherwise specified, all Data requested by curavisoecapelli.it are mandatory. If the User refuses to communicate them, it may be impossible for curavisoecapelli.it to provide the Service. In cases where curavisoecapelli.it indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation. Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller. The eventual use of Cookies - or other tracking tools - by curavisoecapelli.it or by the owners of third-party services used by curavisoecapelli.it, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available. The User assumes responsibility for the Personal Data of third parties obtained, published or shared through curavisoecapelli.it and guarantees to have the right to communicate or disseminate them, releasing the Data Controller from any responsibility towards third parties.

Purposes of the Data Processing

The User's Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes:

  • Allowing browsing, account registration, and the purchase of goods and services;  
  • Commenting on content;
  • Contacting the User;
  • Managing payments;
  • Interacting with social networks and external platforms;
  • Statistics;
  • Displaying content from external platforms; and
  • Managing contacts and sending messages.

For more detailed information on the purposes of processing and on the Personal Data specifically relevant to each purpose, the User can refer to the relevant sections of this document.

We collect, store, and process your data for the sales process and any future warranty, as well as for advertising purposes. Personal data is collected only when you create an account on our site and voluntarily subscribe to the newsletter. When subscribing to our newsletter, your email address will then be used for advertising purposes until you unsubscribe. The data can be deleted at any time.    

There will also be a transmission of your personal data in the context of the provision of a service contract (shipping and logistics company, PayPal, banks).  

Permission for external advertising emails

Your personal email address will not be shared with other companies, except for "YOTPO (www.yotpo.com)". This external site offers the customer the opportunity to evaluate their shopping experience in the store. Yotpo only receives your email, first and last name, and order number.

By registering on the site, you consent to the storage and use of your email address, which can be revoked at any time with effect for the future. We therefore only transmit personal data if necessary, to ensure regular business operations or uses permitted by law. Personal information is not sold to third parties. The customer retains control of all personal data provided online. A change to the data in our possession is possible at any time.

Details on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services: 

Processing of orders in our online store

Regarding the order of products in our online store, the processing of your personal data aims to allow and optimize the fulfillment of the order, including payment and delivery. When payment is made by credit card, we receive the payment ID and the last four digits of the credit card number from our payment service provider. This is necessary for us to authenticate and allocate your order and therefore for your security. The personal data necessary for payment is collected directly by the payment service provider.   

The legal basis for the aforementioned data processing is Article 6 paragraph 1 b) GDPR (performance of a contract) and Article 6 paragraph 1 f) GDPR (legitimate interest, based on our interest in offering you a secure payment option with credit card).  

All data available to us is verified as part of the credit risk assessment. In this way, we determine which payment methods can be offered for an order. Among other things, we also check all previous orders placed from your customer account. The system also checks if the delivery address is different from the billing address, if it is a new delivery address or if the order must be delivered to an intermediate center.

After choosing the payment service provider, you will be asked for the data necessary to use that service. This payment information is forwarded directly to the respective payment service provider and is not stored by curavisoecapelli.it.  

We save the billing and shipping address data in your user account so that you do not have to enter it again the next time you make a purchase. This data can be modified at any time in the future.

If you do not consent to the payment method or methods offered, you can inform us in writing by email at help@beautiliciousdelights.com. We will then review the decision in light of your reports.

Personal data processed as part of orders is deleted at the latest after the expiry of the warranty periods provided for by law, unless this is contrary to the retention obligations provided for by law.

Commenting on content

Commenting services allow Users to formulate and make public their own comments regarding the content of this Website. Users, depending on the settings decided by the Data Controller, can also leave comments anonymously. In the case where the Personal Data released by the User includes the email, this could be used to send notifications of comments concerning the same content. Users are responsible for the content of their comments. In the case where a commenting service provided by third parties is installed, it is possible that, even if Users do not use the commenting service, the same collects traffic data relating to the pages where the commenting service is installed.

Comment system managed by Disqus. Data processing location: United States - Privacy Policy This Website uses the content commenting system offered by Disqus. Personal Data collected: name, surname and email

Facebook Comments, Likes, Share (FACEBOOK, INC.) Facebook Comments / Reviews / Like / Share is a service provided by Facebook, Inc. that allows the User to leave their comments / reviews / likes and share them on the Facebook platform. Personal Data collected: Cookies and Usage Data. Data processing location: United States - Privacy Policy. Subject adhering to the Privacy Shield.

Contacting the User Through MAILING LIST or NEWSLETTER (mailchimp.com) By subscribing to the mailing list or newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, relating to this Website may be sent. The User's email address may also be added to this list as a result of registering on this Website or after making a purchase. - Privacy Policy Personal Data collected: surname, email and name.   

Through interaction with online survey platforms (surveymonkey.com) This type of service allows interactions with online survey platforms, managed by third parties, directly from the pages of curavisoecapelli.it. - Privacy Policy Personal Data collected: Cookies, Usage Data and various types of Data.

Through contact form (this website) By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the heading of the form. Personal Data collected: surname, email and name.   

Contact management and messaging This type of service allows you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow you to collect data on the date and time when messages are viewed by the User, as well as on the User's interaction with them, such as information on clicks on the links inserted in the messages.

Payment Management Payment management services allow this Website to process payments by credit card, bank transfer or other means. The data used for payment is acquired directly by the payment service provider requested without being processed in any way by this Website. Some of these services may also allow scheduled messages to be sent to the User, such as emails containing invoices or payment notifications. PAYPAL (PAYPAL) PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments. Personal Data collected: various types of Data as specified in the service's privacy policy. Data processing location: See PayPal privacy policy - Privacy Policy.    

Interaction with social networks and external platforms This type of service allows interactions with social networks, or with other external platforms, directly from the pages of this Website. The interactions and information acquired by this Website are in any case subject to the User's privacy settings for each social network. In the event that a social network interaction service is installed, it is possible that, even if Users do not use the service, the same collects traffic data relating to the pages where the service is installed.

YOUTUBE BUTTONS AND SOCIAL WIDGETS (GOOGLE INC.)

The YouTube button and social widgets are services for interacting with the YouTube social network, provided by Google Inc. Personal Data collected: Usage Data. Data processing location: United States - Privacy Policy. Subject adhering to the Privacy Shield.

FACEBOOK LIKE BUTTON AND SOCIAL WIDGETS (FACEBOOK, INC.)

The "Like" button and Facebook social widgets are services for interacting with the Facebook social network, provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data. Data processing location: United States - Privacy Policy. Subject adhering to the Privacy Shield.

TWITTER TWEET BUTTON AND SOCIAL WIDGETS (TWITTER, INC.)

The Tweet button and Twitter social widgets are services for interacting with the Twitter social network, provided by Twitter, Inc. Personal Data collected: Cookies and Usage Data. Data processing location: United States - Privacy Policy. Subject adhering to the Privacy Shield.

PAYPAL BUTTON AND WIDGET (PAYPAL)

The PayPal button and widget are services for interacting with the PayPal platform, provided by PayPal Inc. Personal Data collected: Cookies and Usage Data. Data processing location: See PayPal privacy policy - Privacy Policy. 

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

GOOGLE ANALYTICS (GOOGLE INC.)

Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with the other services developed by Google. Google may use Personal Data to contextualize and personalize the ads of its own advertising network. Personal Data collected: Cookies and Usage Data. Data processing location: United States - Privacy Policy - Opt Out. Subject adhering to the Privacy Shield. This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files that are stored on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the United States and stored there. However, if IP anonymization is activated on this website, Google will truncate your IP address within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You can refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=it).

This website uses Google Analytics with the "_anonymizeIp()" extension. As a result, IP addresses are further processed in an abbreviated form, so as to exclude a personal relationship. Insofar as the data collected is personal, it will be excluded and the personal data will be deleted immediately.  

We use Google Analytics to analyze and regularly improve the use of our website, and to make the experience more pleasant for users. For the exceptional cases in which personal data is transferred to the United States, Google adheres to the Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework. Your data will be processed within the framework of Google Analytics in order to protect the legitimate interests of Intervox. Third-party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms of use: https://www.google.com/analytics/terms/it.html, Privacy policy: http://google.com/intl/it/analytics/learn/privacy.html, and Privacy policy: http://www.google.de/intl/it/policies/privacy.  

Opt-out of data collection:

You can prevent the collection and transmission to Google of data related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=it   

GOOGLE ADWORDS / Remarketing

We also use the remarketing function in Google AdWords by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). The remarketing function allows Random House to present ads based on the interests of site users on other sites within the Google advertising network (for example, on Google itself, the so-called "Google ads", or on other sites). To this end, the interaction of users with our website is analyzed, in particular what interests the user, in order to be able to show targeted advertising to users even after visiting our website on other pages. To this end, Google stores cookies in the browsers of users who visit certain services or Google websites in the Google Display Network. Visits by these users are recorded via this cookie. This number is used to uniquely identify a web browser on a particular computer and not to identify a person; personal data is not stored. The user can prevent the setting of cookies by setting the browser software. The user can also deactivate the use of cookies by Google by following the following link and installing the plug-in available there: www.google.com/settings/ads/plugin. For more information on Google Adwords and Google's privacy policy, visit the website www.google.com/privacy/ads    

GOOGLE ADWORDS / Conversion Tracking

In addition, we also use Google AdWords conversion tracking from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). When you click on a Google ad, a conversion tracking cookie is set on your computer. These cookies expire after 30 days, do not contain personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and Westwing can recognize that you clicked on the ad and were redirected to this page. Each Google AdWords customer receives a different cookie. Consequently, cookies cannot be tracked through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users. The user can prevent the setting of cookies by setting the browser software. The user can also deactivate the use of cookies by Google by following the following link and installing the plug-in available there: www.google.com/settings/ads/plugin. For more information on Google Adwords and Google's privacy policy, visit the website: www.google.com/privacy/ads.    

DOUBLECLICK by Google

We also use Doubleclick by Google. Doubleclick by Google is a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Doubleclick is designed to display ads that may be of interest to you. These ads appear on our site and on third-party sites that work with Google. Our website stores a so-called "cookie" with a pseudonymous identifier (ID) for Google in your browser. Google uses this cookie ID to recognize your browser when you visit our website (or other websites whose providers use Doubleclick by Google). In this way, Google attempts to collect the following information: • Which web pages have you visited? • Which Google ads have been displayed? • On which of these ads have you clicked? Based on this information, Google selects the ads that Google presents to you. You can manage the display of such ads by Google here. More information about advertising on Google can be found here. For more information on Google's privacy practices, click here. Google operates its servers in the United States, i.e. in a third country outside the EU. The Doubleclick by Google service transmits your data to these servers. Google has adopted the EU-US Privacy Shield, which provides adequate and reasonable safeguards. Further information is available here. The legal basis for the integration of Doubleclick by Google described in this section is Article 6 paragraph 1 f) GDPR (legitimate interest, based on our interest in marketing the website for advertising purposes). Google collects and processes the data that emerges in this context under its own responsibility.   

Displaying content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and to interact with them. In the event that a service of this type is installed, it is possible that, even if Users do not use the service, the same collects traffic data relating to the pages where the service is installed.

YOUTUBE VIDEO WIDGET (GOOGLE INC.)

YouTube is a video content viewing service managed by Google Inc. that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Data processing location: United States - Privacy Policy. Subject adhering to the Privacy Shield. Our website displays the content of the YouTube page managed by Google. The site is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google. When you visit one of our YouTube content pages, your browser connects directly to YouTube's servers and retrieves the content for your viewing. The legal basis is Article 6 paragraph 1 f) GDPR (legitimate interest, based on our interest in offering a website with the most interesting and engaging content possible). When you embed YouTube content, your browser communicates with a YouTube server in the United States, which may record the corresponding retrieval of content by the browser. Currently, the European Commission has not established that the United States generally offers an adequate level of data protection. However, YouTube (as a subsidiary of Google) has committed to complying with the EU-US Privacy Shield Agreement published by the US Department of Commerce on the collection, use and retention of personal data from EU Member States. More information can be found here: https://support.google.com/analytics/answer/7105316?hl=it. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this from happening by logging out of your YouTube account before visiting our website. For more information on the processing of user data, please consult YouTube's privacy policy (as a subsidiary of Google) at: https://www.google.it/intl/it/policies/privacy.    

FACEBOOK PLUGIN

We also use the functions of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. By clicking on the corresponding Facebook plug-in, a connection is established between your browser and Facebook's servers. This allows you to use the various features of Facebook. The legal basis is Article 6 paragraph 1 b) GDPR (performance of a contract and pre-contractual measures). By clicking on the Facebook plug-in, data is transferred from your browser to Facebook in the USA. Currently, the European Commission has not established that the United States generally offers an adequate level of data protection. However, Facebook has committed to complying with the EU-US Privacy Shield Agreement published by the US Department of Commerce on the collection, use and retention of personal data from EU Member States. More information is available at the following address: https://it-it.facebook.com/about/privacyshield. If you have a Facebook account, the data transmitted by your browser can be linked to your Facebook account. If you do not want this data to be assigned to your Facebook account, log out of Facebook before clicking on the Facebook plug-in. Interactions, in particular the use of a comment function or clicking a "Like" or "Share" button, are also shared with Facebook. For more information, visit the website https://it-it.facebook.com/about/privacy. 

FACEBOOK CUSTOM AUDIENCES

We use Facebook Custom Audiences on our websites. For this purpose, so-called Facebook pixels, i.e. JavaScript code, are integrated into our websites. These pixels generate a checksum (hash value) from the usage data, which is transmitted to Facebook, such as information about the browser. If available, the Facebook cookie is also addressed and your Facebook ID is transmitted. If you have a Facebook profile and are logged in, the data transmitted by the pixels can be used to present you with targeted and personalized advertising for Westwing products and offers. Data from users who do not have a Facebook profile will be discarded and not used by Facebook. For more information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as on the setting options for privacy protection, please consult Facebook's data protection guidelines at https://it-it.facebook.com/privacy/explanation. If you do not want the relevant data collection, you can object and deactivate data collection at the following link: https://it-it.facebook.com/help/769828729705201/.    

SUMMARY OF TYPES OF DATA PROCESSED Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. This data is used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, the data on web contacts is not kept for more than seven days.    

Data provided voluntarily by the user

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.  

Disclosure of personal data

We will disclose personal information if we are legally required to do so or if our Terms of Service are violated.

Shopify

Our store is hosted on Shopify Inc. Shopify provides us with the online e-commerce platform that allows us to sell our products and services. Your data is stored on Shopify's databases on a secure server behind a firewall. Shopify protects personal data in accordance with the provisions of the GDPR, when this data is transferred and processed in the United States and Canada. Shopify has set up its data flows in such a way as to meet these requirements on behalf of merchants. As described in Section 12 of the Shopify Privacy Policy, all European personal data is initially received by merchants and processed in Ireland by Shopify International Ltd, an Irish subsidiary of Shopify. Shopify then further transfers such data in accordance with the GDPR.   

Cookies

No personal user data is acquired by the site in this regard, but only information about the browser, operating system, screen resolution, public IP, permanence and origin (search engines and/or keywords). Cookies are not used to transmit personal information, nor are so-called persistent cookies of any kind used, or systems for tracking users. The use of so-called session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient browsing of the site. The so-called session cookies used on this site avoid the use of other computer techniques that could potentially compromise the privacy of user browsing and do not allow the acquisition of personal identification data of the user.  

OPTIONAL NATURE OF DATA PROVISION

Apart from what is specified for navigation data, the user is free to provide the personal data contained in the request forms to the Data Controller or indicated in contacts with the Office to request the sending of informative material or other communications. Failure to provide such data may only result in the inability to obtain what has been requested, whether it be mere information or any other type of service. For the sake of completeness, it should be remembered that in some cases (not the subject of the ordinary management of this site) the Authority may request news and information pursuant to art. 157 of Legislative Decree no. 196/2003, for the purpose of verifying the processing of personal data. In these cases, the response is obligatory under penalty of an administrative sanction.   

RECOURSE TO EXTERNAL SUPPLIERS OF SERVICES - DATA PROCESSORS

For the operation of our website we engage external suppliers of data processing services (e.g. order sending, newsletter software, data centers). If necessary, these service providers also process personal data. Service providers are carefully selected and monitored by us. The data is processed exclusively in accordance with our instructions and is also bound by this data protection statement. An updated list of all Data Processors is available at each of the Joint Data Controllers' offices and can be requested at the following email address: help@beautiliciousdelights.com. This list may be subsequently integrated and/or updated as needed.

Data Processing Methods

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access (password-protected access, encryption, firewalls, etc.)   

User Rights

Users may exercise certain rights with reference to the Data processed by the Data Controller. In the case of higher protection, the User may exercise all of the rights listed below. In any other case, the User may contact the Data Controller to find out which rights are applicable in their case and how to exercise them. In particular, the User has the right to:

  • revoke consent at any time. The User may revoke the consent to the processing of their Personal Data previously expressed.   
  • object to the processing of their Data. The User may object to the processing of their Data when it takes place on a legal basis other than consent. Further details on the right to object are indicated in the section below.   
  • access their Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.   
  • verify and request rectification. The User can verify the accuracy of their Data and request its updating or correction.
  • obtain the limitation of processing. When certain conditions are met, the User may request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose than its storage.   
  • obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User may request the deletion of their Data by the Data Controller.  
  • receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its transfer without hindrance to another controller. This provision applies when the Data is processed with automated tools and the processing is based on the User's consent, on a contract of which the User is a party or on contractual measures connected to it.   
  • lodge a complaint. The User may lodge a complaint with the competent personal data protection supervisory authority or take legal action. Requests should be sent in writing to the Data Controller at the following address: [indirizzo email rimosso] - Beautilicious Delights with registered office in via Don Bertoni 30, San Pietro in Cariano (VR) Italy, 37029. The Data Controller will contact or inform the user as soon as possible and, in any case, within 15 (fifteen) days of the date of the request.   

Data Retention Period

Data is processed and stored for the time required by the purposes for which it was collected. Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the execution of such contract is completed.   
  • Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.   
  • When the processing is based on the User's consent, the Data Controller may retain Personal Data for longer until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, the Personal Data will be deleted. Therefore, at the expiration of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.   

Data Security

Data relating to the user's payments during the ordering phase is transmitted in encrypted form over the network. Our sites and any systems connected to them are equipped with technical and organizational security measures to prevent the loss, destruction, access, modification and dissemination of user data by unauthorized third parties. The customer is obliged to treat access information confidentially and to close the browser window once the payment operation has been completed, especially if access to the device used is shared. The process involves saving the contract and sending by email the data relating to the order as well as the General Terms and Conditions of Sale. The General Terms and Conditions of Sale can be consulted at any time on the site. Previously placed orders can be viewed at any time in the customer's "login" area.

Privacy Policy

This document constitutes the "Privacy Policy" of this site. This document may be subject to changes and additions over time, therefore, we invite you to check its contents periodically. Where possible, we will try to inform you promptly of any changes made.

By using the www.curavisoecapelli.it website, you accept the terms of this Privacy Policy.